Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts. [ 56.794193] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/20 01:56:59 fuzzer started [ 56.985423] audit: type=1400 audit(1568944619.202:36): avc: denied { map } for pid=6827 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 57.399288] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/20 01:57:00 dialing manager at 10.128.0.105:43807 2019/09/20 01:57:00 syscalls: 2472 2019/09/20 01:57:00 code coverage: enabled 2019/09/20 01:57:00 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/20 01:57:00 extra coverage: extra coverage is not supported by the kernel 2019/09/20 01:57:00 setuid sandbox: enabled 2019/09/20 01:57:00 namespace sandbox: enabled 2019/09/20 01:57:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/20 01:57:00 fault injection: enabled 2019/09/20 01:57:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/20 01:57:00 net packet injection: enabled 2019/09/20 01:57:00 net device setup: enabled [ 59.073419] random: crng init done 01:58:16 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2e]}, 0x48) 01:58:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xa4, 0x400}], 0x5, 0x0) [ 134.739984] audit: type=1400 audit(1568944696.952:37): avc: denied { map } for pid=6827 comm="syz-fuzzer" path="/root/syzkaller-shm498980384" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 01:58:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79}) 01:58:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @rand_addr=0x1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}, '\xf9\xff\xdd\xff\x01\x00\x00\x01\x00fG\x00\x00\x00\x00\x80'}) 01:58:17 executing program 3: 01:58:17 executing program 4: [ 134.767210] audit: type=1400 audit(1568944696.952:38): avc: denied { map } for pid=6844 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 135.080885] IPVS: ftp: loaded support on port[0] = 21 [ 135.918223] chnl_net:caif_netlink_parms(): no params data found [ 135.921184] IPVS: ftp: loaded support on port[0] = 21 [ 135.956395] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.964567] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.971537] device bridge_slave_0 entered promiscuous mode [ 135.978232] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.984857] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.992421] device bridge_slave_1 entered promiscuous mode [ 136.018211] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.029412] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.050147] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.057460] team0: Port device team_slave_0 added [ 136.058333] IPVS: ftp: loaded support on port[0] = 21 [ 136.062982] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.075036] team0: Port device team_slave_1 added [ 136.086170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.093499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.152115] device hsr_slave_0 entered promiscuous mode [ 136.190288] device hsr_slave_1 entered promiscuous mode [ 136.272295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.281231] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 136.331491] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.337930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.344763] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.351107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.367305] chnl_net:caif_netlink_parms(): no params data found [ 136.381996] IPVS: ftp: loaded support on port[0] = 21 [ 136.447150] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.453969] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.460775] device bridge_slave_0 entered promiscuous mode [ 136.468867] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.475299] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.482544] device bridge_slave_1 entered promiscuous mode [ 136.504216] chnl_net:caif_netlink_parms(): no params data found [ 136.528234] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.550286] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.593978] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.601830] team0: Port device team_slave_0 added [ 136.606853] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.614847] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.622552] device bridge_slave_0 entered promiscuous mode [ 136.629296] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.635963] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.636619] IPVS: ftp: loaded support on port[0] = 21 [ 136.648123] device bridge_slave_1 entered promiscuous mode [ 136.654980] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.662578] team0: Port device team_slave_1 added [ 136.678798] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 136.684996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.691854] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.705833] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.714175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.782994] device hsr_slave_0 entered promiscuous mode [ 136.821435] device hsr_slave_1 entered promiscuous mode [ 136.861474] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.875843] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.883255] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.901943] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 136.922823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.929834] team0: Port device team_slave_0 added [ 136.938115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.946080] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.953116] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.959938] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 136.969843] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 136.976223] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.986709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.994851] team0: Port device team_slave_1 added [ 137.039092] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.049068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.061127] IPVS: ftp: loaded support on port[0] = 21 [ 137.061552] chnl_net:caif_netlink_parms(): no params data found [ 137.078016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.086117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.093830] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.100185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.107839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.129275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.138201] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.155481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.163188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.171215] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.177569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.262547] device hsr_slave_0 entered promiscuous mode [ 137.300377] device hsr_slave_1 entered promiscuous mode [ 137.340584] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.361233] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.374988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.385365] chnl_net:caif_netlink_parms(): no params data found [ 137.398058] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.405256] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.412202] device bridge_slave_0 entered promiscuous mode [ 137.419990] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.427059] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.434036] device bridge_slave_1 entered promiscuous mode [ 137.442501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.456862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.475247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.494825] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.504384] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.521758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 137.530358] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.549715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.558241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.566279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.585769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 