Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts.
[   40.789855] random: sshd: uninitialized urandom read (32 bytes read)
2019/04/22 13:47:10 fuzzer started
[   40.998411] audit: type=1400 audit(1555940830.020:36): avc:  denied  { map } for  pid=6941 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   42.969443] random: cc1: uninitialized urandom read (8 bytes read)
2019/04/22 13:47:12 dialing manager at 10.128.0.105:46725
2019/04/22 13:47:13 syscalls: 2434
2019/04/22 13:47:13 code coverage: enabled
2019/04/22 13:47:13 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/04/22 13:47:13 extra coverage: extra coverage is not supported by the kernel
2019/04/22 13:47:13 setuid sandbox: enabled
2019/04/22 13:47:13 namespace sandbox: enabled
2019/04/22 13:47:13 Android sandbox: /sys/fs/selinux/policy does not exist
2019/04/22 13:47:13 fault injection: enabled
2019/04/22 13:47:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/04/22 13:47:13 net packet injection: enabled
2019/04/22 13:47:13 net device setup: enabled
[   45.185901] random: crng init done
13:49:11 executing program 5:
syz_open_dev$dri(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

13:49:11 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x2, @link_local, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0)

13:49:11 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0)}, 0x0)

13:49:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00')
getdents64(r0, &(0x7f0000000000)=""/116, 0x8001)

13:49:11 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e0f000000060a43ba5d806055b6fdd80b", 0x34}], 0x1}, 0x0)

13:49:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x2000004e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x75d, 0x44000122, 0x0)

