[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.629909] random: sshd: uninitialized urandom read (32 bytes read) [ 32.942916] kauditd_printk_skb: 9 callbacks suppressed [ 32.942924] audit: type=1400 audit(1568113704.304:35): avc: denied { map } for pid=6757 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.002776] random: sshd: uninitialized urandom read (32 bytes read) [ 33.597916] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. [ 39.196907] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/10 11:08:30 fuzzer started [ 39.386351] audit: type=1400 audit(1568113710.744:36): avc: denied { map } for pid=6767 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.028881] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/10 11:08:32 dialing manager at 10.128.0.105:33975 2019/09/10 11:08:38 syscalls: 2466 2019/09/10 11:08:38 code coverage: enabled 2019/09/10 11:08:38 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/10 11:08:38 extra coverage: extra coverage is not supported by the kernel 2019/09/10 11:08:38 setuid sandbox: enabled 2019/09/10 11:08:38 namespace sandbox: enabled 2019/09/10 11:08:38 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/10 11:08:38 fault injection: enabled 2019/09/10 11:08:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/10 11:08:38 net packet injection: enabled 2019/09/10 11:08:38 net device setup: enabled [ 47.985889] random: crng init done 11:09:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) socket$inet(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x202000, 0x0) 11:09:42 executing program 0: r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b\xc5\xd1Oe YS\xb2\xd9\xfbT\xce&\xb2\xe9\xaa\xc1\xdf\x1cfi\xb1N\vt\xc9e\xe4\tT\x9a^\x9a\x05*\x8a1\xa0I\r\xc7\x01(-\x15\a\xe9\x11s\xd2\xbe\xad(W\xee\xdf\xb3\xce\v\x14Q\x06\xe2J\x17\xe8_\xb4\xe5\x19}\x1a\x98\x99\xa7\t\x8a\xbf\rl\xa7=\x9e\xfa>]dQ?\xf92N\x8a\xde\x19o\xb0\xe2\xba\x93-\xe1\xe9d\x87\xaf\x05\xcf\xf7\xa7\xf6i\xbb.6F\xcc\xcb\xa3t\xb0z\t\xf3\xaa7T\xbezD6A\x9f\xb8\xb2\x84\x15\x19}\x80', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$binfmt_elf32(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x7) 11:09:42 executing program 1: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@sg0='/dev/sg0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='ubifs\x00', 0x0, 0x0) 11:09:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@remote}, 0x0, @in6=@dev}]}]}, 0xfc}, 0x8}, 0x0) 11:09:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) 11:09:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_open_dev$usb(0x0, 0x40000fffffe, 0x80002) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x3230000, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x7}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x7, 0x9}, &(0x7f00000000c0)=0xfffffffffffffe8c) [ 110.733170] audit: type=1400 audit(1568113782.094:37): avc: denied { map } for pid=6784 comm="syz-executor.2" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13759 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 111.210924] IPVS: ftp: loaded support on port[0] = 21 [ 112.039593] chnl_net:caif_netlink_parms(): no params data found [ 112.051527] IPVS: ftp: loaded support on port[0] = 21 [ 112.077012] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.083892] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.090961] device bridge_slave_0 entered promiscuous mode [ 112.097751] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.104375] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.111548] device bridge_slave_1 entered promiscuous mode [ 112.127605] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.136557] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.152514] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.160225] team0: Port device team_slave_0 added [ 112.167295] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.174373] team0: Port device team_slave_1 added [ 112.184381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 112.195714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 112.281821] device hsr_slave_0 entered promiscuous mode [ 112.320440] device hsr_slave_1 entered promiscuous mode [ 112.382337] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 112.393240] IPVS: ftp: loaded support on port[0] = 21 [ 112.401032] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 112.447504] chnl_net:caif_netlink_parms(): no params data found [ 112.459765] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.466471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.473474] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.479836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.533389] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.539814] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.546976] device bridge_slave_0 entered promiscuous mode [ 112.554085] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.561027] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.568394] device bridge_slave_1 entered promiscuous mode [ 112.588424] IPVS: ftp: loaded support on port[0] = 21 [ 112.608205] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.626783] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.689669] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.696927] team0: Port device team_slave_0 added [ 112.702586] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.709723] team0: Port device team_slave_1 added [ 112.717365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 112.726647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 112.744407] chnl_net:caif_netlink_parms(): no params data found [ 112.812845] device hsr_slave_0 entered promiscuous mode [ 112.850349] device hsr_slave_1 entered promiscuous mode [ 112.932575] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 112.951551] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 112.965530] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 112.971655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.992197] IPVS: ftp: loaded support on port[0] = 21 [ 113.007418] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.014308] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.021847] device bridge_slave_0 entered promiscuous mode [ 