137.599225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 137.610980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.618001] team0: Port device team_slave_0 added [ 137.624647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.631781] team0: Port device team_slave_1 added [ 137.637117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.644981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.652532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.659847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.670775] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.677108] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.686045] device bridge_slave_0 entered promiscuous mode [ 137.694210] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.700611] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.707525] device bridge_slave_1 entered promiscuous mode [ 137.714368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 137.722024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.745773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.753661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.764148] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.782017] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.827935] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.836355] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 137.842419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.912521] device hsr_slave_0 entered promiscuous mode [ 137.950436] device hsr_slave_1 entered promiscuous mode [ 137.993603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.000639] chnl_net:caif_netlink_parms(): no params data found [ 138.009139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.016558] team0: Port device team_slave_0 added [ 138.022542] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.029638] team0: Port device team_slave_1 added [ 138.035934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 138.043276] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 138.051852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 138.067051] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.084150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 138.122456] device hsr_slave_0 entered promiscuous mode [ 138.160438] device hsr_slave_1 entered promiscuous mode [ 138.221339] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 138.230975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.239317] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.255298] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 138.262679] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 138.273629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.280768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.288867] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.295122] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.304411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.311764] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.318101] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.326057] device bridge_slave_0 entered promiscuous mode [ 138.332689] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.339036] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.346547] device bridge_slave_1 entered promiscuous mode [ 138.359519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.366481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.374428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.384371] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.390719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.398237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.418984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.428449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.436274] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 138.449887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.458141] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.467153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.474224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.483162] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.489225] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.496736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.507165] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 138.525548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.533617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.541370] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.547713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.565646] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.573211] team0: Port device team_slave_0 added [ 138.579076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.595918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.604420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.612712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.624770] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.631167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.638615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.647197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.655373] team0: Port device team_slave_1 added [ 138.663456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 01:58:20 executing program 0: [ 138.682016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.695243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.704739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.713087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.720942] bridge0: port 2(bridge_slave_1) entered blocking state 01:58:20 executing program 0: 01:58:21 executing program 0: [ 138.727288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.734845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.749104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 138.759267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 138.794333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.803831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.822282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.832396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 01:58:21 executing program 0: r0 = socket$inet6(0x10, 0x4000000000000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x200001000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c000600000019001500060000000000009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d48950af4a8fcd36", 0x55}], 0x1}, 0x0) [ 138.841214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.852295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.860398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.869133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.887673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.895502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.903634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.911483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.918941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.926846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.934750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.944079] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.992252] device hsr_slave_0 entered promiscuous mode [ 139.030277] device hsr_slave_1 entered promiscuous mode [ 139.072725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.082615] IPv6: Can't replace route, no match found [ 139.088127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.095180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.102852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.112201] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 01:58:21 executing program 0: r0 = socket$inet(0x10, 0x4000000000003, 0x100000000006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 139.120883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.128698] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 