[  162.082915] audit: type=1400 audit(1555940951.110:37): avc:  denied  { map } for  pid=6957 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1133 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  162.910205] IPVS: ftp: loaded support on port[0] = 21
[  163.233753] chnl_net:caif_netlink_parms(): no params data found
[  163.242525] IPVS: ftp: loaded support on port[0] = 21
[  163.287834] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.294887] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.302050] device bridge_slave_0 entered promiscuous mode
[  163.314999] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.321555] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.328481] device bridge_slave_1 entered promiscuous mode
[  163.346354] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  163.354810] IPVS: ftp: loaded support on port[0] = 21
[  163.361532] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  163.417431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  163.425089] team0: Port device team_slave_0 added
[  163.436427] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  163.443545] team0: Port device team_slave_1 added
[  163.454970] chnl_net:caif_netlink_parms(): no params data found
[  163.463302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  163.470672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  163.532555] device hsr_slave_0 entered promiscuous mode
[  163.550441] device hsr_slave_1 entered promiscuous mode
[  163.605725] IPVS: ftp: loaded support on port[0] = 21
[  163.613667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  163.626438] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  163.639279] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.645951] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.652967] device bridge_slave_0 entered promiscuous mode
[  163.661187] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.667535] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.674663] device bridge_slave_1 entered promiscuous mode
[  163.707533] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  163.734054] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  163.753605] chnl_net:caif_netlink_parms(): no params data found
[  163.775327] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  163.782634] team0: Port device team_slave_0 added
[  163.789783] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  163.797101] team0: Port device team_slave_1 added
[  163.805399] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.811899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.818774] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.825158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.837253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  163.864127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  163.882304] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.888893] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.896316] device bridge_slave_0 entered promiscuous mode
[  163.903211] IPVS: ftp: loaded support on port[0] = 21
[  163.909110] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.915957] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.923473] device bridge_slave_1 entered promiscuous mode
[  163.972001] device hsr_slave_0 entered promiscuous mode
[  164.030294] device hsr_slave_1 entered promiscuous mode
[  164.092728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  164.099676] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  164.141731] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  164.159103] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.165524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.172137] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.178465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.188561] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  164.242927] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  164.251577] team0: Port device team_slave_0 added
[  164.257323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  164.264654] team0: Port device team_slave_1 added
[  164.271009] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.278073] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.285473] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.292235] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.302325] chnl_net:caif_netlink_parms(): no params data found
[  164.318621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  164.326154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  164.402080] device hsr_slave_0 entered promiscuous mode
[  164.460481] device hsr_slave_1 entered promiscuous mode
[  164.520598] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  164.539906] IPVS: ftp: loaded support on port[0] = 21
[  164.541565] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  164.586794] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.635623] chnl_net:caif_netlink_parms(): no params data found
[  164.657020] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  164.663288] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.669696] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.677348] device bridge_slave_0 entered promiscuous mode
[  164.685920] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.692394] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.699343] device bridge_slave_1 entered promiscuous mode
[  164.714049] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  164.725415] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  164.731589] 8021q: adding VLAN 0 to HW filter on device team0
[  164.756554] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  164.765408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.773191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.781205] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  164.797809] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  164.818023] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.824550] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.831823] device bridge_slave_0 entered promiscuous mode
[  164.838726] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.845317] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.853244] device bridge_slave_1 entered promiscuous mode
[  164.873325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  164.895372] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  164.904309] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  164.913969] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.920593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.928305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.936039] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.942425] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.958887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  164.978684] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  164.986834] team0: Port device team_slave_0 added
[  164.992599] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  164.999652] team0: Port device team_slave_0 added
[  165.006014] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  165.013426] team0: Port device team_slave_1 added
[  165.018631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  165.026500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.035088] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.041492] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.063678] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  165.072770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  165.079860] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  165.086986] team0: Port device team_slave_1 added
[  165.092438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  165.100218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  165.107591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  165.133700] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  165.141385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.149053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  165.156128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  165.163490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  165.242192] device hsr_slave_0 entered promiscuous mode
[  165.280380] device hsr_slave_1 entered promiscuous mode
[  165.382912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  165.392029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.401617] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  165.408663] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  165.422212] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  165.428301] 8021q: adding VLAN 0 to HW filter on device team0
[  165.441319] chnl_net:caif_netlink_parms(): no params data found
[  165.512975] device hsr_slave_0 entered promiscuous mode
[  165.550504] device hsr_slave_1 entered promiscuous mode
[  165.621636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  165.630770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  165.641886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  165.649558] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  165.656678] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  165.663620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  165.671844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  165.679340] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.685740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.693282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  165.701103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.708614] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.714989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.722045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.729630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.737717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.746677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  165.756471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  165.764217] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  165.774664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.783292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.791415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.801294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  165.811334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  165.824481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  165.837803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.846126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.853787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.861561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  165.868965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.877194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.899764] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.906542] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.914093] device bridge_slave_0 entered promiscuous mode
[  165.922479] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.928839] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.936384] device bridge_slave_1 entered promiscuous mode
[  165.943848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  165.953381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  165.962808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  165.976742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.984974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.992760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  166.000379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.007888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  166.015605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  166.024453] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  166.033093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  166.041935] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  166.047941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  166.058853] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.071117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  166.078600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  166.088213] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  166.094433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  166.107260] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  166.115946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  166.123384] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  166.132683] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  166.156183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  166.164110] team0: Port device team_slave_0 added
[  166.174217] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  166.188148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.195078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.202560] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  166.209592] team0: Port device team_slave_1 added
[  166.215605] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  166.227246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  166.245272] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  166.253830] 8021q: adding VLAN 0 to HW filter on device team0
[  166.302571] device hsr_slave_0 entered promiscuous mode
[  166.350342] device hsr_slave_1 entered promiscuous mode
[  166.410855] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  166.417313] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  166.426571] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.435663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.447120] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.459025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.466224] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  166.477404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  166.487544] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  166.495377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.504282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.512260] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.518621] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.526016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.536615] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  166.555569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  166.564166] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  166.573345] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  166.583589] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  166.589751] 8021q: adding VLAN 0 to HW filter on device team0
[  166.596208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.604435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.612649] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.619040] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.626593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.634320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.641356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.648286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.656620] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  166.667578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  166.677072] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  166.684179] 8021q: adding VLAN 0 to HW filter on device team0
[  166.693940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  166.702041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  166.712250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.719967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.728565] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.734954] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.753678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  166.762481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  166.777775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  166.785085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.793481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  166.801340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.809077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.816783] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.823178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.835514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.843460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.851187] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.857606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.883212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  166.894881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  166.906383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  166.918943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.932177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.939965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.952866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.963095] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.969464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.983996] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.993035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  167.003121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  167.014703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.022423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.036576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.045559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.061345] hrtimer: interrupt took 38523 ns
[  167.070129] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  167.083134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  167.095039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.104452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.117880] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  167.125918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
13:49:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'})

