[?25l[?1c7[ ok 8[?25h[?0c. [ 38.104085] audit: type=1800 audit(1557216379.839:33): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 38.127166] audit: type=1800 audit(1557216379.839:34): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 [ 39.104511] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.616263] audit: type=1400 audit(1557216381.349:35): avc: denied { map } for pid=7149 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.671055] random: sshd: uninitialized urandom read (32 bytes read) [ 40.332038] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. [ 45.904293] random: sshd: uninitialized urandom read (32 bytes read) 2019/05/07 08:06:27 fuzzer started [ 46.105149] audit: type=1400 audit(1557216387.839:36): avc: denied { map } for pid=7158 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 48.130468] random: cc1: uninitialized urandom read (8 bytes read) 2019/05/07 08:06:30 dialing manager at 10.128.0.105:39593 2019/05/07 08:06:32 syscalls: 2434 2019/05/07 08:06:32 code coverage: enabled 2019/05/07 08:06:32 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/05/07 08:06:32 extra coverage: extra coverage is not supported by the kernel 2019/05/07 08:06:32 setuid sandbox: enabled 2019/05/07 08:06:32 namespace sandbox: enabled 2019/05/07 08:06:32 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/07 08:06:32 fault injection: enabled 2019/05/07 08:06:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/07 08:06:32 net packet injection: enabled 2019/05/07 08:06:32 net device setup: enabled [ 51.922237] random: crng init done 08:10:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000400)="b13691cd806969ef69dc00d9c4a2d1920cec38c4ab39fd5bf9e2f9e2c7c7e4c653fb0fc4014cb63a3af4a95ff9c44149f2168f4808eebce00000802000c421fc51c12aeac461a1f8a100000021c4e189d8a42973858e2c0f186746f3400faee47e7c730f5726400f0d18c401fe5ff6e7df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r1, r1, 0x0, 0x8000fffffffb) socket$inet_udplite(0x2, 0x2, 0x88) 08:10:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000140)="b13691cd806969ef69dc00d9c4a2d1920cec38c4ab39fd5bf9e2f9e2c7c7e4c653fb0fc4014cb63a3af4a95ff9c44149f2168f4808eebce00000802000c421fc51c12aeac461a1f8a100000021c4e189d8a42973858e2c0f186746f3400faee47e7c730f5726400f0d18c401fe5ff6e7df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') readv(r1, &(0x7f0000001780)=[{&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}], 0x5) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @remote}, 'erspan0\x00'}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x15, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 08:10:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000000080)=""/99, 0x63, 0x0) close(r0) 08:10:09 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) 08:10:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38d, 0x0, 0x2}]}) 08:10:09 executing program 4: r0 = socket(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f0000006f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) [ 267.876497] audit: type=1400 audit(1557216609.609:37): avc: denied { map } for pid=7158 comm="syz-fuzzer" path="/root/syzkaller-shm307141338" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 267.947524] audit: type=1400 audit(1557216609.639:38): avc: denied { map } for pid=7175 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13804 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 268.820223] IPVS: ftp: loaded support on port[0] = 21 [ 269.148035] chnl_net:caif_netlink_parms(): no params data found [ 269.157679] IPVS: ftp: loaded support on port[0] = 21 [ 269.209336] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.216607] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.223981] device bridge_slave_0 entered promiscuous mode [ 269.233430] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.239843] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.246956] device bridge_slave_1 entered promiscuous mode [ 269.269951] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 269.285509] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 269.304303] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 269.311951] team0: Port device team_slave_0 added [ 269.317746] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 269.324998] IPVS: ftp: loaded support on port[0] = 21 [ 269.326236] team0: Port device team_slave_1 added [ 269.337678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 269.345170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 269.412102] device hsr_slave_0 entered promiscuous mode [ 269.450373] device hsr_slave_1 entered promiscuous mode [ 269.523729] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 269.544456] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 269.584637] chnl_net:caif_netlink_parms(): no params data found [ 269.620388] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.627243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.634383] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.640851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.704616] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.711899] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.718815] device bridge_slave_0 entered promiscuous mode [ 269.726888] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.733934] IPVS: ftp: loaded support on port[0] = 21 [ 269.734734] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.747590] device bridge_slave_1 entered promiscuous mode [ 269.776149] chnl_net:caif_netlink_parms(): no params data found [ 269.817522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 269.828922] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 269.862854] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.869455] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.877259] device bridge_slave_0 entered promiscuous mode [ 269.894051] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.900585] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.907597] device bridge_slave_1 entered promiscuous mode [ 269.926840] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 269.934920] team0: Port device team_slave_0 added [ 269.957403] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 269.964621] team0: Port device team_slave_1 added [ 269.970531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 269.987317] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 269.997423] IPVS: ftp: loaded support on port[0] = 21 [ 270.008180] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 270.017067] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 270.092189] device hsr_slave_0 entered promiscuous mode [ 270.130425] device hsr_slave_1 entered promiscuous mode [ 270.184186] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 270.193842] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 270.199961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.213486] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 270.221007] team0: Port device team_slave_0 added [ 270.226923] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 