Warning: Permanently added '10.128.1.25' (ECDSA) to the list of known hosts. [ 44.765782] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/19 21:53:13 fuzzer started [ 44.956853] audit: type=1400 audit(1568929993.259:36): avc: denied { map } for pid=6841 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.660109] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/19 21:53:14 dialing manager at 10.128.0.105:43807 2019/09/19 21:53:14 syscalls: 2472 2019/09/19 21:53:14 code coverage: enabled 2019/09/19 21:53:14 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/19 21:53:14 extra coverage: extra coverage is not supported by the kernel 2019/09/19 21:53:14 setuid sandbox: enabled 2019/09/19 21:53:14 namespace sandbox: enabled 2019/09/19 21:53:14 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/19 21:53:14 fault injection: enabled 2019/09/19 21:53:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/19 21:53:14 net packet injection: enabled 2019/09/19 21:53:14 net device setup: enabled [ 47.596012] random: crng init done 21:54:29 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x17fe, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) close(r1) 21:54:29 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000240)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 21:54:29 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000140)={0x0, 0x10}) [ 121.443849] audit: type=1400 audit(1568930069.749:37): avc: denied { map } for pid=6841 comm="syz-fuzzer" path="/root/syzkaller-shm448462127" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 21:54:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000240)={{0x8}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 21:54:29 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000240)={{0xffffff80}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 21:54:29 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2f0000001d0081fd6d0000338f00000002dd0700060000001f5f03c9080001003898efab", 0x24}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)='$', 0x1}], 0x1}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 121.473042] audit: type=1400 audit(1568930069.759:38): avc: denied { map } for pid=6860 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13732 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 121.830984] IPVS: ftp: loaded support on port[0] = 21 [ 122.599554] chnl_net:caif_netlink_parms(): no params data found [ 122.607664] IPVS: ftp: loaded support on port[0] = 21 [ 122.656279] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.663010] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.670072] device bridge_slave_0 entered promiscuous mode [ 122.678623] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.685242] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.692304] device bridge_slave_1 entered promiscuous mode [ 122.709747] IPVS: ftp: loaded support on port[0] = 21 [ 122.732068] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.754995] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.793364] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 122.800914] team0: Port device team_slave_0 added [ 122.806184] chnl_net:caif_netlink_parms(): no params data found [ 122.822445] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 122.829476] team0: Port device team_slave_1 added [ 122.836514] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 122.846940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.871416] IPVS: ftp: loaded support on port[0] = 21 [ 122.903645] device hsr_slave_0 entered promiscuous mode [ 122.951436] device hsr_slave_1 entered promiscuous mode [ 122.991283] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 123.008119] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 123.031263] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.037677] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.045324] device bridge_slave_0 entered promiscuous mode [ 123.055033] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.061454] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.068367] device bridge_slave_1 entered promiscuous mode [ 123.107357] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 123.134788] chnl_net:caif_netlink_parms(): no params data found [ 123.144579] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.164259] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.170698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.177605] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.183989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.203778] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.211018] team0: Port device team_slave_0 added [ 123.218735] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.227008] team0: Port device team_slave_1 added [ 123.243939] IPVS: ftp: loaded support on port[0] = 21 [ 123.251799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 123.259711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 123.286482] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.294023] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.300965] device bridge_slave_0 entered promiscuous mode [ 123.373050] device hsr_slave_0 entered promiscuous mode [ 123.440364] device hsr_slave_1 entered promiscuous mode [ 123.490249] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.496622] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.504930] device bridge_slave_1 entered promiscuous mode [ 123.522413] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 123.529931] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 123.538937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.561400] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 123.572959] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 123.579058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.585471] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.593055] team0: Port device team_slave_0 added [ 123.601107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.608165] team0: Port device team_slave_1 added [ 