ell server: sshd[ 32.238789] audit: type=1800 audit(1570161879.111:33): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [?25l[?1c7[1[ 32.267827] audit: type=1800 audit(1570161879.121:34): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 G[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.671231] random: sshd: uninitialized urandom read (32 bytes read) [ 40.080100] audit: type=1400 audit(1570161886.951:35): avc: denied { map } for pid=6985 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.129592] random: sshd: uninitialized urandom read (32 bytes read) [ 40.739833] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts. [ 46.378019] random: sshd: uninitialized urandom read (32 bytes read) 2019/10/04 04:04:53 fuzzer started [ 46.568096] audit: type=1400 audit(1570161893.441:36): avc: denied { map } for pid=6994 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 47.426156] random: cc1: uninitialized urandom read (8 bytes read) 2019/10/04 04:04:55 dialing manager at 10.128.0.105:38761 2019/10/04 04:04:55 syscalls: 2500 2019/10/04 04:04:55 code coverage: enabled 2019/10/04 04:04:55 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/10/04 04:04:55 extra coverage: extra coverage is not supported by the kernel 2019/10/04 04:04:55 setuid sandbox: enabled 2019/10/04 04:04:55 namespace sandbox: enabled 2019/10/04 04:04:55 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 04:04:55 fault injection: enabled 2019/10/04 04:04:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 04:04:55 net packet injection: enabled 2019/10/04 04:04:55 net device setup: enabled [ 49.714136] random: crng init done 04:07:05 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x104, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcdb40000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10001}, 0x8004006) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000002c0)={0xffffffff, "9be674677fd75fb552f6c90d6687f139d00b3a3881bbcb82b0083d6616ea42dc", 0x2, 0x10, 0x7fffffff, 0x0, 0x4, 0x0, 0xf7b, 0x3}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm-control\x00', 0x2241, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x400) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/enforce\x00', 0x206000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x0}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000800)={r6, 0x2}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000840)) restart_syscall() r7 = openat$cgroup_ro(r2, &(0x7f0000000880)='cpuacct.usage_user\x00', 0x0, 0x0) fstat(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() write$FUSE_CREATE_OPEN(r3, &(0x7f0000000940)={0xa0, 0x0, 0x6, {{0x3, 0x3, 0x6, 0x0, 0x7f, 0x4, {0x2, 0x4, 0x1, 0x9, 0x5, 0x6, 0x267d, 0x1, 0x1, 0x0, 0x8, r8, r9, 0x5, 0x6}}, {0x0, 0x2}}}, 0xa0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_CTX(r10, 0xc0086423, &(0x7f0000000a40)={r5, 0x2}) r11 = syz_open_dev$dspn(&(0x7f0000000a80)='/dev/dsp#\x00', 0x81, 0x40000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, &(0x7f0000000ac0)=0x7f, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000b00)={0x8001009, 0x1000, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000b80)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VT_RESIZEX(r12, 0x560a, &(0x7f0000000c00)={0x1, 0x7, 0x7dc, 0x8, 0x49, 0x7}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/autofs\x00', 0x800000, 0x0) syz_open_dev$audion(&(0x7f0000000c80)='/dev/audio#\x00', 0x5, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000dc0)={0x0, 0x18, 0x9, 0x5, 0xcd, 0x0, &(0x7f0000000cc0)="3ca29e7fe859cad5c7fc24cb42bcfd10e886c13b165599d505a3777ff9451fbb01555481abdb0dbf01f13c3ae226a8df3c20d148d3e1084870ee5fd27d72968fe0a8f8993149b0bb3b1471ad11a6918677ecb623376501c5a69de606a19033a782494eb4fbff4a1b0421c9f4e38bd044b8294a57101037804a36e54b041b26862261ede4951764b7e555e6c366e292b27f1ea5067d42f0aa64c66f8370e9076d747edb43a8cf3ff5cabfbb5ff9802de3080c42a8b78be3eabf67020aab50f5a48d8702909f3ea1eaf16a700313"}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/capi/capi20\x00', 0x200000, 0x0) 04:07:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, [], 0x9}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:07:05 executing program 0: ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x6, 0x9}, &(0x7f00000002c0)=0x90) bind$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x10, 0x1, 0x5c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$x25(r3, &(0x7f0000000440)="d9b198ac3f66ba8c774686b70dc9166a7875f5ef2d", 0x15, 0x10, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000480)=0x1ff, 0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x55a080, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "38d6ccd90edd519b", "65738751051663af855be45bd687a833f1d1187b028163b4a445e3bab13e3ac7", "85dfc93f", "3f404d7155aa0e5d"}, 0x38) r5 = syz_open_dev$dmmidi(&(0x7f0000000540)='/dev/dmmidi#\x00', 0x9, 0x100) r6 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0xd2, 0x200) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f00000005c0)={[0x1000, 0x2000, 0x4000, 0x1000], 0x6, 0x0, 0x8}) r7 = accept4$rose(r5, &(0x7f0000000640)=@full={0xb, @dev, @netrom, 0x0, [@netrom, @null, @default, @bcast, @netrom]}, &(0x7f0000000680)=0x40, 0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f00000006c0)=0x1ff800000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r8, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x14044110}, 0x40) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$SIOCX25SSUBSCRIP(r9, 0x89e1, &(0x7f0000000880)={'bond0\x00', 0x3, 0x2}) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/vcs\x00', 0x42100, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000a00)='team\x00') getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000a40)={0x0, @multicast2, @local}, &(0x7f0000000a80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000c80)=0xe8) accept4$packet(r3, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000e40)=0xe8) accept$packet(r9, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000fc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'tunl0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001180)=""/248, 0xf8}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/34, 0x22}, {&(0x7f00000022c0)=""/14, 0xe}], 0x4, &(0x7f0000002340)=""/84, 0x54}, 0x6}, {{&(0x7f00000023c0)=@tipc, 0x80, &(0x7f0000003540)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/246, 0xf6}], 0x2, &(0x7f0000003580)=""/223, 0xdf}, 0x6}, {{&(0x7f0000003680)=@rc, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003700)=""/108, 0x6c}, {&(0x7f0000003780)=""/89, 0x59}, {&(0x7f0000003800)=""/146, 0x92}], 0x3, &(0x7f0000003900)=""/185, 0xb9}, 0x7}, {{&(0x7f00000039c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003a40)=""/245, 0xf5}, {&(0x7f0000003b40)=""/17, 0x11}], 0x2, &(0x7f0000003bc0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004bc0)=@in6, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004c40)=""/115, 0x73}, {&(0x7f0000004cc0)=""/210, 0xd2}, {&(0x7f0000004dc0)=""/39, 0x27}, {&(0x7f0000004e00)=""/200, 0xc8}], 0x4, &(0x7f0000004f40)=""/250, 0xfa}, 0x7fff}, {{&(0x7f0000005040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000005240)=[{&(0x7f00000050c0)=""/217, 0xd9}, {&(0x7f00000051c0)=""/96, 0x60}], 0x2, &(0x7f0000005280)=""/216, 0xd8}, 0x9}], 0x6, 0x2000, &(0x7f0000005500)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000055c0)={'bond_slave_0\x00', 0x0}) getpeername$packet(r3, &(0x7f00000056c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005700)=0x14) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000005740)={@mcast2, 0x0}, &(0x7f0000005780)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006c80)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000006f00)={@loopback, 0x0}, &(0x7f0000006f40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000007040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000007140)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000007180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000071c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007240)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000007340)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000007380)={@mcast2, 0x0}, &(0x7f00000073c0)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000007440)={@empty, 0x0}, &(0x7f0000007480)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000074c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007500)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007540)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000007640)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000007680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000076c0)=0x14) getsockname$packet(r0, &(0x7f000000a200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000a240)=0x14) getsockname(0xffffffffffffffff, &(0x7f000000a2c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000a340)=0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000cc00)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f000000cd00)=0xe8) getpeername$packet(r5, &(0x7f000000cd40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000cd80)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f000000e140)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f000000e180)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f000000ecc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4300800}, 