[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 40.759993] audit: type=1800 audit(1575506434.115:32): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 46.545141] kauditd_printk_skb: 2 callbacks suppressed [ 46.545381] audit: type=1400 audit(1575506439.895:35): avc: denied { map } for pid=7704 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.189' (ECDSA) to the list of known hosts. 2019/12/05 00:40:46 fuzzer started [ 53.392111] audit: type=1400 audit(1575506446.745:36): avc: denied { map } for pid=7713 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/12/05 00:40:48 dialing manager at 10.128.0.105:33995 2019/12/05 00:40:48 syscalls: 2679 2019/12/05 00:40:48 code coverage: enabled 2019/12/05 00:40:48 comparison tracing: enabled 2019/12/05 00:40:48 extra coverage: extra coverage is not supported by the kernel 2019/12/05 00:40:48 setuid sandbox: enabled 2019/12/05 00:40:48 namespace sandbox: enabled 2019/12/05 00:40:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/05 00:40:48 fault injection: enabled 2019/12/05 00:40:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/05 00:40:48 net packet injection: enabled 2019/12/05 00:40:48 net device setup: enabled 2019/12/05 00:40:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/05 00:40:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:43:45 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x1e, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/30}, &(0x7f0000000140)=0x78) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x82401, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000001c0)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000240)={0x8, 0x9, 0x1, 0x2}, 0x6) r3 = socket$netlink(0x10, 0x3, 0xe) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9f4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="c5c66f6c1cb7a583506c23886564eee0"}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd9}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x7027fe5d5a4ce41a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xf9}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x2400c090}, 0x40) mknod$loop(&(0x7f0000000480)='./file0\x00', 0x2010, 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000540)={0x6, 0x7}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) bind$x25(r4, &(0x7f00000005c0)={0x9, @remote={[], 0x1}}, 0x12) syz_open_dev$char_usb(0xc, 0xb4, 0x7) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000640)=""/241) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00', 0x0, 0x8}, 0x10) fsetxattr$security_smack_transmute(r6, &(0x7f0000000a40)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000a80)='TRUE', 0x4, 0x1) r7 = syz_open_dev$audion(&(0x7f0000000b40)='/dev/audio#\x00', 0x7f, 0x40) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/mISDNtimer\x00', 0x40000, 0x0) lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@empty}}, &(0x7f0000000d80)=0xe8) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)='9p\x00', 0x80, &(0x7f0000000dc0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@posixacl='posixacl'}, {@debug={'debug', 0x3d, 0x9097}}, {@cache_none='cache=none'}, {@cachetag={'cachetag', 0x3d, 'TRUE'}}, {@access_uid={'access', 0x3d, r9}}, {@loose='loose'}, {@uname={'uname', 0x3d, 'wrr\x00'}}, {@fscache='fscache'}, {@msize={'msize', 0x3d, 0x4}}, {@nodevmap='nodevmap'}], [{@obj_role={'obj_role', 0x3d, '/selinux/commit_pending_bools\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@fowner_lt={'fowner<', r10}}, {@seclabel='seclabel'}, {@uid_lt={'uid<', r11}}]}}) r12 = syz_open_dev$mouse(&(0x7f0000000f40)='/dev/input/mouse#\x00', 0x1ff, 0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000f80)={0x0, 0x80, 0x9, 0x2, 0x8000, 0x7}, &(0x7f0000000fc0)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f0000001000)=r13, 0x4) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r14, 0x8907, &(0x7f0000001040)) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r15, 0x800455d1, &(0x7f00000010c0)) [ 231.750110] audit: type=1400 audit(1575506625.105:37): avc: denied { map } for pid=7730 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=130 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 231.845102] IPVS: ftp: loaded support on port[0] = 21 00:43:45 executing program 1: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000000)=""/5) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0xa9f2671e840d18ca, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000100)={0x10001, 0x0, [0x20, 0x8, 0x1ff, 0x8, 0x3, 0x101, 0x63ff, 0x3]}) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8db}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000890) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x28) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r3, 0x1}, &(0x7f00000004c0)=0x8) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20\x00', 0x100, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x0, 0x0) fcntl$dupfd(r4, 0x406, r5) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x20000, 0x0) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000640)={0x16, 0x50, &(0x7f00000005c0)="92bc999128e633d26ab0bf831d11811dbe3f97d320413e9149cb04bfe06b809d0aeb63996b74ffa63ffaf85ef3406c6d826f1a96530d9f979902f9a4609a52004b573bbc5b8357817c7d8c3a8922230d"}) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/policy\x00', 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x200000, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000740)=[@text32={0x20, &(0x7f0000000700)="0f20d835200000000f22d8da627966ba410066b8800066ef0f01cf0fe0f166b805010f00d08fe97c8147080f0f83062600009a670f01c3f30f09", 