123.647302] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.664782] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.671917] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 123.682842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 123.701618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 123.709743] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 123.718904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 123.739255] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 123.745853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.752958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.764677] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 123.770933] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.812172] device hsr_slave_0 entered promiscuous mode [ 123.860469] device hsr_slave_1 entered promiscuous mode [ 123.900796] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 123.907585] chnl_net:caif_netlink_parms(): no params data found [ 123.923527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.931587] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 123.939553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.947673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.955317] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.961813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.005709] IPVS: ftp: loaded support on port[0] = 21 [ 124.014949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 124.032108] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.038510] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.045614] device bridge_slave_0 entered promiscuous mode [ 124.056628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.065847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.073637] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.080159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.093076] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 124.102633] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.109101] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.117590] device bridge_slave_1 entered promiscuous mode [ 124.139367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.188874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.197719] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.209881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.228668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.237525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.247445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.259076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.266067] chnl_net:caif_netlink_parms(): no params data found [ 124.284121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.292146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.299688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.307524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.315963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.343862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 124.358072] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.369348] team0: Port device team_slave_0 added [ 124.374944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.383793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.397176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 124.407463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.414489] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.421704] team0: Port device team_slave_1 added [ 124.426934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.434757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.447735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.456169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.465419] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 124.472397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.496266] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.503068] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.510628] device bridge_slave_0 entered promiscuous mode [ 124.522961] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 124.572429] device hsr_slave_0 entered promiscuous mode [ 124.610448] device hsr_slave_1 entered promiscuous mode [ 124.667111] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.673663] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.681097] device bridge_slave_1 entered promiscuous mode [ 124.689173] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.696304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.703406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.711341] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 124.718452] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 124.784066] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 124.791784] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.802237] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 124.814545] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 124.826462] chnl_net:caif_netlink_parms(): no params data found [ 124.855593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.863348] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.875564] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.908720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 124.936017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.943437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.952015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.959614] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.965992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.973919] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.981666] team0: Port device team_slave_0 added [ 124.987151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.996788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.004312] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.013027] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.020558] device bridge_slave_0 entered promiscuous mode [ 125.028156] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 