Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts. [ 40.475296] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/16 22:38:19 fuzzer started [ 40.664846] audit: type=1400 audit(1568673499.952:36): avc: denied { map } for pid=6779 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 41.349652] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/16 22:38:21 dialing manager at 10.128.0.105:38157 2019/09/16 22:38:21 syscalls: 2466 2019/09/16 22:38:21 code coverage: enabled 2019/09/16 22:38:21 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/16 22:38:21 extra coverage: extra coverage is not supported by the kernel 2019/09/16 22:38:21 setuid sandbox: enabled 2019/09/16 22:38:21 namespace sandbox: enabled 2019/09/16 22:38:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/16 22:38:21 fault injection: enabled 2019/09/16 22:38:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/16 22:38:21 net packet injection: enabled 2019/09/16 22:38:21 net device setup: enabled [ 43.218578] random: crng init done 22:40:11 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r2) 22:40:11 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x601) sendfile(r4, r5, 0x0, 0x80001d00c0ce) 22:40:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) dup2(r0, r1) 22:40:11 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000100)=0x54) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0xc) dup2(r0, r2) 22:40:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000cc0)="11dca50d5e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 22:40:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x100000001, 0x0, 0x133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) dup3(r1, r2, 0x0) dup2(r0, r3) [ 151.758073] audit: type=1400 audit(1568673611.042:37): avc: denied { map } for pid=6779 comm="syz-fuzzer" path="/root/syzkaller-shm545644920" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 151.801919] audit: type=1400 audit(1568673611.062:38): avc: denied { map } for pid=6796 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13759 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 151.951698] IPVS: ftp: loaded support on port[0] = 21 [ 152.768541] chnl_net:caif_netlink_parms(): no params data found [ 152.781516] IPVS: ftp: loaded support on port[0] = 21 [ 152.805043] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.811856] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.818869] device bridge_slave_0 entered promiscuous mode [ 152.825775] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.832362] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.839206] device bridge_slave_1 entered promiscuous mode [ 152.857135] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.865897] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.882130] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.889410] team0: Port device team_slave_0 added [ 152.895698] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.903292] team0: Port device team_slave_1 added [ 152.910169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.918974] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.981886] device hsr_slave_0 entered promiscuous mode [ 153.020329] device hsr_slave_1 entered promiscuous mode [ 153.072458] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.081583] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.098878] IPVS: ftp: loaded support on port[0] = 21 [ 153.154882] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.161476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.168295] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.174679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.189950] chnl_net:caif_netlink_parms(): no params data found [ 153.237974] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.244733] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.252292] device bridge_slave_0 entered promiscuous mode [ 153.263195] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.269558] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.277005] device bridge_slave_1 entered promiscuous mode [ 153.277793] IPVS: ftp: loaded support on port[0] = 21 [ 153.306764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.324862] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.354457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.361774] team0: Port device team_slave_0 added [ 153.369009] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.376362] team0: Port device team_slave_1 added [ 153.408262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.417503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.491960] device hsr_slave_0 entered promiscuous mode [ 153.540387] device hsr_slave_1 entered promiscuous mode [ 153.602864] IPVS: ftp: loaded support on port[0] = 21 [ 153.603801] chnl_net:caif_netlink_parms(): no params data found [ 153.623818] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.634291] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.647041] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 153.654104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.669803] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.726422] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 153.732826] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.753713] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.760182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.766758] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.773146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.782178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.790674] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.797417] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.804553] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 153.812095] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.818633] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.842953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 153.854565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 153.861905] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.868255] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.876036] device bridge_slave_0 entered promiscuous mode [ 153.884542] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.890932] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.897785] device bridge_slave_1 entered promiscuous mode [ 153.910647] chnl_net:caif_netlink_parms(): no params data found [ 