Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts. [ 45.470354] random: sshd: uninitialized urandom read (32 bytes read) 2019/07/30 10:12:34 fuzzer started [ 45.684730] audit: type=1400 audit(1564481554.665:36): avc: denied { map } for pid=7119 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 47.708016] random: cc1: uninitialized urandom read (8 bytes read) 2019/07/30 10:12:37 dialing manager at 10.128.0.105:43819 2019/07/30 10:12:37 syscalls: 2463 2019/07/30 10:12:37 code coverage: enabled 2019/07/30 10:12:37 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/07/30 10:12:37 extra coverage: extra coverage is not supported by the kernel 2019/07/30 10:12:37 setuid sandbox: enabled 2019/07/30 10:12:37 namespace sandbox: enabled 2019/07/30 10:12:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/30 10:12:37 fault injection: enabled 2019/07/30 10:12:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/30 10:12:37 net packet injection: enabled 2019/07/30 10:12:37 net device setup: enabled [ 49.705542] random: crng init done 10:14:50 executing program 5: 10:14:50 executing program 0: 10:14:50 executing program 3: 10:14:50 executing program 1: 10:14:50 executing program 2: 10:14:50 executing program 4: [ 181.552028] audit: type=1400 audit(1564481690.535:37): avc: denied { map } for pid=7119 comm="syz-fuzzer" path="/root/syzkaller-shm976317537" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 181.630631] audit: type=1400 audit(1564481690.555:38): avc: denied { map } for pid=7137 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=26 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 182.550253] IPVS: ftp: loaded support on port[0] = 21 [ 182.878080] chnl_net:caif_netlink_parms(): no params data found [ 182.887118] IPVS: ftp: loaded support on port[0] = 21 [ 182.941856] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.948596] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.955825] device bridge_slave_0 entered promiscuous mode [ 182.966488] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.972959] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.980393] device bridge_slave_1 entered promiscuous mode [ 183.003925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.013327] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.025572] IPVS: ftp: loaded support on port[0] = 21 [ 183.052718] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.065127] team0: Port device team_slave_0 added [ 183.076649] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.087801] team0: Port device team_slave_1 added [ 183.105226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.139363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.243162] device hsr_slave_0 entered promiscuous mode [ 183.310329] device hsr_slave_1 entered promiscuous mode [ 183.360843] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 183.394256] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 183.405744] IPVS: ftp: loaded support on port[0] = 21 [ 183.441262] chnl_net:caif_netlink_parms(): no params data found [ 183.489691] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.496165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.503083] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.509445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.583143] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.589686] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.598495] IPVS: ftp: loaded support on port[0] = 21 [ 183.598608] device bridge_slave_0 entered promiscuous mode [ 183.625374] chnl_net:caif_netlink_parms(): no params data found [ 183.646903] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.654388] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.661858] device bridge_slave_1 entered promiscuous mode [ 183.695596] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.713438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.762949] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.770302] team0: Port device team_slave_0 added [ 183.796198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.804166] team0: Port device team_slave_1 added [ 183.846093] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.853628] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.860817] device bridge_slave_0 entered promiscuous mode [ 183.868304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.877704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.893890] IPVS: ftp: loaded support on port[0] = 21 [ 183.911682] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.918065] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.925635] device bridge_slave_1 entered promiscuous mode [ 183.942819] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.949629] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.022333] device hsr_slave_0 entered promiscuous mode [ 184.060368] device hsr_slave_1 entered promiscuous mode [ 184.140438] chnl_net:caif_netlink_parms(): no params data found [ 184.150995] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 184.158028] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 184.175795] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.199731] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.325178] chnl_net:caif_netlink_parms(): no params data found [ 184.333852] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.342951] team0: Port device team_slave_0 added [ 184.359324] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.366256] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.373724] device bridge_slave_0 entered promiscuous mode [ 184.385351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.393450] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 184.400117] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.407387] team0: Port device team_slave_1 added [ 184.418167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.425821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.433045] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.439511] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.446852] device bridge_slave_1 entered promiscuous mode [ 184.471085] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.482914] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.533612] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.544150] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.550685] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.558619] device bridge_slave_0 