[ 32.901615] kauditd_printk_skb: 9 callbacks suppressed [ 32.901622] audit: type=1800 audit(1564157412.204:33): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.929307] audit: type=1800 audit(1564157412.204:34): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.000744] random: sshd: uninitialized urandom read (32 bytes read) [ 39.345889] audit: type=1400 audit(1564157418.644:35): avc: denied { map } for pid=7041 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.391019] random: sshd: uninitialized urandom read (32 bytes read) [ 40.056119] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts. [ 45.529828] random: sshd: uninitialized urandom read (32 bytes read) 2019/07/26 16:10:25 fuzzer started [ 45.729952] audit: type=1400 audit(1564157425.024:36): avc: denied { map } for pid=7051 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 47.329157] random: cc1: uninitialized urandom read (8 bytes read) 2019/07/26 16:10:27 dialing manager at 10.128.0.105:44777 2019/07/26 16:10:27 syscalls: 2461 2019/07/26 16:10:27 code coverage: enabled 2019/07/26 16:10:27 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/07/26 16:10:27 extra coverage: extra coverage is not supported by the kernel 2019/07/26 16:10:27 setuid sandbox: enabled 2019/07/26 16:10:27 namespace sandbox: enabled 2019/07/26 16:10:27 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/26 16:10:27 fault injection: enabled 2019/07/26 16:10:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/26 16:10:27 net packet injection: enabled 2019/07/26 16:10:27 net device setup: enabled [ 48.908106] random: crng init done 16:12:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0)={0x0, r0+30000000}, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000080), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000014) keyctl$read(0xb, 0x0, 0x0, 0x0) 16:12:20 executing program 0: mmap(&(0x7f00002c8000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000035d000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000759000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000779000/0x2000)=nil, 0x2000, 0x0, 0x1132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a97000/0x1000)=nil, 0x1000, 0x0, 0x1000000000002032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:12:20 executing program 5: syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') r0 = syz_open_dev$midi(&(0x7f0000000a00)='/dev/midi#\x00', 0x4523, 0x20000) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000a40)=0x7729, 0x4) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000a80)={0x7, 0x6}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000b40)={0x438, r1, 0x320, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf90a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc000000000000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x128}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbb9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd72}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffc15f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff6939}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f00000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2a}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @empty, 0x3fffffff800}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd9a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x814}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001040)={0x0, r0, 0x0, 0xf, &(0x7f0000001000)='}ppp0/*selinux\x00', 0xffffffffffffffff}, 0x30) stat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0)={r2, r4, r5}, 0xc) write$FUSE_OPEN(r0, &(0x7f0000001200)={0x20, 0x0, 0x1, {0x0, 0x10}}, 0x20) r6 = dup3(r3, r0, 0x80000) r7 = syz_open_dev$dspn(&(0x7f0000001240)='/dev/dsp#\x00', 0xffffffffffffffc0, 0x400) ioctl$VFIO_CHECK_EXTENSION(r7, 0x3b65, 0x2) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000001280)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x11, r0, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$SIOCRSGL2CALL(r7, 0x89e5, &(0x7f00000012c0)=@rose) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000001300)=0x7, &(0x7f0000001340)=0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001380)={0x0, 0x3ff, 0x6, 0x1}, &(0x7f00000013c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001400)={r8, 0x6, 0x8, [0x80000000, 0x3c449170, 0x80000001, 0x0, 0x9, 0x5, 0x0, 0x0]}, 0x18) ioctl$PPPIOCSFLAGS(r7, 0x40047459, &(0x7f0000001440)=0x4) socket$inet(0x2, 0x0, 0x3) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000001500)={0x9, &(0x7f0000001480)=[{0x1ff, 0x80000001, 0x10000, 0x2}, {0x5, 0x10001, 0xffffffffffffff1e, 0x5}, {0x7, 0x20, 0x43, 0x8}, {0xfffffffffffffffe, 0x1, 0x3, 0x6}, {0x9, 0x1e, 0x50b, 0x5}, {0x3d6c, 0x6, 0x6, 0x285}, {0x3ff, 0x3, 0x3, 0x5}, {0x0, 0x4, 0x2, 0x9}, {0x9, 0x8, 0x2, 0x2}]}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001580)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x68, r9, 0x300, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x6, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x80) syz_genetlink_get_family_id$team(&(0x7f00000016c0)='team\x00') sendmmsg(r7, &(0x7f0000001700), 0x0, 0x40) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001740)='/dev/cachefiles\x00', 0x40, 0x0) 16:12:20 executing program 3: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = inotify_add_watch(r0, &(0x7f00005eaff6)='./control\x00', 0x4000004) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) inotify_rm_watch(r0, r2) 16:12:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) flock(r0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 16:12:20 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000001280)={0x0, 0x0, 0x3f}) [ 160.705710] audit: type=1400 audit(1564157540.004:37): avc: denied { map } for pid=7070 comm="syz-executor.2" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13816 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 161.670247] IPVS: ftp: loaded support on port[0] = 21 [ 162.015729] chnl_net:caif_netlink_parms(): no params data found [ 162.024957] IPVS: ftp: loaded support on port[0] = 21 [ 162.072253] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.078956] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.086428] device bridge_slave_0 entered promiscuous mode [ 162.095905] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.102355] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.109240] device bridge_slave_1 entered promiscuous mode [ 162.133399] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.142370] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.164832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.172349] team0: Port device team_slave_0 added [ 162.178055] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.185404] team0: Port device team_slave_1 added [ 162.191247] IPVS: ftp: loaded support on port[0] = 21 [ 162.195114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 162.204710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 162.292015] device hsr_slave_0 entered promiscuous mode [ 162.330311] device hsr_slave_1 entered promiscuous mode [ 162.373101] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 162.384570] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 162.453587] chnl_net:caif_netlink_parms(): no params data found [ 162.475146] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.481646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.488555] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.494973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.556155] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.563216] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.570635] device bridge_slave_0 entered promiscuous mode [ 162.611065] IPVS: ftp: loaded support on port[0] = 21 [ 