[ 34.722519] kauditd_printk_skb: 9 callbacks suppressed [ 34.722526] audit: type=1800 audit(1564531532.209:33): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 34.749290] audit: type=1800 audit(1564531532.209:34): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 [ 34.935252] random: sshd: uninitialized urandom read (32 bytes read) [ 35.331310] audit: type=1400 audit(1564531532.819:35): avc: denied { map } for pid=7098 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 35.409674] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.877830] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. [ 42.744383] random: sshd: uninitialized urandom read (32 bytes read) 2019/07/31 00:05:40 fuzzer started [ 42.953956] audit: type=1400 audit(1564531540.439:36): avc: denied { map } for pid=7107 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.938267] random: cc1: uninitialized urandom read (8 bytes read) 2019/07/31 00:05:43 dialing manager at 10.128.0.105:34765 2019/07/31 00:05:43 syscalls: 2463 2019/07/31 00:05:43 code coverage: enabled 2019/07/31 00:05:43 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/07/31 00:05:43 extra coverage: extra coverage is not supported by the kernel 2019/07/31 00:05:43 setuid sandbox: enabled 2019/07/31 00:05:43 namespace sandbox: enabled 2019/07/31 00:05:43 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/31 00:05:43 fault injection: enabled 2019/07/31 00:05:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/31 00:05:43 net packet injection: enabled 2019/07/31 00:05:43 net device setup: enabled [ 47.138161] random: crng init done 00:07:33 executing program 5: 00:07:33 executing program 0: 00:07:33 executing program 3: 00:07:33 executing program 1: 00:07:33 executing program 2: 00:07:33 executing program 4: [ 155.745519] audit: type=1400 audit(1564531653.229:37): avc: denied { map } for pid=7107 comm="syz-fuzzer" path="/root/syzkaller-shm743477499" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 155.786491] audit: type=1400 audit(1564531653.249:38): avc: denied { map } for pid=7125 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13813 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 156.510251] IPVS: ftp: loaded support on port[0] = 21 [ 156.841731] IPVS: ftp: loaded support on port[0] = 21 [ 156.841857] chnl_net:caif_netlink_parms(): no params data found [ 156.906627] IPVS: ftp: loaded support on port[0] = 21 [ 156.927653] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.934457] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.942016] device bridge_slave_0 entered promiscuous mode [ 156.949005] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.955453] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.962515] device bridge_slave_1 entered promiscuous mode [ 157.001132] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.018357] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.039346] IPVS: ftp: loaded support on port[0] = 21 [ 157.088687] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.096493] team0: Port device team_slave_0 added [ 157.112197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.119518] team0: Port device team_slave_1 added [ 157.127739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.135359] chnl_net:caif_netlink_parms(): no params data found [ 157.155177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.243045] device hsr_slave_0 entered promiscuous mode [ 157.280525] device hsr_slave_1 entered promiscuous mode [ 157.323576] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.339274] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.379550] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.386373] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.393873] device bridge_slave_0 entered promiscuous mode [ 157.404035] IPVS: ftp: loaded support on port[0] = 21 [ 157.433174] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.439671] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.446738] device bridge_slave_1 entered promiscuous mode [ 157.468796] chnl_net:caif_netlink_parms(): no params data found [ 157.528754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.556680] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.563173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.570109] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.576482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.586337] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.602081] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.608521] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.616051] device bridge_slave_0 entered promiscuous mode [ 157.626110] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.632567] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.639851] device bridge_slave_1 entered promiscuous mode [ 157.668560] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.676780] team0: Port device team_slave_0 added [ 157.685956] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.693666] team0: Port device team_slave_1 added [ 157.705967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.731694] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.754394] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.783693] IPVS: ftp: loaded support on port[0] = 21 [ 157.842404] device hsr_slave_0 entered promiscuous mode [ 157.900485] device hsr_slave_1 entered promiscuous mode [ 157.950953] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.958733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.983785] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.001390] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.012866] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.026336] chnl_net:caif_netlink_parms(): no params data found [ 158.044133] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.051451] team0: Port device team_slave_0 added [ 158.084163] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.092311] team0: Port device team_slave_1 added [ 158.134643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.142187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.204593] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.211328] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.218620] device bridge_slave_0 entered promiscuous mode [ 158.272491] device hsr_slave_0 entered promiscuous mode [ 158.340383] device hsr_slave_1 entered promiscuous mode [ 158.421409] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.427979] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.438703] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.449600] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.456046] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.463451] device bridge_slave_1 entered promiscuous mode [ 158.482486] chnl_net:caif_netlink_parms(): no params data found [ 158.502203] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.511428] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.534257] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.541795] team0: Port device team_slave_0 added [ 158.547493] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.555226] team0: Port device team_slave_1 added [ 158.565823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.588598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.603115] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.633161] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.658944] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.668515] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.712300] device