[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.930467] random: sshd: uninitialized urandom read (32 bytes read) [ 33.134779] kauditd_printk_skb: 9 callbacks suppressed [ 33.134788] audit: type=1400 audit(1568666474.525:35): avc: denied { map } for pid=6808 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.187973] random: sshd: uninitialized urandom read (32 bytes read) [ 33.764080] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.179' (ECDSA) to the list of known hosts. [ 39.214858] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/16 20:41:20 fuzzer started [ 39.404706] audit: type=1400 audit(1568666480.795:36): avc: denied { map } for pid=6818 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.781792] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/16 20:41:21 dialing manager at 10.128.0.105:38157 2019/09/16 20:41:24 syscalls: 2466 2019/09/16 20:41:24 code coverage: enabled 2019/09/16 20:41:24 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/16 20:41:24 extra coverage: extra coverage is not supported by the kernel 2019/09/16 20:41:24 setuid sandbox: enabled 2019/09/16 20:41:24 namespace sandbox: enabled 2019/09/16 20:41:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/16 20:41:24 fault injection: enabled 2019/09/16 20:41:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/16 20:41:24 net packet injection: enabled 2019/09/16 20:41:24 net device setup: enabled [ 44.472503] random: crng init done 20:42:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe0000013}) close(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) 20:42:00 executing program 1: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 20:42:00 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') sendfile(r0, r1, 0x0, 0x6) 20:42:00 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 20:42:00 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x200004e20, 0x0, @empty}, 0x1c) listen(r0, 0xfffffffffffffffe) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xfffffffffffffffc}, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) [ 78.710732] audit: type=1400 audit(1568666520.105:37): avc: denied { map } for pid=6818 comm="syz-fuzzer" path="/root/syzkaller-shm890892999" dev="sda1" ino=16490 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 20:42:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1c2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0fc04b3466b9800000c00f326635000400000f300f01c9663ef30fa7c8fad1042e26673e676765f30f01dfee0f01c20ff8cc0f495193f317d382b03939cf", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 78.753275] audit: type=1400 audit(1568666520.135:38): avc: denied { map } for pid=6836 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1134 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 79.090881] IPVS: ftp: loaded support on port[0] = 21 [ 79.957466] chnl_net:caif_netlink_parms(): no params data found [ 79.971524] IPVS: ftp: loaded support on port[0] = 21 [ 79.994399] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.001299] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.008212] device bridge_slave_0 entered promiscuous mode [ 80.015136] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.021574] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.028387] device bridge_slave_1 entered promiscuous mode [ 80.043855] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.052540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.068045] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.075186] team0: Port device team_slave_0 added [ 80.080793] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.087770] team0: Port device team_slave_1 added [ 80.094802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.102105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.152042] device hsr_slave_0 entered promiscuous mode [ 80.210276] device hsr_slave_1 entered promiscuous mode [ 80.252151] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 80.263466] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 80.289187] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.295678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.302580] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.308944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.310058] IPVS: ftp: loaded support on port[0] = 21 [ 80.377587] chnl_net:caif_netlink_parms(): no params data found [ 80.414070] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 80.420685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.431302] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.437691] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.445019] device bridge_slave_0 entered promiscuous mode [ 80.459048] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.466362] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.473279] device bridge_slave_1 entered promiscuous mode [ 80.485115] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.507060] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.516114] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.533809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.542351] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.549966] IPVS: ftp: loaded support on port[0] = 21 [ 80.559573] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.573680] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 80.579744] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.592621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.599722] team0: Port device team_slave_0 added [ 80.607954] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.616160] team0: Port device team_slave_1 added [ 80.623265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.631604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.641709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.649206] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.655571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.662338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.669798] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.676159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.732439] device hsr_slave_0 entered promiscuous mode [ 80.790356] device hsr_slave_1 entered promiscuous mode [ 80.853319] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 80.862283] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 80.914381] IPVS: ftp: loaded support on port[0] = 21 [ 80.935265] chnl_net:caif_netlink_parms(): no