[....] Starting OpenBSD Secure Shell server: sshd[ 40.053081] audit: type=1800 audit(1555301017.720:33): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [?25l[?1c7[ ok 8[?25h[?0c. [ 40.082442] audit: type=1800 audit(1555301017.720:34): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 57.259717] random: sshd: uninitialized urandom read (32 bytes read) [ 57.546340] audit: type=1400 audit(1555301035.210:35): avc: denied { map } for pid=7190 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 57.599462] random: sshd: uninitialized urandom read (32 bytes read) [ 58.333721] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. [ 63.963863] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/15 04:04:01 fuzzer started [ 64.167972] audit: type=1400 audit(1555301041.830:36): avc: denied { map } for pid=7200 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 66.121871] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/15 04:04:04 dialing manager at 10.128.0.105:33413 2019/04/15 04:04:04 syscalls: 2434 2019/04/15 04:04:04 code coverage: enabled 2019/04/15 04:04:04 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/15 04:04:04 extra coverage: extra coverage is not supported by the kernel 2019/04/15 04:04:04 setuid sandbox: enabled 2019/04/15 04:04:04 namespace sandbox: enabled 2019/04/15 04:04:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/15 04:04:04 fault injection: enabled 2019/04/15 04:04:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/15 04:04:04 net packet injection: enabled 2019/04/15 04:04:04 net device setup: enabled [ 68.711231] random: crng init done 04:05:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="23212d2e2f66696c65302d3fae03935aff90b7995c3d2ff9f9e899c6d9a32cc592f0fd2f14bf9581dfa3be8d16066dff0700000000000074a910cb3c3289f91c04e66e172ceaa8beeea3b98c01bdcdd4b0d5074ca5dd9cb69ef21be6363fb312cdd6d735ae3d68b2476f6fe88f0fdd1dc548b3c228240a9f488ac556bb15cec6dbb7eb27fe3ca84eeb54961e7e687b54e87549e9c3da6c65edd8716f97375b11c248b8a83d0d4813bd546205afd0f3e2"], 0xb0) close(r1) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000100)={0x3ff, 0x6}) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) r2 = getpgrp(0x0) getpgid(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fcntl$getown(r0, 0x9) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e24, 0x1, @ipv4={[], [], @local}}, 0x1c) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x9, 0x9, 0x4, 0x0, 0x1, 0x8}) sendmmsg(r3, &(0x7f000000ac80), 0x400000000000302, 0x4008800) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) 04:05:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620c, &(0x7f0000000180)) 04:05:45 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x4000000000005de, 0x0, &(0x7f0000000100)={0x77359400}) 04:05:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em1ppr0ScpusftsysL\xc5\xf9z') [ 168.130768] audit: type=1400 audit(1555301145.790:37): avc: denied { map } for pid=7200 comm="syz-fuzzer" path="/root/syzkaller-shm847595655" dev="sda1" ino=16488 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 04:05:45 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='a-\x9c~4\x01ttr\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) r0 = accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001540)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x124) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000200)={{0x6e, @remote, 0x4e23, 0x3, 'none\x00', 0x4, 0x6, 0x32}, {@dev, 0x0, 0x3, 0x0, 0x20002000000, 0x90}}, 0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/4096, 0x1000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0xfffffffffffffffe}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {0x80}}) 04:05:45 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c) [ 168.177235] audit: type=1400 audit(1555301145.830:38): avc: denied { map } for pid=7216 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1107 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 168.483476] IPVS: ftp: loaded support on port[0] = 21 [ 168.742381] IPVS: ftp: loaded support on port[0] = 21 [ 168.755243] chnl_net:caif_netlink_parms(): no params data found [ 168.827078] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.833905] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.841907] device bridge_slave_0 entered promiscuous mode [ 168.849631] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.856180] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.863306] device bridge_slave_1 entered promiscuous mode [ 168.883399] IPVS: ftp: loaded support on port[0] = 21 [ 168.893090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 168.902662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.945764] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 168.953153] team0: Port device team_slave_0 added [ 168.962024] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 168.969366] team0: Port device team_slave_1 added [ 168.993587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 169.004134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 169.013342] chnl_net:caif_netlink_parms(): no params data found [ 169.082378] device hsr_slave_0 entered promiscuous mode [ 169.120422] device hsr_slave_1 entered promiscuous mode [ 169.194294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 169.204719] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 169.255657] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.262189] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.269548] device bridge_slave_0 entered promiscuous mode [ 169.279865] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.286526] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.293690] device bridge_slave_1 entered promiscuous mode [ 169.300722] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.307649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.314763] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.321179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.329486] IPVS: ftp: loaded support on port[0] = 21 [ 169.364754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.377542] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.418582] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.427054] team0: Port device team_slave_0 added [ 169.433132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.440663] team0: Port device team_slave_1 added [ 169.465616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 169.474290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 169.532969] device hsr_slave_0 entered promiscuous mode [ 169.570491] device hsr_slave_1 entered promiscuous mode [ 169.654056] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 169.664723] chnl_net:caif_netlink_parms(): no params data found [ 169.683079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 169.759492] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.766561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.774097] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.781452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.791337] IPVS: ftp: loaded support on port[0] = 21 [ 169.802075] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 169.808777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.816038] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.823845] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.836235] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 169.846583] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.854102] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.863590] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.870851] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.878882] device bridge_slave_0 entered promiscuous mode [ 169.908841] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.916267] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.923514] device bridge_slave_1 entered promiscuous mode [ 169.947315] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.964259] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.974117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.989777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.997926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.009686] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 170.018089] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.063888] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.103942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.113904] chnl_net:caif_netlink_parms(): no params data found [ 