113.028405] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.034933] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.042112] device bridge_slave_1 entered promiscuous mode [ 113.053497] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.060083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.066887] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.073486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.085204] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.092547] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.099293] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.107577] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 113.127391] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.134238] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.151612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 113.161625] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 113.183038] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 113.190343] team0: Port device team_slave_0 added [ 113.196207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 113.203498] team0: Port device team_slave_1 added [ 113.208684] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.221967] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 113.229578] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 113.235989] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.244044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.258331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.265337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.333008] device hsr_slave_0 entered promiscuous mode [ 113.370318] device hsr_slave_1 entered promiscuous mode [ 113.413848] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 113.421608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 113.428833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.437232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.445026] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.451404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.476737] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 113.489120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.496484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.504586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.512810] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.519135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.545014] chnl_net:caif_netlink_parms(): no params data found [ 113.566131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 113.576391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.600523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 113.609526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.623795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 113.630708] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.637092] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.644506] device bridge_slave_0 entered promiscuous mode [ 113.644787] IPVS: ftp: loaded support on port[0] = 21 [ 113.656993] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.663560] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.670900] device bridge_slave_1 entered promiscuous mode [ 113.678152] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 113.685830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.694207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.701807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.737247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 113.756044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.763144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.771299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.779995] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 113.792876] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 113.807266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 113.816103] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.829174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.837183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.855612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 113.866165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.876986] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 113.883667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.895143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.902997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.913799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 113.921133] team0: Port device team_slave_0 added [ 113.926840] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 113.938196] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 113.945052] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.956738] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 113.964167] team0: Port device team_slave_1 added [ 113.969584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.976580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.989729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 114.022218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 114.032731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.042540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.050137] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.056469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.065732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 114.076634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 114.087066] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 114.096878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.106488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.114418] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.120894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.130378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 114.139925] chnl_net:caif_netlink_parms(): no params data found [ 114.159426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.170167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 114.179462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 114.204133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.252251] device hsr_slave_0 entered promiscuous mode [ 114.270321] device hsr_slave_1 entered