162.613786] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.622906] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.631876] device bridge_slave_1 entered promiscuous mode [ 162.664551] chnl_net:caif_netlink_parms(): no params data found [ 162.690096] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.716698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.762948] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.770138] team0: Port device team_slave_0 added [ 162.775226] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.782330] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.789228] device bridge_slave_0 entered promiscuous mode [ 162.796291] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.802728] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.809961] device bridge_slave_1 entered promiscuous mode [ 162.827449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.834509] IPVS: ftp: loaded support on port[0] = 21 [ 162.836052] team0: Port device team_slave_1 added [ 162.845537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 162.859435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 162.869004] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 162.876641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.887600] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.918203] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.926176] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.982139] device hsr_slave_0 entered promiscuous mode [ 163.030377] device hsr_slave_1 entered promiscuous mode [ 163.086133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 163.099525] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.106497] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.114570] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 163.129498] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 163.148414] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 163.155712] team0: Port device team_slave_0 added [ 163.164926] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.178094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 163.185280] team0: Port device team_slave_1 added [ 163.193316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.200739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.207673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.243007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.268429] IPVS: ftp: loaded support on port[0] = 21 [ 163.294817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 163.304034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 163.310150] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.363477] device hsr_slave_0 entered promiscuous mode [ 163.410289] device hsr_slave_1 entered promiscuous mode [ 163.463411] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 163.481460] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.488778] chnl_net:caif_netlink_parms(): no params data found [ 163.504643] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 163.523621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.531553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.539099] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.545490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.554538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.608394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.619368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.627015] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.633453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.645378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 163.656418] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 163.686212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.697119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 163.710492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.732796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.740689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.748283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.756153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.771817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.788110] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.794600] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.802049] device bridge_slave_0 entered promiscuous mode [ 163.808574] chnl_net:caif_netlink_parms(): no params data found [ 163.832393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.840542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.853768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 163.864833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 163.872176] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.878555] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.886267] device bridge_slave_1 entered promiscuous mode [ 163.905469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.913386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.921114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.928529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.984002] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.990523] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.997449] device bridge_slave_0 entered promiscuous mode [ 164.006318] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.013172] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.020166] device bridge_slave_1 entered promiscuous mode [ 164.027412] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.062748] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 164.068802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.095553] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.129082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.157129] chnl_net:caif_netlink_parms(): no params data found [ 164.167608] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.188550] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 164.195945] team0: Port device team_slave_0 added [ 164.202325] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 164.209529] team0: Port device team_slave_1 added [ 164.239006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.245612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.253481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.264360] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 164.271754] team0: Port device team_slave_0 added [ 164.293439] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 164.306754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.315331] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.322467] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 164.329706] team0: Port device team_slave_1 added [ 164.394686] device hsr_slave_0 entered promiscuous mode [ 164.450454] device hsr_slave_1 entered promiscuous mode [ 164.510548] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 164.517424] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 164.529866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.538029] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.544712] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.552553] device bridge_slave_0 entered promiscuous mode [ 164.559658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.567580] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.574747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.587110] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.593918] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.601401] device bridge_slave_1 entered promiscuous mode [ 164.614241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.621521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.630742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.638598] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 