139.141621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.148618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.164924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.174226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.182014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.189456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.197198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.206487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.214768] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 139.224592] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 139.231011] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.238412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.246317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.256236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.265163] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 01:58:21 executing program 0: sendto$inet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) [ 139.271365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.278857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.287688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.296278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.310285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 01:58:21 executing program 0: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x16) [ 139.318145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.331139] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.337490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.352941] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.359041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.370498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.377813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.388627] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 139.395120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.402791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.410655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.418099] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.424460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.435772] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.446657] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.455039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.473533] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.483945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.501997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.508921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.519542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.540869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.549537] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.562002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.568919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.576533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.584746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.593027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.602546] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 139.608601] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.618411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.629348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.636873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.644613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.654130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.667067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.676495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.684273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.692439] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.698765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.705971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.714736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.722672] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.729034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.738009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.747478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.755456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.763385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.774497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.782168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.794507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.809977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.824357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.833361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.842191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.853145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.862463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.871129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.871248] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 139.878736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.905944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.914278] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.930714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.937703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.946115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.955151] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.961501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.972625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.980173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.987660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.997780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.004910] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 140.024686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.045912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.054870] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 140.062852] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.071600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 140.079248] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 140.092828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.104391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.114327] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 140.121851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.143772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.152925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.165233] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 140.179111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 01:58:22 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000080005000a000000"], 0x1c}}, 0x0) 01:58:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") membarrier(0x2, 0x0) [ 140.193420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.202023] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.208353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.218404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.228304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.241545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.253071] audit: type=1400 audit(1568944702.472:39): avc: denied { create } for pid=6932 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 140.280369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.292452] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.298811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.309371] audit: type=1400 audit(1568944702.482:40): avc: denied { write } for pid=6932 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 140.315700] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 140.346274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.355515] audit: type=1400 audit(1568944702.482:41): avc: denied { read } for pid=6932 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 140.357627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.393826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.406319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.421525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.431914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 140.438917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.447553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.465235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 