params data found [ 80.944084] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.951379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.958960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.966633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.987372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 81.001525] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 81.031401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.038849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.054516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 81.093995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.101689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.113432] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 81.119417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.139695] chnl_net:caif_netlink_parms(): no params data found [ 81.153609] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.159992] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.166956] device bridge_slave_0 entered promiscuous mode [ 81.184874] IPVS: ftp: loaded support on port[0] = 21 [ 81.188312] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 81.204445] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.212664] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.219449] device bridge_slave_1 entered promiscuous mode [ 81.242081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.265512] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.311297] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.347149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.358672] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.365591] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.372847] device bridge_slave_0 entered promiscuous mode [ 81.381983] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.388551] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.395869] device bridge_slave_1 entered promiscuous mode [ 81.412208] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 81.426121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 81.432600] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.439611] team0: Port device team_slave_0 added [ 81.459394] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.471410] chnl_net:caif_netlink_parms(): no params data found [ 81.482739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.489919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.497486] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.506096] team0: Port device team_slave_1 added [ 81.514221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.526017] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.535071] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 81.542111] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.548870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.586234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.598912] team0: Port device team_slave_0 added [ 81.615194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 81.638270] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.645575] team0: Port device team_slave_1 added [ 81.651083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.665255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.673123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.681179] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.687512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.694915] audit: type=1400 audit(1568666523.095:39): avc: denied { block_suspend } for pid=6868 comm="syz-executor.0" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 81.696838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.727811] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.734555] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.741455] device bridge_slave_0 entered promiscuous mode [ 81.767870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.813872] device hsr_slave_0 entered promiscuous mode [ 81.850473] device hsr_slave_1 entered promiscuous mode 20:42:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe0000013}) close(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) [ 81.890650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.897717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.907347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.914876] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.921317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.936573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.951343] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.957702] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.965174] device bridge_slave_1 entered promiscuous mode [ 81.988736] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 81.996503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 20:42:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe0000013}) close(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) [ 82.035713] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.043581] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 82.054142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.103399] device hsr_slave_0 entered promiscuous mode [ 82.140323] device hsr_slave_1 entered promiscuous mode [ 82.181267] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.195303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.204866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.215590] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready 20:42:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe0000013}) close(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) [ 82.232768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.246800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.256284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.267969] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 82.277945] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.285884] team0: Port device team_slave_0 added [ 82.291587] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.298569] team0: Port device team_slave_1 added [ 82.304626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.313399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.321604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.328453] chnl_net:caif_netlink_parms(): no params data found [ 