170.145114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.155150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.164976] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.171523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.186934] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.195150] team0: Port device team_slave_0 added [ 170.210692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.219055] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.227718] team0: Port device team_slave_1 added [ 170.238084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.250441] IPVS: ftp: loaded support on port[0] = 21 [ 170.260805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.270637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.279914] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.287177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.303861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 170.317847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.350482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 170.362844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 170.388330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.414317] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.421669] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.432634] device bridge_slave_0 entered promiscuous mode [ 170.444271] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.451936] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.460723] device bridge_slave_1 entered promiscuous mode [ 170.485829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.552845] device hsr_slave_0 entered promiscuous mode [ 170.610557] device hsr_slave_1 entered promiscuous mode [ 170.651010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 170.685431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.697915] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.709435] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.719378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.727966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.736510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.747904] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 170.755789] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.765325] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 170.814574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.830880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.849633] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.857986] team0: Port device team_slave_0 added [ 170.868588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.877956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.886513] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.893563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.901672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.910439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.920129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.930492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.938992] chnl_net:caif_netlink_parms(): no params data found [ 170.953065] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.961937] team0: Port device team_slave_1 added [ 170.967975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.978292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.988557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.998684] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.006754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.021173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.030719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.058080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.081098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.092788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.101326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.113145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 171.123238] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.193071] device hsr_slave_0 entered promiscuous mode [ 171.231368] device hsr_slave_1 entered promiscuous mode [ 171.271185] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 171.279979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.288865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.299643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.310299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 171.335550] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 171.343935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.352723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.363996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.376029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.398104] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 171.404857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.419149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.428995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.438273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.446762] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.453843] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.462488] device bridge_slave_0 entered promiscuous mode [ 171.469310] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.476264] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.484177] device bridge_slave_1 entered promiscuous mode [ 171.507199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.530880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.539080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.556360] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.568276] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 171.577302] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.593232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 171.614377] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.623961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.633171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.709302] chnl_net:caif_netlink_parms(): no params data found [ 171.724649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 171.738496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.765484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.774475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.784713] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 171.791725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.804344] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.812118] team0: Port device team_slave_0 added [ 171.834474] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 171.862494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.869069] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.877793] team0: Port device team_slave_1 added [ 171.884007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.893318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.994783] device hsr_slave_0 entered promiscuous mode [ 172.040645] device hsr_slave_1 entered promiscuous mode [ 172.091314] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.099796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.129145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.142520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.156567] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.165298] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.172667] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.181847] device bridge_slave_0 entered promiscuous mode [ 172.193622] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.205057] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.220996] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.228916] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.245853] device bridge_slave_1 entered promiscuous mode [ 172.267024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.276736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.289037] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 04:05:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x3, 0x0, [{0x5, 0x2, 0x0, 0x0, @irqchip={0x4, 0x1}}, {0x7, 0x2, 0x0, 0x0, @sint={0xb8daf478000, 0x5}}, {0x8, 0x0, 0x0, 0x0, @adapter}]}) [ 172.299028] audit: type=1400 audit(1555301149.960:39): avc: denied { set_context_mgr } for pid=7253 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 172.318730] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 172.332659] binder: 7253:7257 ioctl c018620c 20000180 returned -22 [ 172.336173] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.382490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.395139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.398987] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 