270.234486] team0: Port device team_slave_1 added [ 270.240706] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.247975] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.256146] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 270.270523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 270.287643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 270.303978] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 270.337873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 270.364721] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 270.374373] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 270.380817] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.393040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.400156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.442493] device hsr_slave_0 entered promiscuous mode [ 270.480408] device hsr_slave_1 entered promiscuous mode [ 270.540948] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 270.548220] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 270.566913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 270.576488] chnl_net:caif_netlink_parms(): no params data found [ 270.594997] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 270.602198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.610267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.617979] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.624639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.636556] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 270.645249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 270.661091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 270.668787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.677956] IPVS: ftp: loaded support on port[0] = 21 [ 270.678890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.693360] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.699768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.707420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.725952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 270.737578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.766654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 270.776998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 270.812729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.821128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.828690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.837040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.844873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.856512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 270.875863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.883864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.906479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 270.914012] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.920924] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.927898] device bridge_slave_0 entered promiscuous mode [ 270.963681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.972636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.986514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.993091] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.999502] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.006849] device bridge_slave_1 entered promiscuous mode [ 271.037788] chnl_net:caif_netlink_parms(): no params data found [ 271.072277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 271.088283] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 271.094652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.103064] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 271.111537] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 271.149439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 271.183017] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.189695] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.197074] device bridge_slave_0 entered promiscuous mode [ 271.203927] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 271.212109] team0: Port device team_slave_0 added [ 271.217784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.225184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.263672] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.271689] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.278692] device bridge_slave_1 entered promiscuous mode [ 271.285399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 271.293055] team0: Port device team_slave_1 added [ 271.298688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 271.306567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 271.314638] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 271.343690] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 271.350710] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.388412] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 271.403305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.454142] device hsr_slave_0 entered promiscuous mode [ 271.490499] device hsr_slave_1 entered promiscuous mode [ 271.541587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.548973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 271.561883] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 271.578486] chnl_net:caif_netlink_parms(): no params data found [ 271.594771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 271.602711] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 271.613698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 271.630456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 271.647911] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 271.655512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.664788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.672809] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.679534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.686673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.694809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.702808] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.709178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.716399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.723758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.737731] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 271.746247] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 271.753739] team0: Port device team_slave_0 added [ 271.761024] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 271.770485] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.777167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.786058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 271.794624] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 271.802053] team0: Port device team_slave_1 added [ 271.816185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 271.824303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.847608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 271.870386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 