0x3a}], 0x1, 0x4, &(0x7f0000000780)=[@cstype0={0x4, 0x3}], 0x1) syz_mount_image$ocfs2(&(0x7f00000007c0)='ocfs2\x00', &(0x7f0000000800)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000940)=[{&(0x7f0000000840)="a55603e1f4604972d99dc0d2ba85fd19c7143c4838cde0a0ebdcbccd9ce02b6561cff6167e86ee0a410b928bc12fe88f097781f63fa8367655acb55a29e4b427fd96b7fc2cb4c6d1c9abdfb54396dcc304a3f6217dc428e4870f70647a44965e062c2d02b7b9667c074d109382fe0824d420492252a494170c9770cd9a70f7b89ab2a080fb217c9461673d09f32fecd0c8c65a1d2505066e101de2f212d1b61f4b0def8791ef27414d492cad9ae6296fc2d9b440cb8232ca81fe89667eae2aa645ee5977f26d6a6729d2d763fb81311a89d22586c7ff5064bdd8f84beb404818234efd74170e1e443cd74721f7d6cea11fd999f65bb61119", 0xf8, 0x8}], 0x10000, &(0x7f0000000980)='/proc/capi/capi20\x00') setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000009c0)={0x340, {{0x2, 0x4e22, @rand_addr=0x2}}}, 0x88) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000a80)={0x49, 0xe6, 0x8, 0x0, 0x3}) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000b00), &(0x7f0000000b40)=0xb) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000b80)={0x9, {{0x2, 0x4e21, @multicast2}}, 0x0, 0x6, [{{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @rand_addr=0x2}}, {{0x2, 0x4e22, @rand_addr=0x5ce}}]}, 0x390) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000f80)) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000001000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="40075128688ba61ac76da0d0733913ad8ace4150b50bfadc7698c1827676753330c68601370a0b9bbce4f1fa358150f7e18279eb430462f115e9", 0x3a}], 0x1}, 0x4000) r11 = epoll_create(0x10000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r11, 0xc0506617, &(0x7f0000001100)={{0xeb7c2a45c282ac19, 0x0, @reserved="e180fad69251eb83b1fc851286f7c528df45402727efce22cedfc5c600cb1c7f"}, 0x1000, [], "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"}) [ 231.948068] chnl_net:caif_netlink_parms(): no params data found [ 232.001053] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.008273] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.015953] device bridge_slave_0 entered promiscuous mode [ 232.024352] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.030890] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.038816] device bridge_slave_1 entered promiscuous mode [ 232.063629] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.075878] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.097676] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.105491] team0: Port device team_slave_0 added [ 232.111803] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.119508] team0: Port device team_slave_1 added [ 232.125151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 232.148352] IPVS: ftp: loaded support on port[0] = 21 [ 232.157653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 00:43:45 executing program 2: connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000002c0)={0x45, 0x9, 0x2, 0x79c3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xb4, 0xe, 0x1, "63c7c4f5a326898945ed6f10c20e8a01", "64d31f1d79f4467bfd572a213a459d455809c48d39e30ac352d7c2428704298a214c025b6f2ef248ffe39b09b3429ac6ab64c44adeb7e7baa9faaaaa2eefd3be888e78550abd22defba7bdee94e8963afe88ac3b8a7b3e4a1658c7b660c13a6af5fddcf82d9f9f7c2ba354b80727ce644ed7a1d14409467e9fa892aa352346a921977bde41db8b12a5b4d39f24befdd5dcee025c9b26c1e0fc9602015b493d"}, 0xb4, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000004c0)={{0x5, 0x9}, 'port1\x00', 0x40, 0x180402, 0x9, 0x4, 0x200, 0x28c, 0x4, 0x0, 0x5, 0x5}) r2 = dup2(0xffffffffffffffff, r1) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000580)={0x0, {0x71a, 0xfffffff8}}) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000005c0)) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000600)=0xfffff5e5, 0x4) iopl(0x1) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001d40)) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000001dc0)={0x4, 0x6, 0x6, 0x8, 0x1}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/sequencer2\x00', 0x309500, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001e40)={0x0, 0x9}, &(0x7f0000001e80)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000001ec0)={r6, 0xffff, 0xfb64, 0x10001, 0xb7c}, &(0x7f0000001f00)=0x14) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/snapshot\x00', 0x40, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x110, r7, 0x8000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001f80)='/selinux/commit_pending_bools\x00', 0x1, 0x0) rt_sigsuspend(&(0x7f0000001fc0)={0x8001}, 0x8) connect$pppoe(0xffffffffffffffff, &(0x7f0000002000)={0x18, 0x0, {0x0, @broadcast, 'bcsh0\x00'}}, 0x1e) r8 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x800, 0x4) write$UHID_INPUT2(r8, &(0x7f0000002080)={0xc, 0xab, "d552ade8cdde78d1d0fbd359836f5e6555a5f8317b00768a8c6201667a48aaee687dfabc71816ff1b511ea1a0862b08f3827b1bb8fa22a6eb55d4211397f15ed92e1108a011b883a6e57a2ffbe05b8c4af51b1a685a27527b27b81b11363eb805c6e286d5c8e9f1eb2fb16875616f33046a4b366f4621c08ea118f9d22f9d3f22b4c56bee0356ccef7c3e2c9ef40a4f5da84535334346e208caf371fb89dc63a6310203aa165df0526cc7a"}, 0xb1) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000002600)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000025c0)={&(0x7f0000002180)={0x434, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x188, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2ec}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x376d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, [], 