hsr_slave_0 entered promiscuous mode [ 158.750348] device hsr_slave_1 entered promiscuous mode [ 158.790758] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.799090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.806664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.843771] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.874557] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.883301] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.893692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.922645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.931173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.938780] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.945191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.955348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.970692] chnl_net:caif_netlink_parms(): no params data found [ 158.981353] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.989266] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.996698] device bridge_slave_0 entered promiscuous mode [ 159.004175] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.010614] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.017676] device bridge_slave_1 entered promiscuous mode [ 159.037696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.045724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.054259] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.060651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.077284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.101555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.119143] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.129566] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.139355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.148576] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.178569] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.186812] team0: Port device team_slave_0 added [ 159.192345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.215729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.231113] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.238432] team0: Port device team_slave_1 added [ 159.244026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.253975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.263590] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.294751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.302608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.309571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.317648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.326807] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.333375] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.340857] device bridge_slave_0 entered promiscuous mode [ 159.355640] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.362766] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.371491] device bridge_slave_1 entered promiscuous mode [ 159.377735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.385767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.401418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.408528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.416946] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.423385] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.448769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.456199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.464303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.475303] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.484274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.522487] device hsr_slave_0 entered promiscuous mode [ 159.560453] device hsr_slave_1 entered promiscuous mode [ 159.602315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.615316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.622882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.630987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.638663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.646489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.653467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.660522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.668196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.675891] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.682257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.689596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.699080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.706320] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.714067] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.722292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.735351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.744600] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.751447] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.757911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.765607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.773094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.781235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.788990] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.795402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.804281] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.810883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.838660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.877393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.886520] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.897593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.905962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.918346] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.924761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.936707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.944882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.952759] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.959865] team0: Port device team_slave_0 added [ 159.965779] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.974150] team0: Port device team_slave_1 added [ 159.979543] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.994831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.006144] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.014413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.021845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.031346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.038971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.046795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.054642] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.061094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.078906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.107961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.114338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.122797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.132654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.173778] device hsr_slave_0 entered promiscuous mode [ 160.220400] device hsr_slave_1 entered promiscuous mode [ 