271.888547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 271.898454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.923425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.932004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.939650] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.946063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.955804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 271.963900] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.970843] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.977861] device bridge_slave_0 entered promiscuous mode [ 272.034194] device hsr_slave_0 entered promiscuous mode [ 272.071196] device hsr_slave_1 entered promiscuous mode [ 272.110911] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 272.119323] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 272.129290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 272.142513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.150170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 08:10:13 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 272.158026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.176723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.184833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.193397] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.201241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.212155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.219918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.228055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.237150] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.244030] audit: type=1400 audit(1557216613.979:39): avc: denied { associate } for pid=7213 comm="syz-executor.0" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 272.258522] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.274646] device bridge_slave_1 entered promiscuous mode [ 272.284185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.292176] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 272.301831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 08:10:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 272.309718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 272.319874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.327935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.344250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.369498] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 272.378993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 272.389463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 272.398584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.409458] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 272.416080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.432033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 272.441692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.449260] hrtimer: interrupt took 26362 ns [ 272.449471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.466233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.487569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 272.500496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 272.509041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 08:10:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 272.532009] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 272.539048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.548465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.556103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.564419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.572420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.579528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.586973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.594956] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 272.604417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 272.612877] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 272.620881] team0: Port device team_slave_0 added [ 272.631908] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 272.638564] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 272.663209] team0: Port device team_slave_1 added [ 272.670173] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 272.676559] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.684519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.692492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.704157] 8021q: adding VLAN 0 to HW filter on device batadv0 08:10:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 272.734418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 272.748253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 272.771257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.778982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.789204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 272.797285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 272.829299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.840402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.856324] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.862816] bridge0: port 1(bridge_slave_0) entered forwarding state 08:10:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 272.873825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 272.889845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.898084] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 272.907202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.975524] device hsr_slave_0 entered promiscuous mode [ 273.014965] device hsr_slave_1 entered promiscuous mode [ 273.065500] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 273.077663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.086136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.094595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.106416] bridge0: port 2(bridge_slave_1) entered blocking state 08:10:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:10:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 273.112853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.124251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 273.135871] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 273.145609] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 273.153194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.172829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 273.183836] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 273.192206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.205171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.212993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.239027] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 273.258127] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 273.265792] 8021q: adding VLAN 0 to HW filter on device team0 08:10:15 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 273.288180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 