Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:56654' (ECDSA) to the list of known hosts. syzkaller login: [ 184.184820][ T40] audit: type=1400 audit(1594205684.827:42): avc: denied { map } for pid=10505 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/07/08 10:54:45 fuzzer started 2020/07/08 10:54:46 dialing manager at 10.0.2.10:43811 2020/07/08 10:54:47 syscalls: 3130 2020/07/08 10:54:47 code coverage: enabled 2020/07/08 10:54:47 comparison tracing: enabled 2020/07/08 10:54:47 extra coverage: enabled 2020/07/08 10:54:47 setuid sandbox: enabled 2020/07/08 10:54:47 namespace sandbox: enabled 2020/07/08 10:54:47 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/08 10:54:47 fault injection: enabled 2020/07/08 10:54:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/08 10:54:47 net packet injection: enabled 2020/07/08 10:54:47 net device setup: enabled 2020/07/08 10:54:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/08 10:54:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/08 10:54:47 USB emulation: enabled [ 186.414119][ T40] audit: type=1400 audit(1594205687.057:43): avc: denied { integrity } for pid=10521 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 10:55:32 executing program 0: [ 232.449215][ T40] audit: type=1400 audit(1594205733.087:44): avc: denied { map } for pid=10525 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=2071 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 10:55:33 executing program 1: setrlimit(0x4, &(0x7f0000000000)={0x0, 0x3}) 10:55:34 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt(r0, 0x0, 0x3, 0x0, 0x0) [ 233.933186][T10526] IPVS: ftp: loaded support on port[0] = 21 [ 233.933264][T10528] IPVS: ftp: loaded support on port[0] = 21 10:55:34 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01002e76"], 0x4) [ 234.294992][T10530] IPVS: ftp: loaded support on port[0] = 21 [ 234.516109][T10528] chnl_net:caif_netlink_parms(): no params data found [ 234.602300][T10526] chnl_net:caif_netlink_parms(): no params data found [ 234.679237][T10533] IPVS: ftp: loaded support on port[0] = 21 [ 234.903746][T10526] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.920244][T10526] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.943527][T10526] device bridge_slave_0 entered promiscuous mode [ 234.981203][T10528] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.001523][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.016543][T10528] device bridge_slave_0 entered promiscuous mode [ 235.058008][T10526] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.072156][T10526] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.088301][T10526] device bridge_slave_1 entered promiscuous mode [ 235.101702][T10528] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.115639][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.128564][T10528] device bridge_slave_1 entered promiscuous mode [ 235.190487][T10528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.212221][T10526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.230974][T10530] chnl_net:caif_netlink_parms(): no params data found [ 235.267824][T10528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.288805][T10526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.349681][T10528] team0: Port device team_slave_0 added [ 235.386026][T10528] team0: Port device team_slave_1 added [ 235.413530][T10526] team0: Port device team_slave_0 added [ 235.459908][T10526] team0: Port device team_slave_1 added [ 235.505957][T10528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.529558][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.595824][T10528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.653895][T10530] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.669349][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.687621][T10530] device bridge_slave_0 entered promiscuous mode [ 235.715730][T10528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.729942][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.778478][T10528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.802863][T10526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.816707][T10526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.874275][T10526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.911635][T10526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.927861][T10526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.977924][T10526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.999652][T10530] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.016465][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.032532][T10530] device bridge_slave_1 entered promiscuous mode [ 236.050484][T10533] chnl_net:caif_netlink_parms(): no params data found [ 236.108370][T10530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.212836][T10528] device hsr_slave_0 entered promiscuous mode [ 236.286632][T10528] device hsr_slave_1 entered promiscuous mode [ 236.370694][T10530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.438218][T10526] device hsr_slave_0 entered promiscuous mode [ 236.485621][T10526] device hsr_slave_1 entered promiscuous mode [ 236.638050][T10526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.666593][T10526] Cannot create hsr debugfs directory [ 236.792536][T10530] team0: Port device team_slave_0 added [ 236.845722][T10530] team0: Port device team_slave_1 added [ 236.894732][T10530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.913667][T10530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.988623][T10530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.028624][T10530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.045574][T10530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.126146][T10530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.201957][T10533] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.230128][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.261942][T10533] device bridge_slave_0 entered promiscuous mode [ 237.292181][T10533] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.317595][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.337227][T10533] device bridge_slave_1 entered promiscuous mode [ 237.437337][T10530] device hsr_slave_0 entered promiscuous mode [ 237.515524][T10530] device hsr_slave_1 entered promiscuous mode [ 237.585337][T10530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.606476][T10530] Cannot create hsr debugfs directory [ 237.628668][T10533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.692908][T10533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.852323][T10533] team0: Port device team_slave_0 added [ 237.946800][T10533] team0: Port device team_slave_1 added [ 238.072675][T10533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.089945][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.152890][T10533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.184139][T10533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.200993][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.272116][T10533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.352912][ T40] audit: type=1400 audit(1594205738.997:45): avc: denied { create } for pid=10526 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 238.416231][ T40] audit: type=1400 audit(1594205738.997:46): avc: denied { write } for pid=10526 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 238.477648][ T40] audit: type=1400 audit(1594205739.007:47): avc: denied { read } for pid=10526 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 238.600524][T10533] device hsr_slave_0 entered promiscuous mode [ 238.666148][T10533] device hsr_slave_1 entered promiscuous mode [ 238.745577][T10533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.762606][T10533] Cannot create hsr debugfs directory [ 