0x1e}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x101, @loopback, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @remote, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28000000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97a5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17d}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee5}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8aea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x434}, 0x1, 0x0, 0x0, 0x1}, 0x200000a0) socket(0xa, 0x80000, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000002640)={'bcsf0\x00', 0x5}) [ 232.239351] device hsr_slave_0 entered promiscuous mode [ 232.276789] device hsr_slave_1 entered promiscuous mode [ 232.317288] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 232.326271] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 232.389810] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.396276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.403474] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.409914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.441747] IPVS: ftp: loaded support on port[0] = 21 [ 232.490566] chnl_net:caif_netlink_parms(): no params data found 00:43:45 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x2, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x6, 0x2, 0x8, 0x20, 0xc}}, 0xa) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xff, 0x2000) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x80, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000100)={0x0, 0xfffffff8, 0xc803, 0x4}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0x3) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x400cc2, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x17, &(0x7f00000001c0)=""/191, &(0x7f0000000280)=0xbf) connect$pptp(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvme-fabrics\x00', 0x800, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)={0x6, 0x0, [{0x2, 0xdc, 0xfffffffa, 0x3, 0x4}, {0x80000008, 0x1, 0x2, 0x61, 0x3}, {0x0, 0x75, 0x8, 0xbd85, 0x8001}, {0x1c0000008, 0x40, 0xfff, 0x8, 0x7}, {0xaedd7a718fb023ef, 0x9, 0x1ff, 0x80000001, 0x401}, {0x100000012, 0x1f, 0x7cc0, 0x5, 0x5}]}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000400)={0x2f2, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000440)=@ccm_128={{0x304}, "7a80169bf4271be0", "fbf7af9f0a2b3e74ac057714d93ab429", "393e9363", "619048d7316428f0"}, 0x28) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000004c0)={0x34, 0x6, 0x0, {0x1, 0x2, 0xb, 0x0, '/dev/nvram\x00'}}, 0x34) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x2, 0x0) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f0000000540)={0x5, 0x7fe, 0x1}) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f00000005c0)={0x8, 0x7f}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0}) ptrace$getregs(0xe, r8, 0x9, &(0x7f0000000640)=""/146) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)={0x0, 0x0}) ptrace$setopts(0x4200, r9, 0x4, 0x100004) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000780)={@host}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f00000007c0)='/dev/video37\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r10, &(0x7f0000000840)='io\x00') r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000880)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TCSETAF(r11, 0x5408, &(0x7f00000008c0)={0x8, 0x2, 0x4, 0x20, 0xf, 0xfc, 0x9, 0x40, 0xea, 0x40}) [ 232.567268] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.573755] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.583276] device bridge_slave_0 entered promiscuous mode [ 232.621411] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.634810] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.657478] device bridge_slave_1 entered promiscuous mode [ 232.692264] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.718035] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.752430] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 232.759111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.813476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.823664] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.827937] IPVS: ftp: loaded support on port[0] = 21 [ 232.831882] team0: Port device team_slave_0 added 00:43:46 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x102) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x8, 0x0, 0xffff0000, 0xcd}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20}) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{0x5, 0xff}, {0x8, 0x5}, 0x3fc, 0x5, 0x20}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = userfaultfd(0x8848a9b269b8fe1f) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x8000, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000380)) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000540)={r4, 0xaa, 0x1000}, 0x0, &(0x7f0000000580)="31d6d1529395bae16d561d15a2ee656ad59212e921f35380dce8f5e386f6e5fcd6bcf802a74166f75f5534dfec59538b584ad02b8af5936467cd12f43478cf0f48968cdc0dc6e8d4e0599e90512dad8dd4435f7f90e595da9813e35711324d423fbbf45444ef689f4f3ca3f7eb8de7f939d2855c28be1e8cc12537d8c394f87e03cc0088ead83ec23b4b7c6ebe6905f7a1d3453aa0c384e71bc32eec4d92d9d99b667439953d974991b8", &(0x7f0000000640)="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") fsetxattr$security_ima(r2, &(0x7f0000001640)='security.ima\x00', &(0x7f0000001680)=@v1={0x2, "89d8846d223ece4392855e"}, 