[?25l[?1c7[ ok 8[?25h[?0c. [ 35.227517] audit: type=1800 audit(1564385550.405:33): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 35.250653] audit: type=1800 audit(1564385550.415:34): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 [ 35.804921] random: sshd: uninitialized urandom read (32 bytes read) [ 36.138995] audit: type=1400 audit(1564385551.315:35): avc: denied { map } for pid=7167 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 36.191261] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.866389] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.39' (ECDSA) to the list of known hosts. [ 42.455733] random: sshd: uninitialized urandom read (32 bytes read) 2019/07/29 07:32:37 fuzzer started [ 42.652676] audit: type=1400 audit(1564385557.835:36): avc: denied { map } for pid=7176 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.805588] random: cc1: uninitialized urandom read (8 bytes read) 2019/07/29 07:32:40 dialing manager at 10.128.0.105:45179 2019/07/29 07:32:41 syscalls: 2461 2019/07/29 07:32:41 code coverage: enabled 2019/07/29 07:32:41 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/07/29 07:32:41 extra coverage: extra coverage is not supported by the kernel 2019/07/29 07:32:41 setuid sandbox: enabled 2019/07/29 07:32:41 namespace sandbox: enabled 2019/07/29 07:32:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/29 07:32:41 fault injection: enabled 2019/07/29 07:32:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/29 07:32:41 net packet injection: enabled 2019/07/29 07:32:41 net device setup: enabled [ 47.374926] random: crng init done 07:34:41 executing program 0: socketpair(0x13, 0x80000, 0xc60, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000140)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) fcntl$setsig(r1, 0xa, 0x29) r3 = request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r3, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0xa7c16c132865f304, 0x0) ioctl$TIOCCONS(r4, 0x541d) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000280)=0x0) r6 = fcntl$getown(r4, 0x9) rt_tgsigqueueinfo(r5, r6, 0x11, &(0x7f00000002c0)={0x2f, 0x5}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000400)={0x7, 0x1, @start={0x8, 0x1}}) modify_ldt$read(0x0, &(0x7f0000000480)=""/160, 0xa0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840)='/dev/zero\x00', 0x76b080, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000000880)=0x1, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000008c0)={0x8, {{0xa, 0x4e21, 0x81, @loopback, 0xffffffff80000000}}}, 0x88) syz_mount_image$hfs(&(0x7f0000000980)='hfs\x00', &(0x7f00000009c0)='./file0\x00', 0x100000000, 0x5, &(0x7f0000000c80)=[{&(0x7f0000000a00)="b48fc7874e821b6d008440b2b9d9929a14933a676895e9a903a1f99a7f80ad54f8fb72b423a36075bf4db1957bbe3d3376c19c94692c686ba035b6285b70ce4cfa78f52bb02d6e684caa6d0a6805434d448e4bfe034e0bb09d4ce92daa6c8ce5757e3f3ae29b3a28f3bdef80f2c360ad2b52af3b00a2c97cf87118d1c8bdcdc2cf4870bfc0f5f6cc998a1ed47716600f9ef11db3244a202cea7af3c862e9b1378f4d01e9c5773d38ca117429f5a5f1075acdca584a53bf715ad47643acce232fc91b64f13602450973f4980df9cb11a89f98d591fe0c943363d04c", 0xdb, 0x216}, {&(0x7f0000000b00)="0bb37d992906b1b6bbc6ed500da212e982e9ff7aaa741373d8763a57a43f0c9f196304b41ffe731e90f5ea3192d6", 0x2e, 0x9}, {&(0x7f0000000b40)="ae6b116bff4754274d7f65d7811f196c72dbb871fcb3811d9835b2f00b6a8ce14ccf8df39a751e200cbe8df222520dd9710f384e710bf1", 0x37, 0x101}, {&(0x7f0000000b80)="93ebe98762746aa553ad18608a7c36b1c50df7907f973acc2c5231982f3a8be58f4cf2da1aae694117a61e6071c3f6e68b", 0x31, 0x593}, {&(0x7f0000000bc0)="d2f0fe7884a057d8a56da553b8b2d7c049272e46c8d3dd519c6224bd5b6c776c06dbbb1e7671887b76c0d5adb65bddc6960844ab8af6a541756120e94e59a405d9b1702f25b6399002276d8d346d8f96eb2208a613389acea52d13d65881d105af20ad49dc18ec034e9b99ad51ab40502f86c650c85fe2509d37bccebf78e413aab34e84d865615a3a1037e8de4c6219331777b3575631670d80f98f8401ea1695", 0xa1, 0x4}], 0x400, &(0x7f0000000d00)={[{@quiet='quiet'}, {@umask={'umask', 0x3d, 0xffffffff}}, {@uid={'uid', 0x3d, r2}}, {@dir_umask={'dir_umask', 0x3d, 0x3179}}], [{@smackfsdef={'smackfsdef', 0x3d, '}'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/zero\x00'}}, {@euid_lt={'euid<', r2}}, {@fsmagic={'fsmagic', 