promiscuous mode [ 114.310925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.320853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.328388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.338271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 114.356718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 114.364394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.371655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.379615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.388987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 114.402593] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.408992] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.416682] device bridge_slave_0 entered promiscuous mode [ 114.424137] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 114.431770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.439137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.449261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 114.459935] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.469898] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.478055] device bridge_slave_1 entered promiscuous mode [ 114.505123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.513398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.524573] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 114.533598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.545222] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 114.555329] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.564841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.577166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 114.602263] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.633283] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 114.642278] team0: Port device team_slave_0 added [ 114.650043] hrtimer: interrupt took 41865 ns 11:09:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) [ 114.684659] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 114.692303] team0: Port device team_slave_1 added [ 114.698420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 114.706184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 114.714961] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 114.726917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.760318] chnl_net:caif_netlink_parms(): no params data found [ 114.774644] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.804831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.818066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.826832] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 114.833630] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.882516] device hsr_slave_0 entered promiscuous mode [ 114.940472] device hsr_slave_1 entered promiscuous mode 11:09:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) [ 115.004646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 115.013852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.023226] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 115.031023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.051641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.059348] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.065763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.075361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 115.085527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 115.103649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.110818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.119054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.127047] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.133452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.143148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 115.161109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.170394] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 115.177566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 115.187321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 115.196831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 115.211893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.219728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.229453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.238410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.249685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.259911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.272927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 115.284408] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.291745] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.299123] device bridge_slave_0 entered promiscuous mode [ 115.313081] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 115.321085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 115.327232] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.337674] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.345767] device bridge_slave_1 entered promiscuous mode [ 115.356497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 11:09:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000027f0000010000000003000000100000ffff000001d8e279347c868f4beeac1414bb7869a2174446b13f9249b82bba67f53438c217ece724e30888382428e99743b75bd8b1d35633687bfed3d7ab6c6c24e5c532ecf72af5afec83ac390f55f1556048be6f0bfdcc39cce18856333d4183bdc8636010506b082eb5257479b515cf855ec9089a8fc2f02efeb100c4189a4b289434a27e857f166f05d859972deac96a206a2d7aa47a091df1c740006f1fec192d5d5f8c7792e2a2283a9017897824bec8a01b29fb19d0545ab1c0b512985a4a0a3141123d6e7cd51c5c9324474c9489d0b5f273516762a86db9a96ae5740a228f3103b839c8b14a13b36dd220f4f3f1997511054c448f2606e56f6aa519002eab8130c352fb93466cba20cf61907735b07a5b94bcc04ed9e0833671f8a4746fcb426a8ae070040f4c"], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) [ 115.366625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.386299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.397397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.407383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 115.421188] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 115.427277] 8021q: adding VLAN 0 to HW filter on device team0 11:09:46 executing program 0: r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b\xc5\xd1Oe YS\xb2\xd9\xfbT\xce&\xb2\xe9\xaa\xc1\xdf\x1cfi\xb1N\vt\xc9e\xe4\tT\x9a^\x9a\x05*\x8a1\xa0I\r\xc7\x01(-\x15\a\xe9\x11s\xd2\xbe\xad(W\xee\xdf\xb3\xce\v\x14Q\x06\xe2J\x17\xe8_\xb4\xe5\x19}\x1a\x98\x99\xa7\t\x8a\xbf\rl\xa7=\x9e\xfa>]dQ?