0xc, 0x1) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/relabel\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001700)='/proc/self/net/pfkey\x00', 0x61440, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000001740)) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001780)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000017c0)={0x2, 0x0, 0x7, 0x5, 0x1b, 0x3, 0x0, 0xfc, 0x7, 0xa4}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/commit_pending_bools\x00', 0x1, 0x0) close(r6) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001840)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000001880)) getrusage(0x1, &(0x7f00000018c0)) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001980)='/dev/vcsu\x00', 0x80, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup2(r8, r9) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000019c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) [ 232.862186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.871769] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.894730] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.908537] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 232.929664] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.947144] team0: Port device team_slave_1 added [ 232.957855] chnl_net:caif_netlink_parms(): no params data found [ 232.980934] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 232.990164] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.996777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.006325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 00:43:46 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fffffff, 0x501000) ioctl$TIOCSBRK(r0, 0x5427) r1 = socket$inet6(0xa, 0xa, 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x2, 0x4, 0x8, 0xfffe, 0x10]}, 0xe) r2 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000100)={@initdev, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xdbeb7d0d785cd6}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=@deltfilter={0x510, 0x2d, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe, 0x1c}, {0xb, 0x6}, {0xffff}}, [@filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}, @filter_kind_options=@f_route={{0xc, 0x1, 'route\x00'}, {0x4c0, 0x2, [@TCA_ROUTE4_IIF={0x14, 0x4, 'veth0_to_bridge\x00'}, @TCA_ROUTE4_POLICE={0xc, 0x5, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3fffc000}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x67}, @TCA_ROUTE4_ACT={0x84, 0x6, @m_mirred={0x80, 0x1c, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x0, 0xc, 0xffffffff, 0x8}, 0x3, r4}}}, {0x48, 0x6, "94cd16c92b5277ed0e995651fa5b86d804ef8befc90e6ce3955565954b028d37b8fe110868b871b2bea61deb27c9df2c1024eeb2902e3c6bcc1751fab79b94b5cb5002ad"}}}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x21}, @TCA_ROUTE4_POLICE={0x408, 0x5, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x0, 0x800, 0xffffffff, 0x9, 0x0, 0x100, 0x8c, 0x6, 0x3, 0x7fff, 0x100, 0xfffffc01, 0x401, 0x3, 0xfffffffa, 0x8000, 0x28ec, 0x1, 0x1, 0x4, 0x8, 0x4c5, 0x7f, 0x400, 0x9, 0x93ff, 0x1, 0x7, 0x0, 0x4, 0x0, 0x83f, 0x8001, 0x8, 0x4, 0xff, 0x2, 0x6da4, 0x1, 0x1, 0xffffffff, 0x36b, 0x9, 0x7fffffff, 0x1000, 0x8001, 0x200, 0x7fffffff, 0x100, 0x1, 0x9, 0x20, 0x9069, 0x80000000, 0x594, 0x1, 0x300000, 0x570e, 0x1, 0x2cd90cb2, 0x0, 0x3, 0x3, 0x3ff, 0x1, 0x45d7a181, 0x9, 0xfff, 0x3ea, 0x3, 0x7ff, 0xa4, 0x7ff, 0x3, 0x1ff, 0x9, 0x800, 0x1, 0x4, 0x2, 0x800, 0x9, 0xfffffffd, 0x44916658, 0x6, 0x1, 0x1, 0x81, 0xffff, 0x9, 0x1b74, 0x4, 0x4, 0x5, 0x80, 0x8, 0x7, 0x10000, 0x9, 0x4, 0xff, 0x6, 0x4, 0x5, 0x2, 0x1d, 0x1, 0x7, 0xaede, 0x2, 0x7f, 0x1, 0xfffffff9, 0x5, 0xe1, 0x5, 0x0, 0x20, 0x1, 0x8, 0x0, 0x7, 0x4, 0x7, 0x6, 0x4, 0x9, 0x1f, 0x2, 0x4, 0xbea, 0x6a, 0x9, 0x4, 0x4, 0x1ff, 0x200, 0x3, 0x400, 0x10000000, 0x2, 0x7, 0x7fff, 0x7, 0x9, 0x8001, 0x40800000, 0x7fff, 0xa01, 0x4, 0xffffffff, 0x94, 0x1f, 0xaf3d, 0x3ff, 0x3f, 0x3, 0xe9b, 0xec1, 0x1, 0xc2b7, 0x0, 0x7, 0x1209, 0x7, 0x401, 0xde, 0x73, 0x5, 0x7, 0xfffffffd, 0x0, 0x8, 0x0, 0xfffffffa, 0x5, 0x1, 0xffffffa6, 0x0, 0xfff, 0x80, 0xead, 0xdc, 0x1ff, 0x2, 0x8000, 0x2, 0x8, 0x7ff, 0x0, 0x9, 0x40, 0x7, 0x8, 0x4, 0x5, 0x8, 0x7, 0xffffffff, 0x6, 0xfffeffff, 0x1, 0x401, 0x4, 0x0, 0x9, 0x2, 0x3, 0xfff, 0x7, 0x7ff, 0x4, 0xfffffffe, 0x1f, 0x5, 0x3, 0x8f, 0xfffffff8, 0x3, 0x5, 0xfff, 0x80000001, 0x1f, 0x9, 0x7ff, 0x0, 0x8, 0x9, 0x2, 0xffff, 0x4, 0x4, 0x3, 0x7fffffff, 0x1, 0x383, 0x40, 0x2ba, 0xe56, 0x80, 0x4, 0xd795, 0x7ff, 0x8, 0x7cef, 0xe4b, 0x5ba, 0x6a7, 0x0, 0x10000, 0x9, 0xf75, 0x0, 0x401, 0x3]}}]}}]}, 0x510}, 0x1, 0x0, 0x0, 0x4}, 0x804480c) io_setup(0x5, &(0x7f0000000740)=0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000980)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) io_submit(r5, 0x3, &(0x7f0000000ac0)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x88, r6, &(0x7f0000000780)="9bd815657011ddfd61e6a1e74844ca9a1be5ba0dd8da317c8cdc0af95c5ffbd73d6460598e110f89bbfd21c2a90031ad92006748b4e43652d4d9338e7432efa3af2c99b3cc5249cf1ef8675809d41b5917e0ea386e8750237900614200820896bdc988335e2c5c6fd1c02fc505f0ee6b22da7c2a666238e3d5cc608c2187e54b0feb4a46da2bb65f4e61650101f7cd1825cb7324204eac14e2409df77d3150cc626a18376977029a1d42cfb069b7a3ddab11eb87a317e06b5f370688f8d1bb23", 0xc0, 0x0, 0x0, 