0x3d, 0x22}}, {@seclabel='seclabel'}, {@subj_type={'subj_type', 0x3d, '+selinux[ppp0'}}, {@subj_user={'subj_user', 0x3d, '/dev/zero\x00'}}, {@euid_lt={'euid<', r7}}]}) keyctl$reject(0x13, r3, 0x1, 0x400, r3) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000e40)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000e80)={0x4, "fba54bfa4efa2e4ff111c55faae791dab7170c839adb9a8480dcbd61d8414649", 0x1, 0x1}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000ec0)={0x5, 0x8, 0x1, 0xffff}, 0x6) open(&(0x7f0000000f00)='./file1\x00', 0x400000, 0x48) sysfs$1(0x1, &(0x7f0000000f40)='cpuset\x00') write$UHID_DESTROY(r4, &(0x7f0000000f80), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000fc0)={0x0, 0x5, 0x3325, 0x9, 0x101, 0x202}, &(0x7f0000001000)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001040)={r9, @in={{0x2, 0x4e21, @loopback}}, 0x6, 0x637, 0x3, 0x5}, &(0x7f0000001100)=0x98) openat$vimc0(0xffffffffffffff9c, &(0x7f0000001140)='/dev/video0\x00', 0x2, 0x0) 07:34:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x400) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x50) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000100)={0x0, r1}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x33) getpeername$tipc(r1, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0xfff) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000200), 0x4) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={[], 0x3, 0x4, 0x7fffffff, 0x0, 0x6, 0x2, 0x4, [], 0x1}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000440)={0x70001, 0x0, [0xfffffffffffffe00, 0x5, 0x4, 0x80000000, 0xc5, 0x2, 0x6, 0x1]}) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000004c0), 0x4) open(&(0x7f0000000500)='./file0\x00', 0x22000, 0x20) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000540)=""/67) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/audio\x00', 0x1, 0x0) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000600)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={0x0, @rand_addr, @initdev}, &(0x7f0000000680)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000800)={{{@in=@remote, @in6=@mcast1, 0x4e22, 0x0, 0x4e24, 0x4, 0x2, 0x80, 0x20, 0x73, r4, r5}, {0x3, 0xfffffffffffffffd, 0xd, 0x8, 0x1000, 0xffffffffffffff7f, 0x4bf5, 0xdc}, {0x40, 0x9, 0x9ceb, 0x80000000}, 0x9, 0x6e6bb1, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={[], [], @remote}, 0x4d4, 0x33}, 0xa, @in=@rand_addr=0xffffffffffffffe0, 0x34ff, 0x2, 0x1, 0x8, 0x101, 0x7fffffff, 0x9f0}}, 0xe8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000900)={'ipvs\x00'}, &(0x7f0000000940)=0x1e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000980), &(0x7f00000009c0)=0x4) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000a00)=""/160) write$selinux_validatetrans(r2, &(0x7f0000000ac0)={'system_u:object_r:systemd_logger_exec_t:s0', 0x20, 'system_u:object_r:fonts_t:s0', 0x20, 0x1, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7b) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000b40)={@empty, @multicast2, 0x1, 0x8, [@broadcast, @multicast1, @multicast2, @empty, @rand_addr=0x7, @broadcast, @remote, @loopback]}, 0x30) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000b80)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000c00)={0x5, &(0x7f0000000bc0)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000c40)={r6, 0x1}) 07:34:41 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "5b8fd04e0361a382", "a2bd2cb534494743ce0befdb05d60f7c", "8056a5b0", "7bdc8bafcdbb1a6c"}, 0x28) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x307}, "a72b9a406988d671", "f071743771491554f11fe86359151721", "177989a0", "919c046d7043a908"}, 0x28) getpeername$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x9a, 0x0, @scatter={0x3, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000002c0)=""/231, 0xe7}]}, &(0x7f0000000400)="5169990f18afe8eb25b6e350b703504ca1b65dc12d2d8fadd4d67b91584a14a9efa51f7bdcb4de455b385de71cda16a2e20c8a2aba7475840f2bc0aa124c91ad71e0fa397154667f4a306d48bbe5d174cbd6e32bef4ce6d590b9870b13c1ab7a2e5da9250b200963f2e1c38a2fd132a9fd18313dd252689580d39a0552ac6481dfd5147ddf9c2856d204bdc76c84fa872a16eaabe360c0a8ca89", &(0x7f00000004c0)=""/168, 0x3, 0x10013, 