164.649389] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.657167] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 164.684909] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.702893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.711243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.719681] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.730408] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.748786] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 164.755295] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.813528] device hsr_slave_0 entered promiscuous mode [ 164.850410] device hsr_slave_1 entered promiscuous mode [ 164.891262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.911047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.918761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.926642] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.933037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.940153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.954140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.961945] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 164.969114] team0: Port device team_slave_0 added [ 164.976386] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 164.983722] team0: Port device team_slave_1 added [ 164.988952] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 164.996627] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 165.008421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.016545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.024824] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.031243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.038910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.048904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.057225] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.066840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.077474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 16:12:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) [ 165.100922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.111570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.119844] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.126277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.141233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.149212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.161415] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.167780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.175371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.185046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.195113] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.209847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.219141] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 165.229174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.236951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.292633] device hsr_slave_0 entered promiscuous mode [ 165.330340] device hsr_slave_1 entered promiscuous mode [ 165.370868] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 165.378270] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 165.385938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.402748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.410619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.418978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.426831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.435038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.442609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.453677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.464751] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.473626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 165.484757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 165.491907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.499684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.508018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.516455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.524255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.531972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.539366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.551533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 165.563683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.571726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.579540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.587344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.594596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.613223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 165.623731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 165.631207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.638752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.646318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.654266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.663422] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 165.673512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 165.683231] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 165.689310] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.698660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.705898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.714680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.722256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.729935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.737851] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.744242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.752332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.764148] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 165.770314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.784120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.798488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.806448] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 165.812955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.827923] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 165.835000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.842997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.850676] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.857008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.864097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.877183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.887513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.894459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.902681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.910475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.918480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.930898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.950074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 165.963055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.971555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.979594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.991013] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.000712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 166.009291] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 166.021451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 16:12:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x5}, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e4", 0x1}], 0x1) [ 166.029613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.058277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.069007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.083024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 