[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.706427] random: sshd: uninitialized urandom read (32 bytes read) [ 30.885639] kauditd_printk_skb: 9 callbacks suppressed [ 30.885647] audit: type=1400 audit(1568698605.336:35): avc: denied { map } for pid=6723 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 30.940249] random: sshd: uninitialized urandom read (32 bytes read) [ 31.539732] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.25' (ECDSA) to the list of known hosts. [ 37.087290] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/17 05:36:51 fuzzer started [ 37.274162] audit: type=1400 audit(1568698611.726:36): avc: denied { map } for pid=6734 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 37.743737] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/17 05:36:52 dialing manager at 10.128.0.105:38157 2019/09/17 05:36:52 syscalls: 2466 2019/09/17 05:36:52 code coverage: enabled 2019/09/17 05:36:52 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/17 05:36:52 extra coverage: extra coverage is not supported by the kernel 2019/09/17 05:36:52 setuid sandbox: enabled 2019/09/17 05:36:52 namespace sandbox: enabled 2019/09/17 05:36:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/17 05:36:52 fault injection: enabled 2019/09/17 05:36:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/17 05:36:52 net packet injection: enabled 2019/09/17 05:36:52 net device setup: enabled [ 39.415828] random: crng init done 05:38:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'\x00\x01\x00\r\x00\x00\x14\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'syzR\x00', 0x200}) 05:38:34 executing program 1: modify_ldt$write2(0x11, &(0x7f00000006c0)={0x804}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) ioctl$RTC_UIE_ON(r2, 0x7003) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, 0x0, 0xc000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x800) [ 139.723782] audit: type=1400 audit(1568698714.176:37): avc: denied { map } for pid=6734 comm="syz-fuzzer" path="/root/syzkaller-shm398232747" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 05:38:34 executing program 5: mknod(&(0x7f0000f80000)='./file0\x00', 0x8, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x400100000001, 0x272) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x200000006010, 0x0) 05:38:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1d, 0x1}) 05:38:34 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x3f00) 05:38:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) [ 139.754323] audit: type=1400 audit(1568698714.176:38): avc: denied { map } for pid=6751 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13765 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 139.981690] IPVS: ftp: loaded support on port[0] = 21 [ 140.889203] chnl_net:caif_netlink_parms(): no params data found [ 140.897187] IPVS: ftp: loaded support on port[0] = 21 [ 140.928347] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.934992] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.941917] device bridge_slave_0 entered promiscuous mode [ 140.948573] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.955457] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.962601] device bridge_slave_1 entered promiscuous mode [ 140.981422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 140.995005] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.016272] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.023403] team0: Port device team_slave_0 added [ 141.032526] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.039518] team0: Port device team_slave_1 added [ 141.048569] IPVS: ftp: loaded support on port[0] = 21 [ 141.050766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 141.062492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 141.121954] device hsr_slave_0 entered promiscuous mode [ 141.160380] device hsr_slave_1 entered promiscuous mode [ 141.231934] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 141.242697] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 141.258313] chnl_net:caif_netlink_parms(): no params data found [ 141.286199] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.292666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.299430] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.305771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.332907] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.339300] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.346578] device bridge_slave_0 entered promiscuous mode [ 141.354597] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.360986] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.367752] device bridge_slave_1 entered promiscuous mode [ 141.395323] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.404321] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.423007] IPVS: ftp: loaded support on port[0] = 21 [ 141.434238] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.441535] team0: Port device team_slave_0 added [ 141.481685] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.488690] team0: Port device team_slave_1 added [ 141.504042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 141.511604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 141.525388] chnl_net:caif_netlink_parms(): no params data found [ 141.602878] IPVS: ftp: loaded support on port[0] = 21 [ 141.608285] device hsr_slave_0 entered promiscuous mode [ 141.651075] device hsr_slave_1 entered promiscuous mode [ 141.712540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 141.723197] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 141.729367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.745035] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 141.789779] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.802054] chnl_net:caif_netlink_parms(): no params data found [ 141.816472] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.822923] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.829846] device bridge_slave_0 entered promiscuous mode [ 141.836454] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.843069] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.849929] device bridge_slave_1 entered promiscuous mode [ 141.893182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.902949] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.919889] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.927624] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 141.942876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.956562] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 141.962803] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.975970] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.976577] IPVS: ftp: loaded support on port[0] = 21 [ 142.002945] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.009291] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.016940] device bridge_slave_0 entered promiscuous mode [ 142.023523] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.029855] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.037062] device bridge_slave_1 entered promiscuous mode [ 142.044164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.055345] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.062865] team0: Port device team_slave_0 added [ 142.076197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.083950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.091581] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.097985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.110407] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.122703] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.129748] team0: Port device team_slave_1 added [ 142.135929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.147701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.170853] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.179184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.188958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 142.198027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.225939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.233876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.241556] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.247875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.254726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.262304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.272441] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.283017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.342005] device