\xf92N\x8a\xde\x19o\xb0\xe2\xba\x93-\xe1\xe9d\x87\xaf\x05\xcf\xf7\xa7\xf6i\xbb.6F\xcc\xcb\xa3t\xb0z\t\xf3\xaa7T\xbezD6A\x9f\xb8\xb2\x84\x15\x19}\x80', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$binfmt_elf32(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x7) [ 115.465408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.480494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.494874] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 115.501322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.511030] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 115.530733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 115.540798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 115.560620] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 115.570859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.578600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.586753] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.593135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.601375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:09:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) [ 115.618792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 115.638505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.656150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.665568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 11:09:47 executing program 0: r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b\xc5\xd1Oe YS\xb2\xd9\xfbT\xce&\xb2\xe9\xaa\xc1\xdf\x1cfi\xb1N\vt\xc9e\xe4\tT\x9a^\x9a\x05*\x8a1\xa0I\r\xc7\x01(-\x15\a\xe9\x11s\xd2\xbe\xad(W\xee\xdf\xb3\xce\v\x14Q\x06\xe2J\x17\xe8_\xb4\xe5\x19}\x1a\x98\x99\xa7\t\x8a\xbf\rl\xa7=\x9e\xfa>]dQ?\xf92N\x8a\xde\x19o\xb0\xe2\xba\x93-\xe1\xe9d\x87\xaf\x05\xcf\xf7\xa7\xf6i\xbb.6F\xcc\xcb\xa3t\xb0z\t\xf3\xaa7T\xbezD6A\x9f\xb8\xb2\x84\x15\x19}\x80', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$binfmt_elf32(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x7) [ 115.689768] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.696214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.748337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 115.767577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.779593] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 11:09:47 executing program 0: r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b\xc5\xd1Oe YS\xb2\xd9\xfbT\xce&\xb2\xe9\xaa\xc1\xdf\x1cfi\xb1N\vt\xc9e\xe4\tT\x9a^\x9a\x05*\x8a1\xa0I\r\xc7\x01(-\x15\a\xe9\x11s\xd2\xbe\xad(W\xee\xdf\xb3\xce\v\x14Q\x06\xe2J\x17\xe8_\xb4\xe5\x19}\x1a\x98\x99\xa7\t\x8a\xbf\rl\xa7=\x9e\xfa>]dQ?\xf92N\x8a\xde\x19o\xb0\xe2\xba\x93-\xe1\xe9d\x87\xaf\x05\xcf\xf7\xa7\xf6i\xbb.6F\xcc\xcb\xa3t\xb0z\t\xf3\xaa7T\xbezD6A\x9f\xb8\xb2\x84\x15\x19}\x80', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$binfmt_elf32(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x7) [ 115.797640] team0: Port device team_slave_0 added [ 115.805471] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.815810] team0: Port device team_slave_1 added [ 115.823594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 115.833375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 11:09:47 executing program 2: r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b\xc5\xd1Oe YS\xb2\xd9\xfbT\xce&\xb2\xe9\xaa\xc1\xdf\x1cfi\xb1N\vt\xc9e\xe4\tT\x9a^\x9a\x05*\x8a1\xa0I\r\xc7\x01(-\x15\a\xe9\x11s\xd2\xbe\xad(W\xee\xdf\xb3\xce\v\x14Q\x06\xe2J\x17\xe8_\xb4\xe5\x19}\x1a\x98\x99\xa7\t\x8a\xbf\rl\xa7=\x9e\xfa>]dQ?\xf92N\x8a\xde\x19o\xb0\xe2\xba\x93-\xe1\xe9d\x87\xaf\x05\xcf\xf7\xa7\xf6i\xbb.6F\xcc\xcb\xa3t\xb0z\t\xf3\xaa7T\xbezD6A\x9f\xb8\xb2\x84\x15\x19}\x80', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$binfmt_elf32(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x7) [ 115.867509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 115.896572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.924585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.938554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 115.958715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.971239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.980972] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 115.989612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 11:09:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x28, 0x11, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 116.034669] UBIFS error (pid: 6877): cannot open "/dev/sg0", error -22 [ 116.038861] UBIFS error (pid: 6877): cannot open "/dev/sg0", error -22 [ 116.072469] device hsr_slave_0 entered promiscuous mode [ 116.135822] device hsr_slave_1 entered promiscuous mode [ 116.172983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 116.180544] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 116.189046] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.197707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.204833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.212627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.220399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.227346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.235717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 116.258938] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 116.265407] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.274051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.281554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.293770] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 116.302274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 116.311035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 116.318197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.326227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.334148] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.340611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.347438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.355315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.363160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.372556] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 