238.776253][T10526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.852653][T10526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.973282][T10526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.082525][T10526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.192813][T10528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.294811][T10528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.378647][T10528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.460442][T10528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.568543][T10530] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.650077][T10530] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.698117][T10530] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.821788][T10530] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.119944][T10533] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.177762][T10533] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.258225][T10533] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.380900][T10533] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.533733][T10528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.570240][T10526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.613417][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.633179][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.662753][T10528] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.684401][T10526] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.701469][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.726145][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.763025][T10530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.790956][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.808831][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.825671][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.843625][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.876931][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.906732][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.924123][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.942744][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.958562][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.978372][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.005465][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.024022][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.038999][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.069890][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.087976][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.106077][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.123689][ T3226] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.143528][ T3226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.173642][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.193439][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.233430][T10530] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.273718][T10533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.292681][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.312800][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.338934][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.373084][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.399677][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.421158][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.451061][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.477647][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.501652][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.522593][T10553] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.542520][T10553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.560141][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.578756][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.613254][T10526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.641444][T10526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.688570][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.715879][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.747294][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.766180][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.784094][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.801389][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.822048][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.841992][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.858095][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.877583][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.901919][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.929880][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.953308][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.973007][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.989126][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.021207][T10533] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.048600][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.068600][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.084670][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.102374][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.121777][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.139595][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.156200][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.173455][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.202092][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.225200][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.247514][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.267208][ T3174] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.282887][ T3174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.298868][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.314641][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.331842][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.349725][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.385466][T10526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.420539][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.844665][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.894571][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.923994][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.950312][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.968469][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.999640][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.020704][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.042407][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.065815][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.268935][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.288468][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.305729][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.325306][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.342357][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.362030][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.378768][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.402763][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.424430][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.520502][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.560934][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.602405][T10528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.634006][T10530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.671522][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.691076][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.719214][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.737689][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.760066][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.791556][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.811916][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.836415][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.900103][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.920447][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.942847][T10526] device veth0_vlan entered promiscuous mode [ 243.960848][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.978732][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.998353][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.023014][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.045950][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.063233][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.082834][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.104283][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.135938][T10530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.170075][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.191709][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.219150][T10526] device veth1_vlan entered promiscuous mode [ 244.234179][T10528] device veth0_vlan entered promiscuous mode [ 244.265888][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.288487][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.305602][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.325589][T10533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.380205][T10528] device veth1_vlan entered promiscuous mode [ 244.397040][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.416510][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.446106][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.469208][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.489807][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.505914][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.541476][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.573389][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.592428][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.612549][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.636104][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.664681][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.681227][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.697007][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.710956][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.730671][T10533] device veth0_vlan entered promiscuous mode [ 244.749844][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.771730][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.797131][T10530] device