[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 29.412244] random: sshd: uninitialized urandom read (32 bytes read) [ 29.623280] kauditd_printk_skb: 9 callbacks suppressed [ 29.623287] audit: type=1400 audit(1566413472.515:35): avc: denied { map } for pid=6665 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 29.675502] random: sshd: uninitialized urandom read (32 bytes read) [ 30.218461] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. [ 35.671900] random: sshd: uninitialized urandom read (32 bytes read) 2019/08/21 18:51:18 fuzzer started [ 35.875285] audit: type=1400 audit(1566413478.765:36): avc: denied { map } for pid=6676 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 37.421005] random: cc1: uninitialized urandom read (8 bytes read) 2019/08/21 18:51:20 dialing manager at 10.128.0.105:46011 2019/08/21 18:51:20 syscalls: 2466 2019/08/21 18:51:20 code coverage: enabled 2019/08/21 18:51:20 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/08/21 18:51:20 extra coverage: extra coverage is not supported by the kernel 2019/08/21 18:51:20 setuid sandbox: enabled 2019/08/21 18:51:20 namespace sandbox: enabled 2019/08/21 18:51:20 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/21 18:51:20 fault injection: enabled 2019/08/21 18:51:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/21 18:51:20 net packet injection: enabled 2019/08/21 18:51:20 net device setup: enabled [ 38.689445] random: crng init done 18:53:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000240001000000100000000000000000001c0004000000000000000000ac1e00d8afffc96ac45c91b57aa6c6be26b45796596045410ade094e"], 0x30}}, 0x0) 18:53:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00'}) ioctl$VIDIOC_DQBUF(r1, 0xc0445611, &(0x7f0000000200)={0x3ff, 0x4e55a74dfd6ba11, 0x4, 0x2000, {0x77359400}, {0x4, 0x8ef98346cdfd3d93, 0x2, 0x3, 0x4, 0x1, "70c1e7a2"}, 0x3, 0x1, @userptr=0x7f, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x4, 0x200, 0x92, 0x6, 0x7, 0x1, 0x80000000, 0x401, 0x2, 0xef4, 0x6, 0xcd, 0x100}, {0x5, 0xffffffffffffffe1, 0x7, 0xfffffffffffffffe, 0x100000000, 0x7fffffff, 0xffffffff00000000, 0x0, 0x0, 0x2d5, 0x9d, 0x7, 0xed1f}, {0x8, 0x2, 0x435b06b8, 0x1, 0x8, 0x760dc47e, 0x0, 0x7ff, 0x3b38, 0x200, 0x8, 0x3f}], 0x7fff}) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x200, 0x36000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:53:14 executing program 1: semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:53:14 executing program 2: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) 18:53:14 executing program 3: semget(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:53:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x881, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800000000000c, 0xfffbffffffffffff}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 151.844266] audit: type=1400 audit(1566413594.735:37): avc: denied { map } for pid=6676 comm="syz-fuzzer" path="/root/syzkaller-shm491023259" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 151.873186] audit: type=1400 audit(1566413594.755:38): avc: denied { map } for pid=6693 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13727 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 152.140904] IPVS: ftp: loaded support on port[0] = 21 [ 152.976932] chnl_net:caif_netlink_parms(): no params data found [ 152.984951] IPVS: ftp: loaded support on port[0] = 21 [ 153.015194] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.021756] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.028544] device bridge_slave_0 entered promiscuous mode [ 153.035170] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.041793] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.048718] device bridge_slave_1 entered promiscuous mode [ 153.076588] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.086728] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.109166] IPVS: ftp: loaded support on port[0] = 21 [ 153.118479] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.125894] team0: Port device team_slave_0 added [ 153.131379] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.138328] team0: Port device team_slave_1 added [ 153.151635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.158816] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.207249] chnl_net:caif_netlink_parms(): no params data found [ 153.251813] device hsr_slave_0 entered promiscuous mode [ 153.310317] device hsr_slave_1 entered promiscuous mode [ 153.352231] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.369088] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.395967] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.402712] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.409561] device bridge_slave_0 entered promiscuous mode [ 153.417168] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.424110] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.431722] IPVS: ftp: loaded support on port[0] = 21 [ 153.438280] device bridge_slave_1 entered promiscuous mode [ 153.448101] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.454598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.461431] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.467763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.491595] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.506652] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.536827] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.543830] team0: Port device team_slave_0 added [ 153.549925] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.557299] team0: Port device team_slave_1 added [ 153.581613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.594649] chnl_net:caif_netlink_parms(): no params data found [ 153.607933] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.671821] device hsr_slave_0 entered promiscuous mode [ 153.730264] device hsr_slave_1 entered promiscuous mode [ 153.791296] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.798289] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.819016] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.825814] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.832610] device bridge_slave_0 entered promiscuous mode [ 153.845438] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.851796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.858353] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.864723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.873384] IPVS: ftp: loaded support on port[0] = 21 [ 153.899204] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.906285] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.913164] device bridge_slave_1 entered promiscuous mode [ 153.929583] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.951952] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.996237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.003876] team0: Port device team_slave_0 added [ 154.012961] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 154.019117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.032101] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.039118] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.046149] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.054187] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 154.061593] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.068099] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.076374] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.084036] team0: Port device team_slave_1 added [ 154.089851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.102166] chnl_net:caif_netlink_parms(): no params data found [ 154.115078] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.122944] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.133818] IPVS: ftp: loaded support on port[0] = 21 [ 154.147700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.155060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.166522] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 154.172630] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.241799] device hsr_slave_0 entered promiscuous mode [ 154.290252] device hsr_slave_1 entered promiscuous mode [ 154.340975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.350234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.364811] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.372292] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.379230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.387060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.394674] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.401027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.413353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 154.435493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.443527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.451149] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.457464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.468711] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.475170] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.482282] device bridge_slave_0 entered promiscuous mode [ 154.489903] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.496286] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.504056] device bridge_slave_1 entered promiscuous mode [ 154.512680] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.564987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 154.575977] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.582708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.594756] chnl_net:caif_netlink_parms(): no params data found [ 154.610976] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.623997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 154.634037] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.643008] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.650975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.657662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.665063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.674364] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 154.680658] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.688336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 154.716005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.723644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.731212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.739591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.755259] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.764321] team0: Port device team_slave_0 added [ 154.769816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.776956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.784729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.792192] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.798497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.805295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.812792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.826927] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.833680] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.840845] device bridge_slave_0 entered promiscuous mode [ 154.847101] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.854570] team0: Port device team_slave_1 added [ 154.860958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.868377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 154.881904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.889397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.899616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 154.906677] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.913341] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.920168] device bridge_slave_1 entered promiscuous mode [ 154.926338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.963509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.971582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.979033] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.985381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.997789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.042042] device hsr_slave_0 entered promiscuous mode [ 155.080205] device hsr_slave_1 entered promiscuous mode [ 155.134843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 155.145411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.153904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.161316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.177525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.185362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.193648] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.205168] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.213509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.225238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.231661] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.240337] chnl_net:caif_netlink_parms(): no params data found [ 155.249503] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.257904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.272629] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 155.278639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.285541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.293171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.312630] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.326087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 155.333906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.340833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.347520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.354372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.361993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.369793] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.376839] team0: Port device team_slave_0 added [ 155.382358] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.389451] team0: Port device team_slave_1 added [ 155.395305] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.402676] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.413339] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 155.424225] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.432016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 155.438894] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.462551] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.468927] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.475866] device bridge_slave_0 entered promiscuous mode [ 155.483303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.492868] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.499600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.507118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.514487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.522212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.529668] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.536033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.542924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.557466] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.563902] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.571002] device