166.101989] 8021q: adding VLAN 0 to HW filter on device bond0 16:12:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18}, 0x18) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000180), 0x4) [ 166.108372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.117860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.124997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.137417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.148128] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 16:12:25 executing program 0: modify_ldt$write(0x1, &(0x7f0000000040)={0x800}, 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 166.164281] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.182942] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 166.188990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:12:25 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 166.209771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=7131 comm=syz-executor.4 [ 166.232560] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.247965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 16:12:25 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 166.259203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.269787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.294262] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.300710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.326788] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.339972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.355635] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 166.363464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.372315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.379117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.386404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.394699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.402755] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.409100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.418906] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 166.428595] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.438302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 166.448267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 166.464435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.474370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.488504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.496626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.524812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.533171] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.539594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.546837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.558059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.590328] audit: type=1400 audit(1564157545.884:38): avc: denied { wake_alarm } for pid=7152 comm="syz-executor.2" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 166.592397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.627420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.636505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.645831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.657483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.664983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.673507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.682290] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.688702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.701039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 166.710743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.717674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.727015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.734960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.746388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 166.755636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 166.763050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.770887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.778368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.788109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.803335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.815468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.823687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.835022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 166.844167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.856865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.866646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.874596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.883010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.895396] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 166.902107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.913148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 166.921110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.928619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.943355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 166.953229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.961398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.974939] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 166.981428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.989417] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 167.003242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.017545] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 167.035541] 8021q: adding VLAN 0 to HW filter on device batadv0 16:12:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000740)) syz_open_dev$vcsn(0x0, 0x0, 0x0) unshare(0x8000400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 168.059897] audit: type=1400 audit(1564157547.354:39): avc: denied { create } for pid=7186 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 16:12:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x1, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) 16:12:27 executing program 4: clock_adjtime(0xdc81bd592e2e63ac, &(0x7f0000000080)) 16:12:27 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 168.098351] audit: type=1400 audit(1564157547.364:40): avc: denied { write } for pid=7186 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 168.122399] audit: type=1400 audit(1564157547.364:41): avc: denied { read } for pid=7186 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 168.240827] ptrace attach of "/root/syz-executor.1"[7081] was attempted by "/root/syz-executor.1"[7208] [ 168.278292] ptrace attach of "/root/syz-executor.1"[7081] was attempted by "/root/syz-executor.1"[7208] 16:12:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) kexec_load(0x0, 0x0, &(0x7f0000001740), 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x40) mknod(&(0x7f0000000040)='./bus\x00', 0xf000, 0x3) fstat(r0, &(0x7f0000000180)) getgroups(0x1, &(0x7f0000000200)=[0x0]) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) lsetxattr$security_smack_entry(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='security.SMACK64\x00', &(0x7f0000000340)='HL\x00', 0x3, 0x3) fchownat(r0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ftruncate(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000280)=0x1e) 16:12:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x3, 0x0, 0x48, &(0x7f0000000800)}) 16:12:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = dup2(r0, r0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xe0) dup2(r1, r0) 16:12:27 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 16:12:27 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:27 executing program 3: r0 = socket$inet6(0xa, 0x2100000400000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x2b}, 