273.298975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 273.308735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.317919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.331001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.338904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.351196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.360865] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 273.373451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.382774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.391391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 273.398490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.407318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.430781] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.437684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.452993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.462031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.474961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.489002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 273.504053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 273.517280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.526692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.536727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.546865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.554747] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.561169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.577782] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 273.584367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.593691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 273.605487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.617491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 273.627970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 273.651694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.659630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.668620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.677069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.688122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 273.698223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.710801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.722323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 273.729963] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 273.742808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.749202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.757435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.769668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 273.784316] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 273.801222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.808985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.818711] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 273.825816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.835286] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 273.845950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.853631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.862911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 273.869030] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.877067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.915351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.934766] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 273.942150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.954913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.964010] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.970427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.980763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 273.988653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.996622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.004861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.012612] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.018989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.029194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 274.041062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 274.048035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.056133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.066116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.078413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 274.094134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.107488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.116157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.128228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 274.138982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.147670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.157500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 274.169011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 274.181110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.194577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.202340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.210538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.220560] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 274.226664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.265410] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 274.280901] 8021q: adding VLAN 0 to HW filter on device batadv0 08:10:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000000080)=""/99, 0x63, 0x0) close(r0) 08:10:16 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:10:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x1c0c) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x1, 0x10001}, @mss={0x2, 0xbe}, @timestamp, @window={0x3, 0x45ff, 0x1}, @mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x6ce2}, @timestamp, @mss], 0x9) 08:10:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0xb0, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0xb0}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91cd800f0124eda133fa20430fbafce842f66188d067f2412d00000000e1801c65ab39ff5bf9e2f9d7c442d1b6265e090000bac7bae4c6d18f26088f65240000dbc46440983af4ad5f48140e660f76cc433d0020d76ec863fa43c4a19b5da200800000f043835a00a9f340ae65657c7c730f8052043822de0ff8a10000000026460f740346d9f880ba0000000083fee7df0804f4c441a5609c8ba800000054838b") 08:10:16 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) [ 275.102003] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 275.139870] vivid-000: kernel_thread() failed 08:10:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38d, 0x0, 0x2}]}) 08:10:17 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) 08:10:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000000080)=""/99, 0x63, 0x0) close(r0) 08:10:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000000080)=""/99, 0x63, 0x0) close(r0) 08:10:17 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) 08:10:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38d, 0x0, 0x2}]}) 08:10:17 