[ 270.144537][ T40] audit: type=1400 audit(1593647862.415:41): avc: denied { map } for pid=10888 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:7494' (ECDSA) to the list of known hosts. [ 276.064740][ T40] audit: type=1400 audit(1593647868.335:42): avc: denied { map } for pid=10902 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/07/01 23:57:48 fuzzer started 2020/07/01 23:57:49 dialing manager at 10.0.2.10:32807 2020/07/01 23:57:52 syscalls: 3122 2020/07/01 23:57:52 code coverage: enabled 2020/07/01 23:57:52 comparison tracing: enabled 2020/07/01 23:57:52 extra coverage: enabled 2020/07/01 23:57:52 setuid sandbox: enabled 2020/07/01 23:57:52 namespace sandbox: enabled 2020/07/01 23:57:52 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/01 23:57:52 fault injection: enabled 2020/07/01 23:57:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/01 23:57:52 net packet injection: enabled 2020/07/01 23:57:52 net device setup: enabled 2020/07/01 23:57:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/01 23:57:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/01 23:57:52 USB emulation: enabled [ 280.288410][ T40] audit: type=1400 audit(1593647872.555:43): avc: denied { integrity } for pid=10920 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 23:58:31 executing program 0: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480), 0x8}) [ 320.123856][ T40] audit: type=1400 audit(1593647912.385:44): avc: denied { map } for pid=10922 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=2086 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 23:58:32 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x22}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x136}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:58:33 executing program 2: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2}, 0x1c) [ 321.064866][T10924] IPVS: ftp: loaded support on port[0] = 21 [ 321.064919][T10925] IPVS: ftp: loaded support on port[0] = 21 23:58:33 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x1a0, 0xf00, 0x0, &(0x7f0000000280)="20cf4d411d520bdfae1c3821271c", 0x0, 0x34f}, 0x28) [ 321.389574][T10927] IPVS: ftp: loaded support on port[0] = 21 [ 321.581711][T10925] chnl_net:caif_netlink_parms(): no params data found [ 321.602909][T10924] chnl_net:caif_netlink_parms(): no params data found [ 321.815943][T10932] IPVS: ftp: loaded support on port[0] = 21 [ 321.851676][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.875186][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.900838][T10925] device bridge_slave_0 entered promiscuous mode [ 321.938215][T10924] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.951016][T10924] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.966369][T10924] device bridge_slave_0 entered promiscuous mode [ 322.000283][T10924] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.021605][T10924] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.044819][T10924] device bridge_slave_1 entered promiscuous mode [ 322.075274][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.094579][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.119088][T10925] device bridge_slave_1 entered promiscuous mode [ 322.183823][T10924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.238242][T10924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.254439][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.280681][T10927] chnl_net:caif_netlink_parms(): no params data found [ 322.314138][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.353194][T10924] team0: Port device team_slave_0 added [ 322.369957][T10924] team0: Port device team_slave_1 added [ 322.416573][T10925] team0: Port device team_slave_0 added [ 322.431396][T10925] team0: Port device team_slave_1 added [ 322.475483][T10924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.489000][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.530727][T10924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.562142][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.575993][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.629682][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.658439][T10924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.670868][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.715997][T10924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.765864][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.780070][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.837715][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.899671][T10927] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.910508][T10927] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.922117][T10927] device bridge_slave_0 entered promiscuous mode [ 323.041233][T10925] device hsr_slave_0 entered promiscuous mode [ 323.108547][T10925] device hsr_slave_1 entered promiscuous mode [ 323.171143][T10927] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.184477][T10927] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.197533][T10927] device bridge_slave_1 entered promiscuous mode [ 323.309492][T10924] device hsr_slave_0 entered promiscuous mode [ 323.387602][T10924] device hsr_slave_1 entered promiscuous mode [ 323.467530][T10924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.486274][T10924] Cannot create hsr debugfs directory [ 323.520543][T10927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.556870][T10932] chnl_net:caif_netlink_parms(): no params data found [ 323.594950][T10927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.725721][T10927] team0: Port device team_slave_0 added [ 323.805862][T10927] team0: Port device team_slave_1 added [ 323.865380][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.887302][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.906596][T10932] device bridge_slave_0 entered promiscuous mode [ 323.922502][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.941106][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.957552][T10932] device bridge_slave_1 entered promiscuous mode [ 324.002244][T10927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.022413][T10927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.094650][T10927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.126428][T10927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.142411][T10927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.219668][T10927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.288702][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.327760][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.421700][T10932] team0: Port device team_slave_0 added [ 324.449710][T10932] team0: Port