[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.277325] audit: type=1800 audit(1569660255.857:33): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 39.301160] audit: type=1800 audit(1569660255.867:34): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 [ 39.781178] audit: type=1400 audit(1569660256.367:35): avc: denied { map } for pid=7588 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts. 2019/09/28 08:44:23 fuzzer started syzkaller login: [ 46.415655] audit: type=1400 audit(1569660262.997:36): avc: denied { map } for pid=7598 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/28 08:44:24 dialing manager at 10.128.0.105:35551 2019/09/28 08:44:24 syscalls: 2489 2019/09/28 08:44:24 code coverage: enabled 2019/09/28 08:44:24 comparison tracing: enabled 2019/09/28 08:44:24 extra coverage: extra coverage is not supported by the kernel 2019/09/28 08:44:24 setuid sandbox: enabled 2019/09/28 08:44:24 namespace sandbox: enabled 2019/09/28 08:44:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/28 08:44:24 fault injection: enabled 2019/09/28 08:44:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/28 08:44:24 net packet injection: enabled 2019/09/28 08:44:24 net device setup: enabled 08:47:09 executing program 0: [ 212.547016] audit: type=1400 audit(1569660429.127:37): avc: denied { map } for pid=7615 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 212.656326] IPVS: ftp: loaded support on port[0] = 21 08:47:09 executing program 1: [ 212.757799] chnl_net:caif_netlink_parms(): no params data found [ 212.806010] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.813237] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.820997] device bridge_slave_0 entered promiscuous mode [ 212.830588] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.836991] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.844435] device bridge_slave_1 entered promiscuous mode [ 212.865045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.885104] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.905470] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.913469] team0: Port device team_slave_0 added [ 212.919682] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.927294] team0: Port device team_slave_1 added [ 212.933407] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.940974] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 212.954483] IPVS: ftp: loaded support on port[0] = 21 08:47:09 executing program 2: [ 213.033377] device hsr_slave_0 entered promiscuous mode [ 213.070727] device hsr_slave_1 entered promiscuous mode [ 213.111025] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 213.119661] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 213.163211] IPVS: ftp: loaded support on port[0] = 21 [ 213.163641] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.174886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.181869] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.188236] bridge0: port 1(bridge_slave_0) entered forwarding state 08:47:09 executing program 3: [ 213.354394] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 213.372237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.382643] chnl_net:caif_netlink_parms(): no params data found [ 213.447816] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:47:10 executing program 4: [ 213.529627] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 213.537773] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.544767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.554383] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.572669] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.583893] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 213.616371] chnl_net:caif_netlink_parms(): no params data found [ 213.634941] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.650455] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.657787] device bridge_slave_0 entered promiscuous mode [ 213.678100] IPVS: ftp: loaded support on port[0] = 21 [ 213.684511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.701182] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.707577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.731329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.739344] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.745864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.757497] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.770487] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.777764] device bridge_slave_1 entered promiscuous mode 08:47:10 executing program 5: [ 213.797685] IPVS: ftp: loaded support on port[0] = 21 [ 213.811004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 213.818402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.866263] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.891415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 213.914477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.925794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.934139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.951359] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.957749] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.966170] device bridge_slave_0 entered promiscuous mode [ 213.977435] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.984153] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.991210] device bridge_slave_1 entered promiscuous mode [ 214.012390] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.022839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.032415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.046763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 214.057115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 214.067115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 214.069186] IPVS: ftp: loaded support on port[0] = 21 [ 214.076948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.089019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.099635] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 214.120132] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.127713] team0: Port device team_slave_0 added [ 214.133556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.140974] team0: Port device team_slave_1 added [ 214.146892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.154939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.162771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.170216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.178194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.185775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.195081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.217114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.227323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.234737] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.243329] team0: Port device team_slave_0 added [ 214.254074] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 214.277012] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.285301] team0: Port device team_slave_1 added [ 214.342414] device hsr_slave_0 entered promiscuous mode [ 214.400898] device hsr_slave_1 entered promiscuous mode [ 214.431381] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 214.443429] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.484719] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 214.503134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.512356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.567758] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.579183] chnl_net:caif_netlink_parms(): no params data found [ 214.580177] audit: type=1400 audit(1569660431.157:38): avc: denied { associate } for pid=7616 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 214.653231] device hsr_slave_0 entered promiscuous mode [ 214.690824] device hsr_slave_1 entered promiscuous mode [ 214.733703] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 214.740762] chnl_net:caif_netlink_parms(): no params data found [ 214.748928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 08:47:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000040)={0x15cbbc7b}) [ 214.850861] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 08:47:11 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x16c) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r1, 0x200000000002) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 214.900246] chnl_net:caif_netlink_parms(): no params data found [ 214.925648] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.932163] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.939366] device bridge_slave_0 entered promiscuous mode [ 214.946918] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.953508] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.961619] device bridge_slave_1 entered promiscuous mode [ 214.989283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.030339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.043582] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.078936] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.090296] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.096907] audit: type=1400 audit(1569660431.657:39): avc: denied { create } for pid=7644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 215.120381] hrtimer: interrupt took 31956 ns [ 215.127252] device bridge_slave_0 entered promiscuous mode [ 215.133412] audit: type=1400 audit(1569660431.667:40): avc: denied { write } for pid=7644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 215.157575] audit: type=1400 audit(1569660431.677:41): avc: denied { read } for pid=7644 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 215.185392] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 215.212755] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.220770] team0: Port device team_slave_0 added [ 215.225992] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.232808] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.240290] device bridge_slave_1 entered promiscuous mode [ 215.251142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.259746] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 215.267240] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.273642] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.280827] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.288912] device bridge_slave_0 entered promiscuous mode [ 215.296770] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.311029] team0: Port device team_slave_1 added [ 215.316462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.338202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.345331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.355086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.371122] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.377508] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.385717] device bridge_slave_1 entered promiscuous mode [ 215.392707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.418740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.443347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.451215] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.457595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.467336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 215.477597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.492547] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.507807] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.529393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.553974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.562212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.569918] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.576329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.586639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 215.596163] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 215.606271] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.616024] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:47:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x4, 0x1}, 0x2c) [ 215.673312] device hsr_slave_0 entered promiscuous mode [ 215.710795] device hsr_slave_1 entered promiscuous mode [ 215.761450] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 215.770079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 215.779668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.788063] audit: type=1400 audit(1569660432.367:42): avc: denied { map_create } for pid=7655 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 215.812898] audit: type=1400 audit(1569660432.367:43): avc: denied { map_read map_write } for pid=7655 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 215.813118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 08:47:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) dup2(r0, r1) [ 215.859479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.876699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 215.887558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.898832] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.905879] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.930639] team0: Port device team_slave_0 added [ 215.936806] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.945314] team0: Port device team_slave_1 added [ 215.950800] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.957964] team0: Port device team_slave_0 added [ 215.964060] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.971780] team0: Port device team_slave_1 added [ 