125.036808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.045162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.056708] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.063100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.071137] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 125.078221] team0: Port device team_slave_1 added [ 125.083897] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.091275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.110637] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.117044] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.124360] device bridge_slave_1 entered promiscuous mode [ 125.144350] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.154406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.203883] device hsr_slave_0 entered promiscuous mode [ 125.240548] device hsr_slave_1 entered promiscuous mode [ 125.281556] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.291292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.310706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.318976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 21:54:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) write$binfmt_aout(r0, &(0x7f0000000280)={{}, "", [[]]}, 0x120) [ 125.328865] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 125.344708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.353798] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 125.378297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 125.385589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.399243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.406840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.418470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.427307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.438034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 125.444655] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.451914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 125.460725] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 125.469810] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 125.476487] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.488033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.495453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.502487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.510792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.519291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.531787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.540948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.549982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.558109] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 125.566897] team0: Port device team_slave_0 added [ 125.573390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.581709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.589267] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.595665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.602486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.610533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.618098] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.624463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.632546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.640440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.647980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.655793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.663365] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.669730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.676986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.685527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.693200] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.699572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.708303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.718822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 125.727591] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 125.737797] team0: Port device team_slave_1 added [ 125.745627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.753384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.760766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.767778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.775657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.783458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.793408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 125.801463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.810648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.818689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.826401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.835833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.843971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.852119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.859730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.869002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.878210] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 125.891130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 125.898306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.906414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.914020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.921801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.931243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 125.938797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 126.004002] device hsr_slave_0 entered promiscuous mode [ 126.040363] device hsr_slave_1 entered promiscuous mode [ 126.081480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.089171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.096847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.106939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 126.118175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 