153.918633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.926383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.933980] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.940342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.947080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.954784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.962368] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.968687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.978456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 153.989516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.997893] IPVS: ftp: loaded support on port[0] = 21 [ 154.018973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.027562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.037209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 154.064426] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.083477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.091564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.101033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.135912] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.147032] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.154093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.161737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.170354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 154.177580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.186898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.194587] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.201226] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.208045] device bridge_slave_0 entered promiscuous mode [ 154.216847] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.223295] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.230648] device bridge_slave_1 entered promiscuous mode [ 154.258820] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.266333] team0: Port device team_slave_0 added [ 154.272030] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.279049] team0: Port device team_slave_1 added [ 154.316772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.335384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 154.342425] chnl_net:caif_netlink_parms(): no params data found [ 154.354892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.376703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.385167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.392866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.409103] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 154.415310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.472909] device hsr_slave_0 entered promiscuous mode [ 154.510453] device hsr_slave_1 entered promiscuous mode [ 154.571083] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.578832] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.595036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.603398] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.652377] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 154.659343] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.665939] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.673329] team0: Port device team_slave_0 added [ 154.724944] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.732082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.739071] team0: Port device team_slave_1 added [ 154.744615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.752019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.759003] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.765538] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.772480] device bridge_slave_0 entered promiscuous mode [ 154.778973] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.785885] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.793150] device bridge_slave_1 entered promiscuous mode [ 154.813089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.819864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.828917] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 154.835879] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.902194] device hsr_slave_0 entered promiscuous mode [ 154.960345] device hsr_slave_1 entered promiscuous mode [ 155.012097] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.019529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.029212] chnl_net:caif_netlink_parms(): no params data found [ 155.040100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.052317] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.066801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.076269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.085621] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.095686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.103543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.111898] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.118244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.133994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.156588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.165216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.172960] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.179286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.192990] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.200560] team0: Port device team_slave_0 added [ 155.206094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.213581] team0: Port device team_slave_1 added [ 155.231605] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.238023] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.245040] device bridge_slave_0 entered promiscuous mode [ 155.253087] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.259423] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.267038] device bridge_slave_1 entered promiscuous mode [ 155.278018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.286516] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.295642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.313455] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.334362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.343525] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.352807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.360585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.378694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.396916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.409004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.419964] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.463872] device