Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. 2020/02/19 14:20:59 fuzzer started [ 113.731674][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 113.731690][ T28] audit: type=1400 audit(1582122058.995:42): avc: denied { map } for pid=10802 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2020/02/19 14:21:00 dialing manager at 10.128.0.26:34315 2020/02/19 14:21:00 syscalls: 2973 2020/02/19 14:21:00 code coverage: enabled 2020/02/19 14:21:00 comparison tracing: enabled 2020/02/19 14:21:00 extra coverage: enabled 2020/02/19 14:21:00 setuid sandbox: enabled 2020/02/19 14:21:00 namespace sandbox: enabled 2020/02/19 14:21:00 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/19 14:21:00 fault injection: enabled 2020/02/19 14:21:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/19 14:21:00 net packet injection: enabled 2020/02/19 14:21:00 net device setup: enabled 2020/02/19 14:21:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/19 14:21:00 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 115.324970][ T28] audit: type=1400 audit(1582122060.585:43): avc: denied { integrity } for pid=10817 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 14:24:30 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/144, 0x436}], 0x1) tkill(r0, 0x1000000000016) [ 324.914681][ T28] audit: type=1400 audit(1582122270.175:44): avc: denied { map } for pid=10819 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22702 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 14:24:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') getdents(r0, &(0x7f0000000040)=""/95, 0x5f) exit(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000000)=""/53, 0xfe77) [ 325.116276][T10820] IPVS: ftp: loaded support on port[0] = 21 [ 325.122390][ T28] audit: type=1400 audit(1582122270.375:45): avc: denied { map } for pid=10802 comm="syz-fuzzer" path="/root/syzkaller-shm901033195" dev="sda1" ino=16496 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 325.276226][T10820] chnl_net:caif_netlink_parms(): no params data found 14:24:30 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/144, 0x436}], 0x1) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000640)=""/4096, 0x2}], 0x1ed) tkill(r0, 0x1000000000016) [ 325.404743][T10824] IPVS: ftp: loaded support on port[0] = 21 [ 325.471343][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.488454][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.509712][T10820] device bridge_slave_0 entered promiscuous mode [ 325.542840][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.557040][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.564864][T10820] device bridge_slave_1 entered promiscuous mode [ 325.610073][T10831] IPVS: ftp: loaded support on port[0] = 21 [ 325.637387][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 14:24:30 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffc82}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704001f00000000ff3f0300000045000600000000141900110015000a12070008002300509b99e54227964f00005d", 0x39}], 0x1) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 325.673235][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.759050][T10820] team0: Port device team_slave_0 added [ 325.789993][T10820] team0: Port device team_slave_1 added [ 325.838491][T10824] chnl_net:caif_netlink_parms(): no params data found [ 325.900465][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.907787][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.934258][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.985077][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.997195][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.024587][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.053316][T10831] chnl_net:caif_netlink_parms(): no params data found [ 326.088554][T10834] IPVS: ftp: loaded support on port[0] = 21 14:24:31 executing program 4: r0 = socket(0x2, 0x1000000000000002, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x68042, 0x0) write$P9_RSTATu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="4a000007000000000057acff000000da144f8f7dac3e947f8288785435459b000000004a0000000000"], 0x29) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r1, 0x0, 0x10003, 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x10001) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffef1, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c}, 0x1c}}, 0x0) [ 326.144803][T10820] device hsr_slave_0 entered promiscuous mode [ 326.220713][T10820] device hsr_slave_1 entered promiscuous mode [ 326.396499][T10839] IPVS: ftp: loaded support on port[0] = 21 [ 326.426193][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.434280][T10824] bridge0: port 1(bridge_slave_0) entered disabled state 14:24:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock(&(0x7f0000e06000/0x4000)=nil, 0x4000) mremap(&(0x7f0000e08000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) [ 326.443673][T10824] device bridge_slave_0 entered promiscuous mode [ 326.496241][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.503627][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.512621][T10824] device bridge_slave_1 entered promiscuous mode [ 326.633455][T10831] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.642125][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.650373][T10831] device bridge_slave_0 entered promiscuous mode [ 326.660396][T10831] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.667577][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.675305][T10831] device bridge_slave_1 entered promiscuous mode [ 326.694435][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.708051][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.765807][T10846] IPVS: ftp: loaded support on port[0] = 21 [ 326.785796][T10824] team0: Port device team_slave_0 added [ 326.800706][T10824] team0: Port device team_slave_1 added [ 326.810728][T10831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.856529][T10831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.890239][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.897945][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.924135][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.940759][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.947840][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.974076][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.024286][ T28] audit: type=1400 audit(1582122272.285:46): avc: denied { create } for pid=10820 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 327.033579][T10831] team0: Port device team_slave_0 added [ 327.052694][ T28] audit: type=1400 audit(1582122272.285:47): avc: denied { write } for pid=10820 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 327.081384][T10820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.083960][ T28] audit: type=1400 audit(1582122272.285:48): avc: denied { read } for pid=10820 