160.271487] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.278612] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 160.286992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.297119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.305472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.314676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.329890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.340784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.354266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.361936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.377455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.385136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.393165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.400973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.410643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.420904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.429681] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.441437] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 160.447463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.455557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.465299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.473203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.481020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.491134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.501557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.509809] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.524264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.533196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.541629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.549128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.557048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.566480] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.576502] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.583023] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.591945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.600121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.607499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.614816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.626765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.635105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.643040] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.649408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.656831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.664971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.672593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:07:38 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x2b, 0x4, 0x0, {0x0, 0x8, 0x0, '/dev/fuse\x00'}}, 0x2b) [ 160.689649] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.703113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.721450] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.741427] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 160.747511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.765555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.775985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 00:07:38 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00\x8es', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r0, 0xd}, 0x10) [ 160.793070] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.799462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.809320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.819660] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.826054] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.836177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.843479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.859959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.868914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.884134] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 00:07:38 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x2d00, 0x200000000000009, 0x0, 0xffffffffffffffff, 0x0, [0x3]}, 0x2c) [ 160.895154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.904405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.914366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.930624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.939294] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.945699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.959523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.971251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.981240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 00:07:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() tkill(0x0, 0x38) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 160.991527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.010615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.017774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.036202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.044898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.052925] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.059283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.066212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.077637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.094179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.104088] input: syz1 as /devices/virtual/input/input5 [ 161.115687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.131787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.148699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.160972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.175744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.184515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.192164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.200890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.212640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.221182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.229095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.240906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.249572] input: syz1 as /devices/virtual/input/input6 [ 161.258725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.278031] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 00:07:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000280)) sched_setscheduler(0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x39c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) geteuid() ftruncate(r2, 0x10004) sendfile(r1, r2, 0x0, 0x72439a6b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 161.302234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.309903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.322508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.330490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.343162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.364198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.397428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.501044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.533058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:07:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 00:07:39 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) [ 