bridge_slave_1 entered promiscuous mode [ 155.578832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.592971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 155.606084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.614088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.622108] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.628440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.635215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.642696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.652853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.713498] device hsr_slave_0 entered promiscuous mode [ 155.750421] device hsr_slave_1 entered promiscuous mode [ 155.790716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.797780] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.810419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.817955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.832041] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 155.838042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.847117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.856304] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.878586] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.891373] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.898728] team0: Port device team_slave_0 added [ 155.908787] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.916373] team0: Port device team_slave_1 added [ 155.923130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.933929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.944975] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 155.951451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.959366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.967715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.975488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.984026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.998809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.009312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.018437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.030198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.037913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.047655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 18:53:18 executing program 0: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffd) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, 0x0, &(0x7f0000000040), 0x0) 18:53:19 executing program 0: io_setup(0xad96, &(0x7f0000000000)=0x0) io_destroy(r0) [ 156.077793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.087078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.095084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.106111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.114414] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.163688] device hsr_slave_0 entered promiscuous mode [ 156.192621] device hsr_slave_1 entered promiscuous mode 18:53:19 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) [ 156.230620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.242350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.251185] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.257169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.265630] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 18:53:19 executing program 0: add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="d5", 0x1, 0xfffffffffffffffd) [ 156.287013] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.298108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.305145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.321839] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 156.329901] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.338029] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.349008] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.374510] 8021q: adding VLAN 0 to HW filter on device batadv0 18:53:19 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 156.384977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.407478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.427191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 18:53:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) 18:53:19 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800800005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x10000026f) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 156.436464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.457053] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.463450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.476405] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.494599] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.494724] hrtimer: interrupt took 24669 ns [ 156.506976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.518879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.530768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.540593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.548130] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.554501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.572305] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.581688] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.587825] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.595778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.608337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.615728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.625963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 18:53:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00'}) ioctl$VIDIOC_DQBUF(r1, 0xc0445611, &(0x7f0000000200)={0x3ff, 0x4e55a74dfd6ba11, 0x4, 0x2000, {0x77359400}, {0x4, 0x8ef98346cdfd3d93, 0x2, 0x3, 0x4, 0x1, "70c1e7a2"}, 0x3, 0x1, @userptr=0x7f, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x4, 0x200, 0x92, 0x6, 0x7, 0x1, 0x80000000, 0x401, 0x2, 0xef4, 0x6, 0xcd, 0x100}, {0x5, 0xffffffffffffffe1, 0x7, 0xfffffffffffffffe, 0x100000000, 0x7fffffff, 0xffffffff00000000, 0x0, 0x0, 0x2d5, 0x9d, 0x7, 0xed1f}, {0x8, 0x2, 0x435b06b8, 0x1, 0x8, 0x760dc47e, 0x0, 0x7ff, 0x3b38, 0x200, 0x8, 0x3f}], 0x7fff}) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x200, 0x36000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 