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 327.140312][T10839] chnl_net:caif_netlink_parms(): no params data found [ 327.152082][T10831] team0: Port device team_slave_1 added [ 327.210290][T10824] device hsr_slave_0 entered promiscuous mode [ 327.257266][T10824] device hsr_slave_1 entered promiscuous mode [ 327.307146][T10824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.315836][T10824] Cannot create hsr debugfs directory [ 327.326595][T10820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 327.403053][T10831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.410218][T10831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.436619][T10831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.451187][T10831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.458846][T10831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.486001][T10831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.504107][T10820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 327.553241][T10820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.630180][T10834] chnl_net:caif_netlink_parms(): no params data found [ 327.749166][T10831] device hsr_slave_0 entered promiscuous mode [ 327.788812][T10831] device hsr_slave_1 entered promiscuous mode [ 327.827108][T10831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.834769][T10831] Cannot create hsr debugfs directory [ 327.885444][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.893019][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.901357][T10839] device bridge_slave_0 entered promiscuous mode [ 327.910863][T10839] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.918994][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.927082][T10839] device bridge_slave_1 entered promiscuous mode [ 327.991824][T10839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.037192][T10839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.074303][T10834] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.082290][T10834] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.091166][T10834] device bridge_slave_0 entered promiscuous mode [ 328.131610][T10834] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.139472][T10834] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.147831][T10834] device bridge_slave_1 entered promiscuous mode [ 328.181283][T10839] team0: Port device team_slave_0 added [ 328.223086][T10839] team0: Port device team_slave_1 added [ 328.241247][T10834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.251190][T10846] chnl_net:caif_netlink_parms(): no params data found [ 328.282508][T10839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.289744][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.317412][T10839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.330354][T10834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.361559][T10824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.433036][T10824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.492248][T10839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.499434][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.526172][T10839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.562887][T10824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.624477][T10824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.685343][T10834] team0: Port device team_slave_0 added [ 328.742618][T10834] team0: Port device team_slave_1 added [ 328.764483][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.772665][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.780588][T10846] device bridge_slave_0 entered promiscuous mode [ 328.800328][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.807608][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.815521][T10846] device bridge_slave_1 entered promiscuous mode [ 328.853506][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.900354][T10839] device hsr_slave_0 entered promiscuous mode [ 328.937305][T10839] device hsr_slave_1 entered promiscuous mode [ 328.987094][T10839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.994795][T10839] Cannot create hsr debugfs directory [ 329.029725][T10834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.037166][T10834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.064944][T10834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.078302][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.114287][T10834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.122061][T10834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.149018][T10834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.185808][T10846] team0: Port device team_slave_0 added [ 329.196525][T10846] team0: Port device team_slave_1 added [ 329.220067][T10831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.280200][T10831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 329.351550][T10831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.439402][T10834] device hsr_slave_0 entered promiscuous mode [ 329.507636][T10834] device hsr_slave_1 entered promiscuous mode [ 329.567035][T10834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.574907][T10834] Cannot create hsr debugfs directory [ 329.594106][T10831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.660261][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.667994][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.696263][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.740906][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.749691][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.778623][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.871337][T10820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.939199][T10846] device hsr_slave_0 entered promiscuous mode [ 329.967306][T10846] device hsr_slave_1 entered promiscuous mode [ 330.008039][T10846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.016587][T10846] Cannot create hsr debugfs directory [ 