entered promiscuous mode [ 184.570106] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.577042] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.585922] device bridge_slave_1 entered promiscuous mode [ 184.652481] device hsr_slave_0 entered promiscuous mode [ 184.700423] device hsr_slave_1 entered promiscuous mode [ 184.771725] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 184.783277] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.799535] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.807585] team0: Port device team_slave_0 added [ 184.815705] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.823175] team0: Port device team_slave_1 added [ 184.828997] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 184.839844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.847357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.857330] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 184.863620] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.876181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.884197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.898458] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.925981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.962322] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.994249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.008540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.022106] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.036477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.054073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.132525] device hsr_slave_0 entered promiscuous mode [ 185.180497] device hsr_slave_1 entered promiscuous mode [ 185.240524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.248341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.256358] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.262772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.289557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 185.303888] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.314396] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.322647] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.345760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.356111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.363752] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.372964] team0: Port device team_slave_0 added [ 185.378619] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.386224] team0: Port device team_slave_1 added [ 185.402362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.410507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.438015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.449392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.468351] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.504483] device hsr_slave_0 entered promiscuous mode [ 185.540780] device hsr_slave_1 entered promiscuous mode [ 185.586678] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.594077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.603270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.610964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.618930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.629150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.638102] chnl_net:caif_netlink_parms(): no params data found [ 185.659048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.668518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.691067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 185.712796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.722256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.738469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.761885] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.768331] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.775591] device bridge_slave_0 entered promiscuous mode [ 185.782848] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.789245] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.797686] device bridge_slave_1 entered promiscuous mode [ 185.805742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 185.820485] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.833059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.841176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.851648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.863348] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.872798] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 185.879296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.895015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.903200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.913976] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 185.922865] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.946299] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 185.954563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.965747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.980721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.988835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.000796] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.008052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.017115] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.027996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.035908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.045247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.055942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.063499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.072393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.079987] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.086429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.103437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.114092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.129345] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.140991] team0: Port device team_slave_0 added [ 186.148605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.159508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.172655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.187863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.195366] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.202940] team0: Port device team_slave_1 added [ 