[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   66.460117][   T26] audit: type=1800 audit(1558122266.083:25): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   66.492160][   T26] audit: type=1800 audit(1558122266.083:26): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   66.533723][   T26] audit: type=1800 audit(1558122266.093:27): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts.
2019/05/17 19:44:36 fuzzer started
2019/05/17 19:44:39 dialing manager at 10.128.0.26:44889
2019/05/17 19:44:39 syscalls: 1006
2019/05/17 19:44:39 code coverage: enabled
2019/05/17 19:44:39 comparison tracing: enabled
2019/05/17 19:44:39 extra coverage: extra coverage is not supported by the kernel
2019/05/17 19:44:39 setuid sandbox: enabled
2019/05/17 19:44:39 namespace sandbox: enabled
2019/05/17 19:44:39 Android sandbox: /sys/fs/selinux/policy does not exist
2019/05/17 19:44:39 fault injection: enabled
2019/05/17 19:44:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/05/17 19:44:39 net packet injection: enabled
2019/05/17 19:44:39 net device setup: enabled
19:44:41 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000009, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

syzkaller login: [   81.808253][ T8934] IPVS: ftp: loaded support on port[0] = 21
[   81.819106][ T8934] NET: Registered protocol family 30
[   81.824414][ T8934] Failed to register TIPC socket type
19:44:41 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\xf6\xb6y1uoG\x18\xd4\xc8*R6\x84\xfb\xfbU<d0\xfb\xc7\xb9AB\xe83Q\xf1\xda\xedV\xac&\x9c\x92\x86 t\x93\xb4\xa5\x8d\xbd\xb5<\x1a\x90\xa3U\xb9{\xba\x99\xdf(\x9a%\xef\x0eO5\xcd\xbf\xe7\n\x13\xc3+(<\x02\x83|S0\xed\x0f9:\xc8\xb5\xa0\"\x00x\xe9\x1f\xe9\xee\x17\x88%\x19\xe3\x9d\x9d|P,\xb5+\x84\xaa\x1cZd\xb1fj\xde\xc7\xf0\xd8D\xaf\x01\x01\x8e\x95\x83X\xb9\xf5J\xb0\v\x0fC\xd3\x8e\x9d\xe1\x1e:!|\xa3%\xd2@M\x1b\xf3\xfe\xf1\x94\xffl~\x18\xed', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4)
sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67)

[   82.163832][ T8936] IPVS: ftp: loaded support on port[0] = 21
[   82.191179][ T8936] NET: Registered protocol family 30
[   82.196492][ T8936] Failed to register TIPC socket type
19:44:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000009400)=[{0x0, 0x0, 0x0}], 0x1, 0x8000)
accept(r2, &(0x7f00000095c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x0)

[   82.553999][ T8938] IPVS: ftp: loaded support on port[0] = 21
[   82.581216][ T8938] NET: Registered protocol family 30
[   82.586525][ T8938] Failed to register TIPC socket type
19:44:42 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

[   83.108137][ T8940] IPVS: ftp: loaded support on port[0] = 21
[   83.148465][ T8940] NET: Registered protocol family 30
[   83.153772][ T8940] Failed to register TIPC socket type
19:44:43 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x6, 0x12)

[   83.814439][ T8942] IPVS: ftp: loaded support on port[0] = 21
[   83.851350][ T8942] NET: Registered protocol family 30
[   83.877499][ T8942] Failed to register TIPC socket type
19:44:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
write$cgroup_int(r0, &(0x7f0000000040), 0xd1a50863)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000380), 0x10076)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0x7, 0x8, 0xe0ffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

[   84.256122][ T8934] chnl_net:caif_netlink_parms(): no params data found
[   84.639710][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.737711][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.757871][ T8934] device bridge_slave_0 entered promiscuous mode
[   84.851414][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.927146][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.026739][ T8934] device bridge_slave_1 entered promiscuous mode
[   85.588238][ T8934] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   86.121122][ T8934] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   86.437049][ T9054] IPVS: ftp: loaded support on port[0] = 21
[   86.631028][ T9054] NET: Registered protocol family 30
[   86.636354][ T9054] Failed to register TIPC socket type
[   87.014455][ T8934] team0: Port device team_slave_0 added
[   87.369400][ T8934] team0: Port device team_slave_1 added
[   88.405605][ T8934] device hsr_slave_0 entered promiscuous mode
[   88.951505][ T8934] device hsr_slave_1 entered promiscuous mode
[   92.149089][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.978555][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.069293][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.438938][ T8934] 8021q: adding VLAN 0 to HW filter on device team0
[   94.064152][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.157433][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.490002][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.497307][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.057307][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   95.065581][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   95.408631][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.737254][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.744391][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.140254][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   96.355750][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   96.712152][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   96.758569][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   97.131640][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   97.192828][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.498678][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.015888][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.118467][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.328047][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.586275][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.853230][ T8934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.791289][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv0
19:45:03 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000009, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

