[ 39.024841][ T26] audit: type=1800 audit(1556679980.986:26): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 39.054773][ T26] audit: type=1800 audit(1556679980.986:27): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 39.093888][ T26] audit: type=1800 audit(1556679980.986:28): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.805902][ T26] audit: type=1800 audit(1556679981.786:29): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts. 2019/05/01 03:06:31 fuzzer started 2019/05/01 03:06:33 dialing manager at 10.128.0.26:34869 2019/05/01 03:06:33 syscalls: 2440 2019/05/01 03:06:33 code coverage: enabled 2019/05/01 03:06:33 comparison tracing: enabled 2019/05/01 03:06:33 extra coverage: extra coverage is not supported by the kernel 2019/05/01 03:06:33 setuid sandbox: enabled 2019/05/01 03:06:33 namespace sandbox: enabled 2019/05/01 03:06:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/01 03:06:33 fault injection: enabled 2019/05/01 03:06:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/01 03:06:33 net packet injection: enabled 2019/05/01 03:06:33 net device setup: enabled 03:08:21 executing program 0: syzkaller login: [ 159.958616][ T7925] IPVS: ftp: loaded support on port[0] = 21 03:08:22 executing program 1: [ 160.127805][ T7925] chnl_net:caif_netlink_parms(): no params data found [ 160.191587][ T7928] IPVS: ftp: loaded support on port[0] = 21 [ 160.203414][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.211916][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.221500][ T7925] device bridge_slave_0 entered promiscuous mode [ 160.232987][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.240721][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.249335][ T7925] device bridge_slave_1 entered promiscuous mode [ 160.301920][ T7925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.329623][ T7925] bond0: Enslaving bond_slave_1 as an active interface with an up link 03:08:22 executing program 2: [ 160.374602][ T7925] team0: Port device team_slave_0 added [ 160.430878][ T7925] team0: Port device team_slave_1 added [ 160.475122][ T7928] chnl_net:caif_netlink_parms(): no params data found [ 160.533946][ T7931] IPVS: ftp: loaded support on port[0] = 21 [ 160.576648][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.584939][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.593278][ T7928] device bridge_slave_0 entered promiscuous mode 03:08:22 executing program 3: [ 160.650057][ T7925] device hsr_slave_0 entered promiscuous mode [ 160.687108][ T7925] device hsr_slave_1 entered promiscuous mode [ 160.750476][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.761036][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.769367][ T7928] device bridge_slave_1 entered promiscuous mode [ 160.786624][ T7933] IPVS: ftp: loaded support on port[0] = 21 [ 160.858147][ T7928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.878670][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.885931][ T7925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.893807][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.900943][ T7925] bridge0: port 1(bridge_slave_0) entered forwarding state 03:08:22 executing program 4: [ 160.914787][ T7928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.996334][ T7928] team0: Port device team_slave_0 added [ 161.060457][ T7928] team0: Port device team_slave_1 added [ 161.153127][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.161660][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.209680][ T7938] IPVS: ftp: loaded support on port[0] = 21 [ 161.236598][ T7925] 8021q: adding VLAN 0 to HW filter on device bond0 03:08:23 executing program 5: [ 161.254432][ T7931] chnl_net:caif_netlink_parms(): no params data found [ 161.310682][ T7928] device hsr_slave_0 entered promiscuous mode [ 161.397300][ T7928] device hsr_slave_1 entered promiscuous mode [ 161.474095][ T7933] chnl_net:caif_netlink_parms(): no params data found [ 161.537244][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.544434][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.552735][ T7931] device bridge_slave_0 entered promiscuous mode [ 161.562859][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.570002][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.578213][ T7931] device bridge_slave_1 entered promiscuous mode [ 161.603073][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.611681][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.622634][ T7925] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.625167][ T7940] IPVS: ftp: loaded support on port[0] = 21 [ 161.662697][ T7931] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 161.672115][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.681171][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.690061][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.697182][ T7934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.704948][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.714450][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.722941][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.730041][ T7934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.748861][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.755985][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.766237][ T7933] device bridge_slave_0 entered promiscuous mode [ 161.776209][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.783398][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.791248][ T7933] device bridge_slave_1 entered promiscuous mode [ 161.799812][ T7931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 161.817077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.885738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.895340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.904372][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.912878][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.921657][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.930582][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.939047][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.948349][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.961922][ T7925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.973839][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.994020][ T7931] team0: Port device team_slave_0 added [ 162.001607][ T7931] team0: Port device team_slave_1 added [ 162.010329][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.018922][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.041891][ T7933] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.053861][ T7933] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.150091][ T7931] device hsr_slave_0 entered promiscuous mode [ 162.197164][ T7931] device hsr_slave_1 entered promiscuous mode [ 162.276333][ T7933] team0: Port device team_slave_0 added [ 162.283859][ T7933] team0: Port device team_slave_1 added [ 162.324736][ T7925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.490196][ T7933] device hsr_slave_0 entered promiscuous mode [ 