0x5, r2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000880)="b0c0f3d3c55b5c763be6788c8beda10b78e4ef8e92ee7d8788dfed5fad44d3d1e64128214fd51c816a6ad91c86e253a071593a1b9ebbf25a66e31241d2c12ff329c1c3350e6bc120f4d7219b57fa36256b7a2c6a6259342b2ea9718e8bd5f453aeed0c6366a32f826fc4f319b56ce62d1eb35ebded98c97ce257ee2edfa5f4b1ded18f53c1e74b5fe14b43d1c9adefc499bcedb945723404d873b8f7449422e66838d6cc9768e27aaf99532b6e073327f5535ecccce2c40983bcf65b1fa1f3b960c817b089d99f5d67fe", 0xca, 0x6, 0x0, 0x686f929138b7123b, r7}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x4, 0x0, r8, &(0x7f0000000a40)="3163f032aeb3c949", 0x8, 0x5, 0x0, 0x0, r0}]) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/full\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r9, 0x4b4c, &(0x7f0000000b40)={0x2, 0x9}) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/dlm-monitor\x00', 0x400202, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000bc0)) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/null\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r11, 0x40a85323, &(0x7f0000000c40)={{0x6, 0x8b}, 'port1\x00', 0x40, 0x40000, 0x80, 0x5, 0x2, 0x4, 0x9, 0x0, 0x4, 0x9}) r12 = dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r12, 0xc008aeb0, &(0x7f0000000d00)={0x1, [0x5]}) r13 = syz_open_dev$vcsa(&(0x7f0000000d40)='/dev/vcsa#\x00', 0x4cdc, 0x200) ioctl$BLKIOMIN(r13, 0x1278, &(0x7f0000000d80)) r14 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r14, 0xc0845658, &(0x7f0000000e00)={0x344488622228137, @reserved}) socket(0x1, 0x5, 0x80) r15 = socket(0x5, 0x4, 0xdb) ioctl$FS_IOC_GETVERSION(r15, 0x80087601, &(0x7f0000000ec0)) r16 = syz_open_dev$vcsa(&(0x7f0000000f00)='/dev/vcsa#\x00', 0x20, 0x6100) ioctl$SIOCRSACCEPT(r16, 0x89e3) [ 233.099281] device hsr_slave_0 entered promiscuous mode [ 233.139352] device hsr_slave_1 entered promiscuous mode [ 233.167770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.174983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 233.207410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.220036] IPVS: ftp: loaded support on port[0] = 21 [ 233.227158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.239765] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.246146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.255201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 233.272539] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 233.287400] IPVS: ftp: loaded support on port[0] = 21 [ 233.296213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.306109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.315408] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.321934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.332356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 233.350504] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.357189] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.364168] device bridge_slave_0 entered promiscuous mode [ 233.378493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.395423] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.402759] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.409993] device bridge_slave_1 entered promiscuous mode [ 233.423957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.431398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.462490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.474728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.493452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.509514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 233.559179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.568179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.576199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.586459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.593911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.602583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.618693] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.626011] team0: Port device team_slave_0 added [ 233.634722] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.642326] team0: Port device team_slave_1 added [ 233.650428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 233.670076] chnl_net:caif_netlink_parms(): no params data found [ 233.679699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.688102] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.696075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.704442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.714385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 233.749743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.760699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.770460] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 233.777084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.818801] device hsr_slave_0 entered promiscuous mode [ 233.856852] device hsr_slave_1 entered promiscuous mode [ 233.907372] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 233.963864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 234.014982] chnl_net:caif_netlink_parms(): no params data found [ 234.023415] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.031551] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.039514] device bridge_slave_0 entered promiscuous mode [ 234.047550] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.053923] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.061476] device bridge_slave_1 entered promiscuous mode [ 234.069094] chnl_net:caif_netlink_parms(): no params data found [ 234.095957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.103671] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 