82.352876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.361051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.375540] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 20:42:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe0000013}) close(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) [ 82.396070] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.404263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 82.482947] device hsr_slave_0 entered promiscuous mode [ 82.520376] device hsr_slave_1 entered promiscuous mode [ 82.560580] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 82.567461] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 82.575058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.582908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 20:42:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe0000013}) close(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) [ 82.606971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 82.629687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.646741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.654487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.669676] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 82.676002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.686030] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.698565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.707565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.716067] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.722602] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.729432] device bridge_slave_0 entered promiscuous mode [ 82.736612] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.743234] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.750904] device bridge_slave_1 entered promiscuous mode 20:42:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe0000013}) close(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) [ 82.757947] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 82.767227] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 82.809439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.816772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.823805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.830922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.839350] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 82.845839] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.852995] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.865322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.875068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.884258] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 82.890478] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.897923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.906570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 20:42:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x7, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) [ 82.914175] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.920548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.928493] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.938374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.950268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.959704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.976719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.984618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.994744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.002544] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.008880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.016158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.023858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.031458] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.037807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.044897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.052552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.059990] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.066362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.077829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.091738] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 83.102583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 83.111250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.128369] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.136130] team0: Port device team_slave_0 added [ 83.145094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 83.153079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.161164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.169156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.178544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.193912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.202424] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.209417] team0: Port device team_slave_1 added [ 83.220741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.227221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.239099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.246451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.254648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.262250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.271733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.279127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.287029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.295509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 83.303412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.312125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.331238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.338770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.346894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.354591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.363628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.371776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 83.379624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.390940] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 83.396945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.404596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.416665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 83.462024] device hsr_slave_0 entered promiscuous mode [ 83.500416] device hsr_slave_1 entered promiscuous mode [ 