19:45:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000009, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

19:45:05 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000009, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  107.204078][ T9472] IPVS: ftp: loaded support on port[0] = 21
[  107.529290][ T9479] IPVS: ftp: loaded support on port[0] = 21
[  107.570698][ T9472] NET: Registered protocol family 30
[  107.576030][ T9472] Failed to register TIPC socket type
[  107.849407][ T9479] list_add double add: new=ffffffff89544ab0, prev=ffffffff89334ac0, next=ffffffff89544ab0.
[  107.875066][ T9482] IPVS: ftp: loaded support on port[0] = 21
19:45:07 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x401, &(0x7f0000000200)=""/144}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x15, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

[  108.158578][ T9479] ------------[ cut here ]------------
[  108.164077][ T9479] kernel BUG at lib/list_debug.c:29!
[  108.516736][ T9479] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  108.522862][ T9479] CPU: 1 PID: 9479 Comm: syz-executor.2 Not tainted 5.1.0+ #18
[  108.530402][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  108.540516][ T9479] RIP: 0010:__list_add_valid.cold+0x26/0x3c
[  108.546411][ T9479] Code: 56 ff ff ff 4c 89 e1 48 c7 c7 20 4c a3 87 e8 00 60 25 fe 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 60 4d a3 87 e8 e9 5f 25 fe <0f> 0b 48 89 f1 48 c7 c7 e0 4c a3 87 4c 89 e6 e8 d5 5f 25 fe 0f 0b
[  108.566016][ T9479] RSP: 0018:ffff8880747afb88 EFLAGS: 00010282
[  108.572084][ T9479] RAX: 0000000000000058 RBX: ffffffff89544920 RCX: 0000000000000000
[  108.580052][ T9479] RDX: 0000000000000000 RSI: ffffffff815afbe6 RDI: ffffed100e8f5f63
[  108.588029][ T9479] RBP: ffff8880747afba0 R08: 0000000000000058 R09: ffffed1015d26011
[  108.596016][ T9479] R10: ffffed1015d26010 R11: ffff8880ae930087 R12: ffffffff89544ab0
[  108.604004][ T9479] R13: ffffffff89544ab0 R14: ffffffff89544ab0 R15: ffffffff89544a50
[  108.611989][ T9479] FS:  00000000018b2940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  108.620925][ T9479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  108.627518][ T9479] CR2: 00007f88f7dac000 CR3: 0000000072fc7000 CR4: 00000000001406e0
[  108.635522][ T9479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  108.643493][ T9479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  108.651464][ T9479] Call Trace:
[  108.654811][ T9479]  ? mutex_lock_nested+0x16/0x20
[  108.659788][ T9479]  proto_register+0x459/0x8e0
[  108.664482][ T9479]  ? lockdep_init_map+0x1be/0x6d0
[  108.669532][ T9479]  tipc_socket_init+0x1c/0x70
[  108.674210][ T9479]  tipc_init_net+0x32a/0x5b0
[  108.678804][ T9479]  ? tipc_exit_net+0x40/0x40
[  108.683403][ T9479]  ops_init+0xb6/0x410
[  108.687476][ T9479]  setup_net+0x2d3/0x740
[  108.691719][ T9479]  ? copy_net_ns+0x1c0/0x340
[  108.696321][ T9479]  ? ops_init+0x410/0x410
[  108.700683][ T9479]  ? kasan_check_write+0x14/0x20
[  108.705635][ T9479]  ? down_read_killable+0x51/0x220
[  108.710772][ T9479]  copy_net_ns+0x1df/0x340
[  108.715227][ T9479]  create_new_namespaces+0x400/0x7b0
[  108.720627][ T9479]  unshare_nsproxy_namespaces+0xc2/0x200
[  108.726268][ T9479]  ksys_unshare+0x440/0x980
[  108.730814][ T9479]  ? trace_hardirqs_on+0x67/0x230
[  108.735842][ T9479]  ? walk_process_tree+0x2d0/0x2d0
[  108.740964][ T9479]  ? blkcg_exit_queue+0x30/0x30
[  108.745839][ T9479]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  108.751311][ T9479]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  108.757385][ T9479]  ? do_syscall_64+0x26/0x680
[  108.762063][ T9479]  ? lockdep_hardirqs_on+0x418/0x5d0
[  108.767355][ T9479]  __x64_sys_unshare+0x31/0x40
[  108.772126][ T9479]  do_syscall_64+0x103/0x680
[  108.776722][ T9479]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  108.782616][ T9479] RIP: 0033:0x45b897
[  108.786510][ T9479] Code: 00 00 00 b8 63 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  108.806120][ T9479] RSP: 002b:00007ffc2b108368 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  108.814548][ T9479] RAX: ffffffffffffffda RBX: 000000000073c988 RCX: 000000000045b897
[  108.822571][ T9479] RDX: 0000000000000000 RSI: 00007ffc2b108310 RDI: 0000000040000000
[  108.830551][ T9479] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000005
[  108.838557][ T9479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000414ab0
[  108.846533][ T9479] R13: 0000000000414b40 R14: 0000000000000000 R15: 0000000000000000
[  108.854511][ T9479] Modules linked in:
19:45:08 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x401, &(0x7f0000000200)=""/144}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x15, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