330.120039][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.129576][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.144720][T10820] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.161734][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.170329][T10839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.228589][T10839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.296288][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.305821][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.315508][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.323032][T10830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.332790][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.341149][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.349208][T10839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.400360][T10839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.475517][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.484492][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.494692][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.503924][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.511741][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.530347][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.557574][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.587995][T10834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.639098][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.652257][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.662168][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.669727][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.684680][T10834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.744892][T10834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.799903][T10834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.861983][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.870292][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.879748][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.889281][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.897186][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.905373][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.915371][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.924761][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.974488][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.984389][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.993893][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.005569][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.014928][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.024238][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.036597][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.045318][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.099671][T10824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.111014][T10824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.124600][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.135279][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.144304][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.153018][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.162079][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.170957][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.214285][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.224600][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.234090][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.261544][T10820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.275738][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.283950][T10846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.333437][T10846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.391703][T10846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.441277][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.450372][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.460995][T10846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.494822][T10831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.578164][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.586535][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.598401][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.606726][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.640513][T10831] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.664487][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.672673][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.690831][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.703849][T10839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.721953][T10834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.729859][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.740071][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.750114][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.757467][T10858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.767996][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.783005][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.826714][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.835254][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.849009][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.859122][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.868283][T10850] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.875783][T10850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.896316][T10834] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.911646][T10839] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.924207][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.932404][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.941531][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.967180][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.976458][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.986740][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.996132][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.005420][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.015388][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.024563][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.032393][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.041802][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.050676][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.087389][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.100003][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.110005][T10850] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.117576][T10850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.125931][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.135277][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.145676][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.193147][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.201943][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.212611][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.222024][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.229595][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.238277][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.248426][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.257870][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.267490][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.276066][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.285428][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.294960][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.304360][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.336851][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.345613][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.353618][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.362840][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.372081][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.380878][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.390195][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.398914][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.420564][T10824] device