0xc, &(0x7f000000ec80)={&(0x7f000000e1c0)={0xaa4, r11, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r12}, {0x1a0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0xf8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffff90}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x1e8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x12000}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x48}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r26}}, {0x8}}}]}}, {{0x8, 0x1, r27}, {0x208, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r29}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x8, 0xca, 0x0, 0x2}, {0x7fff, 0x1, 0xff, 0x5}, {0x2, 0x3, 0x1, 0x6e66a8c7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xff26, 0x3a, 0x6, 0x8}, {0x910, 0x0, 0x7f}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r31}}}]}}, {{0x8, 0x1, r32}, {0x1a4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r34}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r36}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r37}}}]}}, {{0x8, 0x1, r38}, {0x124, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r39}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r40}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r41}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0xaa4}, 0x1, 0x0, 0x0, 0x1}, 0x80) [ 178.929553] audit: type=1400 audit(1570162025.801:37): avc: denied { map } for pid=6994 comm="syz-fuzzer" path="/root/syzkaller-shm519940342" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 04:07:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0xa, 0x0, 0x0) 04:07:05 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:05 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='8\x9c\x00', 0x105441, 0x0) write$evdev(r0, &(0x7f0000000380)=[{{0x77359400}}], 0x18) [ 178.969245] audit: type=1400 audit(1570162025.831:38): avc: denied { map } for pid=7012 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=64 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 179.300952] IPVS: ftp: loaded support on port[0] = 21 [ 180.108574] chnl_net:caif_netlink_parms(): no params data found [ 180.121649] IPVS: ftp: loaded support on port[0] = 21 [ 180.146439] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.155645] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.162945] device bridge_slave_0 entered promiscuous mode [ 180.169838] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.176608] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.183531] device bridge_slave_1 entered promiscuous mode [ 180.204861] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.214925] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.238534] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.246767] team0: Port device team_slave_0 added [ 180.254660] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.261825] team0: Port device team_slave_1 added [ 180.268716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.278007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.292561] IPVS: ftp: loaded support on port[0] = 21 [ 180.342284] device hsr_slave_0 entered promiscuous mode [ 180.380410] device hsr_slave_1 entered promiscuous mode [ 180.424253] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 180.431322] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 180.483364] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.492180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.499050] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.505476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.515631] chnl_net:caif_netlink_parms(): no params data found [ 180.573863] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.580623] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.587472] device bridge_slave_0 entered promiscuous mode [ 180.595141] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.595441] IPVS: ftp: loaded support on port[0] = 21 [ 180.601549] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.602231] device bridge_slave_1 entered promiscuous mode [ 180.645418] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.676138] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.703786] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.711116] team0: Port device team_slave_0 added [ 180.717832] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.725750] team0: Port device team_slave_1 added [ 180.733616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.741820] chnl_net:caif_netlink_parms(): no params data found [ 180.750211] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.788441] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 180.795548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.811120] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.852825] device hsr_slave_0 entered promiscuous mode [ 180.890460] device hsr_slave_1 entered promiscuous mode [ 180.933040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 180.946476] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 180.947288] IPVS: ftp: loaded support on port[0] = 21 [ 180.952976] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.969806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 180.979801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.987921] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.005504] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.017377] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.023900] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.031454] device bridge_slave_0 entered promiscuous mode [ 181.038003] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.045894] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.052908] device bridge_slave_1 entered promiscuous mode [ 181.069127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.077135] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.083502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.102179] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 181.115630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.126100] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.136259] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.146674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.155361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.163773] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.170233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.179562] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.204872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 181.216543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.225064] team0: Port device team_slave_0 added [ 181.230960] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.238057] team0: Port device team_slave_1 added [ 181.245579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.253021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.262425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.278706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.279099] IPVS: ftp: loaded support on port[0] = 21 [ 181.294531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.334819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.403054] device hsr_slave_0 entered promiscuous mode [ 181.440451] device hsr_slave_1 entered promiscuous mode [ 181.492903] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 181.503380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.512800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.520987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.530384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.539739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 181.550692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 181.564587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.572454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.579896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.587679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.597010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 181.606390] chnl_net:caif_netlink_parms(): no params data found [ 181.636714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.644641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.659704] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 181.667238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.679154] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.705836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.756459] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 181.767993] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.777344] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.783914] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.790885] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.797709] device bridge_slave_0 entered promiscuous mode [ 181.804455] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.811060] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.817907] device bridge_slave_1 entered promiscuous mode [ 181.831938] chnl_net:caif_netlink_parms(): no params data found [ 181.842188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.849030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.857736] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 181.863959] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.888220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.897212] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.908835] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.930637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.938323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.946076] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.952477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.961095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.967590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.979961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.006624] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 