172.426256] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 04:05:50 executing program 0: mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x3a3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x0, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) ioctl$sock_ifreq(r1, 0x89ff, &(0x7f00000003c0)={'veth0\x00', @ifru_data=&(0x7f0000000140)="70cd8a622430e3fdf2ee143a8953a7f34f824e115145a304569eb4b5b20a20a0"}) syz_mount_image$btrfs(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x48000000, &(0x7f0000000600)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9abea03ef71344b294bf38ae6866b8c250d68fde6dcf0823e239818ffffffffc7d97e09edef61c00855c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff919"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xa00, 0x80) ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0) [ 172.459523] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 172.473439] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.485287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.501552] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.514964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.524981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.534788] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.541857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.549439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.568773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.592978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.602332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.617516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.630602] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.637535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.638885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.659120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.670089] hrtimer: interrupt took 74745 ns [ 172.671226] overlayfs: failed to resolve './file1': -2 [ 172.681064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.734517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.749857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.773335] bridge0: port 2(bridge_slave_1) entered blocking state 04:05:50 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 172.780286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.803007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.813880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.831453] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.838082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.852770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 172.871838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 04:05:50 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) 04:05:50 executing program 5: pipe2$9p(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000240)) fsetxattr$security_selinux(r0, &(0x7f0000000300)='security.selinux\x00', 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) socket$inet6(0xa, 0x1, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x4000000004, 0x265) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 172.884667] overlayfs: failed to resolve './file1': -2 [ 172.886004] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.905913] team0: Port device team_slave_0 added [ 172.914342] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.922989] team0: Port device team_slave_1 added [ 172.933808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.955513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.977866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.996193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.021547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.039069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.063733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.074439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.089961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.120721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.136845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.187730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.202365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.213359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.226226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.235449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.248241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.265337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.287201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.298682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 173.364463] device hsr_slave_0 entered promiscuous mode [ 173.400486] device hsr_slave_1 entered promiscuous mode [ 173.441246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.449182] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.462245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.469354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.491953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.500596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.509174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.517987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.529377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 04:05:51 executing program 5: pipe2$9p(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000240)) fsetxattr$security_selinux(r0, &(0x7f0000000300)='security.selinux\x00', 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) socket$inet6(0xa, 0x1, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x4000000004, 0x265) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 173.539552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 173.549660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 173.576319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.584860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.601746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.616205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.636086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 173.646587] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.660962] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 173.667038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.693831] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 173.701820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.715248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.723569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.735881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.745867] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 173.758048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.768053] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 173.780829] 8021q: adding VLAN 0 to HW filter on device team0 04:05:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000280)=""/28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e) r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x147) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) setsockopt(r1, 0xab7, 0x1, &(0x7f0000000080)="93b9edc1fccc8fcfe63b2aea34ca8002c59a5e433b988cfaca43550e8a4055e56c88f5341ae972c873d19732bd63981e3f6f247d0305", 0x36) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc) getrusage(0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xfc, &(0x7f00000001c0)=0x1) unshare(0x40000000) [ 173.855551] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 173.876262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.894916] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 173.923015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.941896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.949924] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.956635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.988712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.001245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.042991] IPVS: ftp: loaded support on port[0] = 21 [ 