0x0, &(0x7f0000000580)}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000640)=0x4) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000680)={0x3, 0x0, [{}, {}, {}]}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000006c0)) r1 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x8, 0x40000) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @bcast, @bpq0='bpq0\x00', 0x3, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r2 = socket$inet6(0xa, 0x3, 0x2) io_setup(0x8001, &(0x7f00000007c0)=0x0) io_submit(r3, 0x5, &(0x7f0000001bc0)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x10001, r2, &(0x7f0000000800)="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", 0xfb, 0x8, 0x0, 0x0, r0}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x6, 0x7fff, r1, &(0x7f0000000940)="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", 0x1000, 0x5, 0x0, 0x70f5845fb11bc588}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x2, 0x1, r2, &(0x7f0000001980)="492ac13036d113c671835be0a070a4522a3a757b224f03ad7a569644aed8371effcc466179a9eca76bd673f94b80357ddc8758b89c18ba898c4559", 0x3b, 0x0, 0x0, 0x2, r1}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0xfff, r2, &(0x7f0000001a00)="2001e5e66fc4616bb917d89e7fe1d118ae36b6ddaa42a066777bd64d78bccf5f644f4f5d54a51b49e17589300abf3d3301c2ff5e5f705f97c3d46e932335f6b8eafc4b680fb600a4074c137cdd6800a5802c3f90d1584ef53e82e4a48459189fc8c22d7d579d90cc117b", 0x6a, 0x94a, 0x0, 0x2, r1}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f0000001ac0)="2561273bdec81d61687dcf37bc7b19a9a79eb7f1f694025601d2e62f318d580532d0261bb21b7b839a223de6adffd8728e72033c7a612dec306e824119d2f2da35dd6018df5279433df4719886c261958c540343b7bdf22620442c419ec358f65b1fb28f56f136af77d7a892dc2b884cd428691cc7e9656763d124930e19579d504f3813619a9302f3dbbf4414bb23403df5392520b91952700a", 0x9a, 0x1, 0x0, 0x2}]) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000001c00)={0x0, 0x7530}, 0x10) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000001c40)={0xa, 0x400, [{0x0, 0x0, 0x3}, {0x20, 0x0, 0x1}, {0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x220}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0xfffffffffffffff8}, {0x8}, {0x401, 0x0, 0x7}, {0x8001, 0x0, 0x2}, {0x5, 0x0, 0x1}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001d00)={0x0, 0x10001}, &(0x7f0000001d40)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001d80)={r4, 0x44}, 0x8) exit_group(0x7f) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000001e40)={0xa10000, 0x7, 0xce, [], &(0x7f0000001e00)={0xbb0bb5, 0x8950, [], @p_u16=&(0x7f0000001dc0)=0x9}}) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000001e80)=0xdfeb) syz_open_dev$vcsn(&(0x7f0000001ec0)='/dev/vcs#\x00', 0x2, 0x4ba000) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001f00)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000001f40)={0x0, 0x100000000, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000001f80)={0x3, 0x5, 0x3fd, 'queue1\x00', 0x8}) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000002040)={0x4, [0x800, 0x76, 0xff, 0xfffffffffffffffb]}) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) futex(&(0x7f0000002080), 0x4, 0x2, &(0x7f0000002100)={r6, r7+30000000}, &(0x7f0000002140)=0x2, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000002180)=0x80000000, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000021c0)=@int=0xad5d, 0x4) 07:34:41 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x402400) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/131) set_tid_address(&(0x7f0000000100)) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x400, @loopback, 0xa20f}}, 0x24) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = getpgid(0x0) r2 = gettid() tgkill(r1, r2, 0x5) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$sndseq(r4, &(0x7f0000000240)=[{0x4, 0xfff, 0x10001, 0x5141, @time={0x77359400}, {0xfffffffffffffffd, 0x9b}, {0x6, 0x1}, @queue={0x0, {0x5, 0x3}}}, {0xfffffffffffff800, 0x80000000000000, 0x7, 0x40, @tick=0xffffffff, {0x80000001, 0xffff}, {0x0, 0x400}, @raw8={"0429f7ba4cf0dc637850a446"}}, {0x1, 0x7, 0x800, 0x8, @tick=0x7, {0x7, 0x5}, {0xccc, 0x401}, @raw32={[0xacb5, 0x3, 0xff]}}, {0x5a2, 0x0, 0x7, 0x6, @time={r5, r6+10000000}, {0xd3, 0x4d}, {0x101, 