215.977043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.986719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.994520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.002655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.010204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.017307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.027671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 216.037242] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.045192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.052777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.062132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.069218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 08:47:12 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 216.076815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.084738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.102380] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 216.108469] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.128568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 216.153552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.166401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.179437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.194051] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 08:47:12 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r1, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 216.200109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.243199] device hsr_slave_0 entered promiscuous mode 08:47:12 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000001a00)="5244534bcc7115b68391ebec0ba78c4f0f53e29ff3bf1f886ab13511938faf2f75c56cce830314eb439d76907a2ee19e1d8f9af3dc406875b8ee2a94b071cb1f8348e197437b039443edcd10d03e08c94dc33b23df39e0cd94546cb2a281adf99c92fc6c47460fb0c4a6f9a57cdcb947812de2d45a796a9e5e4b34443ac8898a833dda42b27864728f73d66ab080999be2098d328ec6338fafe5e59be61d7069aa037df300c9d7ece5d57c75f59ed55ff8cea044d89e26284f536890296079e000091a7f2dbb694c5750b1244857241607f75a34a91c46151fdc8adad685b1d3e15a9c7184a7804759d362e2a06572a9ef2d99de20d623b9e2aaa1a7c5205ab1c9b99c6df85846700d30e4396597c935f8b20b0edc249f588c2888ece33d8f9c2431daa91419dbe6379e825d2781921ea9622cc1683c5555ce503ef7deb3a462cbd5102fea75c5c4a0a68663a914a0a8dc59f6418d12c6d6df7ea975d77e2abd429ca4dd512eaa7d27989b863e18ddf23b384f8216d28f2a9428aaecd2eba0369ad04c3ca6f1c266847cdc06941acbea7f06546d858e7f2f593792b37d30946c84ebb2ea428d78f43218492b1e19b5f3f323792c30dd3a5d04b660a8e2a469243fd50948d48e19c91a01d32254ac208f7692820ab048c9fa554a619441f7fa46e17c80b6de92a23ac45fd7ea77e79d5b664e83baf21524d52c02ab66bd111191", 0x200}]) [ 216.268045] audit: type=1400 audit(1569660432.837:44): avc: denied { map } for pid=7666 comm="syz-executor.0" path="socket:[27973]" dev="sockfs" ino=27973 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 [ 216.295409] device hsr_slave_1 entered promiscuous mode [ 216.310624] protocol 88fb is buggy, dev hsr_slave_0 [ 216.315830] protocol 88fb is buggy, dev hsr_slave_1 [ 216.361500] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 216.369127] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.384019] Dev loop0: RDB in block 0 has bad checksum [ 216.389447] Dev loop0: unable to read RDB block 1 [ 216.394748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.395298] loop0: unable to read partition table [ 216.402881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.412340] loop0: partition table beyond EOD, truncated [ 216.415349] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.420290] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 216.426398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.431271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.496642] device hsr_slave_0 entered promiscuous mode [ 216.511207] Dev loop0: RDB in block 0 has bad checksum [ 216.516655] Dev loop0: unable to read RDB block 1 [ 216.522118] loop0: unable to read partition table [ 216.527134] loop0: partition table beyond EOD, truncated [ 216.530911] device hsr_slave_1 entered promiscuous mode [ 216.533023] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 216.571365] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 216.578430] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 216.597214] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 216.604809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.615532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.623751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.631592] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.637956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.647412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 216.689687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.702305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 216.713397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 216.721960] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.732911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.743292] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.758122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.766288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.774101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.783039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.791712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.799593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.807150] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 216.837048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 216.852585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.859764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.867813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.894375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.903412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 216.927750] 8021q: adding VLAN 0 to HW filter on device bond0 08:47:13 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) [ 216.951957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.959555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.982739] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 216.988829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.018375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.028744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.047752] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.058725] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.066871] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.075115] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 217.082981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.089917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.109155] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 