156.644619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.684627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.715721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.732807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.757453] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.763852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.784963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.800763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.817670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.829581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.841822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.856707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.865974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.877695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.885412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.893841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.902215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.909930] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.916832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.924713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.933344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.941022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.950387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.959473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.969470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.977385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.984999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.992524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.999884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.007301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.014864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.023566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.032219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.039574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.048448] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.054633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.062762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.074099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.081519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.089042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.096810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.104323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.115216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.129953] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.137679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.146147] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.153519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.162572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.171516] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.177495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.188112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.199198] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.209443] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.215898] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.225255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.232370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.246310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.254122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.262016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.269450] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.275806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.283480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.292942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.302958] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.309182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.318005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.329048] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.335426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.346242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.353843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.364491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.374726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.381737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.391947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.407532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.415698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.424149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.431831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.444909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.452775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.465447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.472502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.480150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.490400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.497121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.505201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.514787] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.521490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.534217] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.545079] 8021q: adding VLAN 0 to HW filter on device batadv0 18:53:21 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 18:53:21 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000380)=0xfffffffffffffdeb) 18:53:21 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00') 18:53:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:53:21 executing program 3: semget(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:53:21 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') rmdir(&(0x7f0000000100)='./file0\x00') 18:53:21 executing program 1: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000700)=ANY=[@ANYRES32], 0x4) 18:53:21 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) 18:53:21 executing program 0: shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) 18:53:21 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 18:53:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) shutdown(r0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x7ff}) fallocate(r0, 0x10, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000003c0)='\xf6\xc9s\x00\x12k\xd6\xc7LV>\vp\xae7\xa4\xd53\xe6(\xa1f\x9f\xe7FK\xffv6Bec2\xd9\xeed\xbe\x01\xb4\x87oR^fV\xc8\x1c\xf2\x18(AD0\xc2\xa0\x17}\x15\x021\a~>\xa7\"o\xc8\xb5i8\x88\xf1R\xf1\x19\xd44\x19\x1c\x88\xef\x97\a\r\xe6y\xf9`\xb6\xbd],\xcdG\xf0\x8e\x9e\xec\xebF\xe5\x0e\x1eA\x14\xe2\xd5\x7f\xcd\f7\xef\x03v\xd4\'B\xc1i}\x90j\x8a^\r\x97\b\xed4\xc7\x99\xe6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f\v<\x83\x0f\xebu`\xa1\xf0Oq\x01\x1a\xc7\xc8P0\xaf\x9e\xf7\xc8\xb1\vDt\x9a\x9c\x13|-\xef\x0e\x18\xee\x01\x91T\x82\xdb%\xacs\b\x85\xbcJ\xc0\x9e\xd1h%\xeby1u9\xea\x90\x02\xd7\x8e\xee`\xe6\xd9\xb7Am\xdf\xa7\xb4\xa9\x1cT\x16\xd6 \xe6\x1e\n\x83\xd1\xcf\xde', 0x0, &(0x7f0000000240)) dup(r2) 18:53:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x8) 18:53:21 executing program 1: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='vxfs\x00', 0x0, 0x0) 18:53:21 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x20}]}) [ 158.881687] futex_wake_op: syz-executor.5 tries to shift op by 4095; fix this program 18:53:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000040)) 18:53:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) [ 159.230546] futex_wake_op: syz-executor.5 tries to shift op by 4095; fix this program 18:53:22 executing program 3: semget(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x82, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:53:22 executing program 4: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x6b) 18:53:22 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x10000026f) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 18:53:22 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 18:53:22 executing program 0: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', 'cgroup\x00'}, 0x0, 0x0, 0x0) 18:53:22 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)) 18:53:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 