[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.585036][ T26] audit: type=1800 audit(1556698887.159:25): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 39.620999][ T26] audit: type=1800 audit(1556698887.159:26): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 39.651638][ T26] audit: type=1800 audit(1556698887.159:27): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.19' (ECDSA) to the list of known hosts. 2019/05/01 08:21:38 fuzzer started 2019/05/01 08:21:40 dialing manager at 10.128.0.26:34869 2019/05/01 08:21:41 syscalls: 2440 2019/05/01 08:21:41 code coverage: enabled 2019/05/01 08:21:41 comparison tracing: enabled 2019/05/01 08:21:41 extra coverage: extra coverage is not supported by the kernel 2019/05/01 08:21:41 setuid sandbox: enabled 2019/05/01 08:21:41 namespace sandbox: enabled 2019/05/01 08:21:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/01 08:21:41 fault injection: enabled 2019/05/01 08:21:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/01 08:21:41 net packet injection: enabled 2019/05/01 08:21:41 net device setup: enabled 08:23:23 executing program 0: syzkaller login: [ 155.846653][ T7974] IPVS: ftp: loaded support on port[0] = 21 08:23:23 executing program 1: [ 155.964555][ T7974] chnl_net:caif_netlink_parms(): no params data found [ 156.028540][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.037143][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.046728][ T7974] device bridge_slave_0 entered promiscuous mode [ 156.055835][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.064066][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.082829][ T7974] device bridge_slave_1 entered promiscuous mode [ 156.128265][ T7974] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.144835][ T7974] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.172141][ T7974] team0: Port device team_slave_0 added [ 156.181151][ T7974] team0: Port device team_slave_1 added [ 156.196385][ T7977] IPVS: ftp: loaded support on port[0] = 21 08:23:23 executing program 2: [ 156.272983][ T7974] device hsr_slave_0 entered promiscuous mode [ 156.310001][ T7974] device hsr_slave_1 entered promiscuous mode [ 156.379225][ T7979] IPVS: ftp: loaded support on port[0] = 21 [ 156.387803][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.395057][ T7974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.402981][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.410196][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state 08:23:24 executing program 3: [ 156.577563][ T7977] chnl_net:caif_netlink_parms(): no params data found [ 156.612345][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.652909][ T7974] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.662555][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.677313][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.710963][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.732808][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 156.765083][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.774528][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.781683][ T7980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.812756][ T7979] chnl_net:caif_netlink_parms(): no params data found [ 156.824006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.835228][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.842385][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.869509][ T7985] IPVS: ftp: loaded support on port[0] = 21 [ 156.870707][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 08:23:24 executing program 4: [ 156.923806][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.936748][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.948516][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.958831][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.967449][ T7977] device bridge_slave_0 entered promiscuous mode [ 157.005044][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.024773][ T7974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.063173][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.085196][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.094751][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.112366][ T7977] device bridge_slave_1 entered promiscuous mode 08:23:24 executing program 5: [ 157.140318][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.148858][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.225016][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.232976][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.242777][ T7979] device bridge_slave_0 entered promiscuous mode [ 157.261380][ T7977] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.263152][ T7988] IPVS: ftp: loaded support on port[0] = 21 [ 157.277847][ T7974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.288974][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.300420][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.308458][ T7979] device bridge_slave_1 entered promiscuous mode [ 157.345273][ T7977] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.384660][ T7991] IPVS: ftp: loaded support on port[0] = 21 [ 157.407883][ T7979] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.457869][ T7977] team0: Port device team_slave_0 added [ 157.467012][ T7979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.517025][ T7977] team0: Port device team_slave_1 added 08:23:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000010f, 0x0) [ 157.571174][ T7985] chnl_net:caif_netlink_parms(): no params data found [ 157.596148][ T7979] team0: Port device team_slave_0 added [ 157.641002][ C0] hrtimer: interrupt took 28331 ns [ 157.649159][ T7977] device hsr_slave_0 entered promiscuous mode 08:23:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000010f, 0x0) [ 157.711029][ T7977] device hsr_slave_1 entered promiscuous mode 08:23:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x2d}}, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 157.779080][ T7979] team0: Port device team_slave_1 added 08:23:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x835, 0x0, 0x0, {0x2802, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xfeffffff00000000}}]}]}, 0x2c}}, 0x0) [ 157.923547][ T7979] device hsr_slave_0 entered promiscuous mode [ 157.951948][ T8010] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 157.959945][ T7979] device hsr_slave_1 entered promiscuous mode [ 158.000358][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.007473][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.015366][ T7985] device bridge_slave_0 entered promiscuous mode [ 158.023561][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.030761][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.038797][ T7985] device bridge_slave_1 entered promiscuous mode 08:23:25 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) [ 158.114986][ T7985] bond0: Enslaving bond_slave_0 as an active interface with an up link 08:23:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\xa0\x02\x80\x00'}, 0x58) [ 158.175576][ T7985] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:23:25 executing program 