217.117788] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.126065] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.133797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.141733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.151476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.159771] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.169088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.177978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.185914] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.192315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.199301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.206751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.216049] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 217.222705] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.230154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.238744] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 217.245820] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.252968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.262752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.274037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.287609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.295020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.303567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.311471] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.317848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.324878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.333573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.341258] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.347598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.354536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.362516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.370039] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.376443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.383757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.391398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.400661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.409876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.426127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.445092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.458181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 08:47:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x4, 0x1}, 0x2c) [ 217.476782] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.483200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.491250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.499366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.508493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.516386] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.522806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.533154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 217.554952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.563040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.571700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.581697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.589447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.603379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.613461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 217.623529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.631951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.639654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.647534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.655418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.663282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.673104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 217.682733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 217.693993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 217.701183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.708246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.715820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.723858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.731722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.739474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.747716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.757548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 217.774302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 217.783726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 217.792595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.800164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.808163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.816171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.823962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.831767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.840867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.849936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 217.859660] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 217.866101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.875844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 217.889087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.896960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.905981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.914033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.921782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.929268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.936925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.947580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 217.956245] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 217.962910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.979260] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 217.986005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.993754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.006162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 218.015630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.026754] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 218.032930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.044252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.054866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.064633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.085025] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 218.098940] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 218.111183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.143288] 8021q: adding VLAN 0 to HW filter on device batadv0 08:47:14 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = dup2(r1, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 08:47:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) 08:47:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000140)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') 08:47:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="240000001a0007041dfffd946f6105000a7400001f0000000000080008001b003a000000", 