186.209176] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.221838] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.235524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.243336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.251397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.258942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.266322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.273393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.285790] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.292930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.308610] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.315266] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.322002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.328969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.338601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.346187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.361174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.368883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.379627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.388456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.398170] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.405569] 8021q: adding VLAN 0 to HW filter on device team0 10:14:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000002bc0)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}]}, 0x64}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 186.442570] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.458021] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.464499] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.524046] device hsr_slave_0 entered promiscuous mode [ 186.590562] device hsr_slave_1 entered promiscuous mode [ 186.630874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.637931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.645827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.655677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.664939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 186.673225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 10:14:55 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@nodiscard='nodiscard'}]}) [ 186.683290] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.693021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.701513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.711092] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.717480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.732928] gfs2: not a GFS2 filesystem [ 186.741252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.749282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.757394] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.763794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.773012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.782483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.790686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.798550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.806632] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.806744] gfs2: not a GFS2 filesystem [ 186.813071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.814494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.831768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.842846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.852590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.861527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.869376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 10:14:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x4002, 0x12, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) [ 186.883456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.892659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.900377] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.906734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.913828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.921879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.929449] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.935875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.942713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.952728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.968970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 186.984436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.999260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.010277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.018373] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.024898] bridge0: port 2(bridge_slave_1) entered forwarding state 10:14:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 187.031928] ion_buffer_destroy: buffer still mapped in the kernel [ 187.039014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.047119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.057142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.075666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.084908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.084962] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 187.099041] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.119311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.128002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.141604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.149662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.167028] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.179379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 10:14:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 187.197759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.209274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.224501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.235387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.247841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.275047] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.284660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 10:14:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000500)=""/103) memfd_create(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0) [ 