182.013385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.029846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.038496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.046533] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.052918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.075100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.082816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.089936] team0: Port device team_slave_0 added [ 182.098249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 182.113301] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 182.121604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.131482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.140583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.147575] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.155330] team0: Port device team_slave_1 added [ 182.197578] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.204105] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.211162] device bridge_slave_0 entered promiscuous mode [ 182.217365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.225680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.233407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.241490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.250976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.258240] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.265719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.277945] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.288642] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.296625] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.304579] device bridge_slave_1 entered promiscuous mode [ 182.321571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.329504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.345533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.353643] audit: type=1400 audit(1570162029.231:39): avc: denied { create } for pid=7046 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 182.355598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.387489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 182.389255] audit: type=1400 audit(1570162029.261:40): avc: denied { write } for pid=7046 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 182.422928] audit: type=1400 audit(1570162029.261:41): avc: denied { read } for pid=7046 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 04:07:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) dup2(r1, 0xffffffffffffffff) sendto$inet6(r1, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x3fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='^posix_acl_accessppp1\\\x00', 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='\x00', 0x0) [ 182.458524] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 182.465169] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.482878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.492197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.501820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 182.509778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.521454] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 182.527604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.539502] chnl_net:caif_netlink_parms(): no params data found [ 182.558760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.567518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.576237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.633457] device hsr_slave_0 entered promiscuous mode [ 182.691188] device hsr_slave_1 entered promiscuous mode [ 182.730686] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready 04:07:09 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, 0x0, 0x0) [ 182.739975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.752034] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.765124] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 182.775375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 182.786890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.794742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.804582] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.811301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.818925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.827796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.847972] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.855790] team0: Port device team_slave_0 added [ 182.872610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.880703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.888395] bridge0: port 2(bridge_slave_1) entered blocking state 04:07:09 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000200)=0x1) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0x0, 0x0}, 0x10) r1 = gettid() getpgid(r1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)=""/121, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x3c], 0x8000, 0x400, 0x7d, 0xfffe}) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) [ 182.894783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.902381] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.909407] team0: Port device team_slave_1 added [ 182.922886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.943483] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.957746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.967742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.979566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.991758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 04:07:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x90) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 183.011144] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.018142] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.025689] device bridge_slave_0 entered promiscuous mode [ 183.035566] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.047404] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.055834] device bridge_slave_1 entered promiscuous mode [ 183.064652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.081564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.140345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.160533] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.169367] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.178184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 04:07:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r2, r1, 0x0, 0x1) [ 183.186226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.194354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.218993] hrtimer: interrupt took 26295 ns 04:07:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 183.243665] device hsr_slave_0 entered promiscuous mode [ 183.270408] device hsr_slave_1 entered promiscuous mode [ 183.326964] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.346334] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.356330] team0: Port device team_slave_0 added [ 183.371338] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 183.379189] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 183.387666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.396342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.417615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 183.428263] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.436776] team0: Port device team_slave_1 added [ 183.442823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.457559] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.464276] device nr0 entered promiscuous mode 04:07:10 executing program 4: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x80000000000701, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4}, 0x1b) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000000)=0x6, 0x3afe728f733d7634) recvfrom$inet6(r1, 0x0, 0x0, 0x2023, 0x0, 0x2d3) r2 = accept$inet6(r1, &(0x7f0000000200), &(0x7f0000000240)=0x1c) accept4(r2, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000300)=0x80, 0x800) r3 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x7) ioctl$NBD_CLEAR_SOCK(r4, 0xab03) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000180), 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000140)=0x7, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r9}]]}}}]}, 0x40}}, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r10, 0x40045109, &(0x7f0000000040)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x0, 0xd, 0x0, 0x6, 0x8, 0x735e5d03ff01516e}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x1, 0x1, 0xde78b86dd9376a77, 0x8, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x1, 0x46, &(0x7f00000003c0)=""/70, 0x41100, 0x1, [], r9, 0xf, r10, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xe, 0x1, 0x101}, 0x10}, 0x70) writev(r11, &(0x7f0000001980)=[{&(0x7f0000000540)="145bbd37d7be60cae63f45c5472e0f4ca7bc2661aa356e93d095950a2e888e3cbb0cad33fcfd2ae5c7b469ad0d8616a11d4943387d55bcd2a19e390165e18a3e3f7c25e4bb9bdde9a58aa515835ad611da1abf744c4e11d0cf395a6acd9cb7f7ae8ef4128b55c1b41ad1a6dec8fc4dcfc1a660bcffb993562b03ee6e1ae23927f8d2fcb91271dbd7e17ca9", 