device team_slave_1 added [ 324.551030][T10927] device hsr_slave_0 entered promiscuous mode [ 324.620743][T10927] device hsr_slave_1 entered promiscuous mode [ 324.719512][T10927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.746706][T10927] Cannot create hsr debugfs directory [ 324.811989][T10932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.834489][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.913999][T10932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.983334][T10932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.007989][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.091203][T10932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.183775][ T40] audit: type=1400 audit(1593647917.455:45): avc: denied { create } for pid=10925 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 325.258050][ T40] audit: type=1400 audit(1593647917.455:46): avc: denied { write } for pid=10925 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 325.314670][ T40] audit: type=1400 audit(1593647917.465:47): avc: denied { read } for pid=10925 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 325.361262][T10932] device hsr_slave_0 entered promiscuous mode [ 325.447844][T10932] device hsr_slave_1 entered promiscuous mode [ 325.527222][T10932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.547435][T10932] Cannot create hsr debugfs directory [ 325.563585][T10925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 325.630027][T10925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 325.742398][T10925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 325.825715][T10925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.015813][T10924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.131802][T10924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.222146][T10924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.307810][T10924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.484630][T10927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.561395][T10927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.667020][T10927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.751670][T10927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.875897][T10932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.983441][T10932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.053818][T10932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.121091][T10932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.289828][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.371955][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.388456][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.409423][T10925] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.442994][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.470381][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.494621][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.509864][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.525917][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.549558][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.563592][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.583008][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.596466][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.624327][T10924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.641056][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 327.661862][T10932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.688404][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 327.706426][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.721889][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.745905][T10924] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.762659][T10927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.774976][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.791751][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.812580][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.828122][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.875285][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.902983][T10932] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.936190][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.956035][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.978123][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.996308][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.013620][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.037616][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.055997][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.082643][T10927] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.107798][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.124288][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.142072][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.160964][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.178281][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.196335][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.212409][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.225415][T10931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.242033][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.267570][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.287965][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.305310][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.320972][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.342192][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.359514][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.375386][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.389984][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.404560][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.417795][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.430552][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.442427][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.453172][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.469795][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.485935][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.502427][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.530615][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.552738][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.566887][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.581727][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.596554][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.608197][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.619728][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