hsr_slave_0 entered promiscuous mode [ 142.380408] device hsr_slave_1 entered promiscuous mode [ 142.421486] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.428457] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.437309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.444898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.452683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.468630] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.477211] team0: Port device team_slave_0 added [ 142.484570] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.491797] team0: Port device team_slave_1 added [ 142.500199] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.518456] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.526919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.537311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.545753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 142.554533] chnl_net:caif_netlink_parms(): no params data found [ 142.567730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.575535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.583048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.590625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.609378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 142.674086] device hsr_slave_0 entered promiscuous mode [ 142.720549] device hsr_slave_1 entered promiscuous mode [ 142.760324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.767768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.778348] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 142.784542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.794177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.801638] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.824505] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.831254] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.838035] device bridge_slave_0 entered promiscuous mode [ 142.848534] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.857187] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.864200] device bridge_slave_1 entered promiscuous mode [ 142.871045] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.878261] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.907316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.927897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.934916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.943922] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 142.963369] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 142.969439] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.990463] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.999177] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.021799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.028865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.044806] chnl_net:caif_netlink_parms(): no params data found [ 143.059288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.066746] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.074258] team0: Port device team_slave_0 added [ 143.079749] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.086867] team0: Port device team_slave_1 added [ 143.092168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.099785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.107707] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.114065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.123230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.143108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.151326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.158277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.166861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.174783] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.181145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.189812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.200712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.222966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.236797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.283699] device hsr_slave_0 entered promiscuous mode [ 143.320773] device hsr_slave_1 entered promiscuous mode [ 143.370497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.380359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.407374] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.414388] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.421852] device bridge_slave_0 entered promiscuous mode [ 143.428543] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.434934] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.442475] device bridge_slave_1 entered promiscuous mode [ 143.449058] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.456784] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.463860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.471804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.479288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.488060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.498522] audit: type=1400 audit(1568698717.946:39): avc: denied { attach_queue } for pid=6786 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tun_socket permissive=1 [ 143.514276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.535422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.543175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.552896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.560908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 143.569236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 143.580715] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 143.596884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.605786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.613695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.621706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.630534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.639749] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 143.646164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.654882] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 143.668185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 143.675540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.696699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.704010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.714743] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 05:38:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'\x00\x01\x00\r\x00\x00\x14\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'syzR\x00', 0x200}) [ 143.722002] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 143.728568] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.735832] team0: Port device team_slave_0 added [ 143.745437] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 143.751858] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.758650] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.765414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.772263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.782604] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 143.788664] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.798204] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.805810] team0: Port device team_slave_1 added [ 143.812705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.822867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.835896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.844303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.852221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.859853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.867525] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.873905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.882166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.889751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.897459] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.903819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.910703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.918293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.925973] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.932338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.940500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.947474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.958633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.966548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.996167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.012781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.021411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.029968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.042079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.083779] device