140.473062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.485263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.493085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.503159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 140.511422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.518903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.528581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 140.537100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.548102] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 140.554429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.562341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.569784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.599540] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 01:58:22 executing program 2: [ 140.611965] 8021q: adding VLAN 0 to HW filter on device batadv0 01:58:23 executing program 3: openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 01:58:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x283, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x0, 0x80002, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) socket$inet(0x2, 0x800, 0x6) pipe(&(0x7f00000015c0)) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) 01:58:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xa4, 0x400}], 0x5, 0x0) 01:58:23 executing program 0: 01:58:23 executing program 5: 01:58:23 executing program 2: 01:58:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4}) 01:58:23 executing program 5: r0 = socket(0x10, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fcd00e6a82fd1", 0x12, 0x0, 0x0, 0x0) 01:58:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x178, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffbfffffffe, &(0x7f0000000240)={0x0, 0x17, 0x4}, &(0x7f0000000080)) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x11}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) 01:58:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000001140)="13", 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f754d8b07"], &(0x7f0000000540)=0x1) setpriority(0x0, 0x0, 0xffff) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x9, 0x2, 0x8, 0x0, 0x84, 0x40, 0x3, 0x1ff, 0x95b2, 0x10000, 0x7ff, 0x8001, 0x401, 0x2, 0x0, 0x7, 0x1f, 0x1da, 0x974, 0xbce, 0x80, 0x8000, 0x35, 0x0, 0x71e, 0x2, 0xffff, 0x30b, 0x3, 0xfc00000000000000, 0x200, 0xc919, 0x3, 0x7fffffff, 0x1ff, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x20c, 0x0, 0x0, 0xf, 0x7f, 0xffff, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18080080}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) r4 = getuid() fsetxattr$security_capability(r3, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x2, 0x4}, {0x3, 0x5}], r4}, 0x18, 0x1) socket(0xa, 0x0, 0x0) getpgrp(0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r5) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001000)) socket(0xa, 0x0, 0x0) getpgrp(0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f754d8b07"], &(0x7f0000000540)=0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) getpgrp(r6) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004180)=ANY=[@ANYBLOB="0010000000000000000000000000000000000000a02af1607d07640e7337d15b5c0d008ac2c808f6ee870a939e984644ab3e01483ea9bf3b7c79a03356093dc953293647212b563acd468325d8abfb2153d611d1001b20c83e762f243d60cdd72de1c4eeef7494fcc8b2dc051031bc7bf1d98ebc5e38b2cf13750a698e2db49765b5f98d004cb5e3b391cd836a9e1e0234afd77952f984d8d58f1560a55c1945d58799b6cf974e73e79d52f801000008000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"/499, @ANYRES32=0x0, @ANYBLOB="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"], 0x1000}}, 0x0) [ 141.800774] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. [ 141.818475] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 141.840031] hrtimer: interrupt took 30810 ns [ 141.844568] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 01:58:24 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x178, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x9) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 141.871651] kasan: CONFIG_KASAN_INLINE enabled 01:58:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xa4, 0x400}], 0x5, 0x0) [ 141.905881] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 141.942405] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 141.948659] Modules linked in: [ 141.950679] kobject: 'loop0' (ffff8880a4902da0): kobject_uevent_env [ 141.951857] CPU: 1 PID: 6993 Comm: syz-executor.4 Not tainted 4.14.145 #0 [ 141.958261] kobject: 'loop0' (ffff8880a4902da0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 141.965149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.965154] task: ffff888098d6a540 task.stack: ffff888062540000 [ 141.965168] RIP: 0010:tcp_sendmsg_locked+0x50e/0x3200 [ 141.965172] RSP: 0018:ffff888062547aa8 EFLAGS: 00010206 [ 141.965178] RAX: 0000000000000012 RBX: 0000000000000000 RCX: ffffc9000d277000 [ 141.965182] RDX: 00000000000000c4 RSI: ffffffff85240e44 RDI: 0000000000000090 [ 141.965186] RBP: ffff888062547c40 R08: ffff888098d6a540 R09: 0000000000000001 [ 141.965190] R10: 0000000000000000 R11: ffff888098d6a540 R12: dffffc0000000000 [ 141.965195] R13: ffff8880a149a340 R14: ffff888062547d60 R15: ffff88806439ac00 [ 141.965201] FS: 00007f5f3d338700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 141.965205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.965210] CR2: 00007f70b9049198 CR3: 000000007d62e000 CR4: 00000000001406e0 [ 141.965217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.965221] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.965223] Call Trace: [ 141.965239] ? lock_sock_nested+0x9e/0x110 [ 142.053931] kobject: 'loop1' (ffff8880a495ae20): kobject_uevent_env [ 142.058186] ? find_held_lock+0x35/0x130 [ 142.058201] ? tcp_sendpage+0x60/0x60 [ 142.058209] ? trace_hardirqs_on_caller+0x400/0x590 [ 142.058218] ? trace_hardirqs_on+0xd/0x10 [ 142.102873] tcp_sendmsg+0x30/0x50 [ 142.106412] inet_sendmsg+0x122/0x500 [ 142.110209] ? inet_recvmsg+0x500/0x500 [ 142.114180] sock_sendmsg+0xce/0x110 [ 142.117885] SYSC_sendto+0x206/0x310 [ 142.121594] ? SYSC_connect+0x2d0/0x2d0 [ 142.125574] ? kasan_check_read+0x11/0x20 [ 142.127547] kobject: 'loop1' (ffff8880a495ae20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 142.129721] ? _copy_to_user+0x87/0xd0 [ 142.129734] ? put_timespec64+0xb4/0x100 [ 142.129742] ? nsecs_to_jiffies+0x30/0x30 [ 142.129755] ? SyS_clock_gettime+0xf8/0x180 01:58:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x1bc, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={r2, @in={{0x2, 0x4e21, @local}}}, 0x90) [ 142.155530] SyS_sendto+0x40/0x50 [ 142.158989] ? SyS_getpeername+0x30/0x30 [ 142.163060] do_syscall_64+0x1e8/0x640 [ 142.166944] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 142.171784] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 142.175963] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 142.176966] RIP: 0033:0x459a09 [ 142.176971] RSP: 002b:00007f5f3d337c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 142.176981] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a09 [ 142.176986] RDX: fffffffffffffd72 RSI: 0000000020000340 RDI: 0000000000000003 [ 142.176991] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 142.176996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5f3d3386d4 [ 142.176999] R13: 00000000004c79f5 R14: 00000000004dd490 R15: 00000000ffffffff [ 142.177008] Code: [ 142.217324] kobject: 'loop0' (ffff8880a4902da0): kobject_uevent_env [ 142.217508] d4 [ 142.227008] kobject: 'loop0' (ffff8880a4902da0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 142.232020] 38 fc 4d 85 ed 0f 84 40 08 00 00 e8 ac d4 38 fc 8b 85 78 ff ff ff 48 8d bb 90 00 00 00 89 85 50 ff ff ff 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 06 0f 8e 4a 25 00 00 f6 83 90 00 00 00 [ 142.270218] RIP: tcp_sendmsg_locked+0x50e/0x3200 RSP: ffff888062547aa8 [ 142.282869] ---[ end trace d90d10a0aa9b1e06 ]--- [ 142.287951] Kernel panic - not syncing: Fatal exception [ 142.294725] Kernel Offset: disabled [ 142.298462] Rebooting in 86400 seconds..