[  167.133875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  167.152514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  167.159523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  167.179352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  167.209696] audit: type=1400 audit(1555940956.230:38): avc:  denied  { create } for  pid=7006 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  167.233724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.259075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.278673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.286243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.288894] audit: type=1400 audit(1555940956.310:39): avc:  denied  { ioctl } for  pid=7006 comm="syz-executor.1" path="socket:[26723]" dev="sockfs" ino=26723 ioctlcmd=0x8990 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  167.295766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  167.331545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  167.340263] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  167.346286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.354825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  167.362636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  167.370353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.378252] bond0: Error: Device is in use and cannot be enslaved
[  167.387120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  167.396401] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  167.403278] 8021q: adding VLAN 0 to HW filter on device team0
13:49:16 executing program 1:
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
close(r0)

[  167.410663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.417538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.425374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.435427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  167.445867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
13:49:16 executing program 5:
syz_open_dev$dri(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x40000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x2, 0x1, 0x40, 0x3}})
ioctl$sock_bt_hci(r1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6f, 0x0, 0x1ed)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000480)={{0x0, @addr=0xffffffffffff947f}, "732ad03644c9e40d914c670ac18366aeb48d297e55741e7ea55021d9e7a3416f", 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000001c0), 0x4)

[  167.463238] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  167.475379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.485367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.502916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  167.513629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  167.528287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.533851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  167.548827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  167.557958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  167.561348] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.573468] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.574665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.580492] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.593310] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.600216] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.604030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.607347] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.616268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.628422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.635682] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.636822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.653970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.656982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.663406] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.669997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.691206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  167.695888] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  167.699132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  167.719343] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.725796] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.735574] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  167.742114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.751448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  167.761446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  167.770452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  167.779671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  167.788855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  167.796705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.810614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.818224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.832497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.840525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  167.848428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.856893] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.863287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.874545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.889790] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  167.902641] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  167.908655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.921713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  167.934007] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  167.935840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  167.944871] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  167.962225] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  167.964258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.972698] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  167.982583] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  167.989419] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  167.994363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.996613] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  168.009811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  168.019713] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  168.024519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  168.026884] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  168.039472] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  168.040541] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  168.052721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  168.053639] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  168.061889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  168.085501] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  168.085602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  168.102815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  168.114723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.126099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
13:49:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
mount$9p_xen(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x8042d, &(0x7f00000002c0)={'trans=xen,', {[{@access_user='access=user'}, {@cache_fscache='cache=fscache'}]}})
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

[  168.145067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  168.169454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  168.179521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  168.191730] audit: type=1400 audit(1555940957.220:40): avc:  denied  { write } for  pid=7033 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[  168.217212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  168.225002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  168.235166] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
13:49:17 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
rt_sigsuspend(0x0, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f]\x97\x9f\xc2')
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0)

[  168.243249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
13:49:17 executing program 5:
syz_open_dev$dri(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x40000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x2, 0x1, 0x40, 0x3}})
ioctl$sock_bt_hci(r1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6f, 0x0, 0x1ed)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000480)={{0x0, @addr=0xffffffffffff947f}, "732ad03644c9e40d914c670ac18366aeb48d297e55741e7ea55021d9e7a3416f", 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000001c0), 0x4)