0x24}], 0x1}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x49249249249270a, 0x0) 08:47:14 executing program 2: ftruncate(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) 08:47:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x4000) 08:47:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x767, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x1f}) 08:47:14 executing program 1: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffffd61b000008003950323030302e4c628acfab1f7c024d7bbf91fc04f98353862582316477e4dccb5f72111149c600f9c8fa598a49b2a418d30647a7a281011d3b3dcd316e187fc3f9889c6aa4a0bd16bbb4e2"], 0x15) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:47:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 08:47:15 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000001a00)="b0dcded1cc7115b68391ebec0ba78c4f0f53e29ff3bf1f886ab13511938faf2f75c56cce830314eb439d76907a2ee19e1d8f9af3dc406875b8ee2a94b071cb1f8348e197437b039443edcd10d03e08c94dc33b23df39e0cd94546cb2a281adf99c92fc6c47460fb0c4a6f9a57cdcb947812de2d45a796a9e5e4b34443ac8898a833dda42b27864728f73d66ab080999be2098d328ec6338fafe5e59be61d7069aa037df300c9d7ece5d57c75f59ed55ff8cea044d89e26284f536890296079e000091a7f2dbb694c5750b1244857241607f75a34a91c46151fdc8adad685b1d3e15a9c7184a7804759d362e2a06572a9ef2d99de20d623b9e2aaa1a7c5205ab1c9b99c6df85846700d30e4396597c935f8b20b0edc249f588c2888ece33d8f9c2431daa91419dbe6379e825d2781921ea9622cc1683c5555ce503ef7deb3a462cbd5102fea75c5c4a0a68663a914a0a8dc59f6418d12c6d6df7ea975d77e2abd429ca4dd512eaa7d27989b863e18ddf2", 0x170, 0x90}]) [ 218.420467] protocol 88fb is buggy, dev hsr_slave_0 [ 218.425629] protocol 88fb is buggy, dev hsr_slave_1 08:47:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000001a00)="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", 0x200}]) [ 218.470468] protocol 88fb is buggy, dev hsr_slave_0 [ 218.475657] protocol 88fb is buggy, dev hsr_slave_1 08:47:15 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af21, &(0x7f0000000380)) rt_sigpending(0x0, 0x0) dup3(r2, r0, 0x0) 08:47:15 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = dup2(r1, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 218.588684] Dev loop5: unable to read RDB block 1 [ 218.595432] loop5: unable to read partition table [ 218.602815] loop5: partition table beyond EOD, truncated [ 218.608484] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 218.642328] Dev loop2: unable to read RDB block 1 [ 218.660882] loop2: unable to read partition table 08:47:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000001a00)="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", 0x1f8, 0x8}]) 08:47:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xfffe, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x1, 0x0, 0x40, [], &(0x7f0000000200)}) [ 218.693832] loop2: partition table beyond EOD, truncated [ 218.712741] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 218.752571] Dev loop5: unable to read RDB block 1 [ 218.757498] loop5: unable to read partition table [ 218.789277] loop5: partition table beyond EOD, truncated 08:47:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffcb) 08:47:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="0f01cbb9800000c00f3235002000000f30b9090492cf0f320f01befdffffffb9800000c00f3235002000000f300f20e0358000000066baf80cb888cf1c8aef66bafc0cb000ee0f01c926362e670f060f2135c4c2c99eb25d000000", 0x113}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x62, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 218.809817] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 218.906432] Dev loop4: unable to read RDB block 1 08:47:15 executing program 5: clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 08:47:15 executing program 2: read$FUSE(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) [ 218.931113] loop4: unable to read partition table [ 218.958042] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 218.967268] loop4: partition table beyond EOD, [ 219.004603] truncated [ 219.015093] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 08:47:15 executing program 1: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x8e]}}, 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:47:15 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f00000002c0)) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={@empty, @dev, @loopback, 0x0, 0x400, 0x0, 0x100, 0x8, 0x80100105}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9168a9b794fedcc7ff24d7b41378abcd22f9c31bbff74c8e5d9f35adee4993e6829aef39f931d3dd12e1219497ec86d14c21747a4de53d36b5e81b0e10390a1c88b59eeb46a6133092dd7daa21bf6f81895c84aed9b4fd0b11dc", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x31bc793adb2c82ab}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x8800) sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8004) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) fstatfs(r1, &(0x7f0000000780)=""/215) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 219.142248] Dev loop4: unable to read RDB block 1 08:47:15 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab3c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000002d000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 219.168269] loop4: unable to read partition table 08:47:15 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$ashmem(0xffffffffffffff9c, 0x0, 0x119041, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = dup2(r1, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) [ 219.225604] loop4: partition table beyond EOD, truncated [ 219.257345] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 08:47:15 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xfffe, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0585609, &(0x7f0000000400)={0x0, 0xa, 0x0, "dde7aa6c503c825188693f238cf57b30c99bb97d1ff20191f5bf0d2d9eaff211"}) [ 219.434751] EXT4-fs (loop0): Invalid log cluster size: 45 [ 219.450519] protocol 88fb is buggy, dev hsr_slave_0 [ 219.455692] protocol 88fb is buggy, dev hsr_slave_1 08:47:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00\f\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0x705, 0x0, 0x0, {0x0, r1, {}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4, 0x2, [@TCA_BASIC_ACT={0x0, 0x3, @m_ipt={0x0, 0x0, {{0x0, 0x1, 'ipt\x00'}, {0x0, 0x2, [@TCA_IPT_INDEX, @TCA_IPT_HOOK, @TCA_IPT_HOOK, @TCA_IPT_TABLE={0x0, 0x1, 'nat\x00'}, @TCA_IPT_HOOK]}, {0xfddc, 0x6, "dab33fe25cd0152df60d662a6bd8ac9cf400074bd4df8daccd96265426ce1892676e792bb610e16a21e5804a0231f0db685adfc95a8233dc5d1cea56778afd67a025e6ee42e20d6cc17b0e1d4e9d58097b85996107ced8f89d5163f9bf79609b2a6f1f951905d8789eb5e99fadc12150c4fcc1132fe4"}}}}, @TCA_BASIC_ACT={0x0, 0x3, @m_csum={0x0, 0x0, {{0x0, 0x1, 'csum\x00'}, {}, {0x0, 