veth0_vlan entered promiscuous mode [ 244.826265][T10530] device veth1_vlan entered promiscuous mode [ 244.846900][T10526] device veth0_macvtap entered promiscuous mode [ 244.861164][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.875886][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.894073][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.912205][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.936546][T10528] device veth0_macvtap entered promiscuous mode [ 244.972869][T10526] device veth1_macvtap entered promiscuous mode [ 244.997630][T10533] device veth1_vlan entered promiscuous mode [ 245.024320][T10528] device veth1_macvtap entered promiscuous mode [ 245.069320][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.096364][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.126498][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.169763][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.195899][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.225982][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.258126][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.292536][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.331630][T10530] device veth0_macvtap entered promiscuous mode [ 245.369270][T10526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.410876][T10526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.460388][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.498032][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.528809][T10528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.551009][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.568322][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.590965][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.624521][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.660029][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.701148][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.753135][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.822001][T10530] device veth1_macvtap entered promiscuous mode [ 245.891532][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.986894][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.063518][T10528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.114606][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.172935][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.236855][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.301437][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.350080][T10533] device veth0_macvtap entered promiscuous mode [ 246.393327][T10533] device veth1_macvtap entered promiscuous mode [ 246.669470][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.709477][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.762919][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.799106][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.831139][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.870829][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.909918][T10530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.956875][T10533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.003255][T10533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.046261][T10533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.102509][T10533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.153227][T10533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.212198][T10533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.254137][T10533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.292973][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.334297][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.368136][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.393570][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.427040][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.463947][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.505508][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.549789][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.590574][T10530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.893624][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.911489][ T40] audit: type=1400 audit(1594205748.557:48): avc: denied { associate } for pid=10526 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 247.918692][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.062913][T10533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.090496][T10533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.115633][T10533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.138539][T10533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.162311][T10533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.185782][T10533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.210242][T10533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.301026][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.321532][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.444734][T10526] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation 10:55:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed1736b533f9e1623a7cf73af21532ad62f0000001500ae47a825d86800278dcff47d010000805acf4f8f3646", 0x3e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 10:55:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0) 10:55:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcfd47d0100007a5acf99d907ae33a8e9a579aed75d492b415bcee00a06dc9d8e99adaf81dcfc6a", 0x49}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 249.298867][ T40] audit: type=1400 audit(1594205749.947:49): avc: denied { create } for pid=10572 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 249.374868][ C3] traps: PANIC: double fault, error_code: 0x0 [ 249.374868][ C3] double fault: 0000 [#1] PREEMPT SMP KASAN [ 249.374868][ C3] CPU: 3 PID: 10577 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 249.374868][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 249.374868][ C3] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 249.374868][ C3] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 249.374868][ C3] RSP: 0018:fffffe00000a0fb8 EFLAGS: 00010086 [ 249.374868][ C3] RAX: fffffffffffffff7 RBX: fffffe00000a0fb8 RCX: ffffffff88000e87 [ 249.374868][ C3] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 249.374868][ C3] RBP: fffffe00000a1120 R08: 0000000000000000 R09: 0000000000000000 [ 249.374868][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 249.374868][ C3] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.374868][ C3] FS: 00007f0601562700(0000) GS:ffff88802d100000(0000) knlGS:0000000000000000 [ 249.374868][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.374868][ C3] CR2: fffffe00000a0fa8 CR3: 000000006c236000 CR4: 0000000000340ee0 [ 249.374868][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.374868][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.374868][ C3] Call Trace: [ 249.374868][ C3] [ 249.374868][ C3] error_entry+0xb8/0xc0 [ 249.374868][ C3] RIP: 0010:native_irq_return_iret+0x0/0x2 [ 249.374868][ C3] Code: 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 08 e9 10 00 00 00 90 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 f6 44 24 20 04 75 02 <48> cf 57 0f 01 f8 0f 1f 00 65 48 8b 3c 25 00 90 01 00 48 89 07 48 [ 249.374868][ C3] RSP: 0018:fffffe00000a11d8 EFLAGS: 00010046 ORIG_RAX: 0000000000000000 [ 249.374868][ C3] RAX: fffffffffffffff7 RBX: 0000000000000000 RCX: 0000000000000000 [ 249.374868][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 249.374868][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.374868][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 249.374868][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.374868][ C3] ? asm_exc_general_protection+0x8/0x30 [ 249.374868][ C3] RIP: 0033:0x273c050000075366 [ 249.374868][ C3] Code: Bad RIP value. [ 249.374868][ C3] RSP: 002b:00007f0601561c78 EFLAGS: 00000346 [ 249.374868][ C3] Modules linked in: [ 249.374868][ C3] ---[ end trace d1c2e03a09531333 ]--- [ 249.374868][ C3] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 249.374868][ C3] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 249.374868][ C3] RSP: 0018:fffffe00000a0fb8 EFLAGS: 00010086 [ 249.374868][ C3] RAX: fffffffffffffff7 RBX: fffffe00000a0fb8 RCX: ffffffff88000e87 [ 249.374868][ C3] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 249.374868][ C3] RBP: fffffe00000a1120 R08: 0000000000000000 R09: 0000000000000000 [ 249.374868][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 249.374868][ C3] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.374868][ C3] FS: 00007f0601562700(0000) GS:ffff88802d100000(0000) knlGS:0000000000000000 [ 249.374868][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.374868][ C3] CR2: fffffe00000a0fa8 CR3: 000000006c236000 CR4: 0000000000340ee0 [ 249.374868][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.374868][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.374868][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 249.374868][ C3] Kernel Offset: disabled