0: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5b94, 0x20000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() [ 158.320121][ T7985] team0: Port device team_slave_0 added [ 158.349279][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 158.361502][ T7985] team0: Port device team_slave_1 added [ 158.377637][ T7991] chnl_net:caif_netlink_parms(): no params data found [ 158.458896][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.466170][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.475682][ T7988] device bridge_slave_0 entered promiscuous mode [ 158.523165][ T7985] device hsr_slave_0 entered promiscuous mode [ 158.575271][ T7985] device hsr_slave_1 entered promiscuous mode [ 158.636049][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.643564][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.651864][ T7988] device bridge_slave_1 entered promiscuous mode [ 158.663580][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.678247][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.686718][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.694792][ T7991] device bridge_slave_0 entered promiscuous mode [ 158.718236][ T7988] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.733294][ T7977] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.741244][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.748306][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.759254][ T7991] device bridge_slave_1 entered promiscuous mode [ 158.783297][ T7988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.795955][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.803757][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.834161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.846749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.855808][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.862948][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.891401][ T7991] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.900591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.908521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.917446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.926169][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.933258][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.941917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.959755][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.968946][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.979832][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.988194][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.997341][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.008273][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.017916][ T7988] team0: Port device team_slave_0 added [ 159.025683][ T7988] team0: Port device team_slave_1 added [ 159.033389][ T7991] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.059528][ T7991] team0: Port device team_slave_0 added [ 159.096086][ T7991] team0: Port device team_slave_1 added [ 159.109327][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.118037][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.161550][ T7988] device hsr_slave_0 entered promiscuous mode [ 159.212881][ T7988] device hsr_slave_1 entered promiscuous mode [ 159.256151][ T7977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.270850][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.288264][ T7979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.297846][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.306799][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.343154][ T7977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.421597][ T7991] device hsr_slave_0 entered promiscuous mode [ 159.470117][ T7991] device hsr_slave_1 entered promiscuous mode [ 159.517424][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.530285][ T7979] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.537776][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.545937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.600441][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.609159][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.618984][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.626127][ T8028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.634794][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.643811][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.652536][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.659665][ T8028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.667306][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.676848][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.685579][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.693509][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.701662][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.740745][ T7985] 8021q: adding VLAN 0 to HW filter on device team0 08:23:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x8b572f719b87c5fd, 0x12c1338e0b6e2a52, 0x0, 0x0, 0x0, 0x8}, 0x28) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 159.747716][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.764585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.777079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.786931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.800996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.813938][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.852327][ T7979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.867393][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.878933][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.888138][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.897168][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.925839][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.944532][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.955211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.966190][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.974772][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.981879][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.992009][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.008269][ T7991] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.024372][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.032867][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.040803][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.048531][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.056591][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.073984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.082937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.092006][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.099074][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.107216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.115875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.124407][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.131531][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.139077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.147842][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.156675][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.163814][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.175346][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.183544][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.209096][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.218173][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.226867][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.233990][ T7980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.242963][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.251847][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.260370][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.267473][ T7980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.275210][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.284242][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.308375][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.317450][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.326411][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.339629][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.348351][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.360157][ T7979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.378143][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.386966][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.396627][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.405965][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.415160][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.424463][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.433219][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.441982][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.452043][ T7980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.465511][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.479829][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.488285][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.496885][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.509305][ T7988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.522142][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.534818][ T7985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.546917][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.555676][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.566539][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.575012][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.583573][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 08:23:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000340)=""/68) [ 160.647738][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.666722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.675942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.693238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.702626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.711541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.720399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.729180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.742274][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.764253][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.775798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.786424][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.832484][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0 08:23:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xe, 0x0, 0xf00}}) 08:23:28 executing program 4: 08:23:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), 0x0) 08:23:28 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:28 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$inet(0x2, 0x3, 0x1c) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab553fec94248cc25e792027f3ed075d20", 0x11) 08:23:28 executing program 5: 08:23:28 executing program 5: 08:23:28 executing program 0: 08:23:28 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:28 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:28 executing program 4: pause() syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c366440f56c9660f3a16649c67002683c500c441dfd04b00c442019dccc4e3696922e46f") syz_emit_ethernet(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000340)="c4e3f9614832074a2be93693980f053ef3aec4a37bf0c50141e2e926b5c94598c463791d718d038d00a30000262ff342906646da4e329265660f38df3d00000000c4c25bf6434bc461660f38407aa4c402b1ac022525000e81c481bd5f531db0008000806b809ecf491e2f16f0410f117b0969e08f4cbec5c54de90d47e82c718fcdc4213e537700c443d9497dbf59f0438f34b267f36ab4c4633d4be213564105ba16f2ae66410f3a162888c423a46c53b885000000fefe41ff090966df53098f69609b5687e8e17474d8d8a1de2ad764b5c1c4213a5fc0470f5f108fc918904f0500f4c4a2fd2242193830ca30caab6abb3e644584458440922af3420f2a5200c442a8f75c85bc2665e94612c8000f8450000000d0818894d8004433ae88f4f42d92f9f928c4a17ae642951cffc4c3c4f7c2c8f23232770c64e42e440bdd970606b2aad9c70f485c5e2e6666d2b89860159065660f3a1417b251baf0b0ffd993ffd9930a07660f72e590f247aceced3e664171791d09f5e5978047910002c1045c0b4ddc47cc2f5c65002d08000000c4417956a299899999c482ad095d0b59060f0f8153000000ae0f4401a9bb000042c4414974ecc481f8176b9dc4617ddd880c0000003523") 08:23:28 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000ffffffffffff91002f0081002a00000400ab54f735b41d22eb36351543ec667ba2b08699baae1fa1d5c1783138b128ed9b003b9ecf33ce1908623aee912dca47eade0b84c9f98c16e6b613a550ed2e805c8c9dc5cf1cd839e497e6a1e37ea1a2b76d169a44d2773a0def6a6d030cba7d8f5e956c0c"], 0x0) seccomp(0x0, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x8b, 0x0, 0xffffffffffffffad}]}) clone(0x403502001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000009c0)="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") socket$inet(0x2, 0xe, 0x355) 08:23:28 executing program 0: 08:23:29 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:29 executing program 4: 08:23:29 executing program 3: 08:23:29 executing program 0: 08:23:29 executing program 5: 08:23:29 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:29 executing program 4: 08:23:29 executing program 4: 08:23:29 executing program 5: 08:23:29 executing program 0: 08:23:29 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:29 executing program 3: 08:23:29 executing program 4: 08:23:29 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:29 executing program 0: 08:23:29 executing program 3: 08:23:29 executing program 5: 08:23:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:29 executing program 4: 08:23:29 executing program 3: 08:23:29 executing program 0: 08:23:29 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:29 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:29 executing program 5: 08:23:29 executing program 4: 08:23:29 executing program 0: 08:23:29 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:29 executing program 3: 08:23:30 executing program 5: 08:23:30 executing program 4: 08:23:30 executing program 0: 08:23:30 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:30 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:30 executing program 5: 08:23:30 