83.560773] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 83.567831] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 83.575211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.582915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.590436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.597915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.605955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.613441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.625590] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 83.636670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 83.648902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.657193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.668657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.678213] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 83.684679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.711502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.722058] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.732948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.745414] audit: type=1400 audit(1568666525.135:40): avc: denied { name_bind } for pid=6915 comm="syz-executor.3" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 83.771866] audit: type=1400 audit(1568666525.155:41): avc: denied { node_bind } for pid=6915 comm="syz-executor.3" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 83.773927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.804066] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.811812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.819854] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 83.829892] audit: type=1400 audit(1568666525.215:42): avc: denied { name_connect } for pid=6915 comm="syz-executor.3" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 83.853183] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.864117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.871194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.879862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 83.887971] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 83.896914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.904886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.917069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.925219] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.931590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.940651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.947567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.956400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 83.967670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.974954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.982828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.992039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.999595] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.005970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.015400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 84.025705] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 84.031967] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.041950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.049050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.057176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.064985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.072935] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.079254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.087290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.096153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.103739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.112176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.119744] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.126122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.136661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 84.149362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 84.157283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:42:05 executing program 1: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 84.176346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.186525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.198186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 84.206267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.216545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.225346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.238175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.251947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.263393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.270727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.278539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.286173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.293914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.302631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.311566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 84.322377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.331182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 84.338701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.346873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.354465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.362241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.369742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.377607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.387107] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 84.393661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.406453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 84.406755] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.437571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.446462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.464162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 84.474945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.483854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.494212] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 84.505565] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 84.512206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.523752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.535697] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 84.553597] 8021q: adding VLAN 0 to HW