187.295721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.305781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.316872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.327595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.338669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.349459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.359792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.374574] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.383101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.392597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.400465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.407408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.415125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.423621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.432080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 10:14:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0xda2, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 187.443992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.454368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.464856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.476155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.485963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.503119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.527739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.554099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.566079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.601581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.609874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.617785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.628386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.637453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.648742] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.654976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.662692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.671023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.692086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.701522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.710490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.720901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.731682] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.737794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.745579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.754239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.762039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.769498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.779919] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.786536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.797143] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.810851] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.841939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.856252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.865711] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.888022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.907213] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.927431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.937543] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.957014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.965073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.976227] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 10:14:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 188.006385] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.026740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.034516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.045689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.055685] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.062104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.072507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.089787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.100010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.108229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.117378] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.123787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.127044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.147582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.161152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.179610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.188094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.201775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 10:14:57 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x4) [ 188.221323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.236239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.251075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.258518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 10:14:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x10}], 0x10}}], 0x1, 0x0) [ 188.278188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.303335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 188.318233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.326932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.379523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 188.404619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.420847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.430295] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.436362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.453353] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.465225] 8021q: adding VLAN 0 to HW filter on device batadv0 10:14:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='reno\x00', 0x5) sendto$inet(r0, 0x0, 0xfffffffffffffe2b, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 10:14:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000007500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_ttl={{0x14}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [{[], 0x7ff}, {[], 0xffffffff00000001}, {}, {[], 0xfffffffffffffff9}, {[], 0xffffffffffff8b7a}, {}]}, @ssrr={0x89, 0x3}]}}}], 0x48}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) 10:14:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x19d) 10:14:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 10:14:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0x1a6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 10:14:58 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r1) 