hsr_slave_0 entered promiscuous mode [ 144.120582] device hsr_slave_1 entered promiscuous mode [ 144.164151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.171792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.179272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.187253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.195250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.203077] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.209403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.216373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.226486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.235749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.244005] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.252371] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.259447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.267365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.274960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.284724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 144.301098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.308637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.317694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 144.325554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.336484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.343925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.351686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 05:38:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'\x00\x01\x00\r\x00\x00\x14\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'syzR\x00', 0x200}) 05:38:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') lseek(r0, 0xffffffffffffffff, 0x0) 05:38:39 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000030007000a0002000a0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) [ 144.360559] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 144.366554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.381649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.403054] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.424749] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.433891] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 144.440986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.448482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.456108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.463662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.471282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.486336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 144.506486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.523055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.530586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.547409] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.555977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 144.571984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.579515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.588258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.596903] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.616712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.626656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.647329] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.656131] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.664794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 05:38:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'\x00\x01\x00\r\x00\x00\x14\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'syzR\x00', 0x200}) [ 144.676291] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 144.685946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.712674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.720879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.730854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.749432] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.755810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.765056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 05:38:39 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000035c0)=@in={0x2, 0x0, @rand_addr=0x2}, 0x80, 0x0}}], 0x1, 0x0) [ 144.772557] bridge_slave_1: FDB only supports static addresses [ 144.786062] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.793671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.807778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.816836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.826493] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.832895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.847429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.855338] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 144.866146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.875061] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.887028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.896054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.903191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.912282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 05:38:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000), 0xc) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc) [ 144.925927] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.932488] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.961992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.973366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.990670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.998053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.010626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.042877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.050865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.058668] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.065044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.065652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.078893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.104855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.121225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.128868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.142107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.153352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.161763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.169585] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.175958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.184247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.193434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.202080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.208987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.217240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.224770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.232509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.239919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.256318] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.264027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.273257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.283638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.291033] audit: type=1400 audit(1568698719.736:40): avc: denied { create } for pid=6861 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 145.315359] audit: type=1400 audit(1568698719.736:41): avc: denied { write } for pid=6861 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 145.321216] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 145.346293] audit: type=1400 audit(1568698719.756:42): avc: denied { read } for pid=6861 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 145.348549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.380628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.390918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.398667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 