162.540571][ T7933] device hsr_slave_1 entered promiscuous mode [ 162.614608][ T7938] chnl_net:caif_netlink_parms(): no params data found [ 162.690748][ T7940] chnl_net:caif_netlink_parms(): no params data found [ 162.710551][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0 03:08:24 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 162.735788][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.754172][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.763834][ T7938] device bridge_slave_0 entered promiscuous mode [ 162.795847][ T7928] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.808837][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.819988][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.837315][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state 03:08:24 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:24 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 162.844866][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.858337][ T7938] device bridge_slave_1 entered promiscuous mode 03:08:24 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 162.928831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.938157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.953436][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.960604][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 03:08:25 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 162.985176][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.013976][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.026414][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 03:08:25 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 163.046201][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.053390][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.081521][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0 03:08:25 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 163.098148][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.108476][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.118409][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.137658][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.146607][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.156280][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.166416][ T7940] device bridge_slave_0 entered promiscuous mode [ 163.181503][ T7938] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.192382][ T7938] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.218237][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.226498][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.235412][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.243970][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.253132][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.261977][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.270501][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.279205][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.286270][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.295059][ T7940] device bridge_slave_1 entered promiscuous mode [ 163.312146][ T7931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.322695][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.331244][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.354869][ T7933] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.364186][ T7928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.384604][ T7940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.394313][ T7938] team0: Port device team_slave_0 added [ 163.401911][ T7938] team0: Port device team_slave_1 added [ 163.415662][ T7940] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.435598][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.445285][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.459881][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.492487][ T7931] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.500497][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.515099][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.523797][ T2870] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.530866][ T2870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.539172][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.547875][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.556198][ T2870] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.563302][ T2870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.571326][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.640163][ T7938] device hsr_slave_0 entered promiscuous mode [ 163.697376][ T7938] device hsr_slave_1 entered promiscuous mode [ 163.758354][ T7940] team0: Port device team_slave_0 added [ 163.774761][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.783494][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.792326][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.799471][ T7942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.807399][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.815898][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.825185][ T7942] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.832309][ T7942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.839955][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.848852][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.858085][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.877583][ T7940] team0: Port device team_slave_1 added 03:08:25 executing program 1: [ 163.920396][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.950889][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.962675][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.971601][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.980615][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.992522][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.009114][ T7933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.019942][ T7933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.070467][ T7940] device hsr_slave_0 entered promiscuous mode [ 164.117271][ T7940] device hsr_slave_1 entered promiscuous mode [ 164.177189][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.185216][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.193839][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.202291][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.211123][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.219769][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.228289][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.236557][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.244643][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.274255][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.284796][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.293436][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.302651][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.311134][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.319986][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.329444][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.375469][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.405910][ T7931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.421864][ T7938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.460802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.475019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.492911][ T7938] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.557361][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.569939][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.578840][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.585910][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.594135][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.602770][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.611311][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.618432][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.626666][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.638821][ T7940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.659857][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.668579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.676440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.699805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:08:26 executing program 2: 03:08:26 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 164.720189][ T7940] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.736172][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.763951][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.798316][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.814407][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.837999][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.846536][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.868869][ T7938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.880905][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.891459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.902272][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.910799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.919291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.928219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.936560][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.943701][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.951679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.980136][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.989273][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.998445][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.005512][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.013791][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.022573][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.049759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.060638][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.069323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.079015][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.087850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.096148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.105915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.124306][ T7938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.142168][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.155399][ T7941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.168833][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.203733][ T7940] 8021q: adding VLAN 0 to HW filter on device batadv0 03:08:27 executing program 4: 03:08:27 executing program 5: 03:08:27 executing program 1: 03:08:27 executing program 3: 03:08:27 executing program 2: 03:08:27 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:27 executing program 4: 03:08:27 executing program 1: 03:08:27 executing program 2: 03:08:27 executing program 4: 03:08:27 executing program 5: 03:08:27 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:27 executing program 3: 03:08:27 executing program 5: 03:08:27 executing program 1: 03:08:27 executing program 2: 03:08:27 executing program 4: 03:08:27 executing program 0: clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:27 executing program 5: 03:08:27 executing program 1: 03:08:27 executing program 3: 03:08:27 executing program 2: 03:08:27 executing program 0: clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:27 executing program 4: 03:08:27 executing program 5: 03:08:27 executing program 3: 03:08:27 executing program 1: 03:08:27 executing program 2: 03:08:28 executing program 4: 03:08:28 executing program 5: 03:08:28 executing program 0: clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:28 executing program 1: 03:08:28 executing program 2: 03:08:28 executing program 3: 03:08:28 executing program 5: 03:08:28 executing program 4: 03:08:28 executing program 3: 03:08:28 executing program 1: 03:08:28 executing program 2: 03:08:28 executing program 0: creat(0x0, 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:28 executing program 4: 03:08:28 executing program 0: creat(0x0, 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:28 executing program 5: 03:08:28 executing program 2: 03:08:28 executing program 1: 03:08:28 executing program 4: 03:08:28 executing program 3: 03:08:28 executing program 0: creat(0x0, 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:28 executing program 1: 03:08:28 executing program 5: 03:08:28 executing program 2: 03:08:28 executing program 4: 03:08:28 executing program 3: 03:08:28 executing program 1: 03:08:28 executing program 4: 03:08:28 executing program 5: 03:08:28 executing program 2: 03:08:28 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:28 executing program 1: 03:08:28 executing program 3: 03:08:29 executing program 5: 03:08:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 03:08:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x80000000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000380)={@local}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0xffffffffffffff58) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100, 0x0, 0x3c396]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) 03:08:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000280)=0x78) 03:08:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt:$\xe7\xed\xfa\x16r<|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1!