Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts. [ 49.271411] random: sshd: uninitialized urandom read (32 bytes read) 2019/10/02 15:51:44 fuzzer started [ 49.466565] audit: type=1400 audit(1570031504.243:36): avc: denied { map } for pid=6817 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 49.686926] random: cc1: uninitialized urandom read (8 bytes read) 2019/10/02 15:51:44 dialing manager at 10.128.0.105:35767 2019/10/02 15:51:45 syscalls: 2500 2019/10/02 15:51:45 code coverage: enabled 2019/10/02 15:51:45 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/10/02 15:51:45 extra coverage: extra coverage is not supported by the kernel 2019/10/02 15:51:45 setuid sandbox: enabled 2019/10/02 15:51:45 namespace sandbox: enabled 2019/10/02 15:51:45 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/02 15:51:45 fault injection: enabled 2019/10/02 15:51:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/02 15:51:45 net packet injection: enabled 2019/10/02 15:51:45 net device setup: enabled [ 51.533798] random: crng init done 15:53:58 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @broadcast, 'veth1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local, 'vxcan1\x00'}}) 15:53:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e2"], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:53:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x1c004, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:53:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000300)=ANY=[@ANYBLOB="0200"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:53:58 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) creat(0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) ioctl$void(r0, 0x5450) syz_open_procfs(0x0, 0x0) 15:53:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x0, 0x2013, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000d1c000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r4, 0x0) [ 183.449031] audit: type=1400 audit(1570031638.223:37): avc: denied { map } for pid=6817 comm="syz-fuzzer" path="/root/syzkaller-shm924992158" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 183.541202] audit: type=1400 audit(1570031638.243:38): avc: denied { map } for pid=6834 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 183.661732] IPVS: ftp: loaded support on port[0] = 21 [ 184.495886] chnl_net:caif_netlink_parms(): no params data found [ 184.525269] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.531969] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.538807] device bridge_slave_0 entered promiscuous mode [ 184.541109] IPVS: ftp: loaded support on port[0] = 21 [ 184.550178] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.556582] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.563875] device bridge_slave_1 entered promiscuous mode [ 184.585605] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.597747] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.617481] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.624642] team0: Port device team_slave_0 added [ 184.631892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.638852] team0: Port device team_slave_1 added [ 184.645864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.654848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.666442] IPVS: ftp: loaded support on port[0] = 21 [ 184.731825] device hsr_slave_0 entered promiscuous mode [ 184.770240] device hsr_slave_1 entered promiscuous mode [ 184.852158] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 184.861638] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 184.907971] IPVS: ftp: loaded support on port[0] = 21 [ 184.933280] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.939744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.946657] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.953008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.971285] chnl_net:caif_netlink_parms(): no params data found [ 185.042767] chnl_net:caif_netlink_parms(): no params data found [ 185.072612] IPVS: ftp: loaded support on port[0] = 21 [ 185.100242] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.106676] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.113934] device bridge_slave_0 entered promiscuous mode [ 185.122073] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.128397] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.135663] device bridge_slave_1 entered promiscuous mode [ 185.145002] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 185.151273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.198359] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.224139] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.243877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.250483] chnl_net:caif_netlink_parms(): no params data found [ 185.277616] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.284133] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.291269] device bridge_slave_0 entered promiscuous mode [ 185.299364] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.305764] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.312683] device bridge_slave_1 entered promiscuous mode [ 185.318911] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.326133] team0: Port device team_slave_0 added [ 185.334843] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.342028] team0: Port device team_slave_1 added [ 185.348299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.357263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.365848] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.382907] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.399895] IPVS: ftp: loaded support on port[0] = 21 [ 185.399952] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.414394] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 185.421240] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.482079] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.532892] device hsr_slave_0 entered promiscuous mode [ 185.570402] device hsr_slave_1 entered promiscuous mode [ 185.612966] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.620178] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 185.627626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.635308] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.641643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.649057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.656867] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.663231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.670812] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.679194] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.685697] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.692655] device bridge_slave_0 entered promiscuous mode [ 185.719899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 185.728427] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.743721] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.750307] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.757168] device bridge_slave_1 entered promiscuous mode [ 185.774871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.790329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.808457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.815683] team0: Port device team_slave_0 added [ 185.823216] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.830340] team0: Port device team_slave_1 added [ 185.838623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.849000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.863555] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.875888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.884099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.891613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.899149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.906778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.914717] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.922636] chnl_net:caif_netlink_parms(): no params data found [ 