21:54:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x17fe, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) close(r0) [ 126.126824] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 126.135225] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 126.142474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.149542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.157428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.165237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.173113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.187492] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 126.198576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.216471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 126.225396] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 21:54:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x17fe, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) close(r0) [ 126.235662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.249271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.258795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.285060] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 126.293678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 126.306049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.313822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.325455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 21:54:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) [ 126.340835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.348302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.365244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.378625] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 126.387313] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 126.394888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.408109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.424216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.438228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.458491] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 126.477252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 126.496298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.509349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.522614] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 126.537363] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 126.543975] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.553800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 126.563172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.575342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.586610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 21:54:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1}, 0x20) 21:54:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x800043fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) getpriority(0x1, 0x0) [ 126.604243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.613114] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.619496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.637394] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 126.653856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 126.667059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.679275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.690378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.698086] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.704466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.714928] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 126.726367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.735193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.742274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.749324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.761111] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 126.767213] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.777493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 126.790808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 21:54:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) accept(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x0) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200), 0x0) [ 126.798540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.813088] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.819509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.827555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.845125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 21:54:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 126.857005] hrtimer: interrupt took 42307 ns [ 126.878895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 126.896492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.907219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.915978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.924117] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.930590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.940862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 126.949785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 126.965203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.974177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.982646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.993893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.001904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.015441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 127.025448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 127.047047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.058594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.078325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.089124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 127.103548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 127.114284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.125769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.136936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.149058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 