116.378554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.388152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 116.401710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.409421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.417222] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.423592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.432997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 116.448545] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 116.457685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.468380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 116.477498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.488177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 116.500552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.508469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.520581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.529785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 116.540362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 116.551709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.558100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.565479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.573414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.581301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.588655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.598972] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.607191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 116.616107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.623742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.635497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.643555] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 116.649544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.656786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.664027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.674229] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 116.680704] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.693699] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 116.703764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 116.712490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.723865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.731859] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.738185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.745883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.754823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 116.762620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.772905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.781418] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.787771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.798221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 116.806792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.818409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.826398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 116.833648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.844332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 116.851499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.859513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.867500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.877511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 116.901003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.909004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.928616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 116.940910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.949099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.961040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 116.967812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.975762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.988172] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 116.994586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.011059] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 117.021905] 8021q: adding VLAN 0 to HW filter on device batadv0 11:09:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@remote}, 0x0, @in6=@dev}]}]}, 0xfc}, 0x8}, 0x0) 11:09:48 executing program 0: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0/f.le.\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='.//ile0\x00', r0, &(0x7f0000000280)='./file2\x00') fchmodat(r0, &(0x7f0000000240)='./file2\x00', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000680)=""/4096, 0x1000) [ 117.386123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.396259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.424092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.468680] overlay: failed to look up (f.le.) for ino (-116) [ 117.477155] audit: type=1400 audit(1568113788.844:38): avc: denied { associate } for pid=6910 comm="syz-executor.0" name="f.le." scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 117.477884] overlayfs: filesystem on './file0' not supported as upperdir 11:09:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_open_dev$usb(0x0, 0x40000fffffe, 0x80002) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x3230000, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x7}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x7, 0x9}, &(0x7f00000000c0)=0xfffffffffffffe8c) 11:09:49 executing program 2: r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b\xc5\xd1Oe YS\xb2\xd9\xfbT\xce&\xb2\xe9\xaa\xc1\xdf\x1cfi\xb1N\vt\xc9e\xe4\tT\x9a^\x9a\x05*\x8a1\xa0I\r\xc7\x01(-\x15\a\xe9\x11s\xd2\xbe\xad(W\xee\xdf\xb3\xce\v\x14Q\x06\xe2J\x17\xe8_\xb4\xe5\x19}\x1a\x98\x99\xa7\t\x8a\xbf\rl\xa7=\x9e\xfa>]dQ?\xf92N\x8a\xde\x19o\xb0\xe2\xba\x93-\xe1\xe9d\x87\xaf\x05\xcf\xf7\xa7\xf6i\xbb.6F\xcc\xcb\xa3t\xb0z\t\xf3\xaa7T\xbezD6A\x9f\xb8\xb2\x84\x15\x19}\x80', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$binfmt_elf32(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x7) 11:09:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x28, 0x11, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:09:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) 11:09:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@remote}, 0x0, @in6=@dev}]}]}, 0xfc}, 0x8}, 0x0) 11:09:49 executing program 0: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0/f.le.