174.065044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.095436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.124247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.148720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.164201] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.171376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.191790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.215015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.273561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.287297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.327023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.391966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.400356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.409582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.436017] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.492204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.505554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.513708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.528441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 04:05:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000500)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x580, 0x30) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000140)=0x8, 0x3d8) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) [ 174.544238] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.599372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 174.623120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.636068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.646106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.659120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.682854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 174.696935] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.703538] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.719796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.729774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.741320] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.748344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.785184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 04:05:52 executing program 3: r0 = socket$inet(0x10, 0x1000000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="4c0000001100fff1fefefd956f76c9b724a6008000000000000000683540150024001b000d000000b598bc593ab682115ed9443d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) [ 174.839134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.853829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.864066] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.871309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.879888] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.904994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.928575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.954290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.963855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.974288] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.982517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.995127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 04:05:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000280)=""/28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e) r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x147) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) setsockopt(r1, 0xab7, 0x1, &(0x7f0000000080)="93b9edc1fccc8fcfe63b2aea34ca8002c59a5e433b988cfaca43550e8a4055e56c88f5341ae972c873d19732bd63981e3f6f247d0305", 0x36) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc) getrusage(0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xfc, &(0x7f00000001c0)=0x1) unshare(0x40000000) [ 175.008760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.027646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.056950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.090492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.101220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.113111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.129602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.143120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.154302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.165036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.177123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.195768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.221330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.230769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.241316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.261980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.274217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.283360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.297466] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.304555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.329209] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.375438] 8021q: adding VLAN 0 to HW filter on device batadv0 04:05:54 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c) 04:05:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x3}, [@remote, @remote, @rose, @remote, @bcast, @null, @bcast, @bcast]}, 0x48) 04:05:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000280)=""/28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e) r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x147) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) setsockopt(r1, 0xab7, 0x1, &(0x7f0000000080)="93b9edc1fccc8fcfe63b2aea34ca8002c59a5e433b988cfaca43550e8a4055e56c88f5341ae972c873d19732bd63981e3f6f247d0305", 0x36) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc) getrusage(0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xfc, &(0x7f00000001c0)=0x1) unshare(0x40000000) 04:05:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c) 04:05:54 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000080)={{0x3, @default}, [@remote, @remote, @rose, @remote, @bcast, @null, @bcast, @bcast]}, 0x48) 04:05:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000280)=""/28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e) r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x147) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) setsockopt(r1, 0xab7, 0x1, &(0x7f0000000080)="93b9edc1fccc8fcfe63b2aea34ca8002c59a5e433b988cfaca43550e8a4055e56c88f5341ae972c873d19732bd63981e3f6f247d0305", 0x36) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc) getrusage(0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xfc, &(0x7f00000001c0)=0x1) unshare(0x40000000) [ 176.384325] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 176.404140] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 04:05:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000000d}]}, 0x28}}, 0x0) 04:05:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c) 04:05:54 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000580)='./file0\x00') 04:05:54 executing program 4: getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x3) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) [ 176.524738] audit: type=1400 audit(1555301154.190:40): avc: denied { create } for pid=7379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 04:05:54 executing program 5: 04:05:54 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c) 04:05:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000680)="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", 0x1dd, 0x23}]) 04:05:54 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000580)='./file0\x00') [ 176.707232] audit: type=1400 audit(1555301154.240:41): avc: denied { write } for pid=7379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.865111] audit: type=1400 audit(1555301154.240:42): avc: denied { read } for pid=7379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.898080] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 176.924449] loop5: p1 start 676025156 is beyond EOD, truncated [ 176.933961] loop5: p2 start 3580720002 is beyond EOD, truncated [ 176.944612] loop5: p3 start 567640662 is beyond EOD, truncated [ 176.956122] loop5: p4 start 3287805347 is beyond EOD, truncated [ 176.966748] loop5: p5 start 1903847135 is beyond EOD, truncated [ 176.976782] loop5: p6 start 1097666722 is beyond EOD, truncated [ 176.987859] loop5: p7 start 3144439700 is beyond EOD, truncated [ 176.996961] loop5: p8 start 3390312448 is beyond EOD, truncated [ 177.006915] loop5: p9 start 1911635093 is beyond EOD, truncated [ 177.015691] loop5: p10 start 263474732 is beyond EOD, truncated 04:05:54 executing program 0: 04:05:54 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2081f9) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={0x0, 0x22b000000000, 0x100000001}, &(0x7f0000000300)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha256-ssse3\x00'/65], 