127.161308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 127.167348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.179974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.190443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.198231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.208611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.222092] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 127.231305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.241683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.254240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.262061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 127.274676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.282746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.298716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 127.307205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.316318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.326403] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 127.333373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.348328] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 127.361595] 8021q: adding VLAN 0 to HW filter on device batadv0 21:54:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x51, 0x55}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) stat(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@restrict, @array, @fwd, @restrict, @var, @array]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000680)=""/246, 0x82, 0xf6, 0x1}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:54:37 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) stat(0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace(0x4207, r1) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000000)) 21:54:37 executing program 4: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000001c0)={0x569, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\a\x00\x00\x81z\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-\x86\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\xb0v\v\xde\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xb9\x03v\x8d+\xc7\x90U\xd8\x9aP \x92\xf6/\xe1\xcd\x02 \x0f\xffx5\x92\xb2&\x8e\xf6\xd5\x17\xe4\xf6b\x9aw\xca\xf26\xb0n\xef\xa6\x19\xa7/3s\xf4\xda\xb3\xb5Fl\xdco\xca\x00\x00\x00Mxa\xfcD\xa03\xf7\"?Z\x84\xf9\x9es\x10\xb4\xaa\x10Z\x0f0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 21:54:37 executing program 2: getdents(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {}, 0x40008, {0x2, 0x0, @loopback}}) 21:54:37 executing program 2: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000001c0)={0x569, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\a\x00\x00\x81z\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-\x86\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\xb0v\v\xde\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xb9\x03v\x8d+\xc7\x90U\xd8\x9aP \x92\xf6/\xe1\xcd\x02 \x0f\xffx5\x92\xb2&\x8e\xf6\xd5\x17\xe4\xf6b\x9aw\xca\xf26\xb0n\xef\xa6\x19\xa7/3s\xf4\xda\xb3\xb5Fl\xdco\xca\x00\x00\x00Mxa\xfcD\xa03\xf7\"?Z\x84\xf9\x9es\x10\xb4\xaa\x10Z\x0f0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 21:54:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000087000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x04', 0x175d900f) 21:54:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="660f3828a61b0000000f01c366b867008ee89af5ffffff5c000f01c8c4c1c17dac9e000000003e260f79b3c9d800000f0199000000009aefd500001000b8010000000f01d9", 0x45}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:54:38 executing program 5: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000001c0)={0x0, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\a\x00\x00\x81z\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-\x86\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\xb0v\v\xde\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xb9\x03v\x8d+\xc7\x90U\xd8\x9aP \x92\xf6/\xe1\xcd\x02 \x0f\xffx5\x92\xb2&\x8e\xf6\xd5\x17\xe4\xf6b\x9aw\xca\xf26\xb0n\xef\xa6\x19\xa7/3s\xf4\xda\xb3\xb5Fl\xdco\xca\x00\x00\x00Mxa\xfcD\xa03\xf7\"?Z\x84\xf9\x9es\x10\xb4\xaa\x10Z\x0f0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 21:54:38 executing program 2: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000001c0)={0x569, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\a\x00\x00\x81z\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-\x86\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\xb0v\v\xde\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xb9\x03v\x8d+\xc7\x90U\xd8\x9aP \x92\xf6/\xe1\xcd\x02 \x0f\xffx5\x92\xb2&\x8e\xf6\xd5\x17\xe4\xf6b\x9aw\xca\xf26\xb0n\xef\xa6\x19\xa7/3s\xf4\xda\xb3\xb5Fl\xdco\xca\x00\x00\x00Mxa\xfcD\xa03\xf7\"?Z\x84\xf9\x9es\x10\xb4\xaa\x10Z\x0f0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 21:54:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x201000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") dup3(r1, r0, 0x0) 21:54:39 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}}) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x2000004a}]) 21:54:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="64f30f7ffa26f30f09640fa8fa66b9f508000066b80d00000066ba000000000f3066b9800000c00f326635000100000f303e0faac4e25dcf07f082ae080044e10a", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:54:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x201000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") dup3(r1, r0, 0x0) 21:54:39 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000400)={0x3, 0xfffffffffffffffb}) 21:54:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x201000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x9931a221c168d1e3}}) 21:54:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x201000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") dup3(r1, r0, 0x0) 21:54:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="11fcc0ccb361b83fd90150b0b6459b5f", 0x0, 0x2}, 0x20) 21:54:39 