Warning: Permanently added '10.128.0.69' (ECDSA) to the list of known hosts. [ 34.839383] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/13 00:30:53 fuzzer started [ 35.039385] kauditd_printk_skb: 10 callbacks suppressed [ 35.039394] audit: type=1400 audit(1568334653.685:36): avc: denied { map } for pid=6718 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 35.408431] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/13 00:30:54 dialing manager at 10.128.0.105:35171 2019/09/13 00:30:56 syscalls: 2466 2019/09/13 00:30:56 code coverage: enabled 2019/09/13 00:30:56 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/13 00:30:56 extra coverage: extra coverage is not supported by the kernel 2019/09/13 00:30:56 setuid sandbox: enabled 2019/09/13 00:30:56 namespace sandbox: enabled 2019/09/13 00:30:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/13 00:30:56 fault injection: enabled 2019/09/13 00:30:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/13 00:30:56 net packet injection: enabled 2019/09/13 00:30:56 net device setup: enabled 00:30:56 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000002c40), 0x1000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x4}) 00:30:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 38.176666] audit: type=1400 audit(1568334656.825:37): avc: denied { map } for pid=6718 comm="syz-fuzzer" path="/root/syzkaller-shm647095472" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 00:30:56 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000100)={0x81, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 00:30:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 00:30:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:30:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x102002700) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) [ 38.203585] audit: type=1400 audit(1568334656.825:38): avc: denied { map } for pid=6736 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13821 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 38.361670] IPVS: ftp: loaded support on port[0] = 21 [ 39.139272] IPVS: ftp: loaded support on port[0] = 21 [ 39.185727] chnl_net:caif_netlink_parms(): no params data found [ 39.227163] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.233770] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.240974] device bridge_slave_0 entered promiscuous mode [ 39.247605] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.254436] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.261788] IPVS: ftp: loaded support on port[0] = 21 [ 39.268618] device bridge_slave_1 entered promiscuous mode [ 39.287019] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.298364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.322046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.329142] team0: Port device team_slave_0 added [ 39.334687] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.341807] team0: Port device team_slave_1 added [ 39.349516] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.358220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.461826] device hsr_slave_0 entered promiscuous mode [ 39.520314] device hsr_slave_1 entered promiscuous mode [ 39.582294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.596437] chnl_net:caif_netlink_parms(): no params data found [ 39.610960] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.650948] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.657357] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.664783] device bridge_slave_0 entered promiscuous mode [ 39.665483] IPVS: ftp: loaded support on port[0] = 21 [ 39.682695] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.689036] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.696161] device bridge_slave_1 entered promiscuous mode [ 39.707298] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.713729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.720553] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.726885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.782360] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.792730] chnl_net:caif_netlink_parms(): no params data found [ 39.806347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.838506] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.845654] team0: Port device team_slave_0 added [ 39.859114] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.867272] team0: Port device team_slave_1 added [ 39.889009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.897330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.905266] IPVS: ftp: loaded support on port[0] = 21 [ 39.910514] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.910539] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.911228] device bridge_slave_0 entered promiscuous mode [ 39.930546] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.936896] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.943854] device bridge_slave_1 entered promiscuous mode [ 39.972329] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.031932] device hsr_slave_0 entered promiscuous mode [ 40.070251] device hsr_slave_1 entered promiscuous mode [ 40.110718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.118060] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.130068] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.149026] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.156249] team0: Port device team_slave_0 added [ 40.161795] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.168821] team0: Port device team_slave_1 added [ 40.183408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.195336] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.201717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.208293] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.214632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.225241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.293066] device hsr_slave_0 entered promiscuous mode [ 40.330432] device hsr_slave_1 entered promiscuous mode [ 40.370707] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.379783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.393275] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.400214] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.407357] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.414189] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.443692] IPVS: ftp: loaded support on port[0] = 21 [ 40.489094] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.503050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.539361] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.580112] chnl_net:caif_netlink_parms(): no params data found [ 40.589042] chnl_net:caif_netlink_parms(): no params data found [ 40.597977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.608801] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.632524] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.649576] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.662888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.670397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.677262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.684151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.701945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.710418] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.716499] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.749811] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.756563] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.765528] device bridge_slave_0 entered promiscuous mode [ 40.772169] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.778497] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.785638] device bridge_slave_1 entered promiscuous mode [ 40.824999] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.831887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.839710] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.845999] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.857125] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.863581] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.872162] device