234.152906] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.159706] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.170461] device bridge_slave_0 entered promiscuous mode [ 234.180864] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.187362] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.194676] device bridge_slave_1 entered promiscuous mode [ 234.201427] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 234.213563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.227905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.235302] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.250153] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.263976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.273233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.284624] audit: type=1400 audit(1575506627.635:38): avc: denied { associate } for pid=7731 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 234.284748] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.363535] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.372312] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.381940] team0: Port device team_slave_0 added [ 234.390508] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.397567] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.413808] device bridge_slave_0 entered promiscuous mode [ 234.435154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.447724] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.473480] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.482220] team0: Port device team_slave_1 added [ 234.489910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.504194] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.516124] bridge0: port 2(bridge_slave_1) entered disabled state 00:43:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) r1 = dup(r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000240)}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8db88da66fe8d92e}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2202c000) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x2f, @empty, 0x4e23, 0x4, 'dh\x00', 0x8, 0x1, 0xe}, 0x2c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0d00000000fdff00000000000000006b32000000c6e45d5f4e4a62b6a004e6906872f1c763b8e189a3f2b9e2530b176510d85026e22b4a613e979e4455d4ca852160ddfab64fb6a4bfb7e7d131127e64ad29cc8b3a67c32f25f14f2f1207f80a0fcbf85769a32e793e0c25d3bdc91158a8571a5619c092034c2420832310c6fc6b97a93c2429b92429dbe1"], 0x14}}, 0x0) [ 234.524464] device bridge_slave_1 entered promiscuous mode [ 234.532165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.541106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.554658] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 234.563137] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.584450] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.593062] audit: type=1400 audit(1575506627.945:39): avc: denied { map_create } for pid=7759 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 234.599094] team0: Port device team_slave_0 added [ 234.628822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.643912] audit: type=1400 audit(1575506627.945:40): avc: denied { map_read map_write } for pid=7759 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 234.668986] audit: type=1400 audit(1575506627.975:41): avc: denied { create } for pid=7759 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 234.694576] audit: type=1400 audit(1575506627.975:42): avc: denied { write } for pid=7759 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:43:48 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000180)={0x1, 0x0, 0x80, 0x1, {0x3aad9b5c, 0x1a, 0x467, 0x4}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x1a}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 234.720906] audit: type=1400 audit(1575506627.975:43): avc: denied { read } for pid=7759 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 234.767797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.778501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.788573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.800395] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.806793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.814009] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.822401] hrtimer: interrupt took 33551 ns [ 234.826752] team0: Port device team_slave_1 added [ 234.831357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 234.835559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.864880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.883139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.892679] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.903234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:43:48 executing program 0: creat(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) dup(r2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) r4 = dup(r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000240)}, 0x20) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8db88da66fe8d92e}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2202c000) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x224, r5, 0x91f6b65bc7685e2d, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x67}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x15}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3b}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @local, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_BEARER={0x128, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @local}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @empty, 