0x8b}, {&(0x7f0000000600)="c1f3e9468915f3d8bb43e5a37caf37c3394737c9859a501fafff2182da3b98a89ec77a7f190ec1188233f8e742ee117646efe176019a3f6daf1b201f823d0eb2a2e02ba742b70631261c8d2c51f420e9454522fb367d3fe91557b998c01f09ee9e7c587c7ace29ecd13e1ce76ac5", 0x6e}, {&(0x7f0000000700)="396fc604c4dda8cc1ac030a64904e179b5076c52ff186d1b057a845287d4ee9d1c9cf66b6e7a66df7a2db00853a69d1c258c158dce8c77912e91aec72f90dbdd", 0x40}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="eb999a26272df34d15a392f8240e2514a685cb53ce7716b92cf69ef0cc15bf2b82b8f542b49972a180e05bd9f2a646137001757e46cc0849f886f78f", 0x3c}, {&(0x7f0000001780)="414e458280ae75504a8334b61f2f11561d26e91d3d34f6189478307aa03249c00bd84479ea2202ba9897e04e9de2bd2697ddbb2ba3c08eeb9c5f38175c533593dda2b0080963d20fe835d215e963e891746086a9e12e5492956b95098be6085751aab0f326267bb98e1b816155547b5cc3749089b75ba9fcc43ae56614bc2ccf56e0ce8c7993f7eeec699ec6d6c2a97cf9b4f810f77d411588c678dcd84a586b0e35310f708b77b9ed0f3dbe75512f7ae9e1edcfb2d4a15d3356715f3198a912a9390343d7401fddec8b42b5caac0796fbfbb1e24df41b5a12ad04ec605a860f", 0xe0}, {&(0x7f0000001880)="f46e7d3e7043eb0f11a0877598ad25c4f91a8f38faa3a3ddc79c9b7f82bc9f0e5a97e9e15c02b35f81e710992ae64dbcc335580e3b7cef711b85e34d45bde641b3db485e718c9ddb91cf42bc30bc90746b7aa3f1e7774dbbaba794598f855f92ae18fd2b891425d7386fc445e9fe385d80d4c01d98f6", 0x76}, {&(0x7f0000001900)="3d0cedfedcd458898953b6bb5bdb2831d369f236637abf0b3de060cbb4be3345bd407c27e0925205990b5d26d4fbe1de4636af2e357d6136f7ac5d2106f440abea433eddd0d7875e6506366e8713", 0x4e}], 0x8) ioctl$KDGKBLED(r6, 0x40045109, &(0x7f0000000040)) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, &(0x7f00000000c0)) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000080)={{0x9}, 0x8, 0x8000, 0x70, 0x20, &(0x7f0000000000)="bbdcc14b968225013233b63f04bc584d1351b07fdc6d0c91f310231431258f095ae7914d8a1fcf084468ee4386b333309531a14bcc4682f1a4e5083d33d33e1b4f4c8e69b17b86497c34332ac40805a8747df21a8b020897b114ba5c4d5ebbd09daa1537e1b5be0b86f63051d575c2e6"}) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 183.499099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.506982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.516844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 183.525171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.553586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.560321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.567757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.582795] block nbd4: Receive control failed (result -22) [ 183.591321] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 183.597326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.628704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.648578] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 183.706413] IPv6: sit1: Disabled Multicast RS [ 183.726408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.733972] block nbd4: shutting down sockets [ 183.737421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.764867] device hsr_slave_0 entered promiscuous mode [ 183.767831] block nbd4: Receive control failed (result -22) [ 183.781230] block nbd4: shutting down sockets [ 183.800393] device hsr_slave_1 entered promiscuous mode [ 183.843785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.852002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.864987] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 183.873087] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.888114] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 183.913789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.926889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 183.934783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 183.946844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.955520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.965583] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.971991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.981045] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.988744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.000007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.007344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.016990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.025713] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.032129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.041700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.053217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.061865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.071226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.079624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.087836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.097050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.106285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.117175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.125745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.133852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.144876] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 184.153889] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 184.158998] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 184.159989] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.187034] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.194396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.205951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.214509] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.220935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.229025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.239289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 184.251159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 184.261539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.269104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.276154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.283857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.291765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.299291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.306962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.314976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.323336] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.329683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.336611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.346514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 04:07:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x48, &(0x7f0000000000), 0x4) [ 184.384063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.396470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.405405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.417009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.427680] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 184.435138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.450311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.459631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.475065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.482851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.491514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.501090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.509775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.517646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 184.532086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.539542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.549816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 184.558770] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 184.565751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.573450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.583715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.595280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.605314] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.615765] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 184.622860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.637069] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.643855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.651424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.663158] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 184.671727] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 184.677877] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.687211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.698999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.709214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.717740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.726048] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.732736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.740427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.748935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 184.757143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.765399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.777455] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.783850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.792988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.801076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.816664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.825128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.846835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.856558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.865428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.876131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.885405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 