bridge_slave_0 entered promiscuous mode [ 40.880861] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.887187] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.894396] device bridge_slave_1 entered promiscuous mode [ 40.902563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.910402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.917902] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.924294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.934344] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.942400] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.952094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.998547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.005399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.012734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.020365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.027811] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.034176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.042360] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.052707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.060676] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.066730] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.075100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.102334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.115235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.123220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.130928] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.137246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.145092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.152846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.160413] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.166732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.175306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.188340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.196060] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.215334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.223078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.231801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.240403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.250415] chnl_net:caif_netlink_parms(): no params data found [ 41.265349] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.272574] team0: Port device team_slave_0 added [ 41.283817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.291768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.299419] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.305783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.312892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.320929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.328762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.341075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.348126] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.355612] team0: Port device team_slave_1 added [ 41.361736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.368778] team0: Port device team_slave_0 added [ 41.376042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.384895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.392745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.400851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.408373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.416164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.423910] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.430273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.437080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.445870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.453028] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.460388] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.467384] team0: Port device team_slave_1 added [ 41.475475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.483127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.489952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.499746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.507253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.515742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.523603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.531430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.538471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.551367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.561859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.569322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.577749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 41.584957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.607629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.615627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.623327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.630919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.638229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.647710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.658143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 41.683642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.691686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.699181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.706772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.714218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.725019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 41.772111] device hsr_slave_0 entered promiscuous mode [ 41.820446] device hsr_slave_1 entered promiscuous mode [ 41.890293] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.896651] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.903935] device bridge_slave_0 entered promiscuous mode [ 41.963487] device hsr_slave_0 entered promiscuous mode [ 42.000430] device hsr_slave_1 entered promiscuous mode [ 42.040657] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.050092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.058090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.065133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.072844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.080206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.087550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.094969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.102622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.111209] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.118308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.124510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.131570] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.137903] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.145288] device bridge_slave_1 entered promiscuous mode [ 42.151837] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.161431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.169967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.177374] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.189575] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.202655] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.208647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.222988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.230453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.237705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.245849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.254666] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.261268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.276702] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.291499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.306249] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.315015] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.325926] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.343645] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.374558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.383307] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.392108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.399634] team0: Port device team_slave_0 added [ 42.410534] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.417573] team0: Port device team_slave_1 added [ 42.437841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.455944] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.464533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.479637] 8021q: adding VLAN 0 to HW filter on device bond0 00:31:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 42.518972] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.536104] 8021q: adding VLAN 0 to HW filter on device bond0 00:31:01 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000100)={0x81, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 42.587564] device hsr_slave_0 entered promiscuous mode [ 42.613910] usb usb5: usbfs: process 6788 (syz-executor.5) did not claim interface 0 before use [ 42.630480] device hsr_slave_1 entered promiscuous mode 00:31:01 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000100)={0x81, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 42.641912] usb usb5: usbfs: process 6794 (syz-executor.5) did not claim interface 0 before use [ 42.669693] usb usb5: usbfs: process 6798 (syz-executor.5) did not claim interface 0 before use [ 42.681139] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready 00:31:01 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000100)={0x81, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 00:31:01 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000100)={0x81, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 42.688081] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.693753] usb usb5: usbfs: process 6801 (syz-executor.5) did not claim interface 0 before use [ 42.723705] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.731659] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 00:31:01 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000100)={0x81, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 42.739882] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.754924] usb usb5: usbfs: process 6806 (syz-executor.5) did not claim interface 0 before use [ 42.757003] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.780934] usb usb5: usbfs: process 6809 (syz-executor.5) did not claim interface 0 before use [ 42.798631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.806792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.816604] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.830829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.838899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.846261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.853438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.861489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.869055] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.875431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.884163] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.893571] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.899688] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.906493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.916750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.925766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.935132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.943778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.951810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.959326] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.965698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.972635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.981041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.988537] bridge0: port 1(bridge_slave_0) entered blocking state 00:31:01 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000002c40), 0x1000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x4}) 00:31:01 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000100)={0x81, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 00:31:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 42.994891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.001895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.009493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.017110] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.023478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.047975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.054886] usb usb5: usbfs: process 6827 (syz-executor.5) did not claim interface 0 before use [ 43.063807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.065643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.084075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.127422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.147494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.155880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.164003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.171694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.179123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.187763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.197741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.209905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.218329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.225228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.234263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.242112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.249467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.257206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.265060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.274863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.283984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.291852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.301510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.313884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.325303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.331486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.338887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.346678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.354215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.363989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.374835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.384556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.391966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.399254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.407563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.416209] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.422849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.430701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.437709] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.445607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.454307] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.467565] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.474292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.481275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.492392] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.502901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.511061] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.517304] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.527718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.539530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.552008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.562984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.570772] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.577101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.584765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.595615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.604819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.612863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.620865] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.627218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.635722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.647689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.657783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.666074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.676070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.685834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.694611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.702425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.710051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.717527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.725693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.735220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.744829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.751933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.759312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.767123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 