filter on device batadv0 20:42:07 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') sendfile(r0, r1, 0x0, 0x6) 20:42:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1304a4e038673975bbf17933de1b1bec286789e2279e40cf91e2781e35906c29e722bdc6116ec6d91b82f01963f342ab0135b242503b00b5fcb5136adc3840a6", "85b275a6570d6826e4729b6a31b9687b7b5120ec9dff0128e13989b55cb1395232ec33dfb697010b5d853daf1fc23a585d5bc59b5cadabef302b4c20b4dc33b0", "18057d1eb07e50ce17b5f0e681c3a5b1c34b266b10b8de9ea2896513285fef79"}) 20:42:07 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, @reserved=[0x2]}) 20:42:07 executing program 1: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 20:42:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1c2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0fc04b3466b9800000c00f326635000400000f300f01c9663ef30fa7c8fad1042e26673e676765f30f01dfee0f01c20ff8cc0f495193f317d382b03939cf", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:42:07 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') [ 85.648105] audit: type=1400 audit(1568666527.035:43): avc: denied { map } for pid=6962 comm="syz-executor.5" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27118 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 20:42:07 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, @reserved=[0x2]}) 20:42:07 executing program 1: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 20:42:07 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 20:42:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1304a4e038673975bbf17933de1b1bec286789e2279e40cf91e2781e35906c29e722bdc6116ec6d91b82f01963f342ab0135b242503b00b5fcb5136adc3840a6", "85b275a6570d6826e4729b6a31b9687b7b5120ec9dff0128e13989b55cb1395232ec33dfb697010b5d853daf1fc23a585d5bc59b5cadabef302b4c20b4dc33b0", "18057d1eb07e50ce17b5f0e681c3a5b1c34b266b10b8de9ea2896513285fef79"}) 20:42:07 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, @reserved=[0x2]}) 20:42:07 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') sendfile(r0, r1, 0x0, 0x6) 20:42:07 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 20:42:07 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, @reserved=[0x2]}) 20:42:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1c2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0fc04b3466b9800000c00f326635000400000f300f01c9663ef30fa7c8fad1042e26673e676765f30f01dfee0f01c20ff8cc0f495193f317d382b03939cf", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:42:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32=r1, @ANYBLOB="e5ff0400bddd00000800160005000000"], 0x5c}}, 0x0) 20:42:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1304a4e038673975bbf17933de1b1bec286789e2279e40cf91e2781e35906c29e722bdc6116ec6d91b82f01963f342ab0135b242503b00b5fcb5136adc3840a6", "85b275a6570d6826e4729b6a31b9687b7b5120ec9dff0128e13989b55cb1395232ec33dfb697010b5d853daf1fc23a585d5bc59b5cadabef302b4c20b4dc33b0", "18057d1eb07e50ce17b5f0e681c3a5b1c34b266b10b8de9ea2896513285fef79"}) 20:42:07 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') sendfile(r0, r1, 0x0, 0x6) 20:42:07 executing program 2: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x7530}, 0x10) sendmmsg$unix(r1, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x4924924924926de, 0x0) 20:42:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="220000002100070700be0000090007010a00001e00000000ff000400050003800041", 0x22) [ 86.043738] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.079983] (unnamed net_device) (uninitialized): Device veth0 is not bonding slave 20:42:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="220000002100070700be0000090007010a00001e00000000ff000400050003800041", 0x22) [ 86.088498] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth0) 20:42:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1c2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0fc04b3466b9800000c00f326635000400000f300f01c9663ef30fa7c8fad1042e26673e676765f30f01dfee0f01c20ff8cc0f495193f317d382b03939cf", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:42:07 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda06", 0x10}], 0x1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) read(0xffffffffffffffff, 0x0, 0x0) 20:42:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1304a4e038673975bbf17933de1b1bec286789e2279e40cf91e2781e35906c29e722bdc6116ec6d91b82f01963f342ab0135b242503b00b5fcb5136adc3840a6", "85b275a6570d6826e4729b6a31b9687b7b5120ec9dff0128e13989b55cb1395232ec33dfb697010b5d853daf1fc23a585d5bc59b5cadabef302b4c20b4dc33b0", "18057d1eb07e50ce17b5f0e681c3a5b1c34b266b10b8de9ea2896513285fef79"}) [ 86.172962] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.202680] (unnamed net_device) (uninitialized): Device veth0 is not bonding slave 20:42:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="220000002100070700be0000090007010a00001e00000000ff000400050003800041", 0x22) [ 86.237133] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth0) 20:42:07 executing program 2: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x7530}, 0x10) sendmmsg$unix(r1, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x4924924924926de, 0x0) 20:42:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32=r1, @ANYBLOB="e5ff0400bddd00000800160005000000"], 0x5c}}, 0x0) 20:42:07 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b06, &(0x7f0000000340)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x00\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') [ 86.291621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.301260] bridge0: port 1(bridge_slave_0) entered disabled state 20:42:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="220000002100070700be0000090007010a00001e00000000ff000400050003800041", 0x22) 20:42:07 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda06", 0x10}], 0x1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) read(0xffffffffffffffff, 0x0, 0x0) 20:42:07 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() setresuid(0x0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {r2, r0}}}], 0x20}], 0x1, 0x0) 20:42:07 executing program 2: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x7530}, 0x10) sendmmsg$unix(r1, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x4924924924926de, 0x0) 20:42:07 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b06, &(0x7f0000000340)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x00\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') 