[  109.342195][ T3879] kobject: 'loop0' (00000000412812d0): kobject_uevent_env
[  109.558294][ T3879] kobject: 'loop0' (00000000412812d0): fill_kobj_path: path = '/devices/virtual/block/loop0'
19:45:09 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x401, &(0x7f0000000200)=""/144}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x15, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

[  110.274013][ T3879] kobject: 'loop0' (00000000412812d0): kobject_uevent_env
[  110.357513][ T3879] kobject: 'loop0' (00000000412812d0): fill_kobj_path: path = '/devices/virtual/block/loop0'
19:45:10 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x401, &(0x7f0000000200)=""/144}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x15, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

[  110.994237][ T3879] kobject: 'loop0' (00000000412812d0): kobject_uevent_env
[  111.167146][ T3879] kobject: 'loop0' (00000000412812d0): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  111.671538][ T9533] IPVS: ftp: loaded support on port[0] = 21
[  111.828963][ T3879] kobject: 'loop0' (00000000412812d0): kobject_uevent_env
[  111.836153][ T3879] kobject: 'loop0' (00000000412812d0): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  113.541893][ T9564] IPVS: ftp: loaded support on port[0] = 21
[  114.195415][ T9479] ---[ end trace e4cbbfc7878b1973 ]---
[  114.238277][ T9479] RIP: 0010:__list_add_valid.cold+0x26/0x3c
[  114.244213][ T9479] Code: 56 ff ff ff 4c 89 e1 48 c7 c7 20 4c a3 87 e8 00 60 25 fe 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 60 4d a3 87 e8 e9 5f 25 fe <0f> 0b 48 89 f1 48 c7 c7 e0 4c a3 87 4c 89 e6 e8 d5 5f 25 fe 0f 0b
[  114.346229][ T9479] RSP: 0018:ffff8880747afb88 EFLAGS: 00010282
[  114.376692][ T9479] RAX: 0000000000000058 RBX: ffffffff89544920 RCX: 0000000000000000
[  114.397246][ T9479] RDX: 0000000000000000 RSI: ffffffff815afbe6 RDI: ffffed100e8f5f63
[  114.405246][ T9479] RBP: ffff8880747afba0 R08: 0000000000000058 R09: ffffed1015d26011
[  114.451887][ T9479] R10: ffffed1015d26010 R11: ffff8880ae930087 R12: ffffffff89544ab0
[  114.466132][ T9479] R13: ffffffff89544ab0 R14: ffffffff89544ab0 R15: ffffffff89544a50
[  114.490204][ T9479] FS:  00000000018b2940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  114.499949][ T9479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  114.506553][ T9479] CR2: 00007fe45a0c89b8 CR3: 0000000072fc7000 CR4: 00000000001406e0
[  114.514562][ T9479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  114.523145][ T9479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  114.531137][ T9479] Kernel panic - not syncing: Fatal exception
[  114.538212][ T9479] Kernel Offset: disabled
[  114.542550][ T9479] Rebooting in 86400 seconds..