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x50, &(0x7f0000001440)=""/4096, &(0x7f0000000000)=0x1000) 21:54:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x500, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}, 0xc100) write(r0, &(0x7f00000009c0)="e6a2e0091b61501ea87850c6d258201cbf3fe9fe75bc31032c1bd695e6f89fffb8dd1bb327cde2faef7e8115c8949109dddb3332b28603a1e35d08e3d07606314bc0e1cf58b62864f002380700335454a2a6d9cc29a3fc3d2c30ff2907f14f80fce3c46806732418663bbb11e34e1f9e819d012f4928b5fb59fb31755c98649f35c587353cbf7830ddde04ed4e4a9fda1923d06559d4e9df911797333a46b8d2268133da26a6e59e35a66021404ba08e9b550cd132eda9a970ae2ef50b25dbe1c3da78074af2a762c27eeb9b22630beec52475e7a8a159fad88d41e8309b5e32983e315025fbc9c7603d676a5316fffcb42642150cd498d59748ff6200a73c31b403eb73a20b57a47e7d69aa0bb5c59235f2fd893d6b5b86efa9b05a2b56616ce4f8a3589d5d5e09337f161517cdcac41b5732064919358d7cd6a9b1fb0a5ad544106124da93437fed9f2503223c3eb1103cd9b1a9ecf29674ea86921bd5b0094e3937a1286a44089ef4b42cca8e46cfda355cfe8622e860f416b60af1196f7c0196daa0bf0dd3797d0b8199ac4e2381d92f473393b860c9f97a08324c83c372553042c7f24709106c016ff1e20c93d645e734daaf50f13ad845377b895c1dede9b73432d24c9f6207bcb1fe8fb9900377b387f8787f20849ec05b0d44982a78a650e12306efff6f4ef89b0eb175bfff545fda8692314d7fc9e8f4fdffd01b56a6b1358adab6d78f3d693e6781c8bf399024aaa888d572d59cf7cdb74aa974d20549a47624f35caf0956651e8d24079e0866e0172f2fc26af14c628f99051e04e50fba06de938d52d934a78921d5144d18e8c5d1f4fd2d0e7ca22119be065574f5f7dfbabbc44d42b51d62d658ed2ed1250d7821a09d26760bca0f8bc1b186e5cf931377b2adefca5a752c7f9e82224c5734c88d27c3afb7d785ee510fb3806f42bbff9fe9bc1d50cb329bb666a1d766182ffd6b6aee8535406b2a77e2328d90b90950034dd468577693571bc9a9fb9f8aeae67d5a8747f85e38318d97f458c6c9fed9c3b8f0affe63a2adaa57e472449c76b53af7f0cf9087e62bd5556947e681873a002c78d08326290a34489f5eb7acb38367778460473e6b5e4a8c5caa8213092cf59a2f3834548793ef1a55983af67a304c187ded353c4b3f95b9ec569fdc39b60613f8f622a759b7b6a59901d32a2725c7db7768259ad896a7315d07c850035b67dd4ba1ab8be64d2dcf83988b66f3801c26164b3ceb65778e2db97212cac966167ffea65af621e027588b76a23d01995d91e83b6ba104272789f857e75cb959a2206a439d56fd89108d4d6590ac1c6da88cdc53913a51c4b68c17aa26a050d026d6aff72329f597f506280268c61507d62535345d6d2c9e48343825fc36648aa68b2d01c404dfd1dedcba7532f510316d7b18baa8786bd5fa2d1b56c875de3ea88201003b92f6d70ee1e9408cceb561ea511db3a8c85da59390668c486fe1e555b317e767046f69ee031d6021369a01a474bbb3d6f5b094d78745ce3f8ad89e373c18ec3c2dd85af00a79ebaaffb7c049386078bf0b9b56b686c1f0a8855fb1007eb306a68fd840176ff09797edfbace33d4f213ea3599d97d643569ed40a69a41083c65592508305b234587a79aae09645416898a659b17a2c778f5bb2f80878f01f3a14a0488e48fd9d4670cf218b4da04e79c03f77174757e3c25a828bd6286dd91f08af9d281da4bae8d033197171c4fd2503ed398059a78d0ed1fbd98dba8314008ed399ab3ccb56847d30fff2b26a3be5d84af230e1915c2ab7eef4b01b29986985db14213b9b05816ef7724aa896073641a7bc6eb9406e79fa961eb8afbeba75293c1f786e3c8c0517331d0640dcfb0f45a036fd07d4238b9b01e25be3291f0f5eba9523ba1679a35aebbcfa896ab6401296270ba8742259adaf5a52606c3239b8ecc208e39ee916d09f55e5789d5b08c72984dffb4511ee23cd741a73aba019f14712568221feb803a1d1e63df108d435b42fb0f38e3c6410f15d0f56142d4aba83d7bfe3ef5844d4ed36f0bfa6046697742a89689941fa04a68da4e7cbaf6e284d08a8fc3fb9150a6e262b55d616ccb3999a2ff16f6b0600000061d9e51d2f4bd294361fa2bf7fa193fac13535233de13789a1131daed83bd6d403be2ef6edd7d45b9d3cf77c2aa4d79fcbad52462b21bfc89920578e2a60363fb274e242d640109ef5dde5f218e256da68aca762883b7cbefdea6eddc013257214d9bb588ed83a517dd9d34fcc32824f9d880712c2fe48f4e8949728473a6bf9688f999adf2e219423090a75b1acfc8ea96105e22de77e415e7b406b47ffb57bdc26ead43ba946a2be6602c64c79275a0ed0fdbbae0825b63c939a0e3ae6dcfbc2f1b6ddb3d4ec7479e85407fb70ac4813951705d6cf1a25d73e97f6fed3ad2d4e60af3e9c5393200dc6b7bb809d5d44247b2b224e4232b7adb97f060ea85bf22cdd8a2f7533d703fd75d6498e517478e144da0c273edcd31fea2143bed37c930c02c2d74261966e18b3ee1c1aa1f0518f63aa840a151785d941ffbd70683b165e3a31395d1d7d91189ab7985901f113d11a9e5879f2e500000000000000", 0x740) 21:54:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) [ 131.700823] ================================================================== [ 131.708376] BUG: KASAN: use-after-free in tcp_init_tso_segs+0x1ae/0x200 [ 131.708385] Read of size 2 at addr ffff88808fb6ed70 by task syz-executor.2/7164 [ 131.708387] [ 131.708396] CPU: 0 PID: 7164 Comm: syz-executor.2 Not tainted 4.14.145 #0 [ 131.708400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.708405] Call Trace: [ 131.708417] dump_stack+0x138/0x197 [ 131.708426] ? tcp_init_tso_segs+0x1ae/0x200 [ 131.708439] print_address_description.cold+0x7c/0x1dc [ 131.731260] ? tcp_init_tso_segs+0x1ae/0x200 [ 131.731271] kasan_report.cold+0xa9/0x2af [ 131.731283] __asan_report_load2_noabort+0x14/0x20 [ 131.731289] tcp_init_tso_segs+0x1ae/0x200 [ 131.731295] ? tcp_tso_segs+0x7d/0x1c0 [ 131.731302] tcp_write_xmit+0x15e/0x4960 [ 131.731308] ? tcp_v4_md5_lookup+0x23/0x30 [ 131.731316] ? tcp_established_options+0x2c5/0x420 [ 131.731325] ? tcp_current_mss+0x1dc/0x2f0 [ 131.731335] ? __alloc_skb+0x3ee/0x500 [ 131.731345] __tcp_push_pending_frames+0xa6/0x260 [ 131.731354] tcp_send_fin+0x17e/0xc40 [ 131.731365] tcp_close+0xcc8/0xfb0 [ 131.741223] kobject: 'queues' (ffff8880a5f03948): kobject_uevent_env: filter function caused the event to drop! [ 131.743305] ? __sock_release+0x89/0x2b0 [ 131.743316] ? ip_mc_drop_socket+0x1d6/0x230 [ 131.743328] inet_release+0xec/0x1c0 [ 131.743336] __sock_release+0xce/0x2b0 [ 131.743345] ? __sock_release+0x2b0/0x2b0 [ 131.747066] kobject: 'rx-0' (ffff88807fed8610): kobject_add_internal: parent: 'queues', set: 'queues' [ 131.751350] sock_close+0x1b/0x30 [ 131.751360] __fput+0x275/0x7a0 [ 131.751375] ____fput+0x16/0x20 [ 131.751385] task_work_run+0x114/0x190 [ 131.751397] exit_to_usermode_loop+0x1da/0x220 [ 131.751406] do_syscall_64+0x4bc/0x640 [ 131.751412] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 131.751426] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 131.751435] RIP: 0033:0x4136f1 [ 131.756936] kobject: 'rx-0' (ffff88807fed8610): kobject_uevent_env [ 131.761170] RSP: 002b:00007ffd9161c600 