\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='.//ile0\x00', r0, &(0x7f0000000280)='./file2\x00') fchmodat(r0, &(0x7f0000000240)='./file2\x00', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000680)=""/4096, 0x1000) 11:09:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x28, 0x11, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:09:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0xe31, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@remote}, 0x0, @in6=@dev}]}]}, 0xfc}, 0x8}, 0x0) [ 118.083530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:09:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) 11:09:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x28, 0x11, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:09:49 executing program 0: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0/f.le.\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='.//ile0\x00', r0, &(0x7f0000000280)='./file2\x00') fchmodat(r0, &(0x7f0000000240)='./file2\x00', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000680)=""/4096, 0x1000) [ 118.169832] overlay: failed to look up (f.le.) for ino (-116) [ 118.195160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 11:09:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) 11:09:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_open_dev$usb(0x0, 0x40000fffffe, 0x80002) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x3230000, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x7}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x7, 0x9}, &(0x7f00000000c0)=0xfffffffffffffe8c) 11:09:49 executing program 2: r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b\xc5\xd1Oe YS\xb2\xd9\xfbT\xce&\xb2\xe9\xaa\xc1\xdf\x1cfi\xb1N\vt\xc9e\xe4\tT\x9a^\x9a\x05*\x8a1\xa0I\r\xc7\x01(-\x15\a\xe9\x11s\xd2\xbe\xad(W\xee\xdf\xb3\xce\v\x14Q\x06\xe2J\x17\xe8_\xb4\xe5\x19}\x1a\x98\x99\xa7\t\x8a\xbf\rl\xa7=\x9e\xfa>]dQ?\xf92N\x8a\xde\x19o\xb0\xe2\xba\x93-\xe1\xe9d\x87\xaf\x05\xcf\xf7\xa7\xf6i\xbb.6F\xcc\xcb\xa3t\xb0z\t\xf3\xaa7T\xbezD6A\x9f\xb8\xb2\x84\x15\x19}\x80', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x1000000d8) write$binfmt_elf32(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x7) 11:09:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_open_dev$usb(0x0, 0x40000fffffe, 0x80002) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x3230000, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x7}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x7, 0x9}, &(0x7f00000000c0)=0xfffffffffffffe8c) 11:09:49 executing program 3: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0/f.le.\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='.//ile0\x00', r0, &(0x7f0000000280)='./file2\x00') fchmodat(r0, &(0x7f0000000240)='./file2\x00', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000680)=""/4096, 0x1000) 11:09:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:49 executing program 0: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0/f.le.\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='.//ile0\x00', r0, &(0x7f0000000280)='./file2\x00') fchmodat(r0, &(0x7f0000000240)='./file2\x00', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000680)=""/4096, 0x1000) 11:09:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_open_dev$usb(0x0, 0x40000fffffe, 0x80002) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x3230000, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x7}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x7, 0x9}, &(0x7f00000000c0)=0xfffffffffffffe8c) [ 118.425965] overlay: failed to look up (f.le.) for ino (-116) [ 118.526373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:09:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_open_dev$usb(0x0, 0x40000fffffe, 0x80002) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x3230000, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x7}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x7, 0x9}, &(0x7f00000000c0)=0xfffffffffffffe8c) 11:09:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0xfffffffffffffffe]}, 0x5c) [ 118.577354] overlay: failed to look up (f.le.) for ino (-116) 11:09:50 executing program 3: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0/f.le.\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='.//ile0\x00', r0, &(0x7f0000000280)='./file2\x00') fchmodat(r0, &(0x7f0000000240)='./file2\x00', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000680)=""/4096, 0x1000) [ 118.653038] overlay: failed to look up (f.le.) for ino (-116) 11:09:50 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="0201000400000001000000000000"], 0x24, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000200)=0x800, 0x4) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x16, @multicast2, 0x4e24, 0x0, 'lblc\x00', 0x8, 0x7}, {@remote}}, 0x44) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x42b) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:09:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r1, &(0x7f0000000100), 0x1ede5) shutdown(r1, 0x2) 11:09:50 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9}) [ 118.834088] audit: type=1400 audit(1568113790.194:39): avc: denied { create } for pid=6990 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 118.868690] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20004 [ 118.876274] overlay: failed to look up (f.le.) for ino (-116) [ 118.905221] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 118.924981] kasan: CONFIG_KASAN_INLINE enabled 11:09:50 executing program 3: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0/f.le.\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00000001c0)='.