04:07:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x180) 04:07:11 executing program 4: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x80000000000701, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4}, 0x1b) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000000)=0x6, 0x3afe728f733d7634) recvfrom$inet6(r1, 0x0, 0x0, 0x2023, 0x0, 0x2d3) r2 = accept$inet6(r1, &(0x7f0000000200), &(0x7f0000000240)=0x1c) accept4(r2, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000300)=0x80, 0x800) r3 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x7) ioctl$NBD_CLEAR_SOCK(r4, 0xab03) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000180), 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000140)=0x7, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r9}]]}}}]}, 0x40}}, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r10, 0x40045109, &(0x7f0000000040)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x0, 0xd, 0x0, 0x6, 0x8, 0x735e5d03ff01516e}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x1, 0x1, 0xde78b86dd9376a77, 0x8, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x1, 0x46, &(0x7f00000003c0)=""/70, 0x41100, 0x1, [], r9, 0xf, r10, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xe, 0x1, 0x101}, 0x10}, 0x70) writev(r11, &(0x7f0000001980)=[{&(0x7f0000000540)="145bbd37d7be60cae63f45c5472e0f4ca7bc2661aa356e93d095950a2e888e3cbb0cad33fcfd2ae5c7b469ad0d8616a11d4943387d55bcd2a19e390165e18a3e3f7c25e4bb9bdde9a58aa515835ad611da1abf744c4e11d0cf395a6acd9cb7f7ae8ef4128b55c1b41ad1a6dec8fc4dcfc1a660bcffb993562b03ee6e1ae23927f8d2fcb91271dbd7e17ca9", 0x8b}, {&(0x7f0000000600)="c1f3e9468915f3d8bb43e5a37caf37c3394737c9859a501fafff2182da3b98a89ec77a7f190ec1188233f8e742ee117646efe176019a3f6daf1b201f823d0eb2a2e02ba742b70631261c8d2c51f420e9454522fb367d3fe91557b998c01f09ee9e7c587c7ace29ecd13e1ce76ac5", 0x6e}, {&(0x7f0000000700)="396fc604c4dda8cc1ac030a64904e179b5076c52ff186d1b057a845287d4ee9d1c9cf66b6e7a66df7a2db00853a69d1c258c158dce8c77912e91aec72f90dbdd", 0x40}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="eb999a26272df34d15a392f8240e2514a685cb53ce7716b92cf69ef0cc15bf2b82b8f542b49972a180e05bd9f2a646137001757e46cc0849f886f78f", 0x3c}, {&(0x7f0000001780)="414e458280ae75504a8334b61f2f11561d26e91d3d34f6189478307aa03249c00bd84479ea2202ba9897e04e9de2bd2697ddbb2ba3c08eeb9c5f38175c533593dda2b0080963d20fe835d215e963e891746086a9e12e5492956b95098be6085751aab0f326267bb98e1b816155547b5cc3749089b75ba9fcc43ae56614bc2ccf56e0ce8c7993f7eeec699ec6d6c2a97cf9b4f810f77d411588c678dcd84a586b0e35310f708b77b9ed0f3dbe75512f7ae9e1edcfb2d4a15d3356715f3198a912a9390343d7401fddec8b42b5caac0796fbfbb1e24df41b5a12ad04ec605a860f", 0xe0}, {&(0x7f0000001880)="f46e7d3e7043eb0f11a0877598ad25c4f91a8f38faa3a3ddc79c9b7f82bc9f0e5a97e9e15c02b35f81e710992ae64dbcc335580e3b7cef711b85e34d45bde641b3db485e718c9ddb91cf42bc30bc90746b7aa3f1e7774dbbaba794598f855f92ae18fd2b891425d7386fc445e9fe385d80d4c01d98f6", 0x76}, {&(0x7f0000001900)="3d0cedfedcd458898953b6bb5bdb2831d369f236637abf0b3de060cbb4be3345bd407c27e0925205990b5d26d4fbe1de4636af2e357d6136f7ac5d2106f440abea433eddd0d7875e6506366e8713", 0x4e}], 0x8) ioctl$KDGKBLED(r6, 0x40045109, &(0x7f0000000040)) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, &(0x7f00000000c0)) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000080)={{0x9}, 0x8, 0x8000, 0x70, 0x20, &(0x7f0000000000)="bbdcc14b968225013233b63f04bc584d1351b07fdc6d0c91f310231431258f095ae7914d8a1fcf084468ee4386b333309531a14bcc4682f1a4e5083d33d33e1b4f4c8e69b17b86497c34332ac40805a8747df21a8b020897b114ba5c4d5ebbd09daa1537e1b5be0b86f63051d575c2e6"}) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 184.897302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.905422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.919962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 184.935605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.943794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.955656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 184.965425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.979411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 04:07:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002c00070500"/20, @ANYRES32=r3, @ANYBLOB="720479b9ac85590100ffffbe00ffff00000010c4d90ea0e00c8c5c0000"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 184.993852] block nbd4: Receive control failed (result -22) [ 185.006082] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 185.022949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.045878] IPv6: sit2: Disabled Multicast RS [ 185.064934] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 185.072822] nbd4: detected capacity change from 0 to 7168 [ 185.085696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.087229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7151 comm=syz-executor.2 [ 185.110654] block nbd4: Attempted send on invalid socket [ 185.116291] block nbd4: shutting down sockets [ 185.122551] print_req_error: I/O error, dev nbd4, sector 0 [ 185.128354] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.137418] print_req_error: I/O error, dev nbd4, sector 2 [ 185.143119] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.154466] print_req_error: I/O error, dev nbd4, sector 4 [ 185.161678] Buffer I/O error on dev nbd4, logical block 2, async page read [ 185.168738] print_req_error: I/O error, dev nbd4, sector 6 [ 185.174821] Buffer I/O error on dev nbd4, logical block 3, async page read [ 185.182343] print_req_error: I/O error, dev nbd4, sector 0 [ 185.188021] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.195496] print_req_error: I/O error, dev nbd4, sector 2 [ 185.201916] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.209369] Buffer I/O error on dev nbd4, logical block 2, async page read [ 185.216623] Buffer I/O error on dev nbd4, logical block 3, async page read [ 185.224536] print_req_error: I/O error, dev nbd4, sector 0 [ 185.230900] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.237966] print_req_error: I/O error, dev nbd4, sector 2 [ 185.243747] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.253359] print_req_error: I/O error, dev nbd4, sector 0 [ 185.261330] print_req_error: I/O error, dev nbd4, sector 2 [ 185.267734] ldm_validate_partition_table(): Disk read failed. [ 185.275150] Dev nbd4: unable to read RDB block 0 [ 185.282755] nbd4: unable to read partition table [ 185.287681] nbd4: partition table beyond EOD, truncated 04:07:12 executing program 1: r0 = socket$kcm(0x10, 0x800000000003, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0xfb}], 0x1}, 0x0) 04:07:12 executing program 5: write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000013c0)='yeah\x00]\xd2k\xf1\xc7n,G\xd6\x83y\x1b\x17J\xba8x\xb0E2\xda-\xad]U\xaa\xce\xef\x12!\x94\xee\x85\x85?D}\xd4\'\xe1\"\xb2\x8d\x03\xf7~\xd5\xe6k\xd3\x86E\x12\xd1\x88\xcf\xc7j\xdd\xbb\xc4\xb8X_\x05\xbb\xe1V\x99\xe6\x9aJ\x96\x04\xd5\xcd^\xac\x98\xf9\x02a\x91Fj\xa1-\x160\xfcd@\x13\xe6\x8c2\x81\xfa\xbb\xe2\x13\x16\xa0\xfe\xf1\xc1\a\xa9\x19\nA\xa6\x87\xb7\x01\x06\x1eO\xbe\x9e\x10G8\xa1\xfc\x0f\x02\x06\xac{\x04`)\xdf\xbetn\xd4\x12f\xfdT\x1cz\xc5\xd9I\xa0\t\xb4d\xd9.1\xe7\xb3', 0x111) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a751cbf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 04:07:12 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000004c0)={0x7}, 0x7) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux\'policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_read_part_table(0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000900)="16f5cbb57e11f677e967e19d4aee1c86ada6913dbc092bb966b3b8c32e605f69c011df85e71ec57a92c617968be23f6b1ac9ce43719192a1ec934c65eacf0e10b5bcc0924c21f7a4f25c57f60d4373956c75b71d49b989a4b46cdbcedd9b9a27c30559818686c274f739059b2c47a48e65b52bab9d139ff8859d196537ab7febd6a9381dbd648dcdf39371ca418ee458594b68d41029c74a7692efe834b35dedd8a2e43d623dc08f792ff441db2f17c60e026a68c5ceab0b32d1eee7930b06ac42c2775398e3d48b3a93d059e5aeda4e5efcff9db0cbc2530d9f3fb3edd187f1a80e1855139ae90133eff8611eda66e516c7d0109b5c0b24f3979674fef621847555d6294a9a10ee80dca4c84641431c124fd5f1dd882b6b3a5cc4553a8dea4dda129ed24fc7ef69bf988bb76d56c0eea30ca967649527f4e9c676167e7f87065c998f1c32dc94ff72b1821af25319faa7c6844b7a9d438da1cec6f271c763f872f9cbf8bdfb85718f8993a2f83e05135bd2ae0bdf462c466dd408de30fae610c021e6c8dcad5f82f6f9cc7b489c33bcb55e912ae3bf8bf9e91deec676a146d980fdb2594412fb3c473d01bc8d1fcbc58d944aad8a258111c2407e50a65568bb00803203e78a1676c92989f5bba832f873e9c2330279985ce73a8e05eec47ec7b9fac3b69fb6601525681ed3c05bd88a259a36810c73191df4caec5d8a72b08e5e5082171137a4048559baa6a59b6dcf30511ca203f6ea127bf56e781cdc8ac4573cab9d7ca7d1c4eeb652c2650df61b65353c5cafb7d32da4bc2436432faf9db92839c68bb545c2a4d2c234ec08e5baa1fb94e9594d27f470f11fecb4cd2630ef727c025d70152df4826b11e18d4e109f03378802e8b4ec24474dc10258a7c6253b58962aa4c0bf0d856b93c1706600da8f64575a6e4f4b16425eb64a57ace87876f0de4bdb637e564014fc0aea36b34e381bfc13ceb7b0a8220bdf5727468ecae615d1344c9a784bc7dcab974be3cd712b2ccf1686829b13e28fc0a13a9308a1ac0680988f468cef5804cf94d21cd81322cfd4df6600d6a7145153861e48b12c0ad898becc03934ce80cc88ca239bf91c9b847e6bd42d6d574404db2ab48b092a7a4b486d78225a54b4f5427f72ae9c057da5c693efadf632e694093ecff9f2a7d8b50f699b8061c9c1d4311a914c6648a39d42396da38593b47c12b0e8c5b107824df846a3ba7d014b9662df8ea387fc464598a88dc4f89b8d8a59ecbdb28233ed6864ff1527385b0ffba18c2464ad2cea2bc2c5199aa85