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 131.761180] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004136f1 [ 131.761184] RDX: 0000001b30d20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 131.761190] RBP: 0000000000000001 R08: 00000000ade564d1 R09: ffffffffffffffff [ 131.761195] R10: 00007ffd9161c6e0 R11: 0000000000000293 R12: 000000000075bf20 [ 131.761199] R13: 0000000000020273 R14: 0000000000760558 R15: 000000000075bf2c [ 131.761213] [ 131.761218] Allocated by task 7168: [ 131.761228] save_stack_trace+0x16/0x20 [ 131.761234] save_stack+0x45/0xd0 [ 131.761239] kasan_kmalloc+0xce/0xf0 [ 131.761244] kasan_slab_alloc+0xf/0x20 [ 131.761252] kmem_cache_alloc_node+0x144/0x780 [ 131.761258] __alloc_skb+0x9c/0x500 [ 131.761264] sk_stream_alloc_skb+0xb3/0x780 [ 131.761270] tcp_sendmsg_locked+0xf61/0x3200 [ 131.761275] tcp_sendmsg+0x30/0x50 [ 131.761282] inet_sendmsg+0x122/0x500 [ 131.761287] sock_sendmsg+0xce/0x110 [ 131.761293] SYSC_sendto+0x206/0x310 [ 131.761298] SyS_sendto+0x40/0x50 [ 131.761303] do_syscall_64+0x1e8/0x640 [ 131.761310] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 131.761312] [ 131.761315] Freed by task 7168: [ 131.761321] save_stack_trace+0x16/0x20 [ 131.761326] save_stack+0x45/0xd0 [ 131.761330] kasan_slab_free+0x75/0xc0 [ 131.761335] kmem_cache_free+0x83/0x2b0 [ 131.761339] kfree_skbmem+0x8d/0x120 [ 131.761344] __kfree_skb+0x1e/0x30 [ 131.761349] tcp_remove_empty_skb.part.0+0x231/0x2e0 [ 131.761354] tcp_sendmsg_locked+0x1ced/0x3200 [ 131.761358] tcp_sendmsg+0x30/0x50 [ 131.761363] inet_sendmsg+0x122/0x500 [ 131.761367] sock_sendmsg+0xce/0x110 [ 131.761372] SYSC_sendto+0x206/0x310 [ 131.761377] SyS_sendto+0x40/0x50 [ 131.761382] do_syscall_64+0x1e8/0x640 [ 131.761388] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 131.761390] [ 131.761395] The buggy address belongs to the object at ffff88808fb6ed40 [ 131.761395] which belongs to the cache skbuff_fclone_cache of size 472 [ 131.761401] The buggy address is located 48 bytes inside of [ 131.761401] 472-byte region [ffff88808fb6ed40, ffff88808fb6ef18) [ 131.761404] The buggy address belongs to the page: [ 131.761411] page:ffffea00023edb80 count:1 mapcount:0 mapping:ffff88808fb6e0c0 index:0x0 [ 131.761420] flags: 0x1fffc0000000100(slab) [ 131.761430] raw: 01fffc0000000100 ffff88808fb6e0c0 0000000000000000 0000000100000006 [ 131.761438] raw: ffffea00024266a0 ffffea000200c560 ffff8880a9e19a80 0000000000000000 [ 131.761441] page dumped because: kasan: bad access detected [ 131.761443] [ 131.761446] Memory state around the buggy address: [ 131.761452] ffff88808fb6ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.761457] ffff88808fb6ec80: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.761462] >ffff88808fb6ed00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 131.761465] ^ [ 131.761469] ffff88808fb6ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.761474] ffff88808fb6ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.761476] ================================================================== [ 131.761479] Disabling lock debugging due to kernel taint [ 131.773456] Kernel panic - not syncing: panic_on_warn set ... [ 131.773456] [ 131.778791] kobject: 'loop3' (ffff8880a4a32260): kobject_uevent_env [ 131.778924] CPU: 0 PID: 7164 Comm: syz-executor.2 Tainted: G B 4.14.145 #0 [ 131.783127] kobject: 'loop3' (ffff8880a4a32260): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 131.787176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.787179] Call Trace: [ 131.787194] dump_stack+0x138/0x197 [ 131.787205] ? tcp_init_tso_segs+0x1ae/0x200 [ 131.797528] kobject: 'rx-0' (ffff88807fed8610): fill_kobj_path: path = '/devices/virtual/net/veth2/queues/rx-0' [ 131.800265] panic+0x1f2/0x426 [ 131.800272] ? add_taint.cold+0x16/0x16 [ 131.800280] ? ___preempt_schedule+0x16/0x18 [ 131.800291] kasan_end_report+0x47/0x4f [ 131.800297] kasan_report.cold+0x130/0x2af [ 131.800303] __asan_report_load2_noabort+0x14/0x20 [ 131.800310] tcp_init_tso_segs+0x1ae/0x200 [ 131.800315] ? tcp_tso_segs+0x7d/0x1c0 [ 131.800326] tcp_write_xmit+0x15e/0x4960 [ 131.805466] kobject: 'tx-0' (ffff88808512c518): kobject_add_internal: parent: 'queues', set: 'queues' [ 131.809029] ? tcp_v4_md5_lookup+0x23/0x30 [ 131.809037] ? tcp_established_options+0x2c5/0x420 [ 131.809044] ? tcp_current_mss+0x1dc/0x2f0 [ 131.809054] ? __alloc_skb+0x3ee/0x500 [ 131.819741] kobject: 'tx-0' (ffff88808512c518): kobject_uevent_env [ 131.822798] __tcp_push_pending_frames+0xa6/0x260 [ 131.822805] tcp_send_fin+0x17e/0xc40 [ 131.822812] tcp_close+0xcc8/0xfb0 [ 131.822819] ? __sock_release+0x89/0x2b0 [ 131.822828] ? ip_mc_drop_socket+0x1d6/0x230 [ 131.822834] inet_release+0xec/0x1c0 [ 131.822840] __sock_release+0xce/0x2b0 [ 131.822849] ? __sock_release+0x2b0/0x2b0 [ 131.826975] kobject: 'tx-0' (ffff88808512c518): fill_kobj_path: path = '/devices/virtual/net/veth2/queues/tx-0' [ 131.831285] sock_close+0x1b/0x30 [ 131.831294] __fput+0x275/0x7a0 [ 131.831302] ____fput+0x16/0x20 [ 131.831310] task_work_run+0x114/0x190 [ 131.831320] exit_to_usermode_loop+0x1da/0x220 [ 131.831327] do_syscall_64+0x4bc/0x640 [ 131.831332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 131.831343] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 131.831351] RIP: 0033:0x4136f1 [ 131.836875] kobject: 'batman_adv' (ffff8880a5d20180): kobject_add_internal: parent: 'veth2', set: '' [ 131.838911] RSP: 002b:00007ffd9161c600 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 131.838919] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004136f1 [ 131.838923] RDX: 0000001b30d20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 131.838927] RBP: 0000000000000001 R08: 00000000ade564d1 R09: ffffffffffffffff [ 131.838934] R10: 00007ffd9161c6e0 R11: 0000000000000293 R12: 000000000075bf20 [ 131.844028] kobject: 'veth3' (ffff888081232fb0): kobject_add_internal: parent: 'net', set: 'devices' [ 131.852511] R13: 0000000000020273 R14: 0000000000760558 R15: 000000000075bf2c [ 131.854089] Kernel Offset: disabled [ 132.474205] Rebooting in 86400 seconds..