veth0_vlan entered promiscuous mode [ 332.448172][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.456040][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.464126][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.473021][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.482466][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.491169][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.500229][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.509618][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.518564][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.527087][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.536334][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.545438][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.566196][T10834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.581098][T10834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.609957][T10831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.631894][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.640551][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.651212][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.659920][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.669686][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.678105][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.690005][T10824] device veth1_vlan entered promiscuous mode [ 332.709089][T10820] device veth0_vlan entered promiscuous mode [ 332.726656][T10846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.734821][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.743187][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.752853][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.762134][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.770212][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.790948][T10834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.826378][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.842669][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.854093][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.862793][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.874978][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.887750][T10839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.913295][T10820] device veth1_vlan entered promiscuous mode [ 332.930720][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.943813][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.952067][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.978009][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.985636][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.003437][T10824] device veth0_macvtap entered promiscuous mode [ 333.020676][T10846] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.040780][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.051572][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.060754][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.069649][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.087861][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.095954][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.108622][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.117728][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.124798][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.136781][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.145095][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.153291][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.179631][T10824] device veth1_macvtap entered promiscuous mode [ 333.203487][T10831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.215249][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.223875][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.236384][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.245111][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.252226][T10830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.271738][T10839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.339340][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.356547][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.365506][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.375414][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.384193][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.394286][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.404784][T10820] device veth0_macvtap entered promiscuous mode [ 333.419392][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.432509][T10834] device veth0_vlan entered promiscuous mode [ 333.442897][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.455518][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.466838][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.475655][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.486378][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.500058][T10820] device veth1_macvtap entered promiscuous mode [ 333.517109][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.527434][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.536129][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.547613][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.583986][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.596092][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.605047][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.613770][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.623008][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.631972][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.640971][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.649977][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.659151][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.671914][T10834] device veth1_vlan entered promiscuous mode [ 333.703334][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.714711][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.728265][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.813796][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.822773][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.831681][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.840333][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.849474][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.881747][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.941748][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 