.631632][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.643918][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.659741][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.694193][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.706395][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.721255][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.733902][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.746351][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.758044][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.769717][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.781454][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.793271][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.805542][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.818330][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.860776][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.874277][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.886311][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.899541][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.912161][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.924081][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.938355][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.955877][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.980487][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.001942][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.027713][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.053772][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.079384][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.096633][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.109038][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.122651][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.135583][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.147406][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.160537][T10927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.177404][T10924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.205596][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.223823][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.259314][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.279762][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.325626][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.338244][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.361043][T10924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.378244][T10932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.391974][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.407481][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.429900][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.444635][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.475548][T10927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.506222][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.522738][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.549956][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.569158][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.592624][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.608504][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.629331][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.646339][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.671191][T10925] device veth0_vlan entered promiscuous mode [ 329.703803][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.722649][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.739504][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.755070][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.773750][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.790613][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.815921][T10924] device veth0_vlan entered promiscuous mode [ 329.836073][T10925] device veth1_vlan entered promiscuous mode [ 329.856887][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.874524][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.889121][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.905068][T10932] device veth0_vlan entered promiscuous mode [ 329.920423][T10924] device veth1_vlan entered promiscuous mode [ 329.939311][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.954252][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.968179][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.982976][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.001591][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.016726][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.031406][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.062602][T10927] device veth0_vlan entered promiscuous mode [ 330.076572][T10932] device veth1_vlan entered promiscuous mode [ 330.102030][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.120231][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.136026][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.153008][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.172867][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.188808][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.214021][T10924] device veth0_macvtap entered promiscuous mode [ 330.264697][T10924] device veth1_macvtap entered promiscuous mode [ 330.286735][T10927] device veth1_vlan entered promiscuous mode [ 330.303896][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.319651][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.333682][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.347620][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.363420][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.385873][T10925] device veth0_macvtap entered promiscuous mode [ 330.417250][T10925] device veth1_macvtap entered promiscuous mode [ 330.431428][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.444869][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.460541][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.482164][T10932] device veth0_macvtap entered promiscuous mode [ 330.498974][T10924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.518419][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.532377][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.545938][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.564695][T10924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.580608][T10932] device veth1_macvtap entered promiscuous mode [ 