0x1feb}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3e8e, @local, 0xff}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x263}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x8, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0x40) [ 234.969404] device hsr_slave_0 entered promiscuous mode [ 235.007666] device hsr_slave_1 entered promiscuous mode 00:43:48 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000040)) r0 = getpid() tkill(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x14, 0x2b, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) times(&(0x7f0000000000)) memfd_create(&(0x7f0000000080)='*!\x81\x14\xae\xe3\xff\xaa\xaf\x86Sr\b\xc7\x98&\x89Zjj\x83\xbbQ\x01\x1fD\xc2(\xd2\xf749\xfdG\xc6\xe7\x9f\x0e\xf7M\x9d\xbe\x1fH\xf4\x85\x95\xf8P\xfd<\n+o\x11\xffo\xf4v \xa4\x9b\x03\xfd\x14\x02\x84\xad\f_\xbb\xca\x15pM\xc9Dsp\a\x99\xd5;\xd9n\xb5K\xbe\xfcj\n\n\x1c\a\xce-)\xec\x12\xd4;Y\x8b\x90\xa3U\x011\xd4\xb1\x83\xc5\x8d\xf2\xea\x11|\xbf\x14b\xb7\xaf`*d\xbeM\x89\x96\xe5\x95\x13\xe5\xb4\xd5-Y@\\\xe2\x03G\r*d\x8c?:\x04O*\xd49Y\xf0\v\xa8\x10n\"\x9a\"\x86<\x1b\xac\x94\b\x83]Q\xb7\xb58\xf3\xb0\xb67bE\x8a\x83^g\xfe', 0x0) [ 235.033204] autofs4:pid:7771:autofs_fill_super: called with bogus options [ 235.039259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.048139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.058704] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.073916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 00:43:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x8b, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1, 0x2, 0x1, 0x5, 0x0, 0x8, 0x20010, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc5, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x2c0, 0x7, 0x1ff, 0x7, 0x5b6, 0x6, 0x7}, r1, 0xfffffffffffffff7, 0xffffffffffffffff, 0x8) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000240)={0x30}, 0x30) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x8000000000006}]}, 0x10) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r3, 0x203ffffd, 0x0) write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x20000357) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0xfffff001, 0x4) clock_gettime(0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) [ 235.126515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.134970] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.141396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.149230] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 235.158584] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.177221] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 235.189808] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.202876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 00:43:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r2, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r2, 0x203ffffd, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'bond0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 235.597756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.608622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.618244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.627315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.632735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.651483] ================================================================== [ 235.651525] BUG: KASAN: slab-out-of-bounds in vcs_scr_readw+0xc2/0xd0 [ 235.651537] Read of size 2 at addr ffff8882197a9400 by task syz-executor.0/7794 [ 235.651540] [ 235.651557] CPU: 0 PID: 7794 Comm: syz-executor.0 Not tainted 4.19.87-syzkaller #0 [ 235.651566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.651570] Call Trace: [ 235.651590] dump_stack+0x197/0x210 [ 235.651608] ? vcs_scr_readw+0xc2/0xd0 [ 235.651627] print_address_description.cold+0x7c/0x20d [ 235.651645] ? vcs_scr_readw+0xc2/0xd0 [ 235.651658] kasan_report.cold+0x8c/0x2ba [ 235.651673] __asan_report_load2_noabort+0x14/0x20 [ 235.651685] vcs_scr_readw+0xc2/0xd0 [ 235.651702] vcs_write+0x646/0xcf0 [ 235.651731] ? vcs_size+0x240/0x240 [ 235.651757] __vfs_write+0x114/0x810 [ 235.651773] ? vcs_size+0x240/0x240 [ 235.651786] ? kernel_read+0x120/0x120 [ 235.651802] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 235.651815] ? __inode_security_revalidate+0xda/0x120 [ 235.651829] ? avc_policy_seqno+0xd/0x70 [ 235.651842] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 235.651856] ? selinux_file_permission+0x92/0x550 [ 235.651871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.651884] ? security_file_permission+0x89/0x230 [ 235.651901] ? rw_verify_area+0x118/0x360 [ 235.651919] vfs_write+0x20c/0x560 [ 235.651936] ksys_write+0x14f/0x2d0 [ 235.651953] ? __ia32_sys_read+0xb0/0xb0 [ 235.651969] ? do_syscall_64+0x26/0x620 [ 235.651982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.652006] ? do_syscall_64+0x26/0x620 [ 235.652025] __x64_sys_write+0x73/0xb0 [ 235.652043] do_syscall_64+0xfd/0x620 [ 235.652060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.652078] RIP: 0033:0x45a679 [ 235.652094] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.652103] RSP: 002b:00007f8009454c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.652117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 235.652126] RDX: 