333.952536][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.966234][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.977513][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.985825][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.999223][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.008757][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.020266][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.116786][ T28] audit: type=1400 audit(1582122279.365:49): avc: denied { associate } for pid=10824 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 334.123081][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.171967][T10850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.196006][T10831] device veth0_vlan entered promiscuous mode [ 334.258571][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.266484][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.312148][T10831] device veth1_vlan entered promiscuous mode [ 334.328194][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.336325][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.349726][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.361877][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.371294][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.440056][T10839] device veth0_vlan entered promiscuous mode [ 334.454350][T10834] device veth0_macvtap entered promiscuous mode [ 334.472397][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.480525][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.493817][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.502146][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.510116][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.581924][T10839] device veth1_vlan entered promiscuous mode [ 334.594125][T10834] device veth1_macvtap entered promiscuous mode [ 334.608405][T10846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.642148][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.654823][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.663245][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.671986][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.681145][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.695139][T10831] device veth0_macvtap entered promiscuous mode [ 334.755776][T10831] device veth1_macvtap entered promiscuous mode [ 334.797831][T10834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.810242][T10834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.822611][T10834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.834243][T10834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.849719][T10834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.883342][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.894192][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.902991][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.912809][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.923589][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.933811][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.943242][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.956516][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.968853][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.980334][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.991429][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.004267][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 335.015236][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.026687][T10831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.040263][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.052471][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.063365][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.076357][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.092971][T10831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.101563][T10834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.113289][T10834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.124346][T10834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.135547][T10834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.145490][T10834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.158144][T10834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.170015][T10834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.188683][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.199235][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.209841][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.220260][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.229256][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.241224][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.258104][T10839] device veth0_macvtap entered promiscuous mode 14:24:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') getdents(r0, &(0x7f0000000040)=""/95, 0x5f) exit(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000000)=""/53, 0xfe77) [ 335.301958][T10839] device veth1_macvtap entered promiscuous mode [ 335.387825][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.399247][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.543264][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 335.554090][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.565580][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 335.576333][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.586308][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 335.597030][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.606862][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 335.617575][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.629538][T10839] batman_adv: batadv0: Interface activated: batadv_slave_0 14:24:40 executing program 0: 14:24:41 executing program 0: [ 335.788249][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.800674][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.810340][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.827966][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.840840][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.873344][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:24:41 executing program 0: [ 335.896294][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.911899][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.929011][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 14:24:41 executing program 0: [ 335.966455][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.983545][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.994557][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.012075][T10839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.033354][T10846] device veth0_vlan entered promiscuous mode [ 336.050678][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.069170][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.082742][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.092788][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.165359][T10846] device