839be9134876c2996aac9734ee6dc2fd985d500a645154affdc16b7b8f68054c1c3285c36de3a9ac1a31d8f7983f46393cc4041d5d3ba26179f2f5176093074d53a50da67e5ca4ee58f4087d76097894e05ed75cd4f6496633d6ea3f248930aade1e7b71dbac9dd6c57b13e6dba24714a9d0de7351e3d54577b763be3fdec5d3cb38b31df45e393fc4cc9fd1fc330c005f6afcf6e4a3bb9954dba72d1e33695f33513d19a5bee4e3840e7912c9531f4782012a9b6b77253a60ff97c410b6add108faa8b5c1387317e6a14b0cc79a609213e1ec5c98ddbcac2c1a27d56e7cb69c3f8cd642b8bd42752b62e0005c4dcb06dc7b3db395e7405e609a863e231ef62fa9e742e9c85fff730c942d7271133e7d48b888f2f80318be2e5406e45be3deb31d85121e309540c62bff1edc91bc5d88b82d1312127e83ace4a233c1ab85648d87fec75dc52360ddb9101d99d820a08db8e7667d0c7e373353b04e76cdc21fbbf396a82e09bd6fbf571122c6a2a2df71beda2865a88efbd6f2c28ee19e8b4a6a20882806bae0adbc5b49ecaf59b8298cb077d0fe01c1d0646b94e326539847ef8f1f0b368aec4568a0d4743774aa23c16303e510367ed106b258eddf12a0fb3499d68848e41da42f12f9be64c7a30395ddd0864aee80c93ccf2d87084e9d70d4d3619397a4496f6451e1a1ff58942102ec94b3ce6ca17d995087cb1ffb3bb0f9701c0e2ab33411bee9b0911ff62a3b934decf8ecfe8fc38aace1b8c44daa6d79c409e3967e541490e20dd8702003b4f26d83b20a096915052b848aa6b8e14616605eccdfee3aa2c1836bf225131f0a148d411689a310f62e80763c6f3382a52328a2faaff4cf18a1e0eae43ce48fc0b71844a10d805d6c6c80c38db12ea8effca3439e9649513b1507cab92721e4c5862f24a585415d4127af50614c4361057c31bd1d4e5aa5b0285873125a30cc2c274d667ce02dd353783f8b1398c1a55401e0de75c1bcd4559782c63fc9825ab4a4057749da2bba621ce675b8fe428c76cfce90ee7ba927c08e096ffe843b5a9ecf3ecf57783b60e3c440f80fbf32c1f3555429ad598d508402a7c99994721b8333fb9ab87aa1d86e71bd8174a1d6a4fb448df5a2ba2471a6a92cf7ed7f5fad3d805bb0657c743b0140ab0ae347ecd7a0f47f44c56ac84cdf40670b84e6f484e822919e1161c62e98025c0aa91643094fb4fbcf2bdee9a38303c3ade9ad837100eedbb194f3b20c8d46f6e6ce4020c243dd3c2a63d1a2c024976b9e9f1f6d8c30a82ab756b015cdfe1fb83b8c65ac85724c85f6816ba9a13bfa37ccea396de3eebe63983b2acc91d903d8a7eadf1c4f8820bef695859d9c93ab896152b63ba01613dc09441d4fb7aa475910a7dd54ccc4d42c2e7d04bad976be65d22511b66c1927469e8eef3d798c2b22ed96521c834a2def4a05e26481c98498b430846a568357593a3ae4d85e56375a95a9ac356d4f1c0983e29d974507816b7be53b44d939d9151440913aeead76d7b4003c1dcf8210e2ef480ac5e4a052224c0a3bdb0ed98c883312320c46e52fc8322a7f22a47d583f9fc8c496d7ed82b2ee29a0407f9d9ca1f4bb2a6ead2d30e57b723658f0ebc4f7bf471247c69d7053cf56ef44d4b4b161ef356d3bb7c64f1bf6455800b4a29006f69744ebb78e828bab60a084b79aff8e9b80257b9fcfbb70733b1ebc120716605e472ff9e533b9edbde3ce6edd06a1655f0315e20908136e1612805e2a9dba567aa08e6f8acdb2121338c9c11953f4f9d2b4bf62fb00250fc61f6872bce84be463ede994eda1e59f3447c61f49aa97946b2a32b6b7f90810ac4df129be576336cefbf6b82df6d8fd995e2b06ea125593535d0e57fa61eef6237928c8bba80769038fe9b9fa7cb7e5d5383b97bb9fc1e03a67846ba8a8e04b310c3cfccf642eb6368c9f8290488df862c79d9ba5d778f2f819699d0449aa03279000443cc32a9243aee09b14575928d3fad1e4957047755d3bbc4d4907497b361643c6e4c833f5265afdb91af82d5aa0dd39dce8d6332e17585d7384baeb8c34c1a4a9d46b95ceba7a6ac9ffa392695a21be90bc00e3c8f451f93c872b29a0bcfe0490b2ba43cbc831a6d606a074b20e35800c8ed2c771ad2ab65b6da985ed9e78e54e3365d8ea7b3d5d609df638f2f9008c4b607a4ce3208eba7b6ef07a8c89146415a769688d2af1c7cf49628369626388923fd1336d7bec4aae627550e9a577b2f8cbbe3e83115817e7ceb8c7c11b353094e1e2efa6f8f3cc6245269fa47c2854bfe1e98f0be61ccc05342c41957bb676938026bd69f01a65fed9c8a222a20efc0beac2e1fcd495b1afa486b526e963d4d97e15d83ed2d5e8ce498a2e0d280f18a166a65337be6800a0ed9b29968571f251a0705166085866439f49c05f8520ffde5a4016d3f7dcee3560066ddab6d5022347700c8a8ae4e817f62f880edb907aae7b81f8a20f0799c0d9f87ff8f6ab42d844631b3301356c5d9c55bc6bf8663634af1fd9be09f2166eeaef34304e3efd9ce832f4746ba0b9fd305967ab2d17bc9f5377daab2a50879fae27de38705782411c48cec7903fd4d1d85cd19a7be2c1b32ff928ae0d095bd47b148763226e38cc4bbfb81037d0ba13e8f4c78de083a7ed7d2cc75294e288ba042bc5d4ec42479d69797efb3619d284ff3c3cede26ddf35eae45c8c64e6d293f5b2c53c81cd15e61d40563459e2ecab10937cd8a0112b9082867fdccebc8ee34b0070034664a7d44028868d9f42d3a948cee75ba2c26ec1b6ce2687f3a7dbf78b2c42222623bba5b6d3330eec607af37f0b0a946ab6193ee7710350386a80fd6e50585b08ac740f1fc3f655ddcb55e2c82374b50f397226a07858428dfeef8756c9b05c4832431f0ae24ef11666669a28d67c69f2f2e8d1077e01aeeed66ab8a0c3c2c1cdeba879a0363fcffc248c0fcbd7c79b3674e735fc601497f83716da724c0fdfd0fbef5086f76bd6d8c365c97e010126dc07bd6c3124aa334e9431570920e6c18d6dcf0867c910e8e14e5df6aa7fb74fe85058ef07d206a8ecfee81be783a59e506bff1e071e51d779af953508459c6ab334c6e0a55cc3688c71cabb63d854980dd0a50d73712c78cf9a1fd40aeaa5ec2c9a2389bdcf346ca96b4808d6896463111955efe7733816a259a6b4bf2e4fe531232fa56897cf07a49d0f1f793431f3f83f8f9754c0b0d6252139ca879c5e806b214ddbb672fbb4bdde6b427ef1b9fa27018b1297f2df619bf4428ed01729367c48119e6021b645cd049cc7a195b0323ef4162f4214088b92d7ed60e828d19e51479a23fa98d84fd696e566084ad0be47794c2c98189315cd6594b2302eb70846072f9e705fb574c8ef314fb9b3325065d9a3a59f259816d4079262b170cc13d94a0d227f42743b3869ee0b1e89b728a66b927538d69997e8c0d0c078b81d2181121e2e182fcc5ee1d584114990a8bed9ec00129f5d6dfa394784b3af2b65351cb5bd223a3bc4c15a575424ffd0bf912e73388d023bca6a867cef4744137746d0f14f40d344009cfd75ec9b67856bd0b346094ce5becc29ea914920b2f50dd20423d0121dd49c7e92b30484caf8a0a5e512f58e043cff9af79188b411654d5cbc96c341e1be79d20877ebceba13", 0xdc0, 0xfd}, {0x0, 0x0, 0x7}, {&(0x7f00000002c0)="b7a652ae4a7c54b304d1e8828b70ca147b3c9927d628a53c7624ac8ccfa444eed3b73f3c0e885f6338c1109dd233ca3fad3c91c652df958e86b9b7a2ee1b5e116e7a", 0x42}]) 04:07:12 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) 04:07:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @pic={0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:07:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x2) [ 186.137010] devpts: called with bogus options 04:07:13 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) [ 186.161582] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.185949] *** Guest State *** [ 186.198496] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 04:07:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001800230000000000000000001d0100001800020003000020020100001bea37e3faa511af1c534afb076dbec3f70a25d83680b7bc6495c3d52ddcd6629b3a16cee7b909a095c3c4108fb1c8cea1271a4342fd2e39d6d62c24ad851c0e8eb21a042af44b6141ed33905a5bff4f2c"], 0x2c}}, 0x0) 04:07:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @ioapic={0x5002, 0x0, 0x40}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 186.222454] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 186.246987] CR3 = 0x00000000fffbc000 [ 186.255497] RSP = 0x0000000000000000 RIP = 0x0000000000000000 04:07:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb73ec91"], 0x10}}, 0x0) 04:07:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) [ 186.296147] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 186.323259] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.336927] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 04:07:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 186.375818] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 186.424646] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 04:07:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x62, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x8, 0x3}, 0x0, 0x0, &(0x7f0000000200)={0x5, 0xc, 0x1, 0xffff}, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x3ff}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) r5 = socket(0x10, 0x2, 0xc) write(0xffffffffffffffff, &(0x7f00009ec000)="1f0000000104ff00fdde45c807110000f305f0f00800018004fd00dcffdf00", 0x1f) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000001d00)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/audio\x00', 0x840700, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000001e00)={0x1, 0x0, 0x59a, 0x2}) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2613b1810f899a63}, 0xc, &(0x7f0000000500)}, 0x24) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x3, r4}) process_vm_writev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000600)=0x81, 0x4) [ 186.465973] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 186.478923] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 186.527953] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 186.562457] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 186.575697] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 186.619935] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 186.621532] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 186.666592] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 186.696468] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 186.719951] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 186.750915] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 186.776664] audit: type=1400 audit(1570162033.641:42): avc: denied { create } for pid=7212 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 186.817279] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 186.846756] Interruptibility = 00000000 ActivityState = 00000000 [ 186.872877] audit: type=1400 audit(1570162033.731:43): avc: denied { write } for pid=7212 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 186.906223] *** Host State *** [ 186.925539] RIP = 0xffffffff81174b00 RSP = 0xffff888058baf998 [ 186.948542] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 04:07:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x6b6b6b, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xfffffed0) write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x5f8}}, 0x90) 