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/4096) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000001100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) fadvise64(0xffffffffffffffff, 0x27, 0x1, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000001180)='./bus\x00', 0x0) ftruncate(r4, 0x208200) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 04:05:54 executing program 4: listen(0xffffffffffffffff, 0x0) setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d}) mlockall(0x1) sync() mlockall(0x3) mmap(&(0x7f0000fee000/0x12000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1d, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2) 04:05:54 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:05:54 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) clone(0x0, &(0x7f0000000140)="40071d78c07e5c25cdd9b157a7e09dfff16f5f7b7923752a2f835d39387b7a8d824d8d14d5642e48017ad0bebfadedbb54a08fdf3af064b59836819b6c2d66b6f8fe157aa4b3016f1645971b6e08b0ccf99259ff7c22f8a48cfd533aea4b87e5f035317dcb1c4b7f243e6b9425d1418f3a0d4b5affdeb3f891a3465adbb08ce2cb45add6ddaaf9394911ea563bd7dd89907719fea55a616881b49b2a42b2e437b77a62d00bf9768705d8fbf36424683bb6ef532ff656c915ff99afccf767c9774a3db9", 0x0, &(0x7f0000000040), &(0x7f0000000240)="8e7d6ff76c8a9b85fd6000c2fe6616242a395b43879dae10bd038aa4b3f57f7d4c7526af5509a2d3dc7358b6cef87fcf1e7ae23657d19f2d90cbe903dbec5f8e70fb98258bd2d2921cc18f561225344a5123018e07df6b138054c335572578aea3b4b2bbe1ed104f93299774bf4214964bba2c4e18b3ba3c551fbf8eccbf62b35f1e31fb8b8ef1a4e57f66bf543e728e98771a290d7f127c332d1065239f43d52904937f53b70757598627c92d07a28f090a74ab66cd1f6e9d0020022d76") ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x1, 0x7c}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:05:54 executing program 2: [ 177.180763] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 177.194761] loop5: p1 start 676025156 is beyond EOD, truncated [ 177.205434] loop5: p2 start 3580720002 is beyond EOD, truncated [ 177.217157] loop5: p3 start 567640662 is beyond EOD, truncated [ 177.217551] audit: type=1804 audit(1555301154.880:43): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1 [ 177.247966] loop5: p4 start 3287805347 is beyond EOD, truncated [ 177.282741] loop5: p5 start 1903847135 is beyond EOD, truncated [ 177.308871] loop5: p6 start 1097666722 is beyond EOD, truncated [ 177.331647] loop5: p7 start 3144439700 is beyond EOD, truncated [ 177.353297] loop5: p8 start 3390312448 is beyond EOD, truncated [ 177.377317] loop5: p9 start 1911635093 is beyond EOD, truncated [ 177.401974] loop5: p10 start 263474732 is beyond EOD, truncated 04:05:55 executing program 0: 04:05:55 executing program 2: 04:05:55 executing program 2: [ 177.568824] audit: type=1804 audit(1555301154.930:44): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1 04:05:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000680)="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", 0x1dd, 0x23}]) 04:05:55 executing program 0: [ 177.638436] audit: type=1804 audit(1555301154.930:45): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1 04:05:55 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2081f9) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={0x0, 0x22b000000000, 0x100000001}, &(0x7f0000000300)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha256-ssse3\x00'/65], 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/4096) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000001100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) fadvise64(0xffffffffffffffff, 0x27, 0x1, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000001180)='./bus\x00', 0x0) ftruncate(r4, 0x208200) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 04:05:55 executing program 1: [ 177.716797] audit: type=1804 audit(1555301154.950:46): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1 04:05:55 executing program 2: [ 177.764367] audit: type=1804 audit(1555301155.340:47): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1 [ 177.916521] can: request_module (can-proto-0) failed. 04:05:55 executing program 4: [ 177.959307] can: request_module (can-proto-0) failed. [ 427.992626] INFO: task syz-executor.5:7222 blocked for more than 140 seconds. [ 428.001190] Not tainted 4.14.111 #1 [ 428.005360] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.013477] syz-executor.5 D24992 7222 1 0x00000004 [ 428.019225] Call Trace: [ 428.022043] __schedule+0x7be/0x1cf0 [ 428.025861] ? __mutex_lock+0x737/0x1470 [ 428.030124] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.035153] schedule+0x92/0x1c0 [ 428.038522] schedule_preempt_disabled+0x13/0x20 [ 428.043895] __mutex_lock+0x73c/0x1470 [ 428.047884] ? blkdev_reread_part+0x1f/0x40 [ 428.052351] ? mutex_trylock+0x1c0/0x1c0 [ 428.056604] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 428.061970] ? __wake_up_common_lock+0xe3/0x160 [ 428.066939] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 428.072257] mutex_lock_nested+0x16/0x20 [ 428.076337] ? mutex_lock_nested+0x16/0x20 [ 428.080739] blkdev_reread_part+0x1f/0x40 [ 428.085372] loop_reread_partitions+0x7c/0x90 [ 428.090172] loop_clr_fd+0x844/0xae0 [ 428.094957] lo_ioctl+0x8d0/0x1c70 [ 428.098724] ? loop_probe+0x160/0x160 [ 428.102852] blkdev_ioctl+0x983/0x1880 [ 428.106763] ? blkpg_ioctl+0x980/0x980 [ 428.110746] ? __might_sleep+0x93/0xb0 [ 428.114757] block_ioctl+0xde/0x120 [ 428.118442] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.122916] do_vfs_ioctl+0x7b9/0x1070 [ 428.127592] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.135974] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.140835] ? putname+0xe0/0x120 [ 428.144318] ? do_sys_open+0x221/0x430 [ 428.148210] ? security_file_ioctl+0x83/0xc0 [ 428.152755] ? security_file_ioctl+0x8f/0xc0 [ 428.157364] SyS_ioctl+0x8f/0xc0 [ 428.160930] ? do_vfs_ioctl+0x1070/0x1070 [ 428.165125] do_syscall_64+0x1eb/0x630 [ 428.169020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.174092] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.179412] RIP: 0033:0x458a97 [ 428.182773] RSP: 002b:00007fffaa4c37b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.190705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458a97 [ 428.198041] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.205643] RBP: 0000000000000019 R08: 0000000000000000 R09: 000000000000000a [ 428.213265] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.220793] R13: 00007fffaa4c37f0 R14: 000000000002b271 R15: 00007fffaa4c3800 [ 428.228517] INFO: task syz-executor.0:7223 blocked for more than 140 seconds. [ 428.236440] Not tainted 4.14.111 #1 [ 428.240676] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.248707] syz-executor.0 D24992 7223 1 0x00000004 [ 428.254536] Call Trace: [ 428.257139] __schedule+0x7be/0x1cf0 [ 428.260937] ? __mutex_lock+0x737/0x1470 [ 428.265030] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.270330] schedule+0x92/0x1c0 [ 428.273724] schedule_preempt_disabled+0x13/0x20 [ 428.280485] __mutex_lock+0x73c/0x1470 [ 428.284397] ? lo_ioctl+0x87/0x1c70 [ 428.288050] ? lock_downgrade+0x640/0x6e0 [ 428.292290] ? mutex_trylock+0x1c0/0x1c0 [ 428.296383] ? avc_has_extended_perms+0x8ec/0xe40 [ 428.301545] ? putname+0xdb/0x120 [ 428.305138] ? avc_ss_reset+0x110/0x110 [ 428.309385] ? kasan_slab_free+0x75/0xc0 [ 428.313685] mutex_lock_nested+0x16/0x20 [ 428.317926] ? mutex_lock_nested+0x16/0x20 [ 428.322454] lo_ioctl+0x87/0x1c70 [ 428.325939] ? loop_probe+0x160/0x160 [ 428.330601] blkdev_ioctl+0x983/0x1880 [ 428.336292] ? blkpg_ioctl+0x980/0x980 [ 428.340313] ? __might_sleep+0x93/0xb0 [ 428.344215] block_ioctl+0xde/0x120 [ 428.348108] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.352921] do_vfs_ioctl+0x7b9/0x1070 [ 428.357339] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.362440] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.366902] ? putname+0xe0/0x120 [ 428.370474] ? do_sys_open+0x221/0x430 [ 428.374486] ? security_file_ioctl+0x83/0xc0 [ 428.378895] ? security_file_ioctl+0x8f/0xc0 [ 428.383426] SyS_ioctl+0x8f/0xc0 [ 428.386786] ? do_vfs_ioctl+0x1070/0x1070 [ 428.391064] do_syscall_64+0x1eb/0x630 [ 428.394963] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.399876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.405485] RIP: 0033:0x458a97 [ 428.408688] RSP: 002b:00007ffe05ec4b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.417027] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458a97 [ 428.424406] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.431931] RBP: 0000000000000015 R08: 0000000000000000 R09: 000000000000000a [ 428.439381] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.447110] R13: 