veth1_vlan entered promiscuous mode 14:24:41 executing program 0: 14:24:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') getdents(r0, &(0x7f0000000040)=""/95, 0x5f) exit(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000000)=""/53, 0xfe77) [ 336.284359][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 14:24:41 executing program 3: [ 336.535431][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.553805][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.593903][T10846] device veth0_macvtap entered promiscuous mode [ 336.621937][T10846] device veth1_macvtap entered promiscuous mode [ 336.671493][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.694999][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.719711][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.730711][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.740634][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.751342][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.761992][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.772959][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.784908][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.795568][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.808207][T10846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.829916][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.839109][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.847837][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.856575][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.871949][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.882847][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.900191][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.911311][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.928465][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.939101][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.948974][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.959586][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.969830][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.981500][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.993030][T10846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.008026][T10840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.016854][T10840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:24:52 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) readv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/144, 0x436}], 0x1) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000640)=""/4096, 0x2}], 0x1ed) tkill(r0, 0x1000000000016) 14:24:52 executing program 0: 14:24:52 executing program 3: 14:24:52 executing program 1: 14:24:52 executing program 4: 14:24:52 executing program 5: 14:24:52 executing program 1: 14:24:52 executing program 4: 14:24:52 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000740)=[{0x0}], 0x1}, 0x1}, {{&(0x7f0000000780)=@l2tp={0x2, 0x0, @multicast2}, 0x80, 0x0}}, {{&(0x7f0000001c40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=""/31, 0x1f}}, {{&(0x7f0000001f00)=@phonet, 0x80, &(0x7f0000000400)=[{&(0x7f0000004900)=""/196, 0xc4}], 0x1, &(0x7f00000025c0)=""/81, 0x51}, 0x1}, {{&(0x7f0000002640)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000002980)=[{&(0x7f00000026c0)=""/228, 0xe4}, {0x0}, {&(0x7f0000002800)=""/238, 0xee}, {0x0}], 0x4, &(0x7f00000029c0)=""/217, 0xd9}, 0xffff}, {{&(0x7f0000002ac0)=@nfc_llcp, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b40)=""/236, 0xec}, {&(0x7f0000002c40)}, {&(0x7f0000002c80)=""/109, 0x6d}, {&(0x7f0000002d00)=""/156, 0x9c}, {&(0x7f0000002dc0)=""/111, 0x6f}, {&(0x7f0000002e40)=""/196, 0xc4}], 0x6, &(0x7f0000002fc0)=""/124, 0x7c}, 0x6}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004440)=""/150, 0x96}, {&(0x7f0000003100)=""/157, 0x9d}, {0x0}, {&(0x7f00000041c0)=""/182, 0xb6}], 0x4, &(0x7f00000042c0)=""/124, 0x7c}}, {{&(0x7f0000004340)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004580)=[{&(0x7f00000043c0)=""/104, 0x68}, {&(0x7f0000004840)=""/152, 0x98}, {&(0x7f0000004500)=""/51, 0x33}, {&(0x7f0000004540)=""/20, 0x14}], 0x4, &(0x7f00000045c0)=""/106, 0x6a}, 0x2}], 0x8, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x9, 0x0, 0x3, 0x8000}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2002, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x4}, 0x1, 0x0, 0x0, 0x24000805}, 0x20000004) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r6 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) dup3(r6, r5, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040), 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="c4def67669af4f62a8c7a3c493ffa163226e0297154c0b4e4605a7fd23c053aa274a"], 0x2}}, 0x40) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000240)=0x3ce) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 14:24:52 executing program 5: r0 = eventfd2(0x2, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 14:24:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 14:24:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2002, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x10}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000004c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRESOCT=0x0], 0x4}, 0x1, 0x0, 0x0, 0x24000805}, 0x20000004) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r11 = syz_open_pts(r10, 0x0) read(r11, 0x0, 0x6c00) dup2(r9, r11) dup3(r11, r10, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket(0x10, 0x3, 0x0) sendmsg(r12, &(0x7f0000000040), 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000240)=0x3ce) [ 347.622336][ T28] audit: type=1400 audit(1582122292.885:50): avc: denied { open } for pid=10958 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 347.646475][ T28] audit: type=1400 audit(1582122292.885:51): avc: denied { kernel } for pid=10958 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 347.670581][ T28] audit: type=1400 audit(1582122292.885:52): avc: denied { confidentiality } for pid=10958 comm="syz-executor.3" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 14:25:02 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r1, 0x10, 0x5e00, 0x2cbd) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x13000) 14:25:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88102, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300), 0x4) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @empty}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}, 0x3a) 14:25:02 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x630, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IE={0x550, 0x2a, "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"}, @NL80211_ATTR_IE={0xb1, 