0x0, @in=@remote}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 16:12:27 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000d40)='\x00\xaf1\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x100000000, 0x0) close(r0) write(r2, &(0x7f0000000040)='r', 0x1) 16:12:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x80443, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 16:12:28 executing program 3: gettid() timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180), 0x0) [ 168.639262] protocol 88fb is buggy, dev hsr_slave_0 [ 168.644600] protocol 88fb is buggy, dev hsr_slave_1 16:12:28 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 16:12:28 executing program 4: r0 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x7]) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x7]) 16:12:28 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:28 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) r1 = dup2(r0, r0) write(r1, &(0x7f0000004940)="2400000019002551071c0165ff0ffc0202bd100000080000000000000054635b040c0800", 0x24) 16:12:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x800000004, 0x20031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x0, {0x2, 0x0, @multicast2}, 'eql\x00'}) 16:12:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='environ\x00') pread64(r0, 0x0, 0x0, 0x0) 16:12:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000680)='cgroup.subtree_control\x00', 0x2, 0x0) 16:12:28 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/186, 0x4a9e280) 16:12:28 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:28 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x7f) write$binfmt_elf32(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:12:28 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x40002, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x491) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa, 0x4010011, r1, 0x0) pipe(&(0x7f0000000540)) 16:12:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000680)='cgroup.subtree_control\x00', 0x2, 0x0) 16:12:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000200)={'lo\x00', @ifru_ivalue}) 16:12:29 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:29 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r1, r0, 0x0, 0x553) 16:12:29 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@can={0x1d, r1}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x30}, 0x0) 16:12:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000680)='cgroup.subtree_control\x00', 0x2, 0x0) 16:12:29 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 16:12:29 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{}], 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x4) sendmsg$nl_generic(r0, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000004310300"], 0x1}}, 0x10) setxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@v2={0x0, 0x0, 0x0, 0x6, 0x46, "4b99cd17f0bfe5b9b2351fcfae88356df2b2be68adcc14fd62d8dcf9a526bcf7a909dd16f2bfd7c3e58b270e7103c76598f52f5270c3eab26897bec96a6142587eee5296c9fa"}, 0x50, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000a80)=""/4096) 16:12:29 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:29 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:29 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 16:12:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000680)='cgroup.subtree_control\x00', 0x2, 0x0) 16:12:29 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:29 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:29 executing program 4: sync() clone(0xc0047ffd, 0x0, 0x0, 0x0, 0x0) 16:12:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000080)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00', @ifru_data=0x0}) 16:12:29 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x2}]}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:29 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2b, 'pids'}, {0x2b, 'io'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2d, 'pids'}]}, 0x1c) sendto(r1, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) 16:12:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) 16:12:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:29 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000001e, &(0x7f0000000200), 0x4) 16:12:29 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{}, {}, 0x8, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) 16:12:29 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) inotify_init1(0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000040)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:29 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000), 0x0) [ 170.820271] IPVS: ftp: loaded support on port[0] = 21 16:12:30 executing program 4: sync() clone(0xc0047ffd, 0x0, 0x0, 0x0, 0x0) 16:12:30 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x101002) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x1}, 0x14) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast2}, 0x100}) ioctl(r1, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80001, 0x16a) readlinkat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=""/4096, 0x1000) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@empty, 0x46}) 16:12:30 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='wlan1\x00d5sum\x00', 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) syz_genetlink_get_family_id$nbd(0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000b00), 0x0) sched_getattr(0x0, &(0x7f0000000040), 0x30, 0x0) 16:12:30 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:30 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x101002) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:30 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8}, 0x8) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:12:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000013) 16:12:30 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 16:12:30 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x101002) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="3e000000000000000000000000000000000000000000000000000000000000100000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da11ad5a82dced75e170aa7181c2b3288297eddceede525a1d6f3347841ae5f7a8bdfa5257"]}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20000000000020, &(0x7f00000002c0)={@multicast1, @multicast2}, 0x8) socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x10000000000000, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) fcntl$addseals(r0, 0x409, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000390000)={0x2, 0x0, @multicast2}, 0xfffffffffffffd52) ftruncate(0xffffffffffffffff, 0x8007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x72439a6b) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00') ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) r5 = getegid() r6 = add_key(&(0x7f0000000540)='ceph\x00', 0x0, &(0x7f0000000880)="9a28a1a6a376fe518a9149e0b0bdc593674e03322a78e2bb8c1997c2837781386447ede8853705bade30a2995bb3edee7fd6a5ab4ceb3b69d6137c3f32ab729f863e40166ebd66a58e980c3f14d59f098fc3451c2d4f9a9aca2f7f23f478e5a3a49256a58fa4ee2db2da1625de95ef2e95e2578c85f175ddd92191abcd457c8e2845a0ad4ae17943f4fe0e122d7aae0940735ad1bf2495e87c03fb44de74d48f6c8211a6fcf005d0d32a8ead693f16b46c0f038bd96586a8087f0f8a34717b24dad270", 0xc3, 0xfffffffffffffffa) keyctl$update(0x2, r6, &(0x7f0000000600), 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={r1, 0x0, r5}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0x5, 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="f60001006f000800010000009723", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="10000100000000002000060000000000"], 0x7c, 0x2) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r7, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 