330.599230][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.612407][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.627802][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.668457][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.683370][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.702904][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 330.724786][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.745107][T10925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.770495][T10927] device veth0_macvtap entered promiscuous mode [ 330.794987][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.809356][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.824325][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.853505][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 330.873386][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.897696][T10925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.919806][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.942530][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.971082][T10927] device veth1_macvtap entered promiscuous mode [ 331.135411][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.187352][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.233914][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.273444][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.315296][T10932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.350664][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.362714][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.378097][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.411754][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 331.432543][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.453206][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 331.474674][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.494108][T10932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.572406][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.620777][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.655262][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.683098][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.700913][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.724382][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.751460][T10927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.771859][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.791649][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.812693][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.840947][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.923370][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 331.942456][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.962637][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 331.981239][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.002387][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.023350][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.043633][T10927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.187651][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.191339][ T40] audit: type=1400 audit(1593647924.465:48): avc: denied { associate } for pid=10924 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 332.232367][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.546446][T10924] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation 23:58:45 executing program 0: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480), 0x8}) 23:58:45 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x22}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825dc4b8360d86800278dcff47d010000805acf4f8fb6460234432479aed75d492b415bcee00a06dc9d8e99adaf81c9fc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455fe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f00050000be5d2dd15b6210d53eed19bca008388e736e518b98d91c22def1125d7b1e821039a95affb729927bd8b91ceaf3e0b5556a98027f16c161bf78bb164e1baf5674d3f5fcdd8e0ef0d2da378f3e6ce576efba50b1a1390b5347bd31e3c04e623cd76dded1d949cc246d0d745baf9343b6760f28a156dcfae253", 0x136}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:58:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 23:58:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, 0x0) [ 333.344490][ T40] audit: type=1400 audit(1593647925.615:49): avc: denied { prog_load } for pid=10969 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 23:58:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x1a0, 0xf00, 0x0, &(0x7f0000000280)="20cf4d411d520bdfae1c3821271c", 0x0, 0x34f}, 0x28) 23:58:45 executing program 2: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2}, 0x1c) 23:58:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 23:58:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, 0x0) [ 333.571885][ T40] audit: type=1400 audit(1593647925.615:50): avc: denied { open } for pid=10966 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 23:58:45 executing program 2: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2}, 0x1c) [ 333.638360][ T40] audit: type=1400 audit(1593647925.625:51): avc: denied { bpf } for pid=10969 comm="syz-executor.3" capability=39 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 333.678591][ T0] NOHZ: local_softirq_pending 08 23:58:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) [ 333.696166][ T40] audit: type=1400 audit(1593647925.625:52): avc: denied { perfmon } for pid=10969 comm="syz-executor.3" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 23:58:46 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x1a0, 0xf00, 0x0, &(0x7f0000000280)="20cf4d411d520bdfae1c3821271c", 0x0, 0x34f}, 0x28) [ 333.754479][ T40] audit: type=1400 audit(1593647925.725:53): avc: denied { prog_run } for pid=10969 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 23:58:46 executing program 2: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2}, 0x1c) 23:58:46 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x1a0, 0xf00, 0x0, &(0x7f0000000280)="20cf4d411d520bdfae1c3821271c", 0x0, 0x34f}, 0x28) [ 334.003041][ T40] audit: type=1400 audit(1593647926.275:54): avc: denied { map } for pid=10995 comm="syz-executor.0" path="/syzkaller-testdir351265792/syzkaller.7lmg9B/3/file0/cgroup.controllers" dev="loop0" ino=22 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file permissive=1 23:58:46 executing program 2: unshare(0x2000400) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x1c) 23:58:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 23:58:46 executing program 1: keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000140)='.dead\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:58:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) 23:58:46 executing program 2: unshare(0x2000400) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x1c) 23:58:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) 23:58:46 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 23:58:46 executing program 2: unshare(0x2000400) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x1c) 23:58:46 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 334.492531][T11031] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 334.559190][T11031] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 23:58:46 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 23:58:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2}, 0x1c) 23:58:46 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:46 executing program 1: keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000140)='.dead\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:58:47 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) 23:58:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x1c) 23:58:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x1c) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) 23:58:47 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000f5feffff00000000000000008500000041000000950000000000000082e8e2f1a47f091828d9b0f2a42af1d0880268ff1e5387ec35b5086d595847a31246cb0310ff0700bcab7f7148cfd65a286f5f5d09dcdfcc0a61e9abb825276d851e903c9c336e7dd40500944e5a95581d01c4621ffe3e961c3ef921003cd03fa7afaf55400d0bdadd8c76affe5b4bc3eda501fed617f7bcea144513a78ebb0f73b31df47400d9d27bea02a7428411bf11f4ee093fed2a5c23b47703a53725168de7a0ce54cbc3bf9185439a642f34b830d51b8dfaf91a454ba0648b571bd2dbb3fcfffffffffffffffa82c0a016240a3a011933305c0b8015313e66851c1fee11a62d2826d94dd1859366c5c8e02b438c2b88430879f93c27edbd092c071b8cee6490ef63aeebc0d025bda0c8b2f09ae859dc60fad31eeb4064da9aa62e8783d179a5df1636f77b0000574eb76eed7b713d5fd7cdc3dcb60e64efeeaf4691a57baaeee3ab4c2804634b9b2a6c711ddba81951286a56d187d523092af2864aa8965d9518d9e9c5be0ad61b2f5bb972a890170ef743535f465339271583cd986e6bf8ea7c01019ee990eca0c024ec5503d45adea48f05dbe1dec748"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) [ 334.956233][T11067] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 335.044369][T11067] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 23:58:47 executing program 1: keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000140)='.dead\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:58:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x1c) 23:58:47 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:58:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) 23:58:47 executing program 0: open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 335.365072][T11102] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 335.436148][T11102] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 23:58:47 executing program 1: keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000140)='.dead\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:58:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) 23:58:47 executing program 0: open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:58:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:58:47 executing program 0: open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 335.768337][T11130] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 335.816745][T11130] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 23:58:48 executing program 1: keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000140)='.dead\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:58:48 executing program 2: r0 = io_uring_setup(0xe35, &(0x7f0000000100)={0x0, 0x0, 0x2}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) io_uring_enter(r0, 0x6, 0x10001, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) 23:58:48 executing program 0: mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:58:48 executing program 0: mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:58:48 executing program 0: mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:58:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 336.147393][ C2] ------------[ cut here ]------------ [ 336.147393][ C2] WARNING: CPU: 2 PID: 1216 at lib/percpu-refcount.c:112 percpu_ref_exit+0xa3/0xd0 [ 336.147393][ C2] Kernel panic - not syncing: panic_on_warn set ... [ 336.147393][ C2] CPU: 2 PID: 1216 Comm: kworker/2:2 Not tainted 5.8.0-rc2-syzkaller #0 [ 336.147393][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 336.147393][ C2] Workqueue: events io_ring_exit_work [ 336.147393][ C2] Call Trace: [ 336.147393][ C2] dump_stack+0x18f/0x20d [ 336.147393][ C2] ? percpu_ref_exit+0x90/0xd0 [ 336.147393][ C2] panic+0x2e3/0x75c [ 336.147393][ C2] ? __warn_printk+0xf3/0xf3 [ 336.147393][ C2] ? printk+0xba/0xed [ 336.147393][ C2] ? log_store.cold+0x16/0x16 [ 336.147393][ C2] ? percpu_ref_exit+0xa3/0xd0 [ 336.147393][ C2] ? __warn.cold+0x14/0x3a [ 336.147393][ C2] ? __warn+0xd6/0x1b2 [ 336.147393][ C2] ? percpu_ref_exit+0xa3/0xd0 [ 336.147393][ C2] __warn.cold+0x2f/0x3a [ 336.147393][ C2] ? percpu_ref_exit+0xa3/0xd0 [ 336.147393][ C2] report_bug+0x271/0x2f0 [ 336.147393][ C2] exc_invalid_op+0x1b9/0x370 [ 336.147393][ C2] asm_exc_invalid_op+0x12/0x20 [ 336.147393][ C2] RIP: 0010:percpu_ref_exit+0xa3/0xd0 [ 336.147393][ C2] Code: 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 1a 48 c7 43 08 03 00 00 00 5b 5d 41 5c e9 02 c4 d8 fd e8 fd c3 d8 fd <0f> 0b eb c2 4c 89 e7 e8 a1 12 18 fe eb dc e8 1a 12 18 fe eb aa 4c [ 336.147393][ C2] RSP: 0018:ffffc900040b7cb8 EFLAGS: 00010293 [ 336.147393][ C2] RAX: ffff888027901c80 RBX: ffff888023af4000 RCX: ffffffff839a77ad [ 336.147393][ C2] RDX: 0000000000000000 RSI: ffffffff839a7813 RDI: ffff888023af4018 [ 336.147393][ C2] RBP: 0000607f810b1368 R08: ffff888027901c80 R09: 0000000000000001 [ 336.147393][ C2] R10: ffffffff8c58db17 R11: fffffbfff18b1b62 R12: ffff888023af4008 [ 336.147393][ C2] R13: ffff888023af41a8 R14: 1ffff1100475e820 R15: ffff888023af4000 [ 336.147393][ C2] ? percpu_ref_exit+0x3d/0xd0 [ 336.147393][ C2] ? percpu_ref_exit+0xa3/0xd0 [ 336.147393][ C2] ? percpu_ref_exit+0xa3/0xd0 [ 336.147393][ C2] io_ring_exit_work+0x39a/0x720 [ 336.147393][ C2] process_one_work+0x965/0x1690 [ 336.147393][ C2] ? lock_release+0x800/0x800 [ 336.147393][ C2] ? pwq_dec_nr_in_flight+0x310/0x310 [ 336.147393][ C2] ? rwlock_bug.part.0+0x90/0x90 [ 336.147393][ C2] worker_thread+0x96/0xe10 [ 336.147393][ C2] ? process_one_work+0x1690/0x1690 [ 336.147393][ C2] kthread+0x3b5/0x4a0 [ 336.147393][ C2] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 336.147393][ C2] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 336.147393][ C2] ret_from_fork+0x1f/0x30 [ 336.147393][ C2] Kernel Offset: disabled