13:49:17 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x40000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x2, 0x1, 0x40, 0x3}})
ioctl$sock_bt_hci(r1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6f, 0x0, 0x1ed)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000480)={{0x0, @addr=0xffffffffffff947f}, "732ad03644c9e40d914c670ac18366aeb48d297e55741e7ea55021d9e7a3416f", 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000001c0), 0x4)

[  168.330197] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  168.344518] 8021q: adding VLAN 0 to HW filter on device batadv0
13:49:17 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x2, @link_local, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0)

13:49:17 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x40000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x2, 0x1, 0x40, 0x3}})
ioctl$sock_bt_hci(r1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6f, 0x0, 0x1ed)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000480)={{0x0, @addr=0xffffffffffff947f}, "732ad03644c9e40d914c670ac18366aeb48d297e55741e7ea55021d9e7a3416f", 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000001c0), 0x4)

13:49:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00')
getdents64(r0, &(0x7f0000000000)=""/116, 0x8001)

13:49:18 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffd5}}, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0xb0ffffff], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

13:49:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x2000004e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x75d, 0x44000122, 0x0)

13:49:18 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00\xf5\xfdL\r1u\xe7b\x96\xe7&|\xb0\x0f\x1c\x0f\xba')
readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000001580)=""/227, 0xe3}], 0x1)

13:49:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)

13:49:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f00000003c0)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

13:49:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00')
getdents64(r0, &(0x7f0000000000)=""/116, 0x8001)

13:49:18 executing program 3:
syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x80000001, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x2, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/108, 0x6c}], 0x1)
write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
close(r0)

13:49:18 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}}, 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0xb0ffffff], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

13:49:18 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, 0x0)

13:49:18 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4)
recvmmsg(r0, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0)

[  169.860597] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  169.867329] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
13:49:18 executing program 2:
syz_mount_image$reiserfs(&(0x7f0000000840)='reiserfs\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='block-allocator='])

13:49:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00')
syncfs(0xffffffffffffffff)
getdents64(r0, &(0x7f0000000000)=""/116, 0x8001)
fanotify_mark(r0, 0x60, 0x0, 0xffffffffffffffff, 0x0)

[  169.936933] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
13:49:19 executing program 1:
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x480000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x0, 0x2)