16:12:31 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 16:12:31 executing program 1: set_mempolicy(0x40000000004003, &(0x7f0000000080)=0x6, 0x7) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:31 executing program 3: pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 16:12:31 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x12000) 16:12:31 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:31 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) [ 171.998990] audit: type=1800 audit(1564157551.294:44): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16604 res=0 [ 172.003380] hrtimer: interrupt took 49297 ns 16:12:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:31 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) getgid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) [ 172.085592] audit: type=1804 audit(1564157551.344:45): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir347039356/syzkaller.54rnOX/11/file0" dev="sda1" ino=16604 res=1 16:12:31 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:31 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007ffff0f004ca4"], 0xb) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x80443, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000280)=0x44) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 16:12:31 executing program 2: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x2c00) write(r1, &(0x7f0000000340), 0x10000014c) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:31 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) getgid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) 16:12:31 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007ffff0f004ca4"], 0xb) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:31 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) [ 172.445289] 9pnet: p9_errstr2errno: server reported unknown error L¤ [ 172.464910] 9pnet: p9_errstr2errno: server reported unknown error L¤ 16:12:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:31 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) fallocate(r0, 0x3, 0x7fff, 0x8000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000032ae000000001f"]) 16:12:31 executing program 3: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x400002000006008, 0x1) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x100000a, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000002400)) 16:12:32 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007ffff0f004ca4"], 0xb) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) [ 172.672042] 9pnet: p9_errstr2errno: server reported unknown error L¤ 16:12:32 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007ffff0f004ca4"], 0xb) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 172.766838] 9pnet: p9_errstr2errno: server reported unknown error L¤ 16:12:32 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000c00)=0x6ee) 16:12:32 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 16:12:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x25}, {0x6}]}, 0x10) sendmsg$sock(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 16:12:32 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:32 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007ffff0f004ca4"], 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:32 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) [ 172.915713] 9pnet: p9_errstr2errno: server reported unknown error L¤ [ 172.946090] EXT4-fs warning (device sda1): ext4_group_extend:1741: can't shrink FS - resize aborted 16:12:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000440)) 16:12:32 executing program 2: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 16:12:32 executing program 3: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) sched_setaffinity(r0, 0xfffffffffffffe6a, &(0x7f0000000040)=0x1) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) tkill(r0, 0x15) [ 173.015803] 9pnet: p9_errstr2errno: server reported unknown error L¤ 16:12:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:32 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x7, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:12:32 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007ffff0f004ca4"], 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:32 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) ftruncate(r0, 0x100) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 16:12:32 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) [ 173.229086] 9pnet: p9_errstr2errno: server reported unknown error L¤ 16:12:32 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) [ 173.253025] audit: type=1804 audit(1564157552.554:46): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir081072977/syzkaller.AiRqtU/13/bus" dev="sda1" ino=16616 res=1 16:12:32 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=tcp,', {'port'}}) 16:12:32 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007ffff0f004ca4"], 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xfffffffffffffd7f) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x4000000, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)='j', 0x1}], 0x1, &(0x7f00000004c0)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 16:12:32 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) [ 173.398596] 9pnet: p9_fd_create_tcp (7631): problem connecting socket to 127.0.0.1 [ 173.433695] 9pnet: p9_errstr2errno: server reported unknown error L¤ 16:12:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000100)=0x0) close(r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$P9_RUNLINKAT(r2, &(0x7f0000000340)={0x7}, 0x7) 16:12:32 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:32 executing program 1: socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:32 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) [ 173.540405] audit: type=1804 audit(1564157552.844:47): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir081072977/syzkaller.AiRqtU/13/bus" dev="sda1" ino=16616 res=1 16:12:32 executing program 1: socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0x8, 0x1}, 0x0) 16:12:33 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:33 executing program 1: socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000), 0x0) 16:12:33 executing program 3: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/102, 0x66}], 0x1, 0x0) 16:12:33 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:33 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x0, &(0x7f0000000000), 0x0) 16:12:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0x8, 0x1}, 0x0) 16:12:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:33 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:33 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x0, &(0x7f0000000000), 0x0) 16:12:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x35}, {0x6}]}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="8d", 0x1}], 0x1) [ 174.360759] 9pnet: Insufficient options for proto=fd 16:12:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080), 0x4) 16:12:33 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:33 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x0, &(0x7f0000000000), 0x0) [ 174.512815] 9pnet: Insufficient options for proto=fd 16:12:33 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:33 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}]}}) 16:12:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:33 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, 0x0, 0x0) 16:12:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) [ 174.658226] 9pnet: Insufficient options for proto=fd 16:12:34 executing program 5: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:34 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, 0x0, 0x0) 