04:07:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="020328bd7000ffdbdf25110000001c00090008000200000800000800010004000000080001000300000010000200080002008000000004000400cc000500340002000800010003000000080004002000000008000300070000000800040000000000080001000b0000000800040002000000080001006962000054000200080001000d00000008000100060000000800040001010000080004008100000008000300caf8ffff0800030006000000080001000220000008000400a9000002080004000000ffff0800040001000100080001007564700024000200080001000b00000008000200000000000800040009000000080003007f0000000c00020008000100150000001000060004000200040002000400020044000700080001006a000000080000040000000c0003000300000000000000080002000001000008000100788300000c00030001000000000000001cd20460ac488895f114713cb4451a000cb042c25acd52a4ca6a704b8cf07b1466cc927e3b39d20b9125c185e438c36746a58e6d2cb2a8dc4de376d9568aac339df0bfa997d0290a014a629ed7234b504c186760d4889b68ffc97f787a7478cbff34257128056a65a5c0cc8152e3e5cafc23b42ecf92c88033855abb53bab8b2e60e4bddba8f5561749aea786b0b265b091f8da51a4f7e42cd03972557ef929c345d169be0d71bff710de1de2f282d4ea58fdd7a307545b8db33c6f0929d604ea2ae3284733a0ad549"], 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0x18}], 0x4924924924927e1, 0x0) 04:07:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb15322e2df00000000000000960f53691a655eb6999d32772cf2eebb1f6c9ad54ac45a333c28785d6382fa7776ea267d32109a5633657b52873b9924f15a5b587ec8eaab2abd683c8ff8640f46e160757c496c9f56d1eb5eae74c061953c0e988937dd812989a20a85626cbcaa423d66696158375aea157f2b6553116f695819574f5b4a179f2f8d6e26f2394e14012ab1b6b816c952728ab80b3314a8104a92228031eef5e8546144eb56653d", 0xc8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffd0, 0x0, 0x29}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 186.969026] FSBase=00007fdea43d9700 GSBase=ffff8880aee00000 TRBase=fffffe0000003000 [ 186.982562] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 187.027842] CR0=0000000080050033 CR3=00000000a4f03000 CR4=00000000001426f0 [ 187.048754] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff862018e0 [ 187.082153] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 187.088450] *** Control State *** [ 187.099679] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 187.107499] EntryControls=0000d1ff ExitControls=002fefff [ 187.117248] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 187.124811] VMEntry: intr_info=80000002 errcode=00000000 ilen=00000000 04:07:14 executing program 2: getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000380)) lstat(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x0, 0x44000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x5c], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) setregid(0xffffffffffffffff, 0xffffffffffffffff) fchownat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x1000) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0x0) 04:07:14 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000080), 0xc4) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000080), 0x301) 04:07:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x90) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 04:07:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000200)=0x1) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), 0x0) ioctl$KDDISABIO(r1, 0x4b37) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) getpgrp(r3) prctl$PR_SET_UNALIGN(0x6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x9, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}}, 0x10) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000240)={0x4, 0x3, 0x9, 0x4}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$inet_buf(r4, 0x0, 0x11, &(0x7f00000003c0)=""/121, &(0x7f0000000180)=0x79) r5 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x3, 0x44000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x3c], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = getgid() setregid(0xffffffffffffffff, 0xffffffffffffffff) fchownat(r1, &(0x7f0000000880)='./file0\x00', r2, r6, 0x1000) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0x0) [ 187.132191] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 187.139048] reason=80000021 qualification=0000000000000000 [ 187.145844] IDTVectoring: info=00000000 errcode=00000000 [ 187.151632] TSC Offset = 0xffffff99c1942eab [ 187.156209] TPR Threshold = 0x00 [ 187.159558] EPT pointer = 0x000000008b30a01e [ 187.164186] Virtual processor ID = 0x0001 04:07:14 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="9eb00793ffec", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 04:07:14 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x6b6b6b, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xfffffed0) write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x5f8}}, 0x90) 04:07:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000200)=0x1) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), 0x0) ioctl$KDDISABIO(r1, 0x4b37) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) getpgrp(r3) prctl$PR_SET_UNALIGN(0x6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x9, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}}, 0x10) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000240)={0x4, 0x3, 0x9, 0x4}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$inet_buf(r4, 0x0, 0x11, &(0x7f00000003c0)=""/121, &(0x7f0000000180)=0x79) r5 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x3, 0x44000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x3c], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = getgid() setregid(0xffffffffffffffff, 0xffffffffffffffff) fchownat(r1, &(0x7f0000000880)='./file0\x00', r2, r6, 0x1000) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0x0) [ 187.268859] ptrace attach of "/root/syz-executor.0"[7290] was attempted by "/root/syz-executor.0"[7292] 04:07:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1000000000001e, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x10, 0x80002, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd2000040d0006401c4e2152b6be5f0c00", 0x29}], 0x1) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:07:14 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000440), 0x1000) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x0, 0x0, 0x62df, [], &(0x7f00000000c0)={0x0, 0xd408, [], @p_u32=&(0x7f0000000040)}}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x97\xcdxR3\xb5\x13a\xf2>\xf6\xd9\x05eL\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80000000000003) socket(0x0, 0x0, 0x0) 04:07:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000200)=0x1) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), 0x0) ioctl$KDDISABIO(r1, 0x4b37) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) getpgrp(r3) prctl$PR_SET_UNALIGN(0x6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x9, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}}, 0x10) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000240)={0x4, 0x3, 0x9, 0x4}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$inet_buf(r4, 0x0, 0x11, &(0x7f00000003c0)=""/121, &(0x7f0000000180)=0x79) r5 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x3, 0x44000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x3c], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = getgid() setregid(0xffffffffffffffff, 0xffffffffffffffff) fchownat(r1, &(0x7f0000000880)='./file0\x00', r2, r6, 0x1000) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0x0) 04:07:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000200)=0x1) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), 0x0) ioctl$KDDISABIO(r1, 0x4b37) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) getpgrp(r3) prctl$PR_SET_UNALIGN(0x6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x9, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}}, 0x10) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000240)={0x4, 0x3, 0x9, 0x4}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$inet_buf(r4, 0x0, 0x11, &(0x7f00000003c0)=""/121, &(0x7f0000000180)=0x79) r5 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x3, 0x44000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x3c], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = getgid() setregid(0xffffffffffffffff, 0xffffffffffffffff) fchownat(r1, &(0x7f0000000880)='./file0\x00', r2, r6, 0x1000) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0x0) 04:07:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb15322e2df00000000000000960f53691a655eb6999d32772cf2eebb1f6c9ad54ac45a333c28785d6382fa7776ea267d32109a5633657b52873b9924f15a5b587ec8eaab2abd683c8ff8640f46e160757c496c9f56d1eb5eae74c061953c0e988937dd812989a20a85626cbcaa423d66696158375aea157f2b6553116f695819574f5b4a179f", 0xa1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffd0, 0x0, 0x29}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:07:16 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000440), 0x1000) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x0, 0x0, 0x62df, [], &(0x7f00000000c0)={0x0, 0xd408, [], @p_u32=&(0x7f0000000040)}}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x97\xcdxR3\xb5\x13a\xf2>\xf6\xd9\x05eL\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80000000000003) socket(0x0, 0x0, 0x0) 04:07:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x12d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x541d, 0x0, 0x0, 0xfffffffffffffd9c) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="0800b5055e0bcfe8") ioctl$KVM_NMI(r4, 0xae9a) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:07:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb15322e2df00000000000000960f53691a655eb6999d32772cf2eebb1f6c9ad54ac45a333c28785d6382fa7776ea267d32109a5633657b52873b9924f15a5b587ec8eaab2abd683c8ff8640f46e160757c496c9f56d1eb5eae74c061953c0e988937dd812989a20a85626cbcaa423d66696158375aea157f2b65", 