[  170.016674] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  170.062089] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  170.069245] ==================================================================
[  170.076809] BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0
[  170.083220] Read of size 8 at addr ffffffff8677b3d8 by task syz-executor.2/7149
[  170.083228] 
[  170.083243] CPU: 1 PID: 7149 Comm: syz-executor.2 Not tainted 4.14.113 #3
[  170.083249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  170.083253] Call Trace:
[  170.083270]  dump_stack+0x138/0x19c
[  170.083281]  ? strscpy+0x20e/0x2c0
[  170.083295]  print_address_description.cold+0x5/0x1dc
[  170.083306]  ? strscpy+0x20e/0x2c0
[  170.099456]  kasan_report.cold+0xaf/0x2b5
[  170.099472]  __asan_report_load8_noabort+0x14/0x20
[  170.099484]  strscpy+0x20e/0x2c0
[  170.148763]  prepare_error_buf+0x94/0x1aa0
[  170.153017]  ? lock_downgrade+0x6e0/0x6e0
[  170.157182]  ? scnprintf_le_key+0x600/0x600
[  170.161523]  ? __lock_acquire+0x5f9/0x45e0
[  170.165771]  __reiserfs_warning+0x9f/0xb0
[  170.169935]  ? reiserfs_printk+0xd0/0xd0
[  170.174008]  ? trace_hardirqs_on+0x10/0x10
[  170.178261]  reiserfs_parse_options+0x14e2/0x1820
[  170.183114]  ? reiserfs_sync_fs+0xe0/0xe0
[  170.187261]  ? trace_hardirqs_on+0x10/0x10
[  170.191570]  ? workqueue_sysfs_register+0x3c0/0x3c0
[  170.196587]  ? lockdep_init_map+0x9/0x10
[  170.200643]  ? debug_mutex_init+0x2d/0x5a
[  170.205280]  reiserfs_fill_super+0x461/0x2b20
[  170.209966]  ? finish_unfinished+0x1010/0x1010
[  170.214569]  ? snprintf+0xa5/0xd0
[  170.218036]  ? set_blocksize+0x270/0x300
[  170.222102]  ? ns_test_super+0x50/0x50
[  170.226006]  mount_bdev+0x2c1/0x370
[  170.229636]  ? finish_unfinished+0x1010/0x1010
[  170.234216]  get_super_block+0x35/0x40
[  170.238087]  mount_fs+0x9d/0x2a7
[  170.241435]  vfs_kern_mount.part.0+0x5e/0x3d0
[  170.245978]  do_mount+0x417/0x27d0
[  170.249547]  ? copy_mount_options+0x5c/0x2f0
[  170.253937]  ? rcu_read_lock_sched_held+0x110/0x130
[  170.258951]  ? copy_mount_string+0x40/0x40
[  170.263172]  ? copy_mount_options+0x1fe/0x2f0
[  170.267649]  SyS_mount+0xab/0x120
[  170.271083]  ? copy_mnt_ns+0x8c0/0x8c0
[  170.274961]  do_syscall_64+0x1eb/0x630
[  170.278858]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  170.283699]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  170.288876] RIP: 0033:0x45b69a
[  170.292046] RSP: 002b:00007f16d9b52a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  170.299753] RAX: ffffffffffffffda RBX: 00007f16d9b52b40 RCX: 000000000045b69a
[  170.307027] RDX: 00007f16d9b52ae0 RSI: 0000000020000880 RDI: 00007f16d9b52b00
[  170.314287] RBP: 0000000000000000 R08: 00007f16d9b52b40 R09: 00007f16d9b52ae0
[  170.321545] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
[  170.328818] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff
[  170.336110] 
[  170.337720] The buggy address belongs to the variable:
[  170.342980]  __func__.31266+0xab8/0x3a60
[  170.347020] 
[  170.348626] Memory state around the buggy address:
[  170.353542]  ffffffff8677b280: 00 00 00 00 06 fa fa fa fa fa fa fa 00 03 fa fa
[  170.360897]  ffffffff8677b300: fa fa fa fa 00 00 00 00 05 fa fa fa fa fa fa fa
[  170.368236] >ffffffff8677b380: 00 03 fa fa fa fa fa fa 00 00 00 01 fa fa fa fa
[  170.375596]                                                     ^
[  170.381832]  ffffffff8677b400: 00 03 fa fa fa fa fa fa 00 00 00 00 fa fa fa fa
[  170.389184]  ffffffff8677b480: 05 fa fa fa fa fa fa fa 00 00 00 03 fa fa fa fa
[  170.396524] ==================================================================
[  170.403882] Disabling lock debugging due to kernel taint