0000000020000357 RSI: 0000000020000080 RDI: 0000000000000006 [ 235.652134] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 235.652142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80094556d4 [ 235.652149] R13: 00000000004cb804 R14: 00000000004e5208 R15: 00000000ffffffff [ 235.652166] [ 235.652171] Allocated by task 1: [ 235.652185] save_stack+0x45/0xd0 [ 235.652196] kasan_kmalloc+0xce/0xf0 [ 235.652208] __kmalloc+0x15d/0x750 [ 235.652219] vc_do_resize+0x262/0x14a0 [ 235.652231] vc_resize+0x4d/0x60 [ 235.652243] fbcon_init+0x1062/0x1b00 [ 235.652252] visual_init+0x337/0x620 [ 235.652263] do_bind_con_driver+0x549/0x8c0 [ 235.652272] do_take_over_console+0x449/0x590 [ 235.652283] do_fbcon_takeover+0x116/0x220 [ 235.652294] fbcon_event_notify+0x1786/0x1dba [ 235.652307] notifier_call_chain+0xc2/0x230 [ 235.652319] blocking_notifier_call_chain+0x94/0xb0 [ 235.652330] fb_notifier_call_chain+0x25/0x30 [ 235.652343] register_framebuffer+0x61d/0xa70 [ 235.652354] vga16fb_probe+0x711/0x825 [ 235.652366] platform_drv_probe+0x93/0x160 [ 235.652377] really_probe+0x4a0/0x650 [ 235.652389] driver_probe_device+0x103/0x1b0 [ 235.652401] __device_attach_driver+0x225/0x290 [ 235.652413] bus_for_each_drv+0x16c/0x1f0 [ 235.652423] __device_attach+0x237/0x350 [ 235.652433] device_initial_probe+0x1b/0x20 [ 235.652444] bus_probe_device+0x1f7/0x2a0 [ 235.652456] device_add+0xb42/0x1760 [ 235.652467] platform_device_add+0x366/0x6f0 [ 235.652480] vga16fb_init+0x15f/0x1d6 [ 235.652493] do_one_initcall+0x107/0x78c [ 235.652508] kernel_init_freeable+0x4d4/0x5c8 [ 235.652521] kernel_init+0x12/0x1c4 [ 235.652532] ret_from_fork+0x24/0x30 [ 235.652536] [ 235.652543] Freed by task 0: [ 235.652547] (stack is not available) [ 235.652552] [ 235.652563] The buggy address belongs to the object at ffff8882197a8140 [ 235.652563] which belongs to the cache kmalloc-8192 of size 8192 [ 235.652574] The buggy address is located 4800 bytes inside of [ 235.652574] 8192-byte region [ffff8882197a8140, ffff8882197aa140) [ 235.652578] The buggy address belongs to the page: [ 235.652590] page:ffffea000865ea00 count:1 mapcount:0 mapping:ffff88812c315080 index:0x0 compound_mapcount: 0 [ 235.652605] flags: 0x57ffe0000008100(slab|head) [ 235.652627] raw: 057ffe0000008100 ffffea0008687208 ffffea000862b708 ffff88812c315080 [ 235.652644] raw: 0000000000000000 ffff8882197a8140 0000000100000001 0000000000000000 [ 235.652651] page dumped because: kasan: bad access detected [ 235.652655] [ 235.652659] Memory state around the buggy address: [ 235.652670] ffff8882197a9300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.652681] ffff8882197a9380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.652691] >ffff8882197a9400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.652696] ^ [ 235.652706] ffff8882197a9480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.652716] ffff8882197a9500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.652721] ================================================================== [ 235.652726] Disabling lock debugging due to kernel taint [ 235.653568] Kernel panic - not syncing: panic_on_warn set ... [ 235.653568] [ 235.653587] CPU: 0 PID: 7794 Comm: syz-executor.0 Tainted: G B 4.19.87-syzkaller #0 [ 235.653595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.653599] Call Trace: [ 235.653618] dump_stack+0x197/0x210 [ 235.653637] ? vcs_scr_readw+0xc2/0xd0 [ 235.653650] panic+0x26a/0x50e [ 235.653664] ? __warn_printk+0xf3/0xf3 [ 235.653680] ? vcs_scr_readw+0xc2/0xd0 [ 235.653697] ? preempt_schedule+0x4b/0x60 [ 235.653712] ? ___preempt_schedule+0x16/0x18 [ 235.653724] ? trace_hardirqs_on+0x5e/0x220 [ 235.653738] ? vcs_scr_readw+0xc2/0xd0 [ 235.653751] kasan_end_report+0x47/0x4f [ 235.653765] kasan_report.cold+0xa9/0x2ba [ 235.653781] __asan_report_load2_noabort+0x14/0x20 [ 235.653793] vcs_scr_readw+0xc2/0xd0 [ 235.653807] vcs_write+0x646/0xcf0 [ 235.653828] ? vcs_size+0x240/0x240 [ 235.653847] __vfs_write+0x114/0x810 [ 235.653860] ? vcs_size+0x240/0x240 [ 235.653873] ? kernel_read+0x120/0x120 [ 235.653886] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 235.653899] ? __inode_security_revalidate+0xda/0x120 [ 235.653913] ? avc_policy_seqno+0xd/0x70 [ 235.653925] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 235.653938] ? selinux_file_permission+0x92/0x550 [ 235.653953] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.653965] ? security_file_permission+0x89/0x230 [ 235.653980] ? rw_verify_area+0x118/0x360 [ 235.653994] vfs_write+0x20c/0x560 [ 235.654010] ksys_write+0x14f/0x2d0 [ 235.654024] ? __ia32_sys_read+0xb0/0xb0 [ 235.654039] ? do_syscall_64+0x26/0x620 [ 235.654052] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.654064] ? do_syscall_64+0x26/0x620 [ 235.654087] __x64_sys_write+0x73/0xb0 [ 235.654100] do_syscall_64+0xfd/0x620 [ 235.654114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.654123] RIP: 0033:0x45a679 [ 235.654137] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.654144] RSP: 002b:00007f8009454c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.654157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 235.654164] RDX: 0000000020000357 RSI: 0000000020000080 RDI: 0000000000000006 [ 235.654172] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 235.654178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80094556d4 [ 235.654185] R13: 00000000004cb804 R14: 00000000004e5208 R15: 00000000ffffffff [ 235.655716] Kernel Offset: disabled [ 236.407694] Rebooting in 86400 seconds..