0x95}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffd0, 0x0, 0x29}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:07:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 04:07:16 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x7) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='uid_map\x00') ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mincore(&(0x7f0000013000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/125) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 190.081937] kvm: emulating exchange as write [ 190.096889] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 04:07:17 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000440), 0x1000) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x0, 0x0, 0x62df, [], &(0x7f00000000c0)={0x0, 0xd408, [], @p_u32=&(0x7f0000000040)}}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x97\xcdxR3\xb5\x13a\xf2>\xf6\xd9\x05eL\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80000000000003) socket(0x0, 0x0, 0x0) 04:07:17 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x101001, 0x0) write$evdev(r0, &(0x7f0000000040), 0xff5d) 04:07:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x120100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, &(0x7f0000000140)={0x0, 0x5, 0x4, 0xd6, 0x0, 0x7, 0x0, 0x6}, &(0x7f00000004c0)={0x0, 0x1c9c380}, &(0x7f0000000540)={&(0x7f0000000500), 0x8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:07:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @pic={0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xc}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:07:17 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000440), 0x1000) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0x0, 0x0, 0x62df, [], &(0x7f00000000c0)={0x0, 0xd408, [], @p_u32=&(0x7f0000000040)}}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x97\xcdxR3\xb5\x13a\xf2>\xf6\xd9\x05eL\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x80000000000003) socket(0x0, 0x0, 0x0) 04:07:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="e6cf"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 190.289511] *** Guest State *** [ 190.293043] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 190.304083] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 190.324488] CR3 = 0x00000000fffbc000 [ 190.328251] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 190.344704] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 190.353871] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 190.372725] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 190.381160] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.393901] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.407852] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.416503] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.426183] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.449680] ================================================================== [ 190.455902] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 190.457798] BUG: KASAN: null-ptr-deref in kvm_write_guest_virt_system+0x64/0x90 [ 190.457811] Write of size 24 at addr (null) by task syz-executor.2/7378 [ 190.470312] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 190.473307] [ 190.473320] CPU: 1 PID: 7378 Comm: syz-executor.2 Not tainted 4.14.146 #0 [ 190.473327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.473332] Call Trace: [ 190.473349] dump_stack+0x138/0x197 [ 190.485363] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 190.489011] ? vprintk_func+0x65/0x159 [ 190.489026] ? kvm_write_guest_virt_system+0x64/0x90 [ 190.489039] kasan_report.cold+0x127/0x2af [ 190.491700] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 190.497612] check_memory_region+0x123/0x190 [ 190.497623] memset+0x24/0x40 [ 190.497635] kvm_write_guest_virt_system+0x64/0x90 [ 190.497647] handle_vmread+0x548/0x730 [ 190.511439] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 190.513188] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 190.513205] ? __lock_is_held+0xb6/0x140 [ 190.523969] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 190.525070] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 190.525082] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 190.525094] vmx_handle_exit+0x20d/0x1330 [ 190.531977] Interruptibility = 00000000 ActivityState = 00000000 [ 190.534441] ? vcpu_enter_guest+0xd2d/0x5210 [ 190.534457] vcpu_enter_guest+0xf28/0x5210 [ 190.534468] ? save_trace+0x290/0x290 [ 190.534479] ? find_held_lock+0x130/0x130 [ 190.545142] *** Host State *** [ 190.546870] ? emulator_read_emulated+0x50/0x50 [ 190.546881] ? lock_acquire+0x16f/0x430 [ 190.546890] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 190.546905] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 190.551721] RIP = 0xffffffff81174b00 RSP = 0xffff888054e1f998 [ 190.554929] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 190.554949] kvm_vcpu_ioctl+0x401/0xd10 [ 190.554960] ? kvm_vcpu_block+0xbb0/0xbb0 [ 190.558905] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 190.565222] ? trace_hardirqs_on+0x10/0x10 [ 190.565235] ? __might_fault+0x110/0x1d0 [ 190.565244] ? save_trace+0x290/0x290 [ 190.565252] ? __might_fault+0x110/0x1d0 [ 190.565262] ? __fget+0x210/0x370 [ 190.565272] ? find_held_lock+0x35/0x130 [ 190.565280] ? __fget+0x210/0x370 [ 190.565291] ? kvm_vcpu_block+0xbb0/0xbb0 [ 190.565299] do_vfs_ioctl+0x7ae/0x1060 [ 190.565309] ? selinux_file_mprotect+0x5d0/0x5d0 [ 190.565315] ? lock_downgrade+0x6e0/0x6e0 [ 190.565322] ? ioctl_preallocate+0x1c0/0x1c0 [ 190.565330] ? __fget+0x237/0x370 [ 190.565342] ? security_file_ioctl+0x89/0xb0 [ 190.565350] SyS_ioctl+0x8f/0xc0 [ 190.565356] ? do_vfs_ioctl+0x1060/0x1060 [ 190.565366] do_syscall_64+0x1e8/0x640 [ 190.565372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.565386] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.565393] RIP: 0033:0x459a29 [ 190.565397] RSP: 002b:00007fdea43d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.565405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 190.565409] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 190.565413] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 190.565417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdea43d96d4 [ 190.565421] R13: 00000000004c2ddb R14: 00000000004d68f8 R15: 00000000ffffffff [ 190.565433] ================================================================== [ 190.565435] Disabling lock debugging due to kernel taint [ 190.573734] Kernel panic - not syncing: panic_on_warn set ... [ 190.573734] [ 190.816761] CPU: 1 PID: 7378 Comm: syz-executor.2 Tainted: G B 4.14.146 #0 [ 190.824883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.834218] Call Trace: [ 190.836806] dump_stack+0x138/0x197 [ 190.840418] ? kvm_write_guest_virt_system+0x64/0x90 [ 190.845499] panic+0x1f2/0x426 [ 190.848670] ? add_taint.cold+0x16/0x16 [ 190.852625] ? ___preempt_schedule+0x16/0x18 [ 190.857019] kasan_end_report+0x47/0x4f [ 190.860977] kasan_report.cold+0x130/0x2af [ 190.865199] check_memory_region+0x123/0x190 [ 190.869587] memset+0x24/0x40 [ 190.872678] kvm_write_guest_virt_system+0x64/0x90 [ 190.877591] handle_vmread+0x548/0x730 [ 190.881461] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 190.886807] ? __lock_is_held+0xb6/0x140 [ 190.890853] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 190.896299] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 190.901643] vmx_handle_exit+0x20d/0x1330 [ 190.905773] ? vcpu_enter_guest+0xd2d/0x5210 [ 190.910189] vcpu_enter_guest+0xf28/0x5210 [ 190.914407] ? save_trace+0x290/0x290 [ 190.918201] ? find_held_lock+0x130/0x130 [ 190.922330] ? emulator_read_emulated+0x50/0x50 [ 190.926979] ? lock_acquire+0x16f/0x430 [ 190.930945] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 190.936390] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 190.941302] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 190.946302] kvm_vcpu_ioctl+0x401/0xd10 [ 190.950257] ? kvm_vcpu_block+0xbb0/0xbb0 [ 190.954384] ? trace_hardirqs_on+0x10/0x10 [ 190.958605] ? __might_fault+0x110/0x1d0 [ 190.962647] ? save_trace+0x290/0x290 [ 190.966429] ? __might_fault+0x110/0x1d0 [ 190.970471] ? __fget+0x210/0x370 [ 190.973908] ? find_held_lock+0x35/0x130 [ 190.978220] ? __fget+0x210/0x370 [ 190.981654] ? kvm_vcpu_block+0xbb0/0xbb0 [ 190.985784] do_vfs_ioctl+0x7ae/0x1060 [ 190.989651] ? selinux_file_mprotect+0x5d0/0x5d0 [ 190.994487] ? lock_downgrade+0x6e0/0x6e0 [ 190.998615] ? ioctl_preallocate+0x1c0/0x1c0 [ 191.003014] ? __fget+0x237/0x370 [ 191.006451] ? security_file_ioctl+0x89/0xb0 [ 191.010840] SyS_ioctl+0x8f/0xc0 [ 191.014203] ? do_vfs_ioctl+0x1060/0x1060 [ 191.018333] do_syscall_64+0x1e8/0x640 [ 191.022551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.027377] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.032562] RIP: 0033:0x459a29 [ 191.035837] RSP: 002b:00007fdea43d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.043529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 191.050800] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 191.058053] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 191.065315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdea43d96d4 [ 191.072580] R13: 00000000004c2ddb R14: 00000000004d68f8 R15: 00000000ffffffff [ 191.081180] Kernel Offset: disabled [ 191.084803] Rebooting in 86400 seconds..