20:42:07 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() setresuid(0x0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {r2, r0}}}], 0x20}], 0x1, 0x0) 20:42:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200), 0x4) [ 86.483976] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.511043] (unnamed net_device) (uninitialized): Device veth0 is not bonding slave 20:42:07 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() setresuid(0x0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {r2, r0}}}], 0x20}], 0x1, 0x0) 20:42:07 executing program 2: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x7530}, 0x10) sendmmsg$unix(r1, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x4924924924926de, 0x0) [ 86.555874] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth0) 20:42:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200), 0x4) 20:42:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32=r1, @ANYBLOB="e5ff0400bddd00000800160005000000"], 0x5c}}, 0x0) 20:42:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200), 0x4) 20:42:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b06, &(0x7f0000000340)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x00\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') 20:42:08 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda06", 0x10}], 0x1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) read(0xffffffffffffffff, 0x0, 0x0) 20:42:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200), 0x4) 20:42:08 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() setresuid(0x0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {r2, r0}}}], 0x20}], 0x1, 0x0) 20:42:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b06, &(0x7f0000000340)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x00\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') [ 86.758088] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 20:42:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000100)="11eea5055f0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="004000020000000000"], 0x9) write$P9_RREADLINK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000170000030000000000000030"], 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0xc020660b, &(0x7f0000000000)) 20:42:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008000200", @ANYRES32=r1, @ANYBLOB="e5ff0400bddd00000800160005000000"], 0x5c}}, 0x0) 20:42:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x10020000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) r3 = dup2(r1, r1) write$cgroup_type(r3, &(0x7f0000000140)='threaded\x00', 0xfffffebd) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x10020000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) r5 = dup2(r4, r4) write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0xfffffebd) shutdown(r4, 0x1) 20:42:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008105e00f80ecdb4cb90402c804a012000000980090fb120001000e10da1b40d819a90600150000f0", 0x2e}], 0x1}, 0x0) 20:42:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x5, 0x0, 0x0, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 20:42:08 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda06", 0x10}], 0x1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) read(0xffffffffffffffff, 0x0, 0x0) [ 86.894707] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 20:42:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x5, 0x0, 0x0, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 86.949790] (unnamed net_device) (uninitialized): Device veth0 is not bonding slave [ 86.990299] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth0) 20:42:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000100)="11eea5055f0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="004000020000000000"], 0x9) write$P9_RREADLINK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000170000030000000000000030"], 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0xc020660b, &(0x7f0000000000)) 20:42:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008105e00f80ecdb4cb90402c804a012000000980090fb120001000e10da1b40d819a90600150000f0", 0x2e}], 0x1}, 0x0) [ 87.040458] protocol 88fb is buggy, dev hsr_slave_0 [ 87.045618] protocol 88fb is buggy, dev hsr_slave_1 20:42:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x5, 0x0, 0x0, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 20:42:08 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 20:42:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008105e00f80ecdb4cb90402c804a012000000980090fb120001000e10da1b40d819a90600150000f0", 0x2e}], 0x1}, 0x0) 20:42:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x10020000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) r3 = dup2(r1, r1) write$cgroup_type(r3, &(0x7f0000000140)='threaded\x00', 0xfffffebd) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x10020000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) r5 = dup2(r4, r4) write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0xfffffebd) shutdown(r4, 0x1) 20:42:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000100)="11eea5055f0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="004000020000000000"], 0x9) write$P9_RREADLINK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000170000030000000000000030"], 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0xc020660b, &(0x7f0000000000)) 20:42:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008105e00f80ecdb4cb90402c804a012000000980090fb120001000e10da1b40d819a90600150000f0", 0x2e}], 0x1}, 0x0) 20:42:08 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) [ 87.280106] invalid inflight: 1 state 4 cwnd 10 mss 1448 [ 87.280222] protocol 88fb is buggy, dev hsr_slave_0 [ 87.285932] ------------[ cut here ]------------ [ 87.290789] protocol 88fb is buggy, dev hsr_slave_1 [ 87.295471] WARNING: CPU: 1 PID: 7143 at net/ipv4/tcp_output.c:2507 tcp_send_loss_probe.cold+0x83/0xa2 [ 87.295477] Kernel panic - not syncing: panic_on_warn set ... [ 87.295477] [ 87.317263] CPU: 1 PID: 7143 Comm: syz-executor.4 Not tainted 4.14.144 #0 20:42:08 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) [ 87.324196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.333568] Call Trace: [ 87.336152] [ 87.338308] dump_stack+0x138/0x197 [ 87.341961] panic+0x1f2/0x426 [ 87.344224] kobject: 'loop2' (ffff8880a497a6e0): kobject_uevent_env [ 87.345159] ? add_taint.cold+0x16/0x16 [ 