00:31:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) [ 43.774995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.793754] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.799770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.815120] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.826318] 8021q: adding VLAN 0 to HW filter on device batadv0 00:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 00:31:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000002c40), 0x1000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x4}) 00:31:03 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000002c40), 0x1000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x4}) 00:31:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 00:31:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x102002700) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) [ 44.708697] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:31:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 00:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000002c40), 0x1000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x4}) 00:31:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000002c40), 0x1000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x4}) 00:31:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x102002700) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) 00:31:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000002c40), 0x1000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x4}) 00:31:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0x17642c4) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x102002700) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0, 0x0) 00:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) 00:31:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x0, 0xfdfdffff}) [ 233.234115] random: crng init done [ 284.641664] INFO: task syz-executor.0:6890 blocked for more than 140 seconds. [ 284.649249] Not tainted 4.14.143 #0 [ 284.654098] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.662120] syz-executor.0 D28528 6890 6737 0x00000004 [ 284.667779] Call Trace: [ 284.670664] __schedule+0x7b8/0x1cd0 [ 284.674425] ? __lock_is_held+0xb6/0x140 [ 284.678531] ? pci_mmcfg_check_reserved+0x150/0x150 [ 284.683609] ? trace_hardirqs_on+0x10/0x10 [ 284.687842] schedule+0x92/0x1c0 [ 284.691245] schedule_timeout+0x93b/0xe10 [ 284.695935] ? wait_for_completion+0x274/0x420 [ 284.700544] ? find_held_lock+0x35/0x130 [ 284.704599] ? usleep_range+0x130/0x130 [ 284.708558] ? _raw_spin_unlock_irq+0x28/0x90 [ 284.713097] ? trace_hardirqs_on_caller+0x400/0x590 [ 284.718113] wait_for_completion+0x27c/0x420 [ 284.722596] ? try_to_wake_up+0xa8/0xf90 [ 284.726657] ? wait_for_completion_interruptible+0x490/0x490 [ 284.732553] ? wake_up_q+0xf0/0xf0 [ 284.736240] kthread_stop+0xda/0x650 [ 284.740031] sdr_cap_stop_streaming+0x1fc/0x320 [ 284.744792] ? sdr_cap_buf_queue+0x230/0x230 [ 284.749247] __vb2_queue_cancel+0xa3/0x890 [ 284.753573] ? lock_downgrade+0x6e0/0x6e0 [ 284.757740] vb2_core_streamoff+0x52/0x110 [ 284.762055] __vb2_cleanup_fileio+0x78/0x150 [ 284.766527] vb2_core_queue_release+0x1d/0x80 [ 284.771070] _vb2_fop_release+0x1cf/0x2a0 [ 284.775222] vb2_fop_release+0x75/0xc0 [ 284.779095] vivid_fop_release+0x180/0x3f0 [ 284.783362] ? vivid_remove+0x3d0/0x3d0 [ 284.787386] ? dev_debug_store+0xe0/0xe0 [ 284.791485] v4l2_release+0xf9/0x190 [ 284.795196] __fput+0x275/0x7a0 [ 284.798459] ____fput+0x16/0x20 [ 284.801767] task_work_run+0x114/0x190 [ 284.805657] exit_to_usermode_loop+0x1da/0x220 [ 284.810277] do_syscall_64+0x4bc/0x640 [ 284.814162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.819004] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 284.824231] RIP: 0033:0x4135d1 [ 284.827412] RSP: 002b:00007ffc4ca8a3d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 284.835151] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004135d1 [ 284.842438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 284.849690] RBP: 0000000000000001 R08: ffffffff817beb79 R09: 000000006e783fbf [ 284.856985] R10: 00007ffc4ca8a4b0 R11: 0000000000000293 R12: 000000000075bf20 [ 284.864285] R13: 000000000000afa8 R14: 00000000007603a0 R15: ffffffffffffffff [ 284.871601] ? __might_fault+0x149/0x1d0 [ 284.875684] [ 284.875684] Showing all locks held in the system: [ 284.882295] 1 lock held by khungtaskd/1013: [ 284.886702] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 284.895800] 2 locks held by getty/6697: [ 284.899760] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 284.908490] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 284.917821] 2 locks held by getty/6698: [ 284.921809] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 284.930523] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 284.939817] 2 locks held by getty/6699: [ 284.943808] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 284.952532] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 284.961869] 2 locks held by getty/6700: [ 284.965844] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 284.974576] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 284.983915] 2 locks held by getty/6701: [ 284.987869] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 284.996580] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 285.005908] 2 locks held by getty/6702: [ 285.009861] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 285.018577] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 285.027902] 2 locks held by getty/6703: [ 285.031910] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 285.040726] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 285.050097] [ 285.051725] ============================================= [ 285.051725] [ 285.059098] NMI backtrace for cpu 1 [ 285.062767] CPU: 1 PID: 1013 Comm: khungtaskd Not tainted 4.14.143 #0 [ 285.069342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.078702] Call Trace: [ 285.081372] dump_stack+0x138/0x197 [ 285.084986] nmi_cpu_backtrace.cold+0x57/0x94 [ 285.089464] ? irq_force_complete_move.cold+0x7d/0x7d [ 285.094641] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 285.099900] arch_trigger_cpumask_backtrace+0x14/0x20 [ 285.105078] watchdog+0x5e7/0xb90 [ 285.108517] kthread+0x319/0x430 [ 285.111870] ? hungtask_pm_notify+0x50/0x50 [ 285.116189] ? kthread_create_on_node+0xd0/0xd0 [ 285.120856] ret_from_fork+0x24/0x30 [ 285.124735] Sending NMI from CPU 1 to CPUs 0: [ 285.129302] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff861c13ae [ 285.130360] Kernel panic - not syncing: hung_task: blocked tasks [ 285.142764] CPU: 1 PID: 1013 Comm: khungtaskd Not tainted 4.14.143 #0 [ 285.149338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.158677] Call Trace: [ 285.161262] dump_stack+0x138/0x197 [ 285.164879] panic+0x1f2/0x426 [ 285.168065] ? add_taint.cold+0x16/0x16 [ 285.172018] ? ___preempt_schedule+0x16/0x18 [ 285.176414] watchdog+0x5f8/0xb90 [ 285.179856] kthread+0x319/0x430 [ 285.183204] ? hungtask_pm_notify+0x50/0x50 [ 285.187504] ? kthread_create_on_node+0xd0/0xd0 [ 285.192160] ret_from_fork+0x24/0x30 [ 285.197379] Kernel Offset: disabled [ 285.201030] Rebooting in 86400 seconds..