hsr_slave_0 entered promiscuous mode [ 155.490400] device hsr_slave_1 entered promiscuous mode [ 155.540516] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.547410] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.554715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.562333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.569841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 22:40:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000003b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x3, 0x0, 0x0, 0x0, 0x146}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 155.591809] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.605270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 155.616706] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.627792] team0: Port device team_slave_0 added 22:40:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="3185337395b17f57a82b81e5b4de7c05a647b6da122329a7fd91a572c6e4227028fb8df3c9c42c6f546c15211aad8bff8185b4482aa036279c009511b25ea6f0ca6b8345e0", 0x45}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x19b, 0x0}}], 0x4000000000000ac, 0x43, 0x0) [ 155.789895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 155.818211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.828476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.841033] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.847617] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 155.853931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.862042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.869845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.880864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.888398] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.894770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.942178] device hsr_slave_0 entered promiscuous mode [ 155.980514] device hsr_slave_1 entered promiscuous mode [ 156.022523] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.031891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.044824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.051833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.058564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:40:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 156.065640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.074185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.081943] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.088350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.095728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.107964] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.114164] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.130705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.140388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.151549] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 156.159196] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.167589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 22:40:15 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(r0, 0x0, 0x0) [ 156.175330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.185760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.198311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.211327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.218616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.232055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.242099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.258701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.268135] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.274578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.283764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.313587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.328951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.345067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.352931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.361390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.369117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.383282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.394682] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.401113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.415621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.427290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 22:40:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f08000003400900ff0100e8090000000000fe8000000000000000000000000000bb407b000000000000000200000000000000b0dc1cb6b20bb14bd744e30d4322484e506003b8843963f800002c0c00db76d5200a93975a6dd27a1eea9dc4b7baacf528349b3aebb4542148d81e979bc1d4a17ea217281fa05851e50d4ce556e56662064bc68bb7"], 0x48) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0) [ 156.439509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.454442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.464513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.472294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.481970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.495235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.502805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.514213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.527326] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.533822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.542558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.565717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.590437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.598184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.614452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.631595] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 