//ile0\x00', r0, &(0x7f0000000280)='./file2\x00') fchmodat(r0, &(0x7f0000000240)='./file2\x00', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000680)=""/4096, 0x1000) 11:09:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_open_dev$usb(0x0, 0x40000fffffe, 0x80002) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x3230000, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x7}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x7, 0x9}, &(0x7f00000000c0)=0xfffffffffffffe8c) 11:09:50 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9}) 11:09:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0) [ 118.932347] audit: type=1400 audit(1568113790.224:40): avc: denied { setopt } for pid=6990 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 118.984042] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 119.008211] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 119.014484] Modules linked in: [ 119.017695] CPU: 0 PID: 6995 Comm: syz-executor.0 Not tainted 4.14.143 #0 [ 119.018049] kobject: 'loop4' (ffff8880a4aa29a0): kobject_uevent_env 11:09:50 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/255, 0xff}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000001600)={0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = memfd_create(0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) [ 119.024627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.024633] task: ffff8880652b42c0 task.stack: ffff8880652b8000 [ 119.024649] RIP: 0010:tcp_sendmsg_locked+0x50e/0x3200 [ 119.024654] RSP: 0018:ffff8880652bf9b0 EFLAGS: 00010206 [ 119.050901] kobject: 'loop4' (ffff8880a4aa29a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 119.051646] RAX: 0000000000000012 RBX: 0000000000000000 RCX: ffffc90005e2d000 [ 119.051652] RDX: 000000000000011c RSI: ffffffff85240c94 RDI: 0000000000000090 11:09:50 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/255, 0xff}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000001600)={0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = memfd_create(0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) [ 119.051658] RBP: ffff8880652bfb48 R08: ffff8880652b42c0 R09: 0000000000000001 [ 119.051665] R10: 0000000000000000 R11: ffff8880652b42c0 R12: dffffc0000000000 [ 119.059399] kobject: 'loop0' (ffff8880a492ae60): kobject_uevent_env [ 119.066467] R13: ffff888093ecf540 R14: ffff8880652bfc28 R15: ffff88806818ac00 [ 119.066474] FS: 00007f1e9f022700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 119.066478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.066482] CR2: 0000000000b4b340 CR3: 0000000081029000 CR4: 00000000001406f0 [ 119.066490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.066494] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.066498] Call Trace: [ 119.066517] ? trace_hardirqs_on+0x10/0x10 [ 119.066528] ? lock_sock_nested+0x9e/0x110 [ 119.066535] ? find_held_lock+0x35/0x130 [ 119.066550] ? tcp_sendpage+0x60/0x60 [ 119.084674] kobject: 'loop0' (ffff8880a492ae60): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 119.088342] ? trace_hardirqs_on_caller+0x400/0x590 11:09:50 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/255, 0xff}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000001600)={0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = memfd_create(0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) [ 119.088353] ? trace_hardirqs_on+0xd/0x10 [ 119.110101] protocol 88fb is buggy, dev hsr_slave_0 [ 119.117494] tcp_sendmsg+0x30/0x50 [ 119.117503] inet_sendmsg+0x122/0x500 [ 119.117512] ? inet_recvmsg+0x500/0x500 [ 119.123444] protocol 88fb is buggy, dev hsr_slave_1 [ 119.130642] sock_sendmsg+0xce/0x110 [ 119.130651] sock_write_iter+0x21d/0x390 [ 119.130660] ? sock_sendmsg+0x110/0x110 [ 119.156287] kobject: 'loop0' (ffff8880a492ae60): kobject_uevent_env [ 119.160237] ? iov_iter_init+0xaf/0x1d0 [ 119.160250] __vfs_write+0x4a7/0x6b0 11:09:50 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/255, 0xff}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000001600)={0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = memfd_create(0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) [ 119.160259] ? selinux_file_open+0x420/0x420 [ 119.160266] ? kernel_read+0x120/0x120 [ 119.160279] ? rw_verify_area+0xea/0x2b0 [ 119.164158] kobject: 'loop0' (ffff8880a492ae60): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 119.173506] vfs_write+0x198/0x500 [ 119.173517] SyS_write+0xfd/0x230 [ 119.173525] ? SyS_read+0x230/0x230 [ 119.173533] ? do_syscall_64+0x53/0x640 [ 119.173540] ? SyS_read+0x230/0x230 [ 119.173547] do_syscall_64+0x1e8/0x640 [ 119.173554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 119.173566] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 119.194829] kobject: 'loop4' (ffff8880a4aa29a0): kobject_uevent_env [ 119.197822] RIP: 0033:0x4598e9 [ 119.197828] RSP: 002b:00007f1e9f021c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.197837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 119.197843] RDX: 00000000fffffffe RSI: 0000000020000380 RDI: 0000000000000008 [ 119.211562] kobject: 'loop4' (ffff8880a4aa29a0): fill_kobj_path: path = '/devices/virtual/block/loop4' 11:09:50 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9}) [ 119.214350] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 119.214356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e9f0226d4 [ 119.214361] R13: 00000000004c5e50 R14: 00000000004e0380 R15: 00000000ffffffff [ 119.214371] Code: d5 [ 119.228720] kobject: 'loop0' (ffff8880a492ae60): kobject_uevent_env [ 119.228769] 38 [ 119.235522] kobject: 'loop0' (ffff8880a492ae60): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 119.236420] fc 4d 85 ed 0f 84 40 08 00 00 [ 119.281325] audit: type=1400 audit(1568113790.224:41): avc: denied { ioctl } for pid=6990 comm="syz-executor.0" path="socket:[26697]" dev="sockfs" ino=26697 ioctlcmd=0x89e2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 119.285243] e8 dc d5 38 fc 8b 85 78 ff ff [ 119.326847] kobject: 'loop5' (ffff8880a4af32a0): kobject_uevent_env [ 119.331940] ff 48 8d bb 90 00 00 00 89 85 50 ff ff ff 48 89 f8 48 c1 e8 03 [ 119.344078] kobject: 'loop5' (ffff8880a4af32a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 119.346538] <42> 0f b6 04 20 84 c0 74 06 0f 8e 4a 25 00 00 f6 83 90 00 00 00 [ 119.441885] RIP: tcp_sendmsg_locked+0x50e/0x3200 RSP: ffff8880652bf9b0 [ 119.452569] ---[ end trace b691269650153889 ]--- [ 119.458885] Kernel panic - not syncing: Fatal exception [ 119.465968] Kernel Offset: disabled [ 119.469602] Rebooting in 86400 seconds..