0x2a, "4b8fec6d838e935375b2226769ce23a08b242f53489434da14c0fe2fd5e2a6353f87546ae9e359c7f34398cb5008eb863391c7bb7b81d674a6199f22a3d18017c1c0e8b4970924fc5712e20dc9ebe699142c9339f21d059587dd3e0a2d65b5ed7dee290f573befc19a6a17f500a41cf935afe2d308dbd9e6939d6185954662dd5d63c4e84487b2fc56c55b5c2282a7a2f2cb61bf8bf88cda0f9843331bc7dba9e6b6a0760b20ee876014d2841e"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x147201}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}]}, 0x630}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003fe) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x20001e) 14:25:02 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:02 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={{r2}, {0x77359400}}) 14:25:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2002, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x10}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000004c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRESOCT=0x0], 0x4}, 0x1, 0x0, 0x0, 0x24000805}, 0x20000004) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r11 = syz_open_pts(r10, 0x0) read(r11, 0x0, 0x6c00) dup2(r9, r11) dup3(r11, r10, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket(0x10, 0x3, 0x0) sendmsg(r12, &(0x7f0000000040), 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000240)=0x3ce) [ 357.409065][ T28] audit: type=1800 audit(1582122302.675:53): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16554 res=0 [ 357.439288][T10982] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483653 (only 16 groups) [ 357.462926][T10983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:25:02 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) [ 357.485465][ T28] audit: type=1804 audit(1582122302.675:54): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir553663065/syzkaller.2Ebd7v/4/file0" dev="sda1" ino=16554 res=1 [ 357.490188][T10983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.548976][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25697 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 [ 357.610218][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 [ 357.633220][ T28] audit: type=1800 audit(1582122302.735:55): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16563 res=0 [ 357.669621][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 [ 357.690665][T10983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.746548][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 [ 357.746619][T11002] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483653 (only 16 groups) [ 357.761085][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 14:25:03 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) [ 357.787929][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 [ 357.801883][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 [ 357.820484][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 [ 357.835055][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 [ 357.850736][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz-executor.2 14:25:03 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r1, 0x10, 0x5e00, 0x2cbd) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x13000) [ 358.000934][T11006] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483653 (only 16 groups) [ 358.035118][T10983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.036342][ T28] audit: type=1800 audit(1582122303.295:56): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16563 res=0 14:25:03 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) [ 358.157107][T10983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:25:03 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r1, 0x10, 0x5e00, 0x2cbd) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x13000) [ 358.206442][ T28] audit: type=1804 audit(1582122303.465:57): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir553663065/syzkaller.2Ebd7v/4/file0" dev="sda1" ino=16554 res=1 14:25:03 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000003}) [ 358.318282][T11013] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483653 (only 16 groups) 14:25:03 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000580)='\x00@\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xcajU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x770a, 0x0) [ 358.358368][ T28] audit: type=1800 audit(1582122303.615:58): pid=11017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16550 res=0 [ 358.442673][T11020] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483651 (only 16 groups) 14:25:03 executing program 4: [ 358.533020][ T28] audit: type=1400 audit(1582122303.795:59): avc: denied { map } for pid=11023 comm="syz-executor.3" path="/dev/ashmem" dev="devtmpfs" ino=25049 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 14:25:04 executing program 1: 14:25:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:04 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r1, 0x10, 0x5e00, 0x2cbd) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x13000) 14:25:04 executing program 5: open(0x0, 0x10000, 0x0) r0 = socket$inet6(0xa, 0x3, 0x47) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 14:25:04 executing program 3: 14:25:04 executing program 4: [ 358.973585][T11040] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483653 (only 16 groups) 14:25:04 executing program 3: 14:25:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) [ 359.029986][ T28] audit: type=1800 audit(1582122304.295:60): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16577 res=0 14:25:04 executing program 4: 14:25:04 executing program 1: 14:25:04 executing program 3: [ 359.257737][T11055] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483653 (only 16 groups) 14:25:04 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r1, 0x10, 0x5e00, 0x2cbd) sendfile(0xffffffffffffffff, r0, 0x0, 0x13000) 14:25:04 executing program 4: 14:25:04 executing program 1: 14:25:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) [ 359.504801][ T28] audit: type=1800 audit(1582122304.765:61): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16547 res=0 14:25:05 executing program 5: 14:25:05 executing program 3: 14:25:05 executing program 4: 14:25:05 executing program 1: 14:25:05 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r1, 0x10, 0x5e00, 0x2cbd) sendfile(0xffffffffffffffff, r0, 0x0, 0x13000) 14:25:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:05 executing program 3: [ 359.988163][ T28] audit: type=1800 audit(1582122305.255:62): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16588 res=0 14:25:05 executing program 1: 14:25:05 executing program 4: 14:25:05 executing program 3: 14:25:05 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r1, 0x10, 0x5e00, 0x2cbd) sendfile(0xffffffffffffffff, r0, 0x0, 0x13000) 14:25:05 executing program 5: 14:25:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:05 executing program 4: 14:25:05 executing program 3: 14:25:05 executing program 1: 14:25:05 executing program 5: 14:25:05 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x13000) 14:25:05 executing program 