16:12:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 174.737007] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:12:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00\x00\x00\x00\x03\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, r1}) [ 174.796644] 9pnet: Insufficient options for proto=fd 16:12:34 executing program 5: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:34 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:34 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x5b0b16fdc62b5399) setsockopt(r0, 0x0, 0x40, 0x0, 0x0) 16:12:34 executing program 5: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) [ 174.880893] 9pnet: Insufficient options for proto=fd 16:12:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0xffffff3b, &(0x7f0000023ff0)={&(0x7f0000000100)={0x14, 0x32, 0xb03}, 0x14}}, 0x0) 16:12:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:12:34 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:34 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x0, @multicast1}, 0x10) [ 174.983799] tc_dump_action: action bad kind 16:12:34 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) [ 175.020561] 9pnet: Insufficient options for proto=fd 16:12:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x30, 0x0, &(0x7f0000000400)) 16:12:34 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:34 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:34 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:34 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000022c0)=[{&(0x7f0000000100)}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:12:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 16:12:34 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:34 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) writev(r1, &(0x7f0000000600)=[{&(0x7f0000001540)="99", 0x1}], 0x1) 16:12:34 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) [ 175.205269] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 16:12:34 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 16:12:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 16:12:34 executing program 4: r0 = syz_open_procfs(0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:34 executing program 4: r0 = syz_open_procfs(0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 175.389232] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 16:12:34 executing program 3: r0 = memfd_create(&(0x7f0000000040)='%:@jtrusted\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)="347e13044fc48a") write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 16:12:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(r0, 0x0, 0x0) 16:12:34 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RWSTAT(r0, &(0x7f00000000c0)={0x7}, 0xfeee) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:12:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 16:12:34 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:34 executing program 4: r0 = syz_open_procfs(0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffd0a}, 0x1) readahead(r0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20c2) 16:12:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(r0, 0x0, 0x0) 16:12:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0xe, 0x8, "4adb51488e9627b75f502a4d5d82bda2e0903ccf5b882561fe8832b6937ab069051b586415a13d0453e047bb2179a903536b944ed33b3a7f80417faf076ce56d", "cecdb239cb332e6ffd2bf862f7bc279ad06e5593b46a546f5dfde92ad0dd31473f0c08bbbcbed181ebb5ffdfc345311d9f80ced79d8cb6aa0fffc77351e02d67", "ffcbbf34e57ae3205a8cafe96bfb76546e24f52e55347c1d01fba2010c9967e6", [0x9b, 0x5]}) 16:12:35 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(r0, 0x0, 0x0) [ 175.666294] audit: type=1804 audit(1564157554.964:48): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir728751816/syzkaller.28i8IP/27/bus" dev="sda1" ino=16640 res=1 16:12:35 executing program 1: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141046, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:12:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x5, 0x100132, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)) 16:12:35 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RWSTAT(r0, &(0x7f00000000c0)={0x7}, 0xfeee) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 16:12:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:35 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000), 0x0) [ 175.853827] audit: type=1800 audit(1564157555.004:49): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16640 res=0 16:12:35 executing program 3: setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0x0]) 16:12:35 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0xc}, {0x6}]}) 16:12:35 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 175.983673] audit: type=1804 audit(1564157555.104:50): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir728751816/syzkaller.28i8IP/27/bus" dev="sda1" ino=16640 res=1 16:12:35 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:35 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x8000f, 0x0) readv(r0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.', 0xffffffffffffffff, 0x2000000}, &(0x7f0000000240)='syz', 0xffffffffffffffff) 16:12:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60000400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) truncate(&(0x7f00000001c0)='./file0/file0\x00', 0x10001) 16:12:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580), 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000), 0x0) 16:12:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 16:12:35 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580), 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:35 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) [ 176.224278] audit: type=1800 audit(1564157555.104:51): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16640 res=0 [ 176.263059] audit: type=1400 audit(1564157555.124:52): avc: denied { map } for pid=7891 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29126 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 176.394859] audit: type=1804 audit(1564157555.274:53): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir728751816/syzkaller.28i8IP/28/bus" dev="sda1" ino=16632 res=1 16:12:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 16:12:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 16:12:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x80000001) write$evdev(r0, &(0x7f0000000000), 0x0) 16:12:36 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580), 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 16:12:36 executing program 5: pipe2$9p(&(0x7f0000000140), 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 16:12:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:36 executing program 1: chdir(0x0) symlink(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 16:12:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000000100)={0x14, 0x31, 0xb03}, 0x14}}, 0x0) 16:12:36 executing program 5: pipe2$9p(&(0x7f0000000140), 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 16:12:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:36 executing program 1: timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000004a000)={{0x77359400}, {0x0, 0xe4c}}, 0x0) [ 177.026219] tc_ctl_action: received NO action attribs 16:12:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 16:12:36 executing program 5: pipe2$9p(&(0x7f0000000140), 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 16:12:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6&\x7fC\xfdK&\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$KDSETLED(r2, 0x4b32, 0x8) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 16:12:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:12:36 executing program 