161.560848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.599439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.614759] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.623062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.630042] hrtimer: interrupt took 31603 ns [ 161.632597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.641754] REISERFS warning (device loop3): super-6514 reiserfs_parse_options: unknown quota format specified. [ 161.660548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.676459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.702776] binder: BC_ACQUIRE_RESULT not supported [ 161.707989] binder: 7202:7208 ioctl c0306201 200002c0 returned -22 00:07:39 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0xaf6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x4010000000, 0x0, 0x7, 0x7dbd, 0x1ff, 0x8, 0x80000001, 0xffffffffffffff80, 0x5, 0x1, 0x0, 0xe8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xff, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001, 0x0, @perf_config_ext={0x7}, 0x100, 0xffffffffffffffee, 0x0, 0x4, 0x1ff, 0x81, 0x100000000}, r3, 0xd, r2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000042c0)={&(0x7f0000004200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x20) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)={[{0x0, 'memory'}, {0x2f, 'pids'}, {0x2f, 'cpu'}, {0x0, 'rdma'}, {0x2d, 'cpu'}]}, 0x1e) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x882, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x3, 0x1, 0x6, 0x7ff, 0x8, 0x100000000, 0x800, 0x78e1, 0x1, 0x2, 0x1, 0x0, 0x3ff, 0xfffffffffffffffe, 0x7, 0x1, 0x20, 0x800, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040)}, 0x2, 0x1f, 0xb77, 0x0, 0x0, 0x0, 0x8b5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) [ 161.708174] REISERFS warning (device loop3): super-6514 reiserfs_parse_options: unknown quota format specified. [ 161.742929] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.759764] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.766168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.778555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 00:07:39 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) [ 161.809344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.831553] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.837653] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.848248] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.881565] device nr0 entered promiscuous mode [ 161.889663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.932466] REISERFS warning (device loop3): super-6514 reiserfs_parse_options: unknown quota format specified. [ 161.948163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.956971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.965471] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.971890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.981173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.000998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.011981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.021706] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.037717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.055482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.069811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.078747] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.085150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.092277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.102866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 162.114081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.126268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.139575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.148856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.158043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.177755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.184928] device nr0 entered promiscuous mode [ 162.201260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.208724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.217180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.242815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.256925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.269573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.292994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.300634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.312858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.323067] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.329782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.346407] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.358143] 8021q: adding VLAN 0 to HW filter on device batadv0 00:07:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000280)) sched_setscheduler(0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x39c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) geteuid() ftruncate(r2, 0x10004) sendfile(r1, r2, 0x0, 0x72439a6b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 00:07:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840000000000000000012634840"], 0x1, 0x100000000000000, &(0x7f0000000280)="ea"}) [ 163.145993] binder: 7255:7256 ioctl c0306201 200002c0 returned -14 00:07:40 executing program 4: clone(0x480002102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:07:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000280)) sched_setscheduler(0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0xff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x39c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) geteuid() ftruncate(r2, 0x10004) sendfile(r1, r2, 0x0, 0x72439a6b) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 00:07:40 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) 00:07:40 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0xaf6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x4010000000, 0x0, 0x7, 0x7dbd, 0x1ff, 0x8, 0x80000001, 0xffffffffffffff80, 0x5, 0x1, 0x0, 0xe8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xff, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001, 0x0, @perf_config_ext={0x7}, 0x100, 0xffffffffffffffee, 0x0, 0x4, 0x1ff, 0x81, 0x100000000}, r3, 0xd, r2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000042c0)={&(0x7f0000004200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x20) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)={[{0x0, 'memory'}, {0x2f, 'pids'}, {0x2f, 'cpu'}, {0x0, 'rdma'}, {0x2d, 'cpu'}]}, 0x1e) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x882, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x3, 0x1, 0x6, 0x7ff, 0x8, 0x100000000, 0x800, 0x78e1, 0x1, 0x2, 0x1, 0x0, 0x3ff, 0xfffffffffffffffe, 0x7, 0x1, 0x20, 0x800, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040)}, 0x2, 0x1f, 0xb77, 0x0, 0x0, 0x0, 0x8b5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) 00:07:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$rds(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 00:07:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840000000000000000012634840"], 0x1, 0x100000000000000, &(0x7f0000000280)="ea"}) 00:07:40 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000200)='O', 0x1}], 0x1, 0x0) [ 163.424486] RDS: rds_bind could not find a transport for 172.30.0.2, load rds_tcp or rds_rdma? [ 163.427817] binder: 7264:7271 ioctl c0306201 200002c0 returned -14 [ 163.459187] REISERFS warning (device loop3): super-6514 reiserfs_parse_options: unknown quota format specified. 