87.345174] ? tcp_send_loss_probe.cold+0x83/0xa2 [ 87.345186] ? tcp_send_loss_probe.cold+0x83/0xa2 [ 87.345192] __warn.cold+0x2f/0x36 [ 87.345199] ? ist_end_non_atomic+0x10/0x10 [ 87.345206] ? tcp_send_loss_probe.cold+0x83/0xa2 [ 87.345215] report_bug+0x216/0x254 [ 87.345223] do_error_trap+0x1bb/0x310 [ 87.345230] ? math_error+0x360/0x360 [ 87.345239] ? vprintk_emit+0x171/0x600 [ 87.345248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.345256] do_invalid_op+0x1b/0x20 [ 87.356250] kobject: 'loop2' (ffff8880a497a6e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 87.360482] invalid_op+0x1b/0x40 [ 87.360494] RIP: 0010:tcp_send_loss_probe.cold+0x83/0xa2 [ 87.360498] RSP: 0018:ffff8880aef07cb8 EFLAGS: 00010282 [ 87.360504] RAX: 000000000000002c RBX: 0000000000000000 RCX: 0000000000000000 [ 87.360509] RDX: 0000000000000100 RSI: ffff888098ad7010 RDI: ffffed1015de0f8d [ 87.360513] RBP: ffff8880aef07ce8 R08: 000000000000002c R09: ffff888098ad7030 [ 87.360518] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806ffc4000 [ 87.360522] R13: 0000000000000001 R14: 00000000000005a8 R15: 000000000000000a [ 87.360538] ? tcp_send_loss_probe.cold+0x83/0xa2 [ 87.360548] tcp_write_timer_handler+0x4a8/0x7e0 [ 87.360557] tcp_write_timer+0xd8/0x180 [ 87.360567] call_timer_fn+0x161/0x670 [ 87.360576] ? tcp_write_timer_handler+0x7e0/0x7e0 [ 87.360584] ? __next_timer_interrupt+0x140/0x140 [ 87.360596] ? trace_hardirqs_on_caller+0x19b/0x590 [ 87.360606] run_timer_softirq+0x5b4/0x1570 [ 87.450482] kobject: 'loop2' (ffff8880a497a6e0): kobject_uevent_env [ 87.454525] ? tcp_write_timer_handler+0x7e0/0x7e0 [ 87.454542] ? add_timer+0xae0/0xae0 [ 87.454550] ? __lock_is_held+0xb6/0x140 [ 87.454565] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 87.484796] kobject: 'loop2' (ffff8880a497a6e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 87.488953] __do_softirq+0x244/0x9a0 [ 87.488963] ? sched_clock+0x2e/0x50 [ 87.488981] irq_exit+0x160/0x1b0 [ 87.488990] smp_apic_timer_interrupt+0x146/0x5e0 [ 87.532155] kobject: 'loop1' (ffff8880a4922660): kobject_uevent_env [ 87.532210] apic_timer_interrupt+0x96/0xa0 [ 87.552393] kobject: 'loop1' (ffff8880a4922660): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 87.554326] [ 87.554340] RIP: 0010:save_stack_address+0x14/0x60 [ 87.554344] RSP: 0018:ffff88807a6474b8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 [ 87.569577] kobject: 'loop3' (ffff8880a49b4960): kobject_uevent_env [ 87.570310] RAX: 0000000000000000 RBX: ffff88807a647578 RCX: 1ffff1100f4c8ea3 [ 87.570315] RDX: 0000000000000000 RSI: ffffffff85241701 RDI: ffff88807a647578 [ 87.570320] RBP: ffff88807a6474c8 R08: 0000000000000001 R09: ffff88807a647530 [ 87.570326] R10: ffff88807a647500 R11: ffff88807a647510 R12: ffffffff85241701 [ 87.570330] R13: 0000000000000000 R14: ffff888098ad6740 R15: ffff8880aa800ac0 [ 87.570348] ? tcp_sendmsg_locked+0xf61/0x3200 [ 87.570359] ? tcp_sendmsg_locked+0xf61/0x3200 [ 87.570374] ? unwind_get_return_address+0x61/0xa0 [ 87.585897] kobject: 'loop3' (ffff8880a49b4960): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 87.589375] __save_stack_trace+0x5e/0xd0 [ 87.589389] ? tcp_sendmsg_locked+0xf61/0x3200 [ 87.589399] save_stack_trace+0x16/0x20 [ 87.661871] save_stack+0x45/0xd0 [ 87.665326] ? save_stack_trace+0x16/0x20 [ 87.669479] ? save_stack+0x45/0xd0 [ 87.673109] ? kasan_kmalloc+0xce/0xf0 [ 87.676997] ? kmem_cache_alloc_node_trace+0x153/0x770 [ 87.679433] kobject: 'loop0' (ffff8880a489a5e0): kobject_uevent_env [ 87.682267] ? __kmalloc_node_track_caller+0x3d/0x80 [ 87.682275] ? __kmalloc_reserve.isra.0+0x40/0xe0 [ 87.682280] ? __alloc_skb+0xcf/0x500 [ 87.682287] ? sk_stream_alloc_skb+0xb3/0x780 [ 87.682292] ? tcp_sendmsg+0x30/0x50 [ 87.682299] ? inet_sendmsg+0x122/0x500 [ 87.682306] ? sock_sendmsg+0xce/0x110 [ 87.682311] ? sock_write_iter+0x21d/0x390 [ 87.682318] ? __vfs_write+0x4a7/0x6b0 [ 87.682323] ? vfs_write+0x198/0x500 [ 87.682329] ? SyS_write+0xfd/0x230 [ 87.682342] ? do_syscall_64+0x1e8/0x640 [ 87.682351] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 87.682363] ? trace_hardirqs_on+0x10/0x10 [ 87.682369] ? sock_sendmsg+0xce/0x110 [ 87.682375] ? sock_write_iter+0x21d/0x390 [ 87.682381] ? __vfs_write+0x4a7/0x6b0 [ 87.682387] ? vfs_write+0x198/0x500 [ 87.682395] ? save_trace+0x290/0x290 [ 87.682405] ? __lock_is_held+0xb6/0x140 [ 87.682419] ? kasan_unpoison_shadow+0x35/0x50 [ 87.682427] kasan_kmalloc+0xce/0xf0 [ 87.682437] kmem_cache_alloc_node_trace+0x153/0x770 [ 87.682446] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 87.682458] __kmalloc_node_track_caller+0x3d/0x80 [ 87.682466] __kmalloc_reserve.isra.0+0x40/0xe0 [ 87.682476] __alloc_skb+0xcf/0x500 [ 87.682483] ? skb_scrub_packet+0x4b0/0x4b0 [ 87.682494] sk_stream_alloc_skb+0xb3/0x780 [ 87.682505] tcp_sendmsg_locked+0xf61/0x3200 [ 87.682528] ? tcp_sendpage+0x60/0x60 [ 87.682537] ? trace_hardirqs_on_caller+0x400/0x590 [ 87.682546] ? trace_hardirqs_on+0xd/0x10 [ 87.682556] tcp_sendmsg+0x30/0x50 [ 87.682564] inet_sendmsg+0x122/0x500 [ 87.682572] ? inet_recvmsg+0x500/0x500 [ 87.682580] sock_sendmsg+0xce/0x110 [ 87.682589] sock_write_iter+0x21d/0x390 [ 87.682597] ? sock_sendmsg+0x110/0x110 [ 87.682610] ? iov_iter_init+0xaf/0x1d0 [ 87.682620] __vfs_write+0x4a7/0x6b0 [ 87.682628] ? selinux_file_open+0x420/0x420 [ 87.682638] ? kernel_read+0x120/0x120 [ 87.682655] ? rw_verify_area+0xea/0x2b0 [ 87.682664] vfs_write+0x198/0x500 [ 87.682675] SyS_write+0xfd/0x230 [ 87.682684] ? SyS_read+0x230/0x230 [ 87.682690] ? do_syscall_64+0x53/0x640 [ 87.682698] ? SyS_read+0x230/0x230 [ 87.682706] do_syscall_64+0x1e8/0x640 [ 87.682713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.682726] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 87.691752] kobject: 'loop0' (ffff8880a489a5e0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 87.694206] RIP: 0033:0x4598e9 [ 87.760129] protocol 88fb is buggy, dev hsr_slave_0 [ 87.763479] RSP: 002b:00007fd8c960ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.763489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 87.763494] RDX: 00000000fffffebd RSI: 0000000020000140 RDI: 0000000000000004 [ 87.763499] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 87.763503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c960b6d4 [ 87.763509] R13: 00000000004c9a89 R14: 00000000004e1190 R15: 00000000ffffffff [ 87.767339] protocol 88fb is buggy, dev hsr_slave_1 [ 87.776643] Kernel Offset: disabled [ 87.974862] Rebooting in 86400 seconds..