156.640130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.647208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.655326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.665956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.677881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.686249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.694154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.707213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.719203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.726817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.740633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.749145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.758287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.766870] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.773843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.782982] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.796780] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.803133] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.811698] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.824928] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.831814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.838771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.845946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.853325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.867429] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 22:40:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) [ 156.878135] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.884789] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.893975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.911402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.939130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.955250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 22:40:16 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SETVERSION(r0, 0x660c, 0x0) [ 156.980617] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.987021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.012732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.019734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.027219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.040745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.049153] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.055579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.067324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.076521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.084542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.093547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.105170] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.111597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.131328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.138524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.146439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.154525] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.160906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.174284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.189392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.197970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.215595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.235814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.248275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.255664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.263986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.279309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.287492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.298459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.308958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.327075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.335721] audit: type=1400 audit(1568673616.622:39): avc: denied { create } for pid=6906 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 157.343493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.362421] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 157.387738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.408091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.426800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.435512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.449935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.458470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.475198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.483908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.498747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.511121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.518679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.530912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.538390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.556693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.568141] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.574996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.584345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.594114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.602065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.615834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.624629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.632693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.643940] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.649960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.659482] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.672957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.681195] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.694902] 8021q: adding VLAN 0 to HW filter on device batadv0 22:40:18 executing program 1: 22:40:18 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb1}, 0x8, 0x0) read(r0, &(0x7f0000000080)=""/128, 0x88308aa) 22:40:18 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2f0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r3, 0x80003) init_module(&(0x7f0000000b00)=',-\x00', 0xffeec, &(0x7f0000000880)='\x00\x04\xbejhy\xbc\xa3\x8f:\xce\x1fS*4\x02O\xf8\xb1\x9d#\xf8\xe1\xf9\xa9G\xca\xf7\x1c\x00R~c~\xf9&\x1e\xde\xc2)i\x86\xc9\x04\x01\xcd\x92|\xad\xad.\xb3{Z\xf3\x93\xd1\xe2\fL\xcf\xce\x80\x11\x9f\x80f\xdc\xe34\x98>@\xf0\x82\xc7\bp0\x16\xa5\xb0/\x8dA\x01*\x9f}\xbeBjJ\xfa\xff\xbd\xbc\x92\x86\xbeXi\x1e\x83\x8f\xee\x8e\x03\xc2\xcb\x0e\xdc\xcb\xd4\xe4)=\x0e\xda\bF\x83\'\x05IgJ\xf3Z\xaf\xf4Z5i\xa8\tM\x82\xaf\xba\x15\xf1\x8b=`\x85\"\xa7G\x9am(\x8cF\x8b\xce?\x93mX\xcd\xac\xdb(\xbe\x9a4\x8a\xe8Fv\x7fU\x17B\x9c,\x7f\'\xafr;1\xb8_q7\x9f\fux\x1d\x84\x05eR0\x7f\x18=-#\x8f\xb7;7S\x13\xe7\f\x1a\x1c\xfb\xb1Q!F\x0f]#\xb3\x97\xea\xdc\xf6\"_\x1b]D\f\xc4\xf5\x89\xdarr\xf1E\xf3\xb8\x84\xf67\xfa\xa5\x81R\x1e\xab\xac$&`9\x83o\x8b\xc5\xfd\xd9U\n#\xa3\xdb\xf3\vuh\xed\x17\xbe\xe2\xfa\x117\xd0y\x9d\xa1E\a\xff|\xb7D\xc8\xf9\xd4Nw\xc8\x8e\xd2s\v\xdb\x1d\x1a\x01#N\xab\xe0*\xb4\xad\x84\x93\xdc\x1c\'\x9c\x0f\xd2\x88=\xcf~\x1d\x14/WX\xc5\x17Pr\x19\xc7\xcd\xd6\xee9\xb4(\x8b\xd8\aB\xa5\xe9IE\x9e\xc8\xea\xe1\xc9\x1e\x9bq\xb5\xef\x11T\r@\xd8d\xa8\x8e\xe1\xd8\x1eS\x893W+\xfe\xf9j&F \x9eJ\xd7J\xaa\xd04\x8f6\xdc?t\xe7\x00\xd8.