executing program 3: 08:23:30 executing program 0: 08:23:30 executing program 4: 08:23:30 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:30 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:30 executing program 5: 08:23:30 executing program 4: 08:23:30 executing program 3: 08:23:30 executing program 0: 08:23:30 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:30 executing program 5: 08:23:30 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:30 executing program 4: 08:23:30 executing program 3: 08:23:30 executing program 5: 08:23:30 executing program 0: 08:23:30 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:30 executing program 4: 08:23:30 executing program 3: 08:23:30 executing program 5: 08:23:30 executing program 4: 08:23:30 executing program 5: 08:23:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000008000/0xd000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000012000/0x3000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000000c000/0x4000)=nil, 0x0}, 0x68) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:23:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:23:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x2c2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000000bb, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000000280)) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 08:23:30 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:30 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002300)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) [ 163.436078][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:23:31 executing program 1: sysinfo(&(0x7f0000000000)=""/248) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:31 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) 08:23:31 executing program 5: [ 163.477780][ T8274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 08:23:31 executing program 1: sysinfo(&(0x7f0000000000)=""/248) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00X\x00\x00\x00\x00\xff\xff\xff', @ifru_flags}) 08:23:31 executing program 5: 08:23:31 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0xffc6) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) poll(&(0x7f00000000c0)=[{r0, 0x1}, {r0}], 0x2, 0x0) [ 163.700134][ T8274] kasan: CONFIG_KASAN_INLINE enabled [ 163.705668][ T8274] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 163.713784][ T8274] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 163.720745][ T8274] CPU: 0 PID: 8274 Comm: syz-executor.0 Not tainted 5.1.0-rc7-next-20190430 #33 [ 163.729772][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.739881][ T8274] RIP: 0010:vcpu_enter_guest+0xbcd/0x5fb0 [ 163.745632][ T8274] Code: 48 c1 ea 03 80 3c 02 00 0f 85 6f 48 00 00 49 8b 9f b0 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 39 48 00 00 8b 5b 78 31 ff 89 [ 163.765256][ T8274] RSP: 0018:ffff888063e9fa00 EFLAGS: 00010006 [ 163.771343][ T8274] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90005dd9000 [ 163.779327][ T8274] RDX: 000000000000000f RSI: ffffffff810cd7b2 RDI: 0000000000000078 [ 163.787323][ T8274] RBP: ffff888063e9fb10 R08: ffff88809bfe8100 R09: ffffed1015d06be0 [ 163.795313][ T8274] R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: ffff888063ff806c [ 163.803480][ T8274] R13: 0000000000000001 R14: ffff888063ff8070 R15: ffff888063ff8040 [ 163.804841][ T3878] kobject: 'loop5' (00000000fc572322): kobject_uevent_env [ 163.811483][ T8274] FS: 00007fef45dd9700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 163.811491][ T8274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.811499][ T8274] CR2: 00007ffdf327b428 CR3: 000000009c4d0000 CR4: 00000000001426f0 [ 163.811508][ T8274] Call Trace: 08:23:31 executing program 5: [ 163.811534][ T8274] ? emulator_read_emulated+0x50/0x50 [ 163.811550][ T8274] ? lock_acquire+0x16f/0x3f0 [ 163.811575][ T8274] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 163.821391][ T3878] kobject: 'loop5' (00000000fc572322): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 163.828444][ T8274] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 163.878215][ T8274] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 163.883974][ T8274] kvm_vcpu_ioctl+0x4dc/0xf90 [ 163.888670][ T8274] ? kvm_set_memory_region+0x50/0x50 [ 163.893976][ T8274] ? tomoyo_path_number_perm+0x263/0x520 [ 163.897568][ T3878] kobject: 'loop5' (00000000fc572322): kobject_uevent_env [ 163.899648][ T8274] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 163.899670][ T8274] ? __fget+0x35a/0x550 [ 163.899693][ T8274] ? kvm_set_memory_region+0x50/0x50 [ 163.906880][ T3878] kobject: 'loop5' (00000000fc572322): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 163.912661][ T8274] do_vfs_ioctl+0xd6e/0x1390 [ 163.912681][ T8274] ? ioctl_preallocate+0x210/0x210 [ 163.912705][ T8274] ? __fget+0x381/0x550 [ 163.946471][ T8274] ? ksys_dup3+0x3e0/0x3e0 [ 163.950904][ T8274] ? nsecs_to_jiffies+0x30/0x30 [ 163.955766][ T8274] ? tomoyo_file_ioctl+0x23/0x30 [ 163.960726][ T8274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.966975][ T8274] ? security_file_ioctl+0x93/0xc0 [ 163.972109][ T8274] ksys_ioctl+0xab/0xd0 [ 163.976263][ T8274] __x64_sys_ioctl+0x73/0xb0 [ 163.980850][ T8274] do_syscall_64+0x103/0x670 [ 163.985469][ T8274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.991362][ T8274] RIP: 0033:0x458da9 [ 163.995240][ T8274] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.015080][ T8274] RSP: 002b:00007fef45dd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.023483][ T8274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 164.031451][ T8274] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 164.039410][ T8274] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 164.047496][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef45dd96d4 [ 164.055472][ T8274] R13: 00000000004c1d42 R14: 00000000004d4550 R15: 00000000ffffffff [ 164.063447][ T8274] Modules linked in: [ 164.067361][ T8274] ---[ end trace 02fc0c8462fa1f98 ]--- [ 164.072849][ T8274] RIP: 0010:vcpu_enter_guest+0xbcd/0x5fb0 [ 164.078706][ T8274] Code: 48 c1 ea 03 80 3c 02 00 0f 85 6f 48 00 00 49 8b 9f b0 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 39 48 00 00 8b 5b 78 31 ff 89 [ 164.098403][ T8274] RSP: 0018:ffff888063e9fa00 EFLAGS: 00010006 [ 164.104468][ T8274] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90005dd9000 [ 164.112443][ T8274] RDX: 000000000000000f RSI: ffffffff810cd7b2 RDI: 0000000000000078 [ 164.120425][ T8274] RBP: ffff888063e9fb10 R08: ffff88809bfe8100 R09: ffffed1015d06be0 [ 164.128419][ T8274] R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: ffff888063ff806c [ 164.136385][ T8274] R13: 0000000000000001 R14: ffff888063ff8070 R15: ffff888063ff8040 [ 164.144365][ T8274] FS: 00007fef45dd9700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 164.153292][ T8274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.159865][ T8274] CR2: 00007ffdf327b428 CR3: 000000009c4d0000 CR4: 00000000001426f0 [ 164.167932][ T8274] Kernel panic - not syncing: Fatal exception [ 164.174963][ T8274] Kernel Offset: disabled [ 164.179314][ T8274] Rebooting in 86400 seconds..