[  170.410391] Kernel panic - not syncing: panic_on_warn set ...
[  170.410391] 
[  170.417784] CPU: 1 PID: 7149 Comm: syz-executor.2 Tainted: G    B           4.14.113 #3
[  170.425925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  170.429739] kobject: 'loop4' (ffff8880a4a7c9a0): kobject_uevent_env
[  170.435325] Call Trace:
[  170.435343]  dump_stack+0x138/0x19c
[  170.435359]  ? strscpy+0x20e/0x2c0
[  170.435368]  panic+0x1f2/0x438
[  170.435376]  ? add_taint.cold+0x16/0x16
[  170.435392]  kasan_end_report+0x47/0x4f
[  170.435400]  kasan_report.cold+0x136/0x2b5
[  170.435410]  __asan_report_load8_noabort+0x14/0x20
[  170.435417]  strscpy+0x20e/0x2c0
[  170.435427]  prepare_error_buf+0x94/0x1aa0
[  170.435438]  ? lock_downgrade+0x6e0/0x6e0
[  170.435447]  ? scnprintf_le_key+0x600/0x600
[  170.435456]  ? __lock_acquire+0x5f9/0x45e0
[  170.435464]  __reiserfs_warning+0x9f/0xb0
[  170.435475]  ? reiserfs_printk+0xd0/0xd0
[  170.455699] kobject: 'loop4' (ffff8880a4a7c9a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  170.458757]  ? trace_hardirqs_on+0x10/0x10
[  170.458772]  reiserfs_parse_options+0x14e2/0x1820
[  170.458783]  ? reiserfs_sync_fs+0xe0/0xe0
[  170.488589] kobject: 'loop5' (ffff8880a4aeb2a0): kobject_uevent_env
[  170.492140]  ? trace_hardirqs_on+0x10/0x10
[  170.492184]  ? workqueue_sysfs_register+0x3c0/0x3c0
[  170.498586] kobject: 'loop5' (ffff8880a4aeb2a0): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  170.500379]  ? lockdep_init_map+0x9/0x10
[  170.500388]  ? debug_mutex_init+0x2d/0x5a
[  170.500400]  reiserfs_fill_super+0x461/0x2b20
[  170.500411]  ? finish_unfinished+0x1010/0x1010
[  170.500426]  ? snprintf+0xa5/0xd0
[  170.532431] kobject: 'loop5' (ffff8880a4aeb2a0): kobject_uevent_env
[  170.533685]  ? set_blocksize+0x270/0x300
[  170.533699]  ? ns_test_super+0x50/0x50
[  170.538724] kobject: 'loop5' (ffff8880a4aeb2a0): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  170.548140]  mount_bdev+0x2c1/0x370
[  170.548150]  ? finish_unfinished+0x1010/0x1010
[  170.548158]  get_super_block+0x35/0x40
[  170.548166]  mount_fs+0x9d/0x2a7
[  170.548179]  vfs_kern_mount.part.0+0x5e/0x3d0
[  170.556564] kobject: '0000:0000:0000.0004' (ffff8880632c23b8): kobject_add_internal: parent: 'uhid', set: 'devices'
[  170.560877]  do_mount+0x417/0x27d0
[  170.560885]  ? copy_mount_options+0x5c/0x2f0
[  170.560896]  ? rcu_read_lock_sched_held+0x110/0x130
[  170.560908]  ? copy_mount_string+0x40/0x40
[  170.565697] kobject: '0000:0000:0000.0004' (ffff8880632c23b8): kobject_uevent_env
[  170.568929]  ? copy_mount_options+0x1fe/0x2f0
[  170.568940]  SyS_mount+0xab/0x120
[  170.568948]  ? copy_mnt_ns+0x8c0/0x8c0
[  170.568961]  do_syscall_64+0x1eb/0x630
[  170.580350] kobject: '0000:0000:0000.0004' (ffff8880632c23b8): fill_kobj_path: path = '/devices/virtual/misc/uhid/0000:0000:0000.0004'
[  170.583288]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  170.583304]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  170.583313] RIP: 0033:0x45b69a
[  170.606754] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  170.608260] RSP: 002b:00007f16d9b52a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  170.608276] RAX: ffffffffffffffda RBX: 00007f16d9b52b40 RCX: 000000000045b69a
[  170.608282] RDX: 00007f16d9b52ae0 RSI: 0000000020000880 RDI: 00007f16d9b52b00
[  170.608286] RBP: 0000000000000000 R08: 00007f16d9b52b40 R09: 00007f16d9b52ae0
[  170.608293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
[  170.618359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  170.623368] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff
[  170.624383] Kernel Offset: disabled
[  170.751178] Rebooting in 86400 seconds..