4: 14:25:05 executing program 3: 14:25:05 executing program 0: r0 = creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:05 executing program 1: 14:25:06 executing program 4: 14:25:06 executing program 0: r0 = creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:06 executing program 5: 14:25:06 executing program 3: 14:25:06 executing program 1: 14:25:06 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x13000) 14:25:06 executing program 4: 14:25:06 executing program 5: 14:25:06 executing program 1: 14:25:06 executing program 3: 14:25:06 executing program 4: 14:25:06 executing program 0: r0 = creat(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:06 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x13000) 14:25:06 executing program 5: 14:25:06 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x6000, 0x4, &(0x7f0000ff8000/0x6000)=nil) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r4 = creat(0x0, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, 0x0) ioprio_get$uid(0x0, 0x0) 14:25:06 executing program 3: ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) 14:25:06 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) 14:25:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000800f1ff08000100753332001800020014000500000000000000000000000000007c6724"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="00080080000000000800f1ff08000100753332001800020014000600000000000000000000000000007c6724"], 0x44}}, 0x0) [ 361.610673][ C0] hrtimer: interrupt took 42454 ns 14:25:06 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast=0x18}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, @sco, 0x5e}) 14:25:07 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x5e00, 0x2cbd) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x13000) 14:25:07 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f", 0xe2) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 14:25:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}) socket$unix(0x1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x100000002, 0x0, 0x0, 0x400000000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) splice(r1, 0x0, r3, 0x0, 0x30009, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x400}, 0x62e6, 0x0, 0x3}) socket$unix(0x1, 0x5, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2000000, 0xff}, 0x0, 0x8e, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 361.845915][T11182] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483653 (only 16 groups) [ 361.883115][T11185] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000140)=0x8) 14:25:07 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x80000005}) [ 361.943042][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000800f1ff08000100753332001800020014000500000000000000000000000000007c6724"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="00080080000000000800f1ff08000100753332001800020014000600000000000000000000000000007c6724"], 0x44}}, 0x0) 14:25:07 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x5e00, 0x2cbd) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x13000) 14:25:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_GROUP={0x8}]}, 0x38}}, 0x0) [ 362.192280][T10839] ------------[ cut here ]------------ [ 362.227360][T10839] refcount_t: addition on 0; use-after-free. [ 362.268075][T10839] WARNING: CPU: 0 PID: 10839 at lib/refcount.c:25 refcount_warn_saturate+0x174/0x1f0 [ 362.277566][T10839] Kernel panic - not syncing: panic_on_warn set ... [ 362.284308][T10839] CPU: 0 PID: 10839 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 362.292998][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.303059][T10839] Call Trace: [ 362.306488][T10839] dump_stack+0x197/0x210 [ 362.310861][T10839] ? refcount_warn_saturate+0xb0/0x1f0 [ 362.316397][T10839] panic+0x2e3/0x75c [ 362.320342][T10839] ? add_taint.cold+0x16/0x16 [ 362.325299][T10839] ? __kasan_check_write+0x14/0x20 [ 362.330723][T10839] ? __warn.cold+0x14/0x3e [ 362.335160][T10839] ? __warn+0xd9/0x1cf [ 362.339287][T10839] ? refcount_warn_saturate+0x174/0x1f0 [ 362.344852][T10839] __warn.cold+0x2f/0x3e [ 362.349214][T10839] ? refcount_warn_saturate+0x174/0x1f0 [ 362.354919][T10839] report_bug+0x289/0x300 [ 362.359369][T10839] do_error_trap+0x11b/0x200 [ 362.364122][T10839] do_invalid_op+0x37/0x50 [ 362.368568][T10839] ? refcount_warn_saturate+0x174/0x1f0 [ 362.373442][T11207] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2147483653 (only 16 groups) [ 362.374208][T10839] invalid_op+0x23/0x30 [ 362.374231][T10839] RIP: 0010:refcount_warn_saturate+0x174/0x1f0 [ 362.395865][T10839] Code: 06 31 ff 89 de e8 2c 02 d3 fd 84 db 0f 85 33 ff ff ff e8 df 00 d3 fd 48 c7 c7 20 98 91 88 c6 05 e1 71 fe 06 01 e8 2b 47 a3 fd <0f> 0b e9 14 ff ff ff e8 c0 00 d3 fd 0f b6 1d c6 71 fe 06 31 ff 89 [ 362.415595][T10839] RSP: 0018:ffffc90003197d18 EFLAGS: 00010282 [ 362.421679][T10839] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 362.429661][T10839] RDX: 0000000000000000 RSI: ffffffff815eae46 RDI: fffff52000632f95 [ 362.437643][T10839] RBP: ffffc90003197d28 R08: ffff888054346140 R09: ffffed1015d06659 [ 362.446492][T10839] R10: ffffed1015d06658 R11: ffff8880ae8332c7 R12: 0000000000000002 [ 362.454506][T10839] R13: 0000000000000000 R14: ffff888053e30144 R15: ffff88804ce56d08 [ 362.462618][T10839] ? vprintk_func+0x86/0x189 [ 362.467241][T10839] ? refcount_warn_saturate+0x174/0x1f0 [ 362.473019][T10839] sk_alloc+0xeb0/0xfd0 [ 362.477248][T10839] inet_create+0x363/0xe10 [ 362.481699][T10839] __sock_create+0x3ce/0x730 [ 362.486465][T10839] __sys_socket+0x103/0x220 [ 362.490989][T10839] ? move_addr_to_kernel+0x80/0x80 [ 362.496199][T10839] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 362.501674][T10839] ? do_syscall_64+0x26/0x790 [ 362.506368][T10839] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.512499][T10839] ? do_syscall_64+0x26/0x790 [ 362.517206][T10839] __x64_sys_socket+0x73/0xb0 [ 362.521908][T10839] do_syscall_64+0xfa/0x790 [ 362.526480][T10839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.532500][T10839] RIP: 0033:0x45ef97 [ 362.536402][T10839] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.556194][T10839] RSP: 002b:00007ffe6f92ead8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 362.564796][T10839] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045ef97 [ 362.572781][T10839] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 362.580774][T10839] RBP: 0000000000000016 R08: 0000000000000000 R09: 000000000000000a [ 362.581332][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 362.581345][ T28] audit: type=1800 audit(1582122307.835:68): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16581 res=0 [ 362.588788][T10839] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 362.588798][T10839] R13: 00007ffe6f92f1f0 R14: 00000000000584ea R15: 00007ffe6f92f200 [ 362.596710][T10839] Kernel Offset: disabled [ 362.640671][T10839] Rebooting in 86400 seconds..