10:14:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000240)="8aa2e6f00a2e8a13cb432827f9915694d6bde7fa26edd3c0d3fe16194fa9ccda4f20f020657ee01d4fc354f4deb5ded7e5a106cbf651e7792d9b264e725d1edf014fe8f2e0ac9e853225cacc5a0e3f2060ae3741bb0dd6e8431ca0bda91a6769b504872e3f9c99d315f89746bce78ca2bd96d729770db6d5b583801e86a9194b1d1d2d31d4a5d754b1250f08007a79ed430db12784d7a31cc80691d5d6955ee7b3e0435941d1f74036fe99c427d44756b7a4099bc3b225294f3058000000a10a2e3a3524eeb2f76df4", 0xc9, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88f41f9221a7511bf746bec66ba6c88d52d8efb5037d7886150cdf3daa064f1b72715c51a3bf92c91", 0x68, 0x0, 0x0, 0x0) 10:14:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 10:14:58 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000100)={'\x00', @ifru_names='ip6gretap0\x00'}) close(r0) 10:14:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000240)="8aa2e6f00a2e8a13cb432827f9915694d6bde7fa26edd3c0d3fe16194fa9ccda4f20f020657ee01d4fc354f4deb5ded7e5a106cbf651e7792d9b264e725d1edf014fe8f2e0ac9e853225cacc5a0e3f2060ae3741bb0dd6e8431ca0bda91a6769b504872e3f9c99d315f89746bce78ca2bd96d729770db6d5b583801e86a9194b1d1d2d31d4a5d754b1250f08007a79ed430db12784d7a31cc80691d5d6955ee7b3e0435941d1f74036fe99c427d44756b7a4099bc3b225294f3058000000a10a2e3a3524eeb2f76df4", 0xc9, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000061c0)) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000045c0)=@generic, 0x80, &(0x7f0000005c80)=[{&(0x7f0000004640)=""/16, 0x10}, {&(0x7f0000004680)=""/86, 0x56}, {&(0x7f0000004700)=""/254, 0xfe}, {&(0x7f0000004800)=""/22, 0x16}, {&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/223, 0xdf}, {&(0x7f0000004a40)=""/205, 0xcd}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/52, 0x34}, {&(0x7f0000005b80)=""/240, 0xf0}], 0xa}, 0xffffffffffff7fff}, {{&(0x7f0000005d40)=@isdn, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005dc0)=""/245, 0xf5}, {&(0x7f0000005ec0)=""/1, 0x1}], 0x2, &(0x7f0000005f40)=""/43, 0x2b}}], 0x3, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88f41f9221a7511bf746bec66ba6c88d52d8efb5037d7886150cdf3daa064f1b72715c51a3bf92c91", 0x68, 0x0, 0x0, 0x0) 10:14:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1a043ffb}, 0xc) 10:14:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmmsg(r1, &(0x7f0000001e40), 0x330fd9699cd19a7, 0x9fc) 10:14:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20000000000001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 10:14:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x30, &(0x7f0000000240)=""/187, &(0x7f0000000300)=0xbb) 10:14:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a", 0xd}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="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", 0x1a4}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d3}], 0x1}, 0x0) 10:14:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="85", 0x1, 0x8000, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2) 10:14:59 executing program 1: syz_extract_tcp_res$synack(0xffffffffffffffff, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) accept4(r0, &(0x7f0000000400)=@ax25={{0x3, @bcast}, [@bcast, @remote, @default, @netrom, @netrom, @bcast, @null, @bcast]}, &(0x7f0000000140)=0x80, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x26f) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0xffffffffffffffef) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$team(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x8800}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 10:14:59 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100000077000000000000006d7dd00424e2bebeec3e7834bad0eeb0fb5f085afb8ae36feb97f25cb5c5d9d16bcc5e33bcfd8d169cb647b61f773fd9f96a822f5fffb3c43b08913f387d384b702fa62798e0b8738c456d4aad89c93890712342e610e44be77adf908d5936373008128a77f41e57b91a474a6f3a55d8a7720d732116476b5c99f50eba11e07b9aa74a1115e3d501ba1515fb6082ef2168834b2decf40da2bb57d8f05d434ac2a90872b77109bbd7397e25aeb82ad3d80101000000000000881f7798afd1a05ef6b720d5cfaffb3c806cb3fe0d1a0983af4698f160fb0d4b"], 0x18}}], 0x1, 0x0) 10:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c080800418e00000004fcff", 0x58}], 0x1) [ 190.548832] audit: type=1400 audit(1564481699.525:39): avc: denied { create } for pid=7313 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 10:14:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000001c0)=0x20000000000080, 0x374) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)="bf477ee853fd1918525da2c707d2776213fe759d844feffbfea6258c07e842b9103df6f729b3fb5c9d2dc56deee4e6423aca0affa5ab25bd1694a5b961d6bfd27a4147c795305f6e79199ba5c4f7a5fd5b718410cd1abf4d483dd7e59636a43458cbade06b2e3cafccf591606da65ee5cb82030b1bae32b0ecb8c4", 0x7b}, {&(0x7f0000001400)="1d08ac33593f4d58c8f3b36ca58637772cb267a26156147609fc2d4fa18b4d50c3c7ebcd6ec2a5b782eab77ecc811a14d36ce8c3b97835526bb1b4292bd254815e06811be961b2a56f5e9289c21dbcac13230b07d72504aa1a282599c4f058be683e95ed1df6a3813eb2d846d652a4c27edcfcc4d88d83bcc1afb9ccbb797a0815647bfef49c9493a2adc839ce3a8415357e62fc43ef812d827b39d16da2acffd8f9b552ce1ca733b0a79c3391952cf49f5d851711a7c9a88bfb6dc39bbca6d0e1e10e25273a7a5653a5834a990f8e3e8dc02ecb5620f943", 0xd8}, {&(0x7f0000001500)="6b24116550cad37a004e013d7aa632cb152c65dcd55931b48a53e8266d991574700037c40301cf1bbcf96b2357d38a5b68aa706f40dcba4f0ccfe4fd3f69e33f31829897164c781178eb4610ed102fd81d1f5e2138cca4af55f4d45104b9d8d2", 0x60}, {&(0x7f0000001600)="2caa75a4561466cb82c600f6ae2431a35b0df576f43bf832a748a0edd098c9108d555ad274571d3d6f0fee2b6777e040daaac752f9135b1ae5c1915f471850290260d418d9e3ffc8bac794c8784e6ab92a61a4843b203d8dadd2159706718c28e3517bb788048a37afe0ec1067b2ea43dd8070b3e806e984a909e678f3870ae8ae9bb04dc7d0e583d2fd2098cb2b", 0x8e}], 0x4}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001700)="ddef1bab463b9926bc9f174815e91e01210c472e1356fb96d464145dade2fddbd7478f3c13a7ea9689b960d03a586db003b694c66d246f5c35", 0x39}, {&(0x7f0000001740)="b386ce63df406d8b9041275a1f8179b577ecaf727b1b7c7915a1aa4d7a458a6f3c5359751e0187ba07c274d5ad31b4790b1b7b08032d909d71b22067d501d267ac49dd149a6b3dd5ccbcdb935c341b257949f2a321be3b8868259f2481ef331d31a821c88e48d4f77587bf602a8ee1c90811aa2ca3430246be06a006fd8d06e8bcbfbec9daafab2d77ac119f5d", 0x8d}, {&(0x7f0000001800)="acda6487a40ae5364e17912f4a1ba86c0f2c7bb8f2c286ce961c494b9c34d7a08f952756a5df2abcd568309f0c450600d412d86987ce28ed7d148180514a25271c37faddf583bffd8c5460c06136f56aee9834b810b04ad4ef412151b7cda819e70e4e21ec3c985a0f8da83897c7330602066d9a15e08cedf721aec3455bcc9ca227f6ce9aa3446e5aacfd20c543d94d3fd355", 