185.947771] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.013158] device hsr_slave_0 entered promiscuous mode [ 186.050514] device hsr_slave_1 entered promiscuous mode [ 186.091154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.101556] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.108570] team0: Port device team_slave_0 added [ 186.118264] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.126224] team0: Port device team_slave_1 added [ 186.137074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.144794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.152677] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.159664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.176831] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.184822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 186.205595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.213121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.232981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.239811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 186.247374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.263560] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.269920] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.278467] device bridge_slave_0 entered promiscuous mode [ 186.322293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.329693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.382037] device hsr_slave_0 entered promiscuous mode [ 186.440313] device hsr_slave_1 entered promiscuous mode [ 186.480844] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.487942] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.494564] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.501479] device bridge_slave_1 entered promiscuous mode [ 186.522712] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 186.528717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.537279] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.545970] chnl_net:caif_netlink_parms(): no params data found [ 186.554988] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.568341] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.610612] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 186.623564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.631699] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.638923] team0: Port device team_slave_0 added [ 186.646929] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.654276] team0: Port device team_slave_1 added [ 186.669702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.683066] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.689639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.697704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.707056] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.725960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.744377] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.761743] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.767888] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.774324] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.781672] device bridge_slave_0 entered promiscuous mode [ 186.787937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.795082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 15:54:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x148, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0xfffffffffffffea8, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "cfb00e660e1b65907c63fd59528b84c14ad2626459764d9039cc81181f1c1cc64a5f1b41cf6e9e29eeff7dc0731a3b93726844979d3177e00694028bf291868fe806b18ec0cb90aba32e4113acc608653d53fb02292cd4d4ec7f025680600fc6ee5db3ca5678e14135814790ea09b31a822e179cebfa8b4d8d86919c284ab8a510b00ee501e3790cac03b147b713ecfdc9f3ab33a1aeaa316bf34e451a3bbe9a5ea3a6b1b084121ee054233b4071fbdd6661ad8c8bfaaff41b1f971e9fc9d2044188e409cbac293c664d639ecc296448c75b209709f56ab24c2836c4d8c7648ec6f4756880b2d0205e25e911a5d695ce7361cc23ce9b605dd2da28a229162922"}]}}]}, 0x148}}, 0x0) [ 186.837354] device hsr_slave_0 entered promiscuous mode [ 186.870315] device hsr_slave_1 entered promiscuous mode [ 186.901993] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.910299] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.916356] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.924874] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.931380] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.938208] device bridge_slave_1 entered promiscuous mode [ 186.951400] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.5'. [ 186.960695] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.972950] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.975606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6873 comm=syz-executor.5 [ 186.982167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.006799] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.015666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.022754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.029479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.037201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.044954] bridge0: port 1(bridge_slave_0) entered blocking state 15:54:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000640)={0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00', r4}, 0x30) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 187.051320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.058445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.065505] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.5'. [ 187.075495] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 187.082026] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.093966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.109225] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.128043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.136194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.144045] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.150422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.157792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.168448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.186675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.194807] team0: Port device team_slave_0 added 15:54:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000640)={0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, r3}, 0x30) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 187.205526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.215308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.231243] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.238265] team0: Port device team_slave_1 added [ 187.248199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.256248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.264324] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.270694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.277648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.285709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.293257] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.299687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.308375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.316970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.326815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.333258] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.345588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.353827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.363306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.372282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.381476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.388752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.396597] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 15:54:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000640)={0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, r3}, 0x30) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 