00:07:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840000000000000000012634840"], 0x1, 0x100000000000000, &(0x7f0000000280)="ea"}) 00:07:41 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) 00:07:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0), 0x4) [ 163.535022] device nr0 entered promiscuous mode 00:07:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x44}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 00:07:41 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000780)={[], 0x0, 0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:07:41 executing program 4: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0xfcc3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff}) 00:07:41 executing program 0: openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0xfcc3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r1, 0x0) [ 163.649919] REISERFS warning (device loop3): super-6514 reiserfs_parse_options: unknown quota format specified. [ 163.665513] binder: 7284:7299 ioctl c0306201 200002c0 returned -14 [ 163.676369] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:07:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840000000000000000012634840"], 0x1, 0x100000000000000, &(0x7f0000000280)="ea"}) 00:07:41 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) 00:07:41 executing program 1: kexec_load(0x0, 0x1, &(0x7f00000011c0)=[{0x0, 0x0, 0xfffffffffffffffd, 0x6}], 0x0) 00:07:41 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)=']/\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net////\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) socket$kcm(0x29, 0x0, 0x0) close(r0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0x101}, 0x0) [ 163.883545] binder: 7312:7319 ioctl c0306201 200002c0 returned -14 00:07:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000018c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002900)="93", 0x1}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 00:07:41 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840000000000000000012634840"], 0x1, 0x100000000000000, &(0x7f0000000280)="ea"}) 00:07:41 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) 00:07:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x420000015005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x36d, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000000001bd6"], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000600000006031409200822f00fe800000000000000000000000000000ff020000000000000000000000000001850065583e6cfe2b04306e206d9747dee4188b8200000000"], 0xff23) 00:07:41 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840000000000000000012634840"], 0x1, 0x100000000000000, &(0x7f0000000280)="ea"}) 00:07:41 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) [ 164.335600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.401706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.481494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.641836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.730225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:07:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2) 00:07:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000180)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}]}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x10a, 0x400}], 0x2, 0x0) 00:07:43 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840000000000000000012634840"], 0x1, 0x100000000000000, &(0x7f0000000280)="ea"}) 00:07:43 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) 00:07:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2) 00:07:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x800000000000008, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) 00:07:43 executing program 4: 00:07:43 executing program 1: 00:07:43 executing program 2: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840000000000000000012634840"], 0x1, 0x100000000000000, &(0x7f0000000280)="ea"}) 00:07:43 executing program 5: 00:07:43 executing program 4: 00:07:43 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=\nfsold'}]}) [ 165.744879] EXT4-fs (loop0): inodes count not valid: 640 vs 128 00:07:43 executing program 1: 00:07:43 executing program 0: 00:07:43 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0\x05\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\vK$\xd7\x86,5f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}ffffffff8677e180: fa fa fa fa 00 fa fa fa fa fa fa fa 00 00 00 04 [ 166.496523] ^ [ 166.503804] ffffffff8677e200: fa fa fa fa 00 fa fa fa fa fa fa fa 00 00 00 00 [ 166.511166] ffffffff8677e280: 00 00 00 00 02 fa fa fa fa fa fa fa 00 00 00 00 [ 166.518604] ================================================================== [ 166.525970] Disabling lock debugging due to kernel taint [ 166.532497] Kernel panic - not syncing: panic_on_warn set ... [ 166.532497] [ 166.539890] CPU: 0 PID: 7438 Comm: syz-executor.3 Tainted: G B 4.14.134 #30 [ 166.548126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.557490] Call Trace: [ 166.560088] dump_stack+0x138/0x19c [ 166.563727] ? strscpy+0x20e/0x2c0 [ 166.567548] panic+0x1f2/0x426 [ 166.570763] ? add_taint.cold+0x16/0x16 [ 166.574757] kasan_end_report+0x47/0x4f [ 166.578834] kasan_report.cold+0x130/0x2af [ 166.583415] __asan_report_load8_noabort+0x14/0x20 [ 166.588340] strscpy+0x20e/0x2c0 [ 166.591700] prepare_error_buf+0x94/0x1aa0 [ 166.595930] ? io_schedule+0x1c/0x70 [ 166.599651] ? __wait_on_bit+0x92/0x130 [ 166.603621] ? scnprintf_le_key+0x600/0x600 [ 166.607950] ? out_of_line_wait_on_bit+0xba/0xd0 [ 166.612703] __reiserfs_warning+0x9f/0xb0 [ 166.616867] ? reiserfs_printk+0xd0/0xd0 [ 166.620943] ? __bread_gfp+0x63/0x290 [ 166.624743] ? __brelse+0x50/0x60 [ 166.628197] ? read_super_block+0x11d/0x8c0 [ 166.633055] reiserfs_fill_super+0xa71/0x2b20 [ 166.637553] ? finish_unfinished+0x1010/0x1010 [ 166.642137] ? snprintf+0xa5/0xd0 [ 166.645590] ? set_blocksize+0x270/0x300 [ 166.649663] ? ns_test_super+0x50/0x50 [ 166.653553] mount_bdev+0x2be/0x370 [ 166.657168] ? finish_unfinished+0x1010/0x1010 [ 166.661748] get_super_block+0x35/0x40 [ 166.665632] mount_fs+0x97/0x2a1 [ 166.669000] vfs_kern_mount.part.0+0x5e/0x3d0 [ 166.673494] do_mount+0x417/0x27d0 [ 166.677025] ? copy_mount_options+0x5c/0x2f0 [ 166.681513] ? rcu_read_lock_sched_held+0x110/0x130 [ 166.686526] ? copy_mount_string+0x40/0x40 [ 166.690768] ? copy_mount_options+0x1fe/0x2f0 [ 166.695263] SyS_mount+0xab/0x120 [ 166.698744] ? copy_mnt_ns+0x8c0/0x8c0 [ 166.702635] do_syscall_64+0x1e8/0x640 [ 166.706699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.711540] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 166.716726] RIP: 0033:0x45c27a [ 166.719918] RSP: 002b:00007f8e88c5ba88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 166.727625] RAX: ffffffffffffffda RBX: 00007f8e88c5bb40 RCX: 000000000045c27a [ 166.734890] RDX: 00007f8e88c5bae0 RSI: 00000000200000c0 RDI: 00007f8e88c5bb00 [ 166.742152] RBP: 0000000000000000 R08: 00007f8e88c5bb40 R09: 00007f8e88c5bae0 [ 166.749510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 166.756773] R13: 00000000004c8a7f R14: 00000000004df8b8 R15: 00000000ffffffff [ 166.765539] Kernel Offset: disabled [ 166.769269] Rebooting in 86400 seconds..