0x93}, {&(0x7f00000018c0)="5c583465ad79317885f4537b85dc0eb518d333193b601cbe1fc4a8e3389b6724665c422007143b27058b407ec7b0dbc716b27a22d1415edffb1b1c276d24477dcc30ff5c6097572938d40a0240ead91c9d2fc9e9dedc9d9a9dcff570898a6c7eedc998b719fc20e24e974703d80ef2dc0f7f4551901168182fd45c2429cf41cf6b8aba8937cebdf7edbd03169e08e1d61402851f21d3834b15c3b1f6481299835f9b6fbd6f1a24b64eed78c799e252356ad93b44e46604244846c0e86289bb176d5a90c802e6d52b985aacd8507129a8c70321f7edd5fbd5e1056fcf11814cd0194b37e17d460c", 0xe7}], 0x4}}], 0x2, 0x0) 10:14:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x989, 0x1, 0x78}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x262) [ 190.642707] audit: type=1400 audit(1564481699.575:40): avc: denied { write } for pid=7313 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 10:14:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{}]}, 0x10) 10:14:59 executing program 5: socket$kcm(0x10, 0x800000000002, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x1000100000000001, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, 0x0, 0x0) [ 190.716112] kasan: CONFIG_KASAN_INLINE enabled [ 190.728394] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 190.785499] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 190.791859] Modules linked in: [ 190.795073] CPU: 1 PID: 7343 Comm: syz-executor.2 Not tainted 4.14.134 #30 [ 190.798670] kobject: 'loop4' (ffff8880a4aa61a0): kobject_uevent_env [ 190.802172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.802180] task: ffff8880968d0040 task.stack: ffff88805c2a0000 [ 190.802270] RIP: 0010:rxrpc_connect_call+0xc9/0x41a0 [ 190.802280] RSP: 0018:ffff88805c2a7738 EFLAGS: 00010206 [ 190.811369] kobject: 'loop4' (ffff8880a4aa61a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 190.818426] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000a066000 [ 190.818430] RDX: 0000000000000003 RSI: ffffffff8593c089 RDI: 0000000000000018 [ 190.818435] RBP: ffff88805c2a7880 R08: 0000000000000001 R09: ffff8880968d08e0 [ 190.818440] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807f6f5c00 [ 190.818445] R13: ffff888060cd8720 R14: ffff888060cd8710 R15: ffff88805c2a7998 [ 190.818456] FS: 00007f3c8f309700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 190.890511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.896474] CR2: 00007fd1174ec028 CR3: 000000008f151000 CR4: 00000000001406e0 [ 190.903760] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.911027] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.918304] Call Trace: [ 190.920956] ? release_sock+0x14a/0x1b0 [ 190.924935] ? rxrpc_discard_expired_client_conns+0x7e0/0x7e0 [ 190.930852] ? __local_bh_enable_ip+0x99/0x1a0 [ 190.935444] ? trace_hardirqs_on_caller+0x400/0x590 [ 190.940463] ? release_sock+0x14a/0x1b0 [ 190.944449] ? trace_hardirqs_on+0xd/0x10 [ 190.948600] ? __local_bh_enable_ip+0x99/0x1a0 [ 190.953203] ? _raw_spin_unlock_bh+0x31/0x40 [ 190.957664] rxrpc_new_client_call+0x8f7/0x1420 [ 190.962339] ? rxrpc_do_sendmsg+0x91a/0x1103 [ 190.966749] rxrpc_do_sendmsg+0x91a/0x1103 [ 190.971075] ? rxrpc_kernel_send_data+0x470/0x470 [ 190.976182] ? __local_bh_enable_ip+0x99/0x1a0 [ 190.980764] rxrpc_sendmsg+0x48a/0x650 [ 190.984780] ? security_socket_sendmsg+0x89/0xb0 [ 190.989540] ? rxrpc_sock_destructor+0x130/0x130 [ 190.994291] sock_sendmsg+0xce/0x110 [ 190.998002] ___sys_sendmsg+0x349/0x840 [ 191.001973] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 191.006756] ? __fget+0x210/0x370 [ 191.010295] ? lock_downgrade+0x6e0/0x6e0 [ 191.014442] ? __fget+0x237/0x370 [ 191.017902] ? __fget_light+0x172/0x1f0 [ 191.021879] ? __fdget+0x1b/0x20 [ 191.025240] ? sockfd_lookup_light+0xb4/0x160 [ 191.029738] __sys_sendmmsg+0x152/0x3a0 [ 191.033716] ? SyS_sendmsg+0x50/0x50 [ 191.037441] ? kasan_check_read+0x11/0x20 [ 191.041601] ? _copy_to_user+0x87/0xd0 [ 191.045515] ? put_timespec64+0xb4/0x100 [ 191.049577] ? nsecs_to_jiffies+0x30/0x30 [ 191.053737] ? SyS_clock_gettime+0xf8/0x180 [ 191.058055] SyS_sendmmsg+0x35/0x60 [ 191.061674] ? __sys_sendmmsg+0x3a0/0x3a0 [ 191.065827] do_syscall_64+0x1e8/0x640 [ 191.069711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.074567] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.079762] RIP: 0033:0x459829 [ 191.082941] RSP: 002b:00007f3c8f308c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.090645] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459829 [ 191.097911] RDX: 0000000000000001 RSI: 0000000020005c00 RDI: 0000000000000003 [ 191.105190] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 191.112456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c8f3096d4 [ 191.119724] R13: 00000000004c7000 R14: 00000000004dc570 R15: 00000000ffffffff 10:14:59 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000500)=""/103) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) memfd_create(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 10:14:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x8, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 10:15:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x00\x00\'v\x01\x03\xf2\x00', @ifru_flags}) [ 191.127004] Code: e8 03 80 3c 18 00 0f 85 6f 39 00 00 48 8b 85 28 ff ff ff 48 8b 18 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8a 39 00 00 48 8b 5b 18 48 8d bb 00 02 00 00 [ 191.146227] RIP: rxrpc_connect_call+0xc9/0x41a0 RSP: ffff88805c2a7738 [ 191.177065] audit: type=1400 audit(1564481699.595:41): avc: denied { write } for pid=7313 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 191.179215] kobject: 'À' (ffff888093d27470): kobject_add_internal: parent: 'net', set: 'devices' [ 191.216213] kobject: 'À' (ffff888093d27470): kobject_uevent_env [ 191.226321] kobject: 'À' (ffff888093d27470): fill_kobj_path: path = '/devices/virtual/net/À' [ 191.243698] kobject: 'queues' (ffff88809186ad48): kobject_add_internal: parent: 'À', set: '' [ 191.254973] kobject: 'queues' (ffff88809186ad48): kobject_uevent_env [ 191.261236] audit: type=1400 audit(1564481699.655:42): avc: denied { read } for pid=7313 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 191.262012] kobject: 'queues' (ffff88809186ad48): kobject_uevent_env: filter function caused the event to drop! [ 191.297325] ---[ end trace 2eb55ad8b18e3fb0 ]--- [ 191.298215] kobject: 'rx-0' (ffff88808e40a9d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 191.302454] Kernel panic - not syncing: Fatal exception [ 191.313915] kobject: 'rx-0' (ffff88808e40a9d0): kobject_uevent_env [ 191.318125] Kernel Offset: disabled [ 191.328049] Rebooting in 86400 seconds..