18:53:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() sched_rr_get_interval(r1, &(0x7f00000001c0)) 18:53:22 executing program 0: getgroups(0xfffffffffffffdfb, 0xfffffffffffffffd) 18:53:22 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c80)='net/ip_mr_vif\x00') 18:53:22 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) 18:53:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 18:53:23 executing program 3: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000200)=""/4096) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1fafc13) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0), 0x1c) sendmmsg(r3, &(0x7f0000000440), 0x400000000000419, 0x810) unshare(0x0) socket(0x9, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sched_setattr(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001200)='./file2\x00', 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) io_submit(0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file0\x00') getdents64(r0, &(0x7f0000000140)=""/189, 0xbd) getdents64(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) 18:53:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x29, 0x3b}], 0x18}], 0xb0, 0x0) 18:53:23 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) fcntl$addseals(r1, 0x409, 0x0) 18:53:23 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 18:53:23 executing program 5: request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 18:53:23 executing program 1: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/116) 18:53:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xfffffffffffffffe}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) semget$private(0x0, 0x0, 0x100010106) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x2, 0x60000) r2 = accept4(r1, &(0x7f0000000c40)=@ipx, &(0x7f0000000ac0)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d00)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff80000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2c) process_vm_readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/162, 0xa2}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000940)=""/197, 0xc5}, {&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/53, 0x35}, {&(0x7f0000000b40)=""/49, 0x31}, {&(0x7f0000000b80)=""/52, 0x34}], 0x7, 0x0) ioctl$KDDELIO(r6, 0x4b35, 0x8003) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000036000/0x4000)=nil, 0x4000}, &(0x7f0000000400)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r7, r8) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @mcast2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffffffff02000000000000000700000000000000f9ffffffffffffff05000000000000000000aa010000e4ffffff000000000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000500000000000000ff02050400"/144]) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f00000001c0)={0xc9, 0x100000000, 0x422}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) accept4$alg(r4, 0x0, 0x0, 0x80800) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') 18:53:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, 0x0) 18:53:23 executing program 4: add_key(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f0000000140)='}', 0x1, 0xffffffffffffffff) 18:53:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) 18:53:23 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x2, 0x1, {0xb, @sdr={0x0, 0x1}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x2, {0xb, @vbi={0x0, 0x5}}}) 18:53:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) [ 160.578766] audit: type=1400 audit(1566413603.465:39): avc: denied { create } for pid=6931 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.638783] kasan: CONFIG_KASAN_INLINE enabled [ 160.651665] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 160.700707] kobject: 'þˆ' (ffff88805c1654f0): kobject_uevent_env [ 160.700737] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 160.700746] Modules linked in: [ 160.707974] audit: type=1400 audit(1566413603.495:40): avc: denied { write } for pid=6931 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.713106] CPU: 0 PID: 6938 Comm: syz-executor.5 Not tainted 4.14.139 #35 [ 160.713110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.713114] task: ffff88805c0e41c0 task.stack: ffff88805c0e8000 [ 160.713126] RIP: 0010:refcount_sub_and_test+0x2b/0xf0 [ 160.713130] RSP: 0018:ffff88805c0efb98 EFLAGS: 00010202 [ 160.713136] RAX: dffffc0000000000 RBX: ffff8880a484d7c0 RCX: ffffffff842619c0 [ 160.713140] RDX: 0000000000000004 RSI: 0000000000000020 RDI: 0000000000000001 [ 160.713144] RBP: ffff88805c0efbc0 R08: 0000000002ee9e37 R09: ffff88805c0e4a88 [ 160.713147] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 [ 160.713151] R13: 0000000000000001 R14: ffff8880a484d7d4 R15: 0000000000000000 [ 160.713156] FS: 0000000000aeb940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 160.713160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.713168] CR2: 0000000001762e80 CR3: 000000008d175000 CR4: 00000000001406f0 [ 160.721464] audit: type=1400 audit(1566413603.495:41): avc: denied { read } for pid=6931 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.740079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.740084] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.740087] Call Trace: [ 160.740101] refcount_dec_and_test+0x1b/0x20 [ 160.740109] vb2_vmalloc_put+0x18/0x70 [ 160.740119] __vb2_buf_mem_free+0x103/0x1e0 [ 160.748315] kobject: 'þˆ' (ffff88805c1654f0): fill_kobj_path: path = '/devices/virtual/net/þˆ' [ 160.756443] ? vb2_vmalloc_dmabuf_ops_attach+0x3f0/0x3f0 [ 160.756451] __vb2_queue_free+0x634/0x7d0 [ 160.756462] vb2_core_queue_release+0x64/0x80 [ 160.756469] _vb2_fop_release+0x1cf/0x2a0 [ 160.756479] vb2_fop_release+0x75/0xc0 [ 160.780110] kobject: 'queues' (ffff8880903ecf48): kobject_add_internal: parent: 'þˆ', set: '' [ 160.780388] vivid_fop_release+0x180/0x3f0 [ 160.780397] ? vivid_remove+0x3d0/0x3d0 [ 160.795397] kobject: 'queues' (ffff8880903ecf48): kobject_uevent_env [ 160.802146] ? dev_debug_store+0xe0/0xe0 [ 160.802152] v4l2_release+0xf9/0x190 [ 160.802167] __fput+0x275/0x7a0 [ 160.802175] ____fput+0x16/0x20 [ 160.802184] task_work_run+0x114/0x190 [ 160.802194] exit_to_usermode_loop+0x1da/0x220 [ 160.802202] do_syscall_64+0x4bc/0x640 [ 160.802208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.802218] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 160.802224] RIP: 0033:0x413511 [ 160.802228] RSP: 002b:00007ffdf98e0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 160.802234] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413511 [ 160.802238] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 160.802242] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 160.802246] R10: 00007ffdf98e0f50 R11: 0000000000000293 R12: 000000000075bfc8 [ 160.802250] R13: 000000000002737e R14: 0000000000760b10 R15: ffffffffffffffff [ 160.802257] Code: 55 48 89 e5 41 56 41 55 41 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 96 66 85 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 160.802386] RIP: refcount_sub_and_test+0x2b/0xf0 RSP: ffff88805c0efb98 [ 160.805444] ---[ end trace 36b101df2175082a ]--- [ 160.828052] kobject: 'queues' (ffff8880903ecf48): kobject_uevent_env: filter function caused the event to drop! [ 160.836393] Kernel panic - not syncing: Fatal exception [ 160.887047] kobject: 'rx-0' (ffff88809ee53190): kobject_add_internal: parent: 'queues', set: 'queues' [ 160.895638] Kernel Offset: disabled [ 161.083600] Rebooting in 86400 seconds..