$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e\xff\xff\xff\xff\xff\xff\xff\xfe,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') sendfile(r0, r1, 0x0, 0x1) 03:08:29 executing program 5: recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r0, 0xc008240a, 0x70effb) socket$kcm(0x10, 0x0, 0x10) [ 167.197977][ C0] hrtimer: interrupt took 27752 ns 03:08:29 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_delroute={0x30, 0x19, 0x301, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) 03:08:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000080)=@rc={0x1f, {0x0, 0x0, 0x0, 0x9}}, 0x3d) 03:08:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000087000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x0) 03:08:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f00000000c0)="cbc96c06d8d7516de760fdba6da4060c750be993822dc770b34cfc177239ce", 0x1f, 0x24000040, 0x0, 0x0) 03:08:29 executing program 2: clone(0x403502001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000001c0)="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") 03:08:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSARP(r0, 0x8981, 0x0) 03:08:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x2000000ffffff8d, 0x0, &(0x7f0000001500)=[{&(0x7f0000001380), 0x55911c}], 0x1}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffffffffff46}, {0x0, 0x0, 0x0}], 0x492492492492494, 0x0) 03:08:29 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:29 executing program 3: seccomp(0x1, 0xa, &(0x7f0000001980)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:08:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000380)={@multicast2, @local}, 0xc) [ 167.700493][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 167.700516][ T26] audit: type=1326 audit(1556680109.686:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8205 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 03:08:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000000), 0x40600) 03:08:29 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:08:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:29 executing program 1: syz_open_dev$admmidi(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="4e535ac4bbdd090aa5a5234455efc8422eedd5e7c53a51dffab98eb991b2973bcca6000000007bcf3ef705be90e231b44d350da2890e3ca2fed43861420465c6a33f0ff8fc32f7a60189a3c65e36da4dc702c6f104b98c1c8c1f5520e55cd477ecd4400855c78fabe8b71c196b5865c87c24549a15d8a5c8b4eea0c8761baf", 0x7f, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x114}}], 0xaf7, 0x2, 0x0) 03:08:29 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 167.909370][ T8238] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 03:08:30 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 168.008790][ T8241] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.060375][ T8238] kasan: CONFIG_KASAN_INLINE enabled [ 168.065900][ T8238] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 168.073993][ T8238] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 168.080953][ T8238] CPU: 0 PID: 8238 Comm: syz-executor.5 Not tainted 5.1.0-rc7-next-20190430 #33 [ 168.089985][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.100078][ T8238] RIP: 0010:vcpu_enter_guest+0xbcd/0x5fb0 [ 168.105819][ T8238] Code: 48 c1 ea 03 80 3c 02 00 0f 85 6f 48 00 00 49 8b 9f b0 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 39 48 00 00 8b 5b 78 31 ff 89 [ 168.125442][ T8238] RSP: 0018:ffff888062737a00 EFLAGS: 00010006 [ 168.128416][ T3879] kobject: 'loop4' (000000000b17dbfa): kobject_uevent_env [ 168.131531][ T8238] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90010882000 [ 168.131539][ T8238] RDX: 000000000000000f RSI: ffffffff810cd7b2 RDI: 0000000000000078 [ 168.131547][ T8238] RBP: ffff888062737b10 R08: ffff88806272a580 R09: ffffed1015d06be0 [ 168.131555][ T8238] R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: ffff88806268806c [ 168.131562][ T8238] R13: 0000000000000001 R14: ffff888062688070 R15: ffff888062688040 [ 168.131585][ T8238] FS: 00007f3f3265f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 168.155954][ T3879] kobject: 'loop4' (000000000b17dbfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 168.162651][ T8238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.162659][ T8238] CR2: 000000000070d158 CR3: 00000000916cf000 CR4: 00000000001426f0 [ 168.162668][ T8238] Call Trace: [ 168.162696][ T8238] ? emulator_read_emulated+0x50/0x50 [ 168.162711][ T8238] ? lock_acquire+0x16f/0x3f0 [ 168.162725][ T8238] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 168.162742][ T8238] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 168.162756][ T8238] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 168.162773][ T8238] kvm_vcpu_ioctl+0x4dc/0xf90 [ 168.162796][ T8238] ? kvm_set_memory_region+0x50/0x50 [ 168.204236][ T3879] kobject: 'loop1' (0000000053ce89de): kobject_uevent_env [ 168.204428][ T8238] ? tomoyo_path_number_perm+0x263/0x520 [ 168.220772][ T3879] kobject: 'loop1' (0000000053ce89de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 168.221082][ T8238] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 168.281767][ T8238] ? __fget+0x35a/0x550 [ 168.285926][ T8238] ? kvm_set_memory_region+0x50/0x50 [ 168.291227][ T8238] do_vfs_ioctl+0xd6e/0x1390 [ 168.295833][ T8238] ? ioctl_preallocate+0x210/0x210 [ 168.300976][ T8238] ? __fget+0x381/0x550 [ 168.305142][ T8238] ? ksys_dup3+0x3e0/0x3e0 [ 168.309585][ T8238] ? nsecs_to_jiffies+0x30/0x30 [ 168.314455][ T8238] ? tomoyo_file_ioctl+0x23/0x30 [ 168.319388][ T8238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.325621][ T8238] ? security_file_ioctl+0x93/0xc0 [ 168.330728][ T8238] ksys_ioctl+0xab/0xd0 [ 168.334884][ T8238] __x64_sys_ioctl+0x73/0xb0 [ 168.339479][ T8238] do_syscall_64+0x103/0x670 [ 168.344090][ T8238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.349968][ T8238] RIP: 0033:0x458da9 [ 168.353852][ T8238] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.373442][ T8238] RSP: 002b:00007f3f3265ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.381844][ T8238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 168.389818][ T8238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 168.397779][ T8238] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 168.405742][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f3265f6d4 [ 168.413723][ T8238] R13: 00000000004c1d42 R14: 00000000004d4550 R15: 00000000ffffffff [ 168.421703][ T8238] Modules linked in: [ 168.425598][ T8238] ---[ end trace a787d9666ca70b63 ]--- [ 168.431052][ T8238] RIP: 0010:vcpu_enter_guest+0xbcd/0x5fb0 [ 168.436768][ T8238] Code: 48 c1 ea 03 80 3c 02 00 0f 85 6f 48 00 00 49 8b 9f b0 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 78 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 39 48 00 00 8b 5b 78 31 ff 89 [ 168.456376][ T8238] RSP: 0018:ffff888062737a00 EFLAGS: 00010006 [ 168.462459][ T8238] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90010882000 [ 168.470440][ T8238] RDX: 000000000000000f RSI: ffffffff810cd7b2 RDI: 0000000000000078 [ 168.478422][ T8238] RBP: ffff888062737b10 R08: ffff88806272a580 R09: ffffed1015d06be0 [ 168.486405][ T8238] R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: ffff88806268806c [ 168.494389][ T8238] R13: 0000000000000001 R14: ffff888062688070 R15: ffff888062688040 [ 168.502372][ T8238] FS: 00007f3f3265f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 168.511309][ T8238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.517901][ T8238] CR2: 000000000070d158 CR3: 00000000916cf000 CR4: 00000000001426f0 [ 168.525883][ T8238] Kernel panic - not syncing: Fatal exception [ 168.532999][ T8238] Kernel Offset: disabled [ 168.537338][ T8238] Rebooting in 86400 seconds..