0x6, "672377aa7bb402258a6b5d311f808a69d519249ca5cb46d56a5483405a8bbd336a4d189753726096eabf8e0c855e5b0a03a4a675390735dc419cd1dbd06f17556ccc19be0740c581f3d93386a26318e5819d341b67d2115fece67aeadfd30e7852c2511e175f2577553fe28b9800afef758e0f1f3b120024166a96ae44b9f7c62c74d4628bf8dda4b7b6d02a7c83352c1adb0cbe0099b70bce803fdeecff9be3d86aa411cfeebba28af729091ff3f437460a5149323080a6d0685ebf783103c68a8edfd7606459736f1df054bb7aa93dbb79f027b5b9e2b61dce04427816159e4d6bc78352e7b211d2f6822286"}}}}, @TCA_BASIC_ACT={0x0, 0x3, @m_mirred={0x0, 0x0, {{0x0, 0x1, 'mirred\x00'}, {}, {0x0, 0x6, "4e278d2f21eead652779450ab17c52ec8e9d1f03aea497a5b55144c64922bbae0c8a5f349f50538174"}}}}, @TCA_BASIC_EMATCHES={0x0, 0x2, [@TCA_EMATCH_TREE_LIST={0x0, 0x2, @TCF_EM_META={0x0, 0x0, {0x0, 0x4, 0x0, 0x0, [@TCA_EM_META_HDR, @TCA_EM_META_HDR, @TCA_EM_META_HDR, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, @TCF_EM_META={0x0, 0x0, {0x0, 0x4, 0x0, 0x0, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="eb236884", @TCF_META_TYPE_VAR="35a2ab0913a040", @TCF_META_TYPE_VAR="60fad4e1f2783e", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dd28df0c2d42"]}]}}}]}, @TCA_BASIC_POLICE={0x0, 0x4, @TCA_POLICE_RESULT}, @TCA_BASIC_EMATCHES={0x0, 0x2, [@TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_LIST={0x0, 0x2, @TCF_EM_CONTAINER={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, "daac862701244b945989677842489c3abe0aed209d58b8cf3a6a751dc0ebd7e828c3170d1d547c8046ee01552ea8381b42e1d95f7f777897d0ccdf4b95963bfec9240d8f2b4d5cd4b0f9dee7d234f11a92632160c516ee317cf5e0b27e2a017a75ee2986e48798c7a5a5c612cea0bc661fc91641a3240214604db86687d2fb979f22e376895f8c9be3eb57f64786008e"}}}, @TCA_EMATCH_TREE_HDR]}, @TCA_BASIC_CLASSID]}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 08:47:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup3(r3, r6, 0x0) dup2(r8, r7) 08:47:16 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x119041, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = dup2(r1, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) dup2(r3, r0) 08:47:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00\f\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}}, 0x24}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 08:47:16 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() r6 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x0, 0x2}, 0x20) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0xe) fcntl$setstatus(r1, 0x4, 0x80000000002c00) 08:47:16 executing program 2: syz_read_part_table(0x0, 0x2, &(0x7f0000001280)=[{0x0, 0x0, 0x2f682}, {&(0x7f0000000280)="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", 0x1de, 0x3}]) 08:47:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x4000) 08:47:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:47:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x8e]}}, 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:47:16 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x3f000000}}}, 0x90) 08:47:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000300)="11dca5055e0bcfe47bf070") gettid() clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f600000800000007000000402c110000000000090000070000000000000000000000000400000b0000000000000000000000000001000000000000000000d68ac6c70000000000000e0000"], 0x60) [ 220.233283] SELinux: failed to load policy [ 220.236002] ------------[ cut here ]------------ [ 220.250105] WARNING: CPU: 0 PID: 7858 at kernel/fork.c:677 __put_task_struct.cold+0x29/0x48 [ 220.257165] kobject: 'kvm' (000000009ebd1226): kobject_uevent_env [ 220.258638] Kernel panic - not syncing: panic_on_warn set ... [ 220.258638] [ 220.258654] CPU: 0 PID: 7858 Comm: syz-executor.5 Not tainted 4.19.75 #0 08:47:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 220.258661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.258666] Call Trace: [ 220.258683] dump_stack+0x172/0x1f0 [ 220.258701] panic+0x263/0x507 [ 220.271193] kobject: 'kvm' (000000009ebd1226): kobject_uevent_env [ 220.272307] ? __warn_printk+0xf3/0xf3 [ 220.272327] ? __put_task_struct.cold+0x29/0x48 [ 220.272343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.272361] ? __warn.cold+0x5/0x4a [ 220.272370] ? __warn+0xe8/0x1d0 [ 220.272388] ? __put_task_struct.cold+0x29/0x48 [ 220.281749] kobject: 'kvm' (000000009ebd1226): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 220.288569] __warn.cold+0x20/0x4a [ 220.288586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.288599] ? __put_task_struct.cold+0x29/0x48 [ 220.288615] report_bug+0x263/0x2b0 [ 220.288634] do_error_trap+0x204/0x360 [ 220.298599] kobject: 'kvm' (000000009ebd1226): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 220.304244] ? math_error+0x340/0x340 [ 220.304261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.304275] ? wake_up_klogd+0x99/0xd0 [ 220.304286] ? vprintk_emit+0x264/0x690 [ 220.304308] ? error_entry+0x7c/0xe0 [ 220.390191] ? trace_hardirqs_off_caller+0x65/0x220 [ 220.395217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.400052] do_invalid_op+0x1b/0x20 [ 220.403758] invalid_op+0x14/0x20 [ 220.407208] RIP: 0010:__put_task_struct.cold+0x29/0x48 [ 220.412487] Code: ff e8 20 7d 2c 00 48 c7 c7 20 45 49 87 e8 f8 e3 16 00 0f 0b e9 34 4b ff ff e8 08 7d 2c 00 48 c7 c7 20 45 49 87 e8 e0 e3 16 00 <0f> 0b e9 c5 4a ff ff e8 f0 7c 2c 00 48 c7 c7 20 45 49 87 e8 c8 e3 [ 220.431550] RSP: 0018:ffff8880554cfcd8 EFLAGS: 00010286 [ 220.436902] RAX: 0000000000000024 RBX: 0000000000000000 RCX: 0000000000000000 [ 220.444167] RDX: 0000000000000000 RSI: ffffffff8155dbd6 RDI: ffffed100aa99f8d [ 220.451423] RBP: ffff8880554cfd00 R08: 0000000000000024 R09: ffffed1015d05079 [ 220.458679] R10: ffffed1015d05078 R11: ffff8880ae8283c7 R12: ffff88807ff9a480 [ 220.465934] R13: ffff88805427efb0 R14: 0000000000000000 R15: 0000000000000000 [ 220.473216] ? vprintk_func+0x86/0x189 [ 220.477096] ? __put_task_struct.cold+0x29/0x48 [ 220.481756] rdma_restrack_del+0x1da/0x240 [ 220.485989] rdma_destroy_id+0xac/0xab0 [ 220.489953] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 220.495045] ? complete+0x61/0x80 [ 220.498492] ucma_close+0x115/0x320 [ 220.502110] ? ucma_free_ctx+0xb90/0xb90 [ 220.506158] __fput+0x2dd/0x8b0 [ 220.509434] ____fput+0x16/0x20 [ 220.512704] task_work_run+0x145/0x1c0 [ 220.516586] exit_to_usermode_loop+0x273/0x2c0 [ 220.521158] do_syscall_64+0x53d/0x620 [ 220.525036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.530233] RIP: 0033:0x413711 [ 220.533413] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 220.552309] RSP: 002b:00007ffd02eb52b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 220.560019] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413711 [ 220.567286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 220.574549] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 220.581806] R10: 00007ffd02eb5390 R11: 0000000000000293 R12: 000000000075bfc8 [ 220.589065] R13: 0000000000035c30 R14: 00000000007605d0 R15: 000000000075bfd4 [ 220.598061] Kernel Offset: disabled [ 220.601769] Rebooting in 86400 seconds..