187.417968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.427736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.436065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.445469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.457473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.465106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.473584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.482606] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.491237] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 187.497437] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.504861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.543518] device hsr_slave_0 entered promiscuous mode [ 187.580505] device hsr_slave_1 entered promiscuous mode 15:54:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x3c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa04b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(0x0, r3, 0xc, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) [ 187.631285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.644723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.652178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.659078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.669850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 15:54:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x2af, &(0x7f0000000980)=""/101, 0x19}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0x10036}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) [ 187.679480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.691646] hrtimer: interrupt took 25736 ns [ 187.695080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.708993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.722324] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.729235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.742742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.750449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.758105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.766274] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.772666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.779749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.787602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.795204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.802511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.813319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.822891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.830979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.839749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.855516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.864256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.872517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.887119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.901123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.908782] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.916672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.925855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.933679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.941826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.949499] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.955903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.967006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.974680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.989475] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.997635] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.010121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.019577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.031767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 15:54:02 executing program 5: socket$kcm(0x2, 0x0, 0x84) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x4020940d, 0x7fdfffffeffb) [ 188.039307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.048953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.058275] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.067227] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.073819] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.087856] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.095767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.104803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.116143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.126960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.136317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.143677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.157069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.167792] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.185874] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.192756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.201140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.210674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 188.218398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.233698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.243003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.252175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 188.265407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.273332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.283123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.291776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.299284] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.305647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.312793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.320595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.328839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.344188] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.350449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.361572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.370735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.378352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.387401] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.393812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.409083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.423952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.436025] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.443558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.455784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.465565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.474215] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.483035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.491080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.498690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.506461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.513379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.520671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.531199] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 188.548645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.561938] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.568009] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.581265] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.590198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.598161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.612425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 188.625926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.642373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.649475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.667525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.676414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.692927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.700862] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.707189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.715764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 