05:38:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x71, &(0x7f0000000700)=@assoc_value={r2}, &(0x7f0000000740)=0x8) 05:38:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x20000001}) dup3(r2, r1, 0x0) [ 145.410554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.427407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.439520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.449390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.459746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.466338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.474414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.489155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.496204] audit: type=1400 audit(1568698719.936:43): avc: denied { block_suspend } for pid=6868 comm="syz-executor.0" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 145.515587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.539905] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.547014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.556472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.571557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.594217] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 145.603800] 8021q: adding VLAN 0 to HW filter on device batadv0 05:38:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setrlimit(0x0, &(0x7f0000000080)) 05:38:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 146.172900] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 05:38:41 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 05:38:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000001c0)=0x66b6, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x820, 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0) 05:38:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod(0x0, 0x4000, 0x0) 05:38:41 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 05:38:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x0, [], &(0x7f0000000180)={0x98f905, 0x2000000d408, [], @p_u32=&(0x7f0000000200)=0x7fffffff}}) 05:38:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 05:38:41 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000001900)='ns/net\x00') 05:38:41 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x0, "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", 0x0, 0x38}}}, 0x128) close(r0) 05:38:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x14800008}, 0xc) 05:38:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) keyctl$revoke(0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, 0x0, 0x0) keyctl$revoke(0x3, 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x34c, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x40d) pipe(0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r4 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0xfcf0, 0x24000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000200)='./file0\x00', 0x110000141042, 0x0) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x88000fbfffffa) connect$unix(r4, &(0x7f0000000080)=@abs, 0x6e) 05:38:41 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x3af) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffec8, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") close(r1) close(r0) 05:38:41 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) [ 146.880428] protocol 88fb is buggy, dev hsr_slave_0 [ 146.885607] protocol 88fb is buggy, dev hsr_slave_1 [ 146.900847] kasan: CONFIG_KASAN_INLINE enabled 05:38:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480)) openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x100, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) 05:38:41 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) 05:38:41 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 146.915276] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 146.932235] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 146.933823] PM: Basic memory bitmaps created [ 146.938473] Modules linked in: [ 146.938487] CPU: 0 PID: 6932 Comm: syz-executor.5 Not tainted 4.14.144 #0 [ 146.938494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.952745] PM: Basic memory bitmaps freed [ 146.952966] task: ffff88805e162400 task.stack: ffff88805e168000 [ 146.972658] RIP: 0010:do_tcp_sendpages+0x33d/0x18f0 [ 146.975343] kobject: 'loop0' (ffff8880a48b3760): kobject_uevent_env [ 146.977660] RSP: 0018:ffff88805e16f6b0 EFLAGS: 00010202 [ 146.977669] RAX: 0000000000000010 RBX: 0000000000000000 RCX: ffffc90008852000 [ 146.977674] RDX: 000000000000717e RSI: ffffffff8523f03b RDI: 0000000000000080 [ 146.977678] RBP: ffff88805e16f7d8 R08: ffff88805e162400 R09: 0000000000000001 [ 146.977684] R10: 0000000000000000 R11: ffff88805e162400 R12: 0000000000005580 [ 146.977688] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888094ed0100 [ 146.977697] FS: 00007fc1fbc6f700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 146.989053] kobject: 'loop0' (ffff8880a48b3760): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 146.989423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.049194] CR2: 0000000000738008 CR3: 00000000a8c8c000 CR4: 00000000001406f0 [ 147.056446] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.063696] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.070946] Call Trace: [ 147.073517] ? lock_sock_nested+0x9e/0x110 [ 147.077735] ? sk_stream_alloc_skb+0x780/0x780 [ 147.082296] ? tcp_rate_check_app_limited+0x2ba/0x320 [ 147.087467] tcp_sendpage_locked+0x88/0x140 [ 147.091766] tcp_sendpage+0x3f/0x60 [ 147.095374] inet_sendpage+0x157/0x580 [ 147.099238] ? tcp_sendpage_locked+0x140/0x140 [ 147.103798] kernel_sendpage+0x92/0xf0 [ 147.107662] ? inet_sendmsg+0x500/0x500 [ 147.111618] sock_sendpage+0x8b/0xc0 [ 147.115491] ? kernel_sendpage+0xf0/0xf0 [ 147.119530] pipe_to_sendpage+0x242/0x340 [ 147.123658] ? direct_splice_actor+0x190/0x190 [ 147.128219] __splice_from_pipe+0x348/0x780 [ 147.132516] ? direct_splice_actor+0x190/0x190 [ 147.137074] ? direct_splice_actor+0x190/0x190 [ 147.141635] splice_from_pipe+0xf0/0x150 [ 147.145683] ? splice_shrink_spd+0xb0/0xb0 [ 147.149900] generic_splice_sendpage+0x3c/0x50 [ 147.154458] ? splice_from_pipe+0x150/0x150 [ 147.158769] direct_splice_actor+0x123/0x190 [ 147.163166] splice_direct_to_actor+0x29e/0x7b0 [ 147.167815] ? generic_pipe_buf_nosteal+0x10/0x10 [ 147.172639] ? do_splice_to+0x170/0x170 [ 147.176590] ? rw_verify_area+0xea/0x2b0 [ 147.180627] do_splice_direct+0x18d/0x230 [ 147.184751] ? splice_direct_to_actor+0x7b0/0x7b0 [ 147.189583] ? rw_verify_area+0xea/0x2b0 [ 147.193624] do_sendfile+0x4db/0xbd0 [ 147.197317] ? do_compat_pwritev64+0x140/0x140 [ 147.201875] ? put_timespec64+0xb4/0x100 [ 147.205912] ? nsecs_to_jiffies+0x30/0x30 [ 147.210039] SyS_sendfile64+0x102/0x110 [ 147.213993] ? SyS_sendfile+0x130/0x130 [ 147.217944] ? do_syscall_64+0x53/0x640 [ 147.221896] ? SyS_sendfile+0x130/0x130 [ 147.225858] do_syscall_64+0x1e8/0x640 [ 147.229720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 147.234541] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 147.239707] RIP: 0033:0x4598e9 [ 147.242874] RSP: 002b:00007fc1fbc6ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 147.250559] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004598e9 [ 147.257806] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 147.265052] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 147.272300] R10: 00088000fbfffffa R11: 0000000000000246 R12: 00007fc1fbc6f6d4 [ 147.279551] R13: 00000000004c709e R14: 00000000004dc750 R15: 00000000ffffffff [ 147.286800] Code: ff ff 48 0f 44 d8 e8 c3 f2 38 fc 4d 85 e4 0f 84 9b 03 00 00 e8 b5 f2 38 fc 48 8d bb 80 00 00 00 44 8b 65 a8 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 74 08 3c 03 0f 8e 85 11 00 00 44 2b a3 80 [ 147.305907] RIP: do_tcp_sendpages+0x33d/0x18f0 RSP: ffff88805e16f6b0 [ 147.316557] protocol 88fb is buggy, dev hsr_slave_0 [ 147.321632] protocol 88fb is buggy, dev hsr_slave_1 [ 147.327175] kobject: 'loop4' (ffff8880a4a152a0): kobject_uevent_env [ 147.335434] kobject: 'loop4' (ffff8880a4a152a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 147.345836] ---[ end trace 65e0b49be1f19479 ]--- [ 147.352577] kobject: 'kvm' (ffff8880a6e2e2d0): kobject_uevent_env [ 147.354457] PM: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 147.360206] protocol 88fb is buggy, dev hsr_slave_0 [ 147.365802] Kernel panic - not syncing: Fatal exception [ 147.370112] protocol 88fb is buggy, dev hsr_slave_1 [ 147.381686] Kernel Offset: disabled [ 147.385296] Rebooting in 86400 seconds..