00007ffe05ec4b70 R14: 000000000002b5b5 R15: 00007ffe05ec4b80 [ 428.454557] INFO: task syz-executor.1:7224 blocked for more than 140 seconds. [ 428.462060] Not tainted 4.14.111 #1 [ 428.466278] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.474807] syz-executor.1 D24992 7224 1 0x00000004 [ 428.480781] Call Trace: [ 428.483382] __schedule+0x7be/0x1cf0 [ 428.487185] ? __mutex_lock+0x737/0x1470 [ 428.491347] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.496386] schedule+0x92/0x1c0 [ 428.499757] schedule_preempt_disabled+0x13/0x20 [ 428.504746] __mutex_lock+0x73c/0x1470 [ 428.508733] ? lo_ioctl+0x87/0x1c70 [ 428.512576] ? lock_downgrade+0x640/0x6e0 [ 428.516750] ? mutex_trylock+0x1c0/0x1c0 [ 428.520910] ? avc_has_extended_perms+0x8ec/0xe40 [ 428.525818] ? putname+0xdb/0x120 [ 428.529275] ? avc_ss_reset+0x110/0x110 [ 428.533372] ? kasan_slab_free+0x75/0xc0 [ 428.537457] mutex_lock_nested+0x16/0x20 [ 428.541816] ? mutex_lock_nested+0x16/0x20 [ 428.546170] lo_ioctl+0x87/0x1c70 [ 428.549876] ? loop_probe+0x160/0x160 [ 428.553890] blkdev_ioctl+0x983/0x1880 [ 428.557810] ? blkpg_ioctl+0x980/0x980 [ 428.561773] ? __might_sleep+0x93/0xb0 [ 428.565826] block_ioctl+0xde/0x120 [ 428.569459] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.573868] do_vfs_ioctl+0x7b9/0x1070 [ 428.577780] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.582628] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.587062] ? putname+0xe0/0x120 [ 428.590618] ? do_sys_open+0x221/0x430 [ 428.594591] ? security_file_ioctl+0x83/0xc0 [ 428.599703] ? security_file_ioctl+0x8f/0xc0 [ 428.604227] SyS_ioctl+0x8f/0xc0 [ 428.607715] ? do_vfs_ioctl+0x1070/0x1070 [ 428.612001] do_syscall_64+0x1eb/0x630 [ 428.615995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.621044] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.626296] RIP: 0033:0x458a97 [ 428.629725] RSP: 002b:00007ffcbe584d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.637826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458a97 [ 428.645505] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.653368] RBP: 0000000000000009 R08: 0000000000000000 R09: 000000000000000a [ 428.660819] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.669339] R13: 00007ffcbe584dd0 R14: 000000000002b54a R15: 00007ffcbe584de0 [ 428.677040] INFO: task syz-executor.3:7225 blocked for more than 140 seconds. [ 428.684407] Not tainted 4.14.111 #1 [ 428.688595] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.697068] syz-executor.3 D24992 7225 1 0x00000004 [ 428.702838] Call Trace: [ 428.705660] __schedule+0x7be/0x1cf0 [ 428.709386] ? __mutex_lock+0x737/0x1470 [ 428.713530] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.718646] schedule+0x92/0x1c0 [ 428.722087] schedule_preempt_disabled+0x13/0x20 [ 428.726864] __mutex_lock+0x73c/0x1470 [ 428.730830] ? trace_hardirqs_on+0x10/0x10 [ 428.735082] ? lo_release+0x84/0x1b0 [ 428.738819] ? save_trace+0x1f0/0x290 [ 428.742756] ? mutex_trylock+0x1c0/0x1c0 [ 428.746832] ? __blkdev_put+0x397/0x7f0 [ 428.750872] ? find_held_lock+0x35/0x130 [ 428.755054] ? __blkdev_put+0x397/0x7f0 [ 428.759475] ? loop_clr_fd+0xae0/0xae0 [ 428.763939] mutex_lock_nested+0x16/0x20 [ 428.768030] ? mutex_lock_nested+0x16/0x20 [ 428.772711] lo_release+0x84/0x1b0 [ 428.776655] ? loop_clr_fd+0xae0/0xae0 [ 428.781748] __blkdev_put+0x436/0x7f0 [ 428.785848] ? bd_set_size+0xb0/0xb0 [ 428.789567] ? wait_for_completion+0x420/0x420 [ 428.795069] blkdev_put+0x88/0x510 [ 428.798703] ? fcntl_setlk+0xb90/0xb90 [ 428.802709] ? blkdev_put+0x510/0x510 [ 428.806546] blkdev_close+0x8b/0xb0 [ 428.810278] __fput+0x277/0x7a0 [ 428.813575] ____fput+0x16/0x20 [ 428.816848] task_work_run+0x119/0x190 [ 428.820913] exit_to_usermode_loop+0x1da/0x220 [ 428.825915] do_syscall_64+0x4a9/0x630 [ 428.830493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.835365] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.840751] RIP: 0033:0x4129c0 [ 428.844044] RSP: 002b:00007ffc0b9325e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 428.851839] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000004129c0 [ 428.859178] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 428.866624] RBP: 000000000000000e R08: 0000000000000000 R09: 000000000000000a [ 428.873986] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 428.881366] R13: 00007ffc0b932620 R14: 000000000002b41b R15: 00007ffc0b932630 [ 428.888693] INFO: task syz-executor.4:7226 blocked for more than 140 seconds. [ 428.896175] Not tainted 4.14.111 #1 [ 428.900368] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.908606] syz-executor.4 D25168 7226 1 0x00000004 [ 428.914438] Call Trace: [ 428.917058] __schedule+0x7be/0x1cf0 [ 428.920976] ? __mutex_lock+0x737/0x1470 [ 428.925238] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.930364] schedule+0x92/0x1c0 [ 428.933758] schedule_preempt_disabled+0x13/0x20 [ 428.938528] __mutex_lock+0x73c/0x1470 [ 428.942530] ? trace_hardirqs_on+0x10/0x10 [ 428.946782] ? lo_open+0x1d/0xb0 [ 428.950406] ? refcount_inc_not_zero+0x80/0xe0 [ 428.955058] ? mutex_trylock+0x1c0/0x1c0 [ 428.959161] ? find_held_lock+0x35/0x130 [ 428.963360] ? disk_get_part+0x9c/0x140 [ 428.967355] ? lock_downgrade+0x6e0/0x6e0 [ 428.971607] ? loop_unregister_transfer+0x90/0x90 [ 428.976528] mutex_lock_nested+0x16/0x20 [ 428.980698] ? mutex_lock_nested+0x16/0x20 [ 428.984957] lo_open+0x1d/0xb0 [ 428.988137] __blkdev_get+0x2c9/0x1120 [ 428.992192] ? __blkdev_put+0x7f0/0x7f0 [ 428.996199] ? bd_acquire+0x178/0x2c0 [ 429.000160] ? find_held_lock+0x35/0x130 [ 429.004259] blkdev_get+0xa8/0x8e0 [ 429.007825] ? bd_may_claim+0xd0/0xd0 [ 429.011793] ? _raw_spin_unlock+0x2d/0x50 [ 429.016045] blkdev_open+0x1d1/0x260 [ 429.019809] ? security_file_open+0x8f/0x1a0 [ 429.024413] do_dentry_open+0x73e/0xeb0 [ 429.028493] ? bd_acquire+0x2c0/0x2c0 [ 429.032940] vfs_open+0x105/0x230 [ 429.036410] path_openat+0x8bd/0x3f70 [ 429.040648] ? trace_hardirqs_on+0x10/0x10 [ 429.045327] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 429.050157] ? find_held_lock+0x35/0x130 [ 429.054268] ? __alloc_fd+0x1d4/0x4a0 [ 429.058078] do_filp_open+0x18e/0x250 [ 429.061978] ? may_open_dev+0xe0/0xe0 [ 429.066084] ? _raw_spin_unlock+0x2d/0x50 [ 429.070352] ? __alloc_fd+0x1d4/0x4a0 [ 429.074180] do_sys_open+0x2c5/0x430 [ 429.077907] ? filp_open+0x70/0x70 [ 429.081552] SyS_open+0x2d/0x40 [ 429.084856] ? do_sys_open+0x430/0x430 [ 429.088770] do_syscall_64+0x1eb/0x630 [ 429.092884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.097772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.103062] RIP: 0033:0x412ba0 [ 429.106267] RSP: 002b:00007ffcc242b3e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 429.114049] RAX: ffffffffffffffda RBX: 000000000002b704 RCX: 0000000000412ba0 [ 429.121497] RDX: 00007ffcc242b47a RSI: 0000000000000002 RDI: 00007ffcc242b470 [ 429.128990] RBP: 000000000000000e R08: 0000000000000000 R09: 000000000000000a [ 429.136598] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 429.143981] R13: 00007ffcc242b420 R14: 000000000002b420 R15: 00007ffcc242b430 [ 429.151351] INFO: task syz-executor.2:7227 blocked for more than 140 seconds. [ 429.158676] Not tainted 4.14.111 #1 [ 429.162974] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.171037] syz-executor.2 D25168 7227 1 0x00000004 [ 429.176843] Call Trace: [ 429.179448] __schedule+0x7be/0x1cf0 [ 429.183251] ? __mutex_lock+0x737/0x1470 [ 429.187381] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.192693] schedule+0x92/0x1c0 [ 429.196963] schedule_preempt_disabled+0x13/0x20 [ 429.202239] __mutex_lock+0x73c/0x1470 [ 429.206388] ? trace_hardirqs_on+0x10/0x10 [ 429.211086] ? lo_open+0x1d/0xb0 [ 429.214717] ? refcount_inc_not_zero+0x80/0xe0 [ 429.219341] ? mutex_trylock+0x1c0/0x1c0 [ 429.223615] ? find_held_lock+0x35/0x130 [ 429.227732] ? disk_get_part+0x9c/0x140 [ 429.231818] ? lock_downgrade+0x6e0/0x6e0 [ 429.236123] ? loop_unregister_transfer+0x90/0x90 [ 429.241075] mutex_lock_nested+0x16/0x20 [ 429.245154] ? mutex_lock_nested+0x16/0x20 [ 429.249461] lo_open+0x1d/0xb0 [ 429.252736] __blkdev_get+0x2c9/0x1120 [ 429.256835] ? __blkdev_put+0x7f0/0x7f0 [ 429.261024] ? bd_acquire+0x178/0x2c0 [ 429.264832] ? find_held_lock+0x35/0x130 [ 429.268912] blkdev_get+0xa8/0x8e0 [ 429.272551] ? bd_may_claim+0xd0/0xd0 [ 429.276369] ? _raw_spin_unlock+0x2d/0x50 [ 429.280774] blkdev_open+0x1d1/0x260 [ 429.284518] ? security_file_open+0x8f/0x1a0 [ 429.288923] do_dentry_open+0x73e/0xeb0 [ 429.292999] ? bd_acquire+0x2c0/0x2c0 [ 429.297087] vfs_open+0x105/0x230 [ 429.300726] path_openat+0x8bd/0x3f70 [ 429.304543] ? trace_hardirqs_on+0x10/0x10 [ 429.308870] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 429.313632] ? find_held_lock+0x35/0x130 [ 429.317763] ? __alloc_fd+0x1d4/0x4a0 [ 429.322007] do_filp_open+0x18e/0x250 [ 429.326194] ? may_open_dev+0xe0/0xe0 [ 429.330142] ? _raw_spin_unlock+0x2d/0x50 [ 429.334422] ? __alloc_fd+0x1d4/0x4a0 [ 429.338237] do_sys_open+0x2c5/0x430 [ 429.342087] ? filp_open+0x70/0x70 [ 429.345709] SyS_open+0x2d/0x40 [ 429.349440] ? do_sys_open+0x430/0x430 [ 429.353418] do_syscall_64+0x1eb/0x630 [ 429.357326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.362554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.367755] RIP: 0033:0x412ba0 [ 429.371116] RSP: 002b:00007ffc5441f008 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 429.379132] RAX: ffffffffffffffda RBX: 000000000002b65f RCX: 0000000000412ba0 [ 429.386537] RDX: 00007ffc5441f09a RSI: 0000000000000002 RDI: 00007ffc5441f090 [ 429.393897] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 429.401271] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 429.408742] R13: 00007ffc5441f040 R14: 000000000002b65f R15: 00007ffc5441f050 [ 429.416229] INFO: task blkid:7425 blocked for more than 140 seconds. [ 429.422990] Not tainted 4.14.111 #1 [ 429.427369] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.435757] blkid D28760 7425 7332 0x00000004 [ 429.441624] Call Trace: [ 429.444279] __schedule+0x7be/0x1cf0 [ 429.447984] ? __mutex_lock+0x737/0x1470 [ 429.452145] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.457236] schedule+0x92/0x1c0 [ 429.460696] schedule_preempt_disabled+0x13/0x20 [ 429.465805] __mutex_lock+0x73c/0x1470 [ 429.469794] ? lo_ioctl+0x87/0x1c70 [ 429.473506] ? lock_downgrade+0x640/0x6e0 [ 429.477863] ? mutex_trylock+0x1c0/0x1c0 [ 429.482027] ? avc_has_extended_perms+0x8ec/0xe40 [ 429.486890] ? __might_fault+0x110/0x1d0 [ 429.491039] ? avc_ss_reset+0x110/0x110 [ 429.495074] mutex_lock_nested+0x16/0x20 [ 429.499139] ? mutex_lock_nested+0x16/0x20 [ 429.503462] lo_ioctl+0x87/0x1c70 [ 429.507006] ? loop_probe+0x160/0x160 [ 429.511211] blkdev_ioctl+0x983/0x1880 [ 429.515110] ? blkpg_ioctl+0x980/0x980 [ 429.518994] ? __might_sleep+0x93/0xb0 [ 429.522991] ? save_trace+0x290/0x290 [ 429.526809] block_ioctl+0xde/0x120 [ 429.530895] ? blkdev_fallocate+0x3b0/0x3b0 [ 429.535237] do_vfs_ioctl+0x7b9/0x1070 [ 429.539125] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.544126] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.548546] ? lock_downgrade+0x6e0/0x6e0 [ 429.552794] ? security_file_ioctl+0x83/0xc0 [ 429.557251] ? security_file_ioctl+0x8f/0xc0 [ 429.561765] SyS_ioctl+0x8f/0xc0 [ 429.565162] ? do_vfs_ioctl+0x1070/0x1070 [ 429.569855] do_syscall_64+0x1eb/0x630 [ 429.573837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.578742] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.584059] RIP: 0033:0x7ff8733f5347 [ 429.588053] RSP: 002b:00007ffee3546798 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.595985] RAX: ffffffffffffffda RBX: 0000000001771030 RCX: 00007ff8733f5347 [ 429.603415] RDX: 0000000000000000 RSI: 0000000000005331 RDI: 0000000000000003 [ 429.610879] RBP: 0000000000000003 R08: 00007ff8736a55a0 R09: 0000000000000008 [ 429.618290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.625772] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 429.633137] INFO: task blkid:7434 blocked for more than 140 seconds. [ 429.639686] Not tainted 4.14.111 #1 [ 429.643942] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.651989] blkid D29040 7434 7187 0x00000004 [ 429.657657] Call Trace: [ 429.660362] __schedule+0x7be/0x1cf0 [ 429.664102] ? __mutex_lock+0x737/0x1470 [ 429.668177] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.673340] schedule+0x92/0x1c0 [ 429.676866] schedule_preempt_disabled+0x13/0x20 [ 429.681743] __mutex_lock+0x73c/0x1470 [ 429.685661] ? lo_ioctl+0x87/0x1c70 [ 429.689302] ? lock_downgrade+0x640/0x6e0 [ 429.693573] ? mutex_trylock+0x1c0/0x1c0 [ 429.697791] ? avc_has_extended_perms+0x8ec/0xe40 [ 429.703028] ? __might_fault+0x110/0x1d0 [ 429.707396] ? avc_ss_reset+0x110/0x110 [ 429.711471] mutex_lock_nested+0x16/0x20 [ 429.715551] ? mutex_lock_nested+0x16/0x20 [ 429.719933] lo_ioctl+0x87/0x1c70 [ 429.723591] ? loop_probe+0x160/0x160 [ 429.727456] blkdev_ioctl+0x983/0x1880 [ 429.731425] ? blkpg_ioctl+0x980/0x980 [ 429.735597] ? __might_sleep+0x93/0xb0 [ 429.739481] ? save_trace+0x290/0x290 [ 429.743394] block_ioctl+0xde/0x120 [ 429.747126] ? blkdev_fallocate+0x3b0/0x3b0 [ 429.751730] do_vfs_ioctl+0x7b9/0x1070 [ 429.756074] ? selinux_file_mprotect+0x5d0/0x5d0 [ 429.761035] ? ioctl_preallocate+0x1c0/0x1c0 [ 429.765456] ? lock_downgrade+0x6e0/0x6e0 [ 429.769650] ? security_file_ioctl+0x83/0xc0 [ 429.774159] ? security_file_ioctl+0x8f/0xc0 [ 429.778819] SyS_ioctl+0x8f/0xc0 [ 429.782290] ? do_vfs_ioctl+0x1070/0x1070 [ 429.786473] do_syscall_64+0x1eb/0x630 [ 429.790594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.795457] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.800717] RIP: 0033:0x7f7cacd79347 [ 429.804438] RSP: 002b:00007ffd7aa8c7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.812287] RAX: ffffffffffffffda RBX: 0000000000fc9030 RCX: 00007f7cacd79347 [ 429.819843] RDX: 0000000000000000 RSI: 0000000000005331 RDI: 0000000000000003 [ 429.827217] RBP: 0000000000000003 R08: 00007f7cad0295a0 R09: 0000000000000008 [ 429.834617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.842187] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 429.849491] INFO: task blkid:7440 blocked for more than 140 seconds. [ 429.856087] Not tainted 4.14.111 #1 [ 429.860310] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.868376] blkid D29040 7440 7186 0x00000004 [ 429.874196] Call Trace: [ 429.876809] __schedule+0x7be/0x1cf0 [ 429.880667] ? __mutex_lock+0x737/0x1470 [ 429.884756] ? pci_mmcfg_check_reserved+0x150/0x150 [ 429.889840] schedule+0x92/0x1c0 [ 429.893327] schedule_preempt_disabled+0x13/0x20 [ 429.898111] __mutex_lock+0x73c/0x1470 [ 429.902448] ? lo_open+0x1d/0xb0 [ 429.905965] ? refcount_inc_not_zero+0x80/0xe0 [ 429.911306] ? mutex_trylock+0x1c0/0x1c0 [ 429.915447] ? exact_match+0xd/0x20 [ 429.919111] ? kobj_lookup+0x319/0x410 [ 429.923101] ? loop_unregister_transfer+0x90/0x90 [ 429.928054] mutex_lock_nested+0x16/0x20 [ 429.932208] ? mutex_lock_nested+0x16/0x20 [ 429.936521] lo_open+0x1d/0xb0 [ 429.939724] __blkdev_get+0xab1/0x1120 [ 429.943778] ? __blkdev_put+0x7f0/0x7f0 [ 429.947791] ? bd_acquire+0x178/0x2c0 [ 429.951763] ? find_held_lock+0x35/0x130 [ 429.955874] blkdev_get+0xa8/0x8e0 [ 429.959766] ? bd_may_claim+0xd0/0xd0 [ 429.963848] ? _raw_spin_unlock+0x2d/0x50 [ 429.968124] blkdev_open+0x1d1/0x260 [ 429.972190] ? security_file_open+0x8f/0x1a0 [ 429.976786] do_dentry_open+0x73e/0xeb0 [ 429.981392] ? bd_acquire+0x2c0/0x2c0 [ 429.985304] vfs_open+0x105/0x230 [ 429.988790] path_openat+0x8bd/0x3f70 [ 429.992816] ? trace_hardirqs_on+0x10/0x10 [ 429.997282] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 430.002483] ? find_held_lock+0x35/0x130 [ 430.006589] ? __alloc_fd+0x1d4/0x4a0 [ 430.010480] do_filp_open+0x18e/0x250 [ 430.014295] ? may_open_dev+0xe0/0xe0 [ 430.018443] ? _raw_spin_unlock+0x2d/0x50 [ 430.022722] ? __alloc_fd+0x1d4/0x4a0 [ 430.026825] do_sys_open+0x2c5/0x430 [ 430.030624] ? filp_open+0x70/0x70 [ 430.034636] SyS_open+0x2d/0x40 [ 430.038092] ? do_sys_open+0x430/0x430 [ 430.042375] do_syscall_64+0x1eb/0x630 [ 430.046762] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.051787] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.057003] RIP: 0033:0x7f7d81822120 [ 430.060822] RSP: 002b:00007ffdf08850d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 430.069683] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d81822120 [ 430.077127] RDX: 00007ffdf0886f41 RSI: 0000000000000000 RDI: 00007ffdf0886f41 [ 430.084668] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 430.092038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000e4e030 [ 430.099808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 430.107260] INFO: task blkid:7441 blocked for more than 140 seconds. [ 430.113886] Not tainted 4.14.111 #1 [ 430.118496] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.126595] blkid D29040 7441 7401 0x00000004 [ 430.132439] Call Trace: [ 430.135220] __schedule+0x7be/0x1cf0 [ 430.139069] ? __mutex_lock+0x737/0x1470 [ 430.143258] ? pci_mmcfg_check_reserved+0x150/0x150 [ 430.148428] schedule+0x92/0x1c0 [ 430.151939] schedule_preempt_disabled+0x13/0x20 [ 430.156843] __mutex_lock+0x73c/0x1470 [ 430.161023] ? __mutex_unlock_slowpath+0x71/0x800 [ 430.165898] ? __blkdev_get+0x145/0x1120 [ 430.171176] ? mutex_trylock+0x1c0/0x1c0 [ 430.175437] ? exact_match+0xd/0x20 [ 430.179286] ? kobj_lookup+0x319/0x410 [ 430.183525] ? blkdev_ioctl+0x1880/0x1880 [ 430.188648] mutex_lock_nested+0x16/0x20 [ 430.192809] ? mutex_lock_nested+0x16/0x20 [ 430.197159] __blkdev_get+0x145/0x1120 [ 430.201315] ? __blkdev_put+0x7f0/0x7f0 [ 430.205415] ? bd_acquire+0x178/0x2c0 [ 430.209224] ? find_held_lock+0x35/0x130 [ 430.213370] blkdev_get+0xa8/0x8e0 [ 430.217651] ? bd_may_claim+0xd0/0xd0 [ 430.221575] ? _raw_spin_unlock+0x2d/0x50 [ 430.225839] blkdev_open+0x1d1/0x260 [ 430.229593] ? security_file_open+0x8f/0x1a0 [ 430.234348] do_dentry_open+0x73e/0xeb0 [ 430.238354] ? bd_acquire+0x2c0/0x2c0 [ 430.242711] vfs_open+0x105/0x230 [ 430.246184] path_openat+0x8bd/0x3f70 [ 430.249994] ? trace_hardirqs_on+0x10/0x10 [ 430.254328] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 430.259017] ? find_held_lock+0x35/0x130 [ 430.263224] ? __alloc_fd+0x1d4/0x4a0 [ 430.267052] do_filp_open+0x18e/0x250 [ 430.270941] ? may_open_dev+0xe0/0xe0 [ 430.274787] ? _raw_spin_unlock+0x2d/0x50 [ 430.278936] ? __alloc_fd+0x1d4/0x4a0 [ 430.282907] do_sys_open+0x2c5/0x430 [ 430.286645] ? filp_open+0x70/0x70 [ 430.290455] SyS_open+0x2d/0x40 [ 430.293841] ? do_sys_open+0x430/0x430 [ 430.297739] do_syscall_64+0x1eb/0x630 [ 430.301739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.306607] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.311869] RIP: 0033:0x7f05614d3120 [ 430.315859] RSP: 002b:00007ffdd91fd338 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 430.323734] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05614d3120 [ 430.331091] RDX: 00007ffdd91fef34 RSI: 0000000000000000 RDI: 00007ffdd91fef34 [ 430.338381] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 430.345987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000cf6030 [ 430.353530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 430.361096] [ 430.361096] Showing all locks held in the system: [ 430.367564] 1 lock held by khungtaskd/1009: [ 430.372048] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 430.381205] 1 lock held by rsyslogd/7055: [ 430.385358] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 430.393698] 2 locks held by getty/7177: [ 430.397683] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.406511] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.415929] 2 locks held by getty/7178: [ 430.419961] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.428984] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.438382] 2 locks held by getty/7179: [ 430.442456] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.451232] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.460836] 2 locks held by getty/7180: [ 430.464818] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.473618] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.482990] 2 locks held by getty/7181: [ 430.487097] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.496647] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.506116] 2 locks held by getty/7182: [ 430.510195] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.518908] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.528311] 2 locks held by getty/7183: [ 430.532517] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 430.541585] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 430.551535] 2 locks held by syz-executor.5/7222: [ 430.556348] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.565095] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 430.574267] 1 lock held by syz-executor.0/7223: [ 430.578947] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.588107] 1 lock held by syz-executor.1/7224: [ 430.592874] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.601510] 3 locks held by syz-executor.3/7225: [ 430.606291] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 430.615079] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 430.623624] #2: (loop_ctl_mutex#2){+.+.}, at: [] lo_release+0x84/0x1b0 [ 430.633106] 2 locks held by syz-executor.4/7226: [ 430.637907] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.647097] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.655295] 2 locks held by syz-executor.2/7227: [ 430.660153] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.668868] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.677201] 1 lock held by blkid/7425: [ 430.681153] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.689828] 1 lock held by blkid/7434: [ 430.693930] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 430.702375] 2 locks held by blkid/7440: [ 430.706386] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.715307] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 430.723482] 1 lock held by blkid/7441: [ 430.727369] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.736317] 1 lock held by blkid/7444: [ 430.740568] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 430.749303] [ 430.751006] ============================================= [ 430.751006] [ 430.758376] NMI backtrace for cpu 0 [ 430.762162] CPU: 0 PID: 1009 Comm: khungtaskd Not tainted 4.14.111 #1 [ 430.768780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.779920] Call Trace: [ 430.782538] dump_stack+0x138/0x19c [ 430.786160] nmi_cpu_backtrace.cold+0x57/0x94 [ 430.790696] ? irq_force_complete_move.cold+0x7d/0x7d [ 430.796057] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 430.801344] arch_trigger_cpumask_backtrace+0x14/0x20 [ 430.806583] watchdog+0x5d8/0xb80 [ 430.810033] kthread+0x31c/0x430 [ 430.813387] ? reset_hung_task_detector+0x20/0x20 [ 430.818223] ? kthread_create_on_node+0xd0/0xd0 [ 430.822892] ret_from_fork+0x3a/0x50 [ 430.826813] Sending NMI from CPU 0 to CPUs 1: [ 430.831723] NMI backtrace for cpu 1 [ 430.831728] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.111 #1 [ 430.831732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.831735] task: ffff8880a9d1c340 task.stack: ffff8880a9d28000 [ 430.831737] RIP: 0010:_local_bh_enable+0x1d/0x30 [ 430.831739] RSP: 0018:ffff8880aef07f78 EFLAGS: 00000083 [ 430.831744] RAX: 0000000080000201 RBX: ffff8880a9d1c340 RCX: 0000000000000000 [ 430.831747] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000200 [ 430.831750] RBP: ffff8880aef07f88 R08: 0000000000000001 R09: ffff88821fff8048 [ 430.831753] R10: ffff88821fff8050 R11: 0000000000000001 R12: ffff8880a9d1c340 [ 430.831757] R13: ffff8880aef00000 R14: ffff8880a9d1c340 R15: 0000000000000000 [ 430.831761] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 430.831764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.831767] CR2: 000000000162b000 CR3: 00000000a9be7000 CR4: 00000000001406e0 [ 430.831769] Call Trace: [ 430.831771] [ 430.831774] ? irq_enter+0xc2/0xe0 [ 430.831776] scheduler_ipi+0xba/0x4e0 [ 430.831779] smp_reschedule_interrupt+0x89/0x500 [ 430.831782] reschedule_interrupt+0x8e/0xa0 [ 430.831784] [ 430.831787] RIP: 0010:native_safe_halt+0x2/0x10 [ 430.831790] RSP: 0018:ffff8880a9d2fe70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 430.831796] RAX: 1ffffffff0ee2968 RBX: ffff8880a9d1c340 RCX: 0000000000000000 [ 430.831799] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a9d1cbbc [ 430.831803] RBP: ffff8880a9d2fe98 R08: 1ffffffff1049801 R09: 0000000000000000 [ 430.831807] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87714b30 [ 430.831810] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880a9d1c340 [ 430.831812] ? default_idle+0x4c/0x380 [ 430.831815] arch_cpu_idle+0x10/0x20 [ 430.831817] default_idle_call+0x36/0x90 [ 430.831820] do_idle+0x262/0x3d0 [ 430.831822] cpu_startup_entry+0x1b/0x20 [ 430.831825] start_secondary+0x362/0x4d0 [ 430.831828] secondary_startup_64+0xa5/0xb0 [ 430.831829] Code: c7 20 4b 71 87 e8 34 99 4d 00 eb a6 66 90 55 48 89 e5 65 8b 05 25 48 c9 7e a9 00 00 0f 00 75 0c bf 00 02 00 00 e8 64 ff ff ff 5d 0f 0b bf 00 02 00 00 e8 56 ff ff ff 5d c3 0f 1f 40 00 48 c7 [ 430.833064] Kernel panic - not syncing: hung_task: blocked tasks [ 431.056449] CPU: 0 PID: 1009 Comm: khungtaskd Not tainted 4.14.111 #1 [ 431.063041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.072512] Call Trace: [ 431.075123] dump_stack+0x138/0x19c [ 431.078851] panic+0x1f2/0x438 [ 431.082057] ? add_taint.cold+0x16/0x16 [ 431.086161] ? ___preempt_schedule+0x16/0x18 [ 431.090573] watchdog+0x5e9/0xb80 [ 431.094038] kthread+0x31c/0x430 [ 431.098499] ? reset_hung_task_detector+0x20/0x20 [ 431.103366] ? kthread_create_on_node+0xd0/0xd0 [ 431.108039] ret_from_fork+0x3a/0x50 [ 431.112912] Kernel Offset: disabled [ 431.116604] Rebooting in 86400 seconds..