188.728666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.739962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.749509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.787254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.795202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.804782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.812473] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.818796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.827533] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.834121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.855823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.871301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.880890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 15:54:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e2"], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:54:03 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8947, &(0x7f00000001c0)='bond0\x00') [ 188.892812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.900780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.913896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.933036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.948033] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.961480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.968533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.979328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.987514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.002126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.010822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.019433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.064280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.079577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.098540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.119778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.134889] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 189.141635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.157492] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 189.162108] ================================================================== [ 189.168256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.171166] BUG: KASAN: null-ptr-deref in kvm_write_guest_virt_system+0x64/0x90 [ 189.171176] Write of size 24 at addr (null) by task syz-executor.1/6944 [ 189.171179] [ 189.171189] CPU: 0 PID: 6944 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 189.171195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.171199] Call Trace: [ 189.171210] dump_stack+0x138/0x197 [ 189.171222] ? vprintk_func+0x65/0x159 [ 189.171237] ? kvm_write_guest_virt_system+0x64/0x90 [ 189.171246] kasan_report.cold+0x127/0x2af [ 189.171258] check_memory_region+0x123/0x190 [ 189.171268] memset+0x24/0x40 [ 189.171280] kvm_write_guest_virt_system+0x64/0x90 [ 189.171292] handle_vmread+0x548/0x730 [ 189.171303] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 189.171317] ? __lock_is_held+0xb6/0x140 [ 189.171333] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 189.184830] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 189.184842] vmx_handle_exit+0x20d/0x1330 [ 189.184851] ? vcpu_enter_guest+0xd2d/0x5210 [ 189.184864] vcpu_enter_guest+0xf28/0x5210 [ 189.278789] ? save_trace+0x290/0x290 [ 189.282572] ? find_held_lock+0x130/0x130 [ 189.286707] ? emulator_read_emulated+0x50/0x50 [ 189.291374] ? lock_acquire+0x16f/0x430 [ 189.295330] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 189.300761] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 189.305579] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 189.310595] kvm_vcpu_ioctl+0x401/0xd10 [ 189.314550] ? kvm_vcpu_block+0xbb0/0xbb0 [ 189.318682] ? trace_hardirqs_on+0x10/0x10 [ 189.322902] ? __might_fault+0x110/0x1d0 [ 189.326941] ? save_trace+0x290/0x290 [ 189.330722] ? __might_fault+0x110/0x1d0 [ 189.334777] ? __fget+0x210/0x370 [ 189.338210] ? find_held_lock+0x35/0x130 [ 189.342250] ? __fget+0x210/0x370 [ 189.345681] ? kvm_vcpu_block+0xbb0/0xbb0 [ 189.349829] do_vfs_ioctl+0x7ae/0x1060 [ 189.353708] ? selinux_file_mprotect+0x5d0/0x5d0 [ 189.358439] ? lock_downgrade+0x6e0/0x6e0 [ 189.362573] ? ioctl_preallocate+0x1c0/0x1c0 [ 189.366957] ? __fget+0x237/0x370 [ 189.370393] ? security_file_ioctl+0x89/0xb0 [ 189.374787] SyS_ioctl+0x8f/0xc0 [ 189.378129] ? do_vfs_ioctl+0x1060/0x1060 [ 189.382256] do_syscall_64+0x1e8/0x640 [ 189.386129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 189.390952] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.396117] RIP: 0033:0x459a29 [ 189.399287] RSP: 002b:00007fbdcf412c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.406970] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 189.414216] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 189.421464] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 189.428723] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbdcf4136d4 [ 189.435968] R13: 00000000004c2ddb R14: 00000000004d68f8 R15: 00000000ffffffff [ 189.443222] ================================================================== [ 189.450567] Disabling lock debugging due to kernel taint [ 189.461321] Kernel panic - not syncing: panic_on_warn set ... [ 189.461321] [ 189.468704] CPU: 0 PID: 6944 Comm: syz-executor.1 Tainted: G B 4.14.146 #0 [ 189.476835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.486198] Call Trace: [ 189.488786] dump_stack+0x138/0x197 [ 189.492404] ? kvm_write_guest_virt_system+0x64/0x90 [ 189.497484] panic+0x1f2/0x426 [ 189.500655] ? add_taint.cold+0x16/0x16 [ 189.504606] ? ___preempt_schedule+0x16/0x18 [ 189.509006] kasan_end_report+0x47/0x4f [ 189.512957] kasan_report.cold+0x130/0x2af [ 189.517173] check_memory_region+0x123/0x190 [ 189.521561] memset+0x24/0x40 [ 189.524646] kvm_write_guest_virt_system+0x64/0x90 [ 189.529555] handle_vmread+0x548/0x730 [ 189.533433] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 189.538780] ? __lock_is_held+0xb6/0x140 [ 189.542855] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 189.548282] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 189.553623] vmx_handle_exit+0x20d/0x1330 [ 189.557749] ? vcpu_enter_guest+0xd2d/0x5210 [ 189.562141] vcpu_enter_guest+0xf28/0x5210 [ 189.566365] ? save_trace+0x290/0x290 [ 189.570144] ? find_held_lock+0x130/0x130 [ 189.574274] ? emulator_read_emulated+0x50/0x50 [ 189.578956] ? lock_acquire+0x16f/0x430 [ 189.582907] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 189.588450] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 189.593275] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 189.598315] kvm_vcpu_ioctl+0x401/0xd10 [ 189.602269] ? kvm_vcpu_block+0xbb0/0xbb0 [ 189.606396] ? trace_hardirqs_on+0x10/0x10 [ 189.610623] ? __might_fault+0x110/0x1d0 [ 189.614670] ? save_trace+0x290/0x290 [ 189.618450] ? __might_fault+0x110/0x1d0 [ 189.622486] ? __fget+0x210/0x370 [ 189.625927] ? find_held_lock+0x35/0x130 [ 189.629969] ? __fget+0x210/0x370 [ 189.633401] ? kvm_vcpu_block+0xbb0/0xbb0 [ 189.637531] do_vfs_ioctl+0x7ae/0x1060 [ 189.641415] ? selinux_file_mprotect+0x5d0/0x5d0 [ 189.646297] ? lock_downgrade+0x6e0/0x6e0 [ 189.650437] ? ioctl_preallocate+0x1c0/0x1c0 [ 189.654827] ? __fget+0x237/0x370 [ 189.658265] ? security_file_ioctl+0x89/0xb0 [ 189.662694] SyS_ioctl+0x8f/0xc0 [ 189.666056] ? do_vfs_ioctl+0x1060/0x1060 [ 189.670186] do_syscall_64+0x1e8/0x640 [ 189.674053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 189.678876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.684040] RIP: 0033:0x459a29 [ 189.687222] RSP: 002b:00007fbdcf412c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.694904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 189.702153] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 189.709403] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 189.716648] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbdcf4136d4 [ 189.723893] R13: 00000000004c2ddb R14: 00000000004d68f8 R15: 00000000ffffffff [ 189.732643] Kernel Offset: disabled [ 189.736326] Rebooting in 86400 seconds..