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x521001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x4) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = msgget(0x3, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/183) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)=""/195) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000980)}], 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='bpf\x00', 0xd404, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 08:10:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000000080)=""/99, 0x63, 0x0) close(r0) [ 275.436430] BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [ 275.444615] IP: kthread_stop+0x4c/0x650 [ 275.448643] PGD 7f3db067 P4D 7f3db067 PUD 95438067 PMD 0 [ 275.454219] Oops: 0002 [#1] PREEMPT SMP KASAN [ 275.458740] Modules linked in: [ 275.461951] CPU: 1 PID: 7327 Comm: syz-executor.0 Not tainted 4.14.116 #6 [ 275.468885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.478424] task: ffff88807c2260c0 task.stack: ffff888057ed0000 [ 275.484502] RIP: 0010:kthread_stop+0x4c/0x650 [ 275.489196] RSP: 0018:ffff888057ed7b88 EFLAGS: 00010212 [ 275.494586] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90006e45000 [ 275.501869] RDX: 0000000000000468 RSI: ffffffff813e6c9c RDI: 0000000000000282 [ 275.509152] RBP: ffff888057ed7ba8 R08: ffff88807c2260c0 R09: 0000000000000000 [ 275.516457] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 275.523758] R13: ffff88809f1a3d38 R14: ffff8880950a0970 R15: ffff8880950a0968 [ 275.531043] FS: 00007f0a93ff8700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 275.539371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.545274] CR2: 0000000000000020 CR3: 00000000a5d39000 CR4: 00000000001426e0 [ 275.552554] Call Trace: [ 275.555223] sdr_cap_stop_streaming+0x1fc/0x320 [ 275.559948] ? sdr_cap_buf_queue+0x230/0x230 [ 275.564740] __vb2_queue_cancel+0xa6/0x8a0 [ 275.569072] ? lock_downgrade+0x6e0/0x6e0 [ 275.573249] vb2_core_streamoff+0x52/0x110 [ 275.577507] __vb2_cleanup_fileio+0x78/0x150 [ 275.581933] vb2_core_queue_release+0x1d/0x80 [ 275.586462] _vb2_fop_release+0x1cf/0x2a0 [ 275.590623] vb2_fop_release+0x75/0xc0 [ 275.594527] vivid_fop_release+0x180/0x3f0 [ 275.598770] ? vivid_remove+0x3d0/0x3d0 [ 275.602757] ? dev_debug_store+0xe0/0xe0 [ 275.606827] v4l2_release+0xfb/0x190 [ 275.610609] __fput+0x277/0x7a0 [ 275.613896] ____fput+0x16/0x20 [ 275.617245] task_work_run+0x119/0x190 [ 275.621199] exit_to_usermode_loop+0x1da/0x220 [ 275.625798] do_syscall_64+0x4a9/0x630 [ 275.629692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.634593] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.639806] RIP: 0033:0x458da9 [ 275.643081] RSP: 002b:00007f0a93ff7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 275.650803] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000458da9 [ 275.658086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 275.665376] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 275.672740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a93ff86d4 [ 275.680109] R13: 00000000004f6e92 R14: 00000000004d01b8 R15: 00000000ffffffff [ 275.687397] Code: 00 65 8b 1d b7 14 c3 7e 83 fb 3f 0f 87 63 04 00 00 e8 19 9d 1e 00 89 db 48 0f a3 1d 0f 7a e6 06 0f 82 4c 03 00 00 e8 04 9d 1e 00 41 ff 44 24 20 49 8d 7c 24 24 48 b8 00 00 00 00 00 fc ff df [ 275.707322] RIP: kthread_stop+0x4c/0x650 RSP: ffff888057ed7b88 [ 275.713407] CR2: 0000000000000020 [ 275.718441] kobject: 'loop3' (ffff8880a49da0a0): kobject_uevent_env 08:10:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38d, 0x0, 0x2}]}) [ 275.740147] kobject: 'loop3' (ffff8880a49da0a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 275.765935] kobject: 'loop5' (ffff8880a4aa41a0): kobject_uevent_env [ 275.783069] kobject: 'loop5' (ffff8880a4aa41a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 275.796230] kobject: 'kvm' (ffff888219f87610): kobject_uevent_env [ 275.811042] kobject: 'kvm' (ffff888219f87610): fill_kobj_path: path = '/devices/virtual/misc/kvm' 08:10:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000100)="b13691cd806969ef69dc00d9c4a2d1920cec38c4ab39fd5bf9e2f9e2c7c7e4c653fb0fc4014cb63a3af4a95ff9c44149f2160f01c4c421fc51c12aeac461a1f8a100000021c4e189d8a42973858e2c0f186746f3400faee47e7c5726400f0d18c401fe5ff6e7df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") syz_execute_func(&(0x7f0000000800)="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") [ 275.846395] kobject: 'kvm' (ffff888219f87610): kobject_uevent_env [ 275.848889] kobject: 'loop3' (ffff8880a49da0a0): kobject_uevent_env [ 275.865942] kobject: 'loop3' (ffff8880a49da0a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 275.872695] kobject: 'kvm' (ffff888219f87610): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 275.895802] kobject: 'kvm' (ffff888219f87610): kobject_uevent_env [ 275.924570] kobject: 'kvm' (ffff888219f87610): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 275.935567] kobject: 'loop2' (ffff8880a49a97e0): kobject_uevent_env [ 275.950170] kobject: 'loop2' (ffff8880a49a97e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 275.960128] audit: type=1400 audit(1557216617.689:40): avc: denied { syslog } for pid=7341 comm="syz-executor.3" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 08:10:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0xb0, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0xb0}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91cd800f0124eda133fa20430fbafce842f66188d067f2412d00000000e1801c65ab39ff5bf9e2f9d7c442d1b6265e090000bac7bae4c6d18f26088f65240000dbc46440983af4ad5f48140e660f76cc433d0020d76ec863fa43c4a19b5da200800000f043835a00a9f340ae65657c7c730f8052043822de0ff8a10000000026460f740346d9f880ba0000000083fee7df0804f4c441a5609c8ba800000054838b") 08:10:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 08:10:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38d, 0x0, 0x2}]}) 08:10:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa00000000e23f0003000001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38d, 0x0, 0x2}]}) [ 276.003823] kobject: 'loop1' (ffff8880a494f760): kobject_uevent_env [ 276.012775] kobject: 'loop1' (ffff8880a494f760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 276.024791] kobject: 'loop5' (ffff8880a4aa41a0): kobject_uevent_env [ 276.031353] kobject: 'loop5' (ffff8880a4aa41a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 276.044041] kobject: 'loop4' (ffff8880a4a2c120): kobject_uevent_env [ 276.058647] kobject: 'loop4' (ffff8880a4a2c120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 276.073657] kobject: 'kvm' (ffff888219f87610): kobject_uevent_env [ 276.095732] kobject: 'kvm' (ffff888219f87610): kobject_uevent_env [ 276.114432] kobject: 'kvm' (ffff888219f87610): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 276.128644] ---[ end trace bca887ae9914f60c ]--- [ 276.134168] Kernel panic - not syncing: Fatal exception [ 276.138374] kobject: 'kvm' (ffff888219f87610): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 276.140760] Kernel Offset: disabled [ 276.153420] Rebooting in 86400 seconds..