\x9d\x8cD\xfc\x7f\xab\x84!\xfd\x18h\x7f\f\xc3Orb^|\xab\t\x1fqN\x99z\xd4\xc9\xc2\xd4F{\x84?U\xf0\x06T\x1d\x8at_\xc8\xf9YBl\'\xb7\xf2\xc25\x19\xc2&W[\x0f+n~\xa8\x9b^i\xb7\x8d\xc3be\x84\xba\xa6\xda\xf0;\xe9\f\xbeS\x89\xa9\\_\rU\"\x936\xd7d\xa8\xeb\x82\x8e\xc5\xae\xc5F\t\xb7\x17\xe6*p+\xe5\xb1\xb20\xff\x18\xb7\'\xca19\xfdy=iuY\x03g.\x9a\x8dxFnQ\x94b\xd4\xf1i\x9al:M\xdb\xfdg`tX\xf9\x1e\x00\xc2\x10B\x8d\xe8\x85\x8d\xec\xfb\xa9\xd3\xa8\xe0\xac\xe7\xe7!\x00#;\x04 =u.;\x86\xe2\xf3\x8dh\xc0\x06\xe2\x1c\x9d\xff\xef\xae\x1603\xd0jB\xear\x93\xe3\xa5\xb1\xcf') getresgid(&(0x7f0000000300), 0x0, 0x0) getgroups(0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002020, 0x0) 22:40:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xf4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 22:40:18 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4660}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$LOOP_SET_STATUS64(r1, 0x400c12f5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aaeb56ceb72ed7ef5ab00", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "090000c159a37eb96a34ff361610ba2904e72bfeb598e5f87c97bce0b8a700"}) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x24000000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20804, 0x0) 22:40:18 executing program 2: 22:40:18 executing program 2: 22:40:18 executing program 5: 22:40:18 executing program 1: [ 158.942422] audit: type=1400 audit(1568673618.222:40): avc: denied { module_load } for pid=6937 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=system permissive=1 [ 158.944786] kasan: CONFIG_KASAN_INLINE enabled 22:40:18 executing program 2: [ 159.030417] protocol 88fb is buggy, dev hsr_slave_0 [ 159.032380] hrtimer: interrupt took 45592 ns [ 159.035648] protocol 88fb is buggy, dev hsr_slave_1 [ 159.040572] protocol 88fb is buggy, dev hsr_slave_0 [ 159.050508] protocol 88fb is buggy, dev hsr_slave_1 22:40:18 executing program 5: 22:40:18 executing program 1: 22:40:18 executing program 2: 22:40:18 executing program 5: [ 159.158720] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 159.179081] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 159.185339] Modules linked in: [ 159.188532] CPU: 0 PID: 6944 Comm: syz-executor.3 Not tainted 4.14.144 #0 [ 159.195450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.204805] task: ffff88805f4064c0 task.stack: ffff88805f410000 [ 159.210865] RIP: 0010:do_tcp_sendpages+0x33d/0x18f0 [ 159.215862] RSP: 0018:ffff88805f4176b0 EFLAGS: 00010202 [ 159.221203] RAX: 0000000000000010 RBX: 0000000000000000 RCX: ffffc90008c34000 [ 159.228459] RDX: 0000000000006edb RSI: ffffffff8523f03b RDI: 0000000000000080 [ 159.235708] RBP: ffff88805f4177d8 R08: ffff88805f4064c0 R09: 0000000000000001 [ 159.242961] R10: 0000000000000000 R11: ffff88805f4064c0 R12: 0000000000005580 [ 159.250210] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888060aa8c00 [ 159.257463] FS: 00007f3b0649f700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 159.265665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.270107] protocol 88fb is buggy, dev hsr_slave_0 [ 159.271525] CR2: 00007f79ab7fc110 CR3: 000000009c03a000 CR4: 00000000001406f0 [ 159.276557] protocol 88fb is buggy, dev hsr_slave_1 [ 159.283775] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.283779] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.283782] Call Trace: [ 159.283798] ? lock_sock_nested+0x9e/0x110 [ 159.283812] ? sk_stream_alloc_skb+0x780/0x780 [ 159.314605] ? tcp_rate_check_app_limited+0x2ba/0x320 [ 159.319774] tcp_sendpage_locked+0x88/0x140 [ 159.324076] tcp_sendpage+0x3f/0x60 [ 159.327680] inet_sendpage+0x157/0x580 [ 159.331542] ? tcp_sendpage_locked+0x140/0x140 [ 159.336102] kernel_sendpage+0x92/0xf0 [ 159.339971] ? inet_sendmsg+0x500/0x500 [ 159.343939] sock_sendpage+0x8b/0xc0 [ 159.347643] ? kernel_sendpage+0xf0/0xf0 [ 159.351689] pipe_to_sendpage+0x242/0x340 [ 159.355820] ? direct_splice_actor+0x190/0x190 [ 159.360401] __splice_from_pipe+0x348/0x780 [ 159.364705] ? direct_splice_actor+0x190/0x190 [ 159.369268] ? direct_splice_actor+0x190/0x190 [ 159.373829] splice_from_pipe+0xf0/0x150 [ 159.377869] ? splice_shrink_spd+0xb0/0xb0 [ 159.382172] generic_splice_sendpage+0x3c/0x50 [ 159.386732] ? splice_from_pipe+0x150/0x150 [ 159.391119] direct_splice_actor+0x123/0x190 [ 159.395515] splice_direct_to_actor+0x29e/0x7b0 [ 159.400174] ? generic_pipe_buf_nosteal+0x10/0x10 [ 159.405007] ? do_splice_to+0x170/0x170 [ 159.408960] ? rw_verify_area+0xea/0x2b0 [ 159.412998] do_splice_direct+0x18d/0x230 [ 159.417125] ? splice_direct_to_actor+0x7b0/0x7b0 [ 159.421949] ? rw_verify_area+0xea/0x2b0 [ 159.426000] do_sendfile+0x4db/0xbd0 [ 159.429697] ? do_compat_pwritev64+0x140/0x140 [ 159.434257] ? put_timespec64+0xb4/0x100 [ 159.438296] ? nsecs_to_jiffies+0x30/0x30 [ 159.442424] SyS_sendfile64+0x102/0x110 [ 159.446373] ? SyS_sendfile+0x130/0x130 [ 159.450327] ? do_syscall_64+0x53/0x640 [ 159.454288] ? SyS_sendfile+0x130/0x130 [ 159.458239] do_syscall_64+0x1e8/0x640 [ 159.462114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.466938] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 159.472116] RIP: 0033:0x4598e9 [ 159.475284] RSP: 002b:00007f3b0649ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 159.482979] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004598e9 [ 159.490228] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 159.497565] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 159.504814] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f3b0649f6d4 [ 159.512062] R13: 00000000004c709e R14: 00000000004dc750 R15: 00000000ffffffff [ 159.519313] Code: ff ff 48 0f 44 d8 e8 c3 f2 38 fc 4d 85 e4 0f 84 9b 03 00 00 e8 b5 f2 38 fc 48 8d bb 80 00 00 00 44 8b 65 a8 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 74 08 3c 03 0f 8e 85 11 00 00 44 2b a3 80 [ 159.538423] RIP: do_tcp_sendpages+0x33d/0x18f0 RSP: ffff88805f4176b0 [ 159.555487] kobject: 'loop2' (ffff8880a495b720): kobject_uevent_env [ 159.568201] kobject: 'loop2' (ffff8880a495b720): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 159.573829] ---[ end trace 6db741a9bc434a8b ]--- [ 159.579934] kobject: 'loop5' (ffff8880a4a5e0e0): kobject_uevent_env [ 159.583595] Kernel panic - not syncing: Fatal exception [ 159.589973] kobject: 'loop5' (ffff8880a4a5e0e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 159.595595] Kernel Offset: disabled [ 159.608624] Rebooting in 86400 seconds..