1: pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xfdb0159ceca526b7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYRES64], 0xffffff10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000640)="ad2bb8c0df1f14", 0x7}], 0x1, 0x0) 16:12:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) r2 = syz_open_dev$usbmon(0x0, 0xfffffffffffeffff, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x5, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 16:12:36 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:36 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}]}}) 16:12:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 16:12:36 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 177.374435] 9pnet: Insufficient options for proto=fd 16:12:36 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x8}, {0x0, 0x5, 0x1000}, {0x0, 0xf60c}], 0x3, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x8}], 0x1, 0x0) 16:12:36 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, 0x0}}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 177.458159] 9pnet: Insufficient options for proto=fd 16:12:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 16:12:36 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}]}}) [ 177.571849] 9pnet: Insufficient options for proto=fd 16:12:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000000100), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 16:12:36 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x10000000000005, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)) [ 427.992208] INFO: task syz-executor.1:8031 blocked for more than 140 seconds. [ 428.000453] Not tainted 4.14.134 #30 [ 428.005534] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.013913] syz-executor.1 D28848 8031 7081 0x00000004 [ 428.019593] Call Trace: [ 428.022365] __schedule+0x7b8/0x1cd0 [ 428.026102] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.031765] schedule+0x92/0x1c0 [ 428.035518] schedule_timeout+0x93b/0xe10 [ 428.039840] ? wait_for_completion+0x274/0x420 [ 428.044722] ? find_held_lock+0x35/0x130 [ 428.049052] ? usleep_range+0x130/0x130 [ 428.053565] ? wait_for_completion+0x274/0x420 [ 428.058741] ? _raw_spin_unlock_irq+0x28/0x90 [ 428.063611] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.068795] wait_for_completion+0x27c/0x420 [ 428.073685] ? wait_for_completion_interruptible+0x490/0x490 [ 428.080558] ? wake_up_q+0xf0/0xf0 [ 428.084570] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.089957] flush_work+0x3eb/0x730 [ 428.093665] ? insert_work+0x320/0x320 [ 428.098686] ? flush_workqueue_prep_pwqs+0x470/0x470 [ 428.104369] ? __cancel_work_timer+0x166/0x480 [ 428.109142] __cancel_work_timer+0x2f0/0x480 [ 428.113639] ? cancel_delayed_work+0x20/0x20 [ 428.118218] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 428.123871] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.128910] cancel_work_sync+0x18/0x20 [ 428.133100] p9_fd_close+0x2ae/0x450 [ 428.136984] p9_client_create+0x787/0x1120 [ 428.141299] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 428.147703] ? __kmalloc_track_caller+0x372/0x790 [ 428.152851] ? __lockdep_init_map+0x10c/0x570 [ 428.158196] ? lockdep_init_map+0x9/0x10 [ 428.162925] ? __raw_spin_lock_init+0x2d/0x100 [ 428.167899] v9fs_session_init+0x1dc/0x1620 [ 428.172313] ? check_preemption_disabled+0x3c/0x250 [ 428.177944] ? v9fs_show_options+0x730/0x730 [ 428.182711] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 428.188715] ? v9fs_mount+0x5e/0x870 [ 428.192729] ? rcu_read_lock_sched_held+0x110/0x130 [ 428.198387] ? kmem_cache_alloc_trace+0x623/0x790 [ 428.203291] ? free_pages+0x46/0x50 [ 428.207431] v9fs_mount+0x7d/0x870 [ 428.211059] mount_fs+0x97/0x2a1 [ 428.214621] vfs_kern_mount.part.0+0x5e/0x3d0 [ 428.219791] do_mount+0x417/0x27d0 [ 428.223531] ? copy_mount_string+0x40/0x40 [ 428.228144] ? copy_mount_options+0x18f/0x2f0 [ 428.233486] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 428.238661] ? copy_mount_options+0x1fe/0x2f0 [ 428.243229] SyS_mount+0xab/0x120 [ 428.246710] ? copy_mnt_ns+0x8c0/0x8c0 [ 428.251441] do_syscall_64+0x1e8/0x640 [ 428.255556] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.260964] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.266335] RIP: 0033:0x459829 [ 428.269784] RSP: 002b:00007fbb1d998c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.277739] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459829 [ 428.285506] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 428.293714] RBP: 000000000075bfc8 R08: 0000000020000840 R09: 0000000000000000 [ 428.301806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb1d9996d4 [ 428.309521] R13: 00000000004c5db7 R14: 00000000004da778 R15: 00000000ffffffff [ 428.317206] [ 428.317206] Showing all locks held in the system: [ 428.323806] 1 lock held by khungtaskd/1013: [ 428.328465] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 428.337980] 2 locks held by getty/7028: [ 428.342418] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.351732] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.361801] 2 locks held by getty/7029: [ 428.365774] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.378044] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.388981] 2 locks held by getty/7030: [ 428.393058] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.402040] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.411602] 2 locks held by getty/7031: [ 428.415804] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.424812] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.434609] 2 locks held by getty/7032: [ 428.438684] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.448458] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.458780] 2 locks held by getty/7033: [ 428.463117] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.472574] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.482456] 2 locks held by getty/7034: [ 428.492340] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.501710] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.511933] 2 locks held by kworker/0:3/7086: [ 428.516719] #0: ("events"){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 428.526063] #1: ((&m->wq)){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 428.534743] [ 428.536385] ============================================= [ 428.536385] [ 428.543907] NMI backtrace for cpu 1 [ 428.547559] CPU: 1 PID: 1013 Comm: khungtaskd Not tainted 4.14.134 #30 [ 428.554552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.564229] Call Trace: [ 428.567002] dump_stack+0x138/0x19c [ 428.570790] nmi_cpu_backtrace.cold+0x57/0x94 [ 428.575410] ? irq_force_complete_move.cold+0x7d/0x7d [ 428.581182] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 428.586971] arch_trigger_cpumask_backtrace+0x14/0x20 [ 428.592479] watchdog+0x5e7/0xb90 [ 428.597031] kthread+0x319/0x430 [ 428.600577] ? hungtask_pm_notify+0x50/0x50 [ 428.605221] ? kthread_create_on_node+0xd0/0xd0 [ 428.610202] ret_from_fork+0x24/0x30 [ 428.614034] Sending NMI from CPU 1 to CPUs 0: [ 428.619047] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff861b514e [ 428.619942] Kernel panic - not syncing: hung_task: blocked tasks [ 428.632427] CPU: 1 PID: 1013 Comm: khungtaskd Not tainted 4.14.134 #30 [ 428.639558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.649978] Call Trace: [ 428.652984] dump_stack+0x138/0x19c [ 428.656867] panic+0x1f2/0x426 [ 428.660156] ? add_taint.cold+0x16/0x16 [ 428.664289] ? irq_force_complete_move.cold+0x7d/0x7d [ 428.669916] watchdog+0x5f8/0xb90 [ 428.673851] kthread+0x319/0x430 [ 428.677610] ? hungtask_pm_notify+0x50/0x50 [ 428.682988] ? kthread_create_on_node+0xd0/0xd0 [ 428.688200] ret_from_fork+0x24/0x30 [ 428.693975] Kernel Offset: disabled [ 428.697996] Rebooting in 86400 seconds..