0x8}, @control={0x9, 0x7fff, 0x8}}, {0x101, 0x600, 0x5, 0x8, @time={0x77359400}, {0xea, 0x839}, {0x800, 0x100000001}, @addr={0x3, 0xfff}}, {0x100, 0x20, 0x7, 0x1, @tick=0x1, {0x2, 0x101}, {0x1, 0x20000}, @time=@tick=0x3}, {0x0, 0x1, 0x80000001, 0x3, @tick=0x7fffffff, {0x8, 0x2b78}, {0x1, 0x4}, @note={0x6, 0xe53f, 0x3ff, 0x4, 0x6}}, {0x101, 0x80000001, 0xffffffffffffffe1, 0x0, @tick=0x8, {0x1, 0x6}, {0x0, 0x81}, @addr={0x5, 0x401}}], 0x180) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000003c0)={0x0, 0x1, 0xfe000000000, 0x4}) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000400)=0x80000001, &(0x7f0000000440)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000480)={{0x9, 0x200}, 'port0\x00', 0x21, 0xc00, 0x3, 0x1, 0x8, 0xfffffffffffffff7, 0x7, 0x0, 0x6, 0x8}) ioctl$VT_WAITACTIVE(r3, 0x5607) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000540)="6261c3fec514b5f0df43b9c7650eb89aa649c10187077d4808ea2e3e85060e8ce1078bedf3d7034511983b47bd6a220596d35d1d0459775cf00ec97f5213cd70f5fb376be84ad73a0effcb1aa6ea1aef2eb84238ce34e9522507bbea5674e97b7cdb25753deedb20ebf00f819dd935c9d4fd01b61341d5490430f3b3584b0778d7ca3f3c2ab429e2ac2349ab0b6c32", 0x8f}, {&(0x7f0000000600)="634414c3e03895814b931e370ab88dd3a0199c7ebed6bf755802a3863eb3f8f54f77c1667c8308793b8485be5f", 0x2d}, {&(0x7f0000000640)="78ea771c9d8191e46ac9350ddfbe92bfe45e8d13585425b6a50c8024716775425f54cc59feffdf9e50761302dee39ad55532c3701d49f6d38e58f524b4e053e5d04d3967e18882a4359757ed0a06f2c556689c81ae09297967bb3967594126852cf1bff3e0fc15e4d2cd5297c24f4e9f5feb4b0341b5ee123fff94d86f13cadc81658e43ebb11d1a38ec6a21d0da708fbfd54c8d065504d9a8fcdcca19b4217fd3022d612574bc3037312802b452c2fe5b114bcd223a4b36c3eac7f82015f5907311cedc34beb3da004388", 0xcb}], 0x3) ptrace$getsig(0x4202, r1, 0x80000001, &(0x7f0000000780)) r7 = openat(r3, &(0x7f0000000800)='./file0\x00', 0x0, 0xd6) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000880), 0x4) mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='overlay\x00', 0x800000, &(0x7f0000000940)={[{@nfs_export_on='nfs_export=on'}, {@xino_auto='xino=auto'}, {@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}, {@xino_off='xino=off'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}], [{@hash='hash'}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000a00)=0x6, 0x4) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000a40)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x747, 'syz0\x00', @default, 0x3, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000ac0)={0x6}, 0x4) 07:34:41 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77fb, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 166.243530] audit: type=1400 audit(1564385681.425:37): avc: denied { map } for pid=7176 comm="syz-fuzzer" path="/root/syzkaller-shm950401132" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 07:34:41 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4003, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x8001005, 0xd793, 0x3}) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x800100a, 0x6, 0x1}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200040, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0xfffffffffffffffc) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x80000000, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x1000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r3, 0xc2, "01a0e0c71cf06808411ab4b540bb33ff53a13227007dab2fcd43812e504732e0ef379efadbeb7a080ec541c8a358bcbeb71a88ea1e658dc9b1cd9b39d6178ce738b1b9222a93a75b9d8ad0904fe1230dfc131a0f6e02cc0b57f83ff8a3bc5851dae90feca7959e64e785786247265f1a6b791be411d277bfa7e2024b818f6c1e62796415691ce97980bee4b0c87c53b32125c8cc1c809c78e285b14154a36704ae58e87c2bd3b8ba05a39d517cc03104fa4bc7fa5700de4675ddf34e852dad5b09a0"}, &(0x7f0000000300)=0xca) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) fstatfs(r4, &(0x7f0000000400)=""/4096) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000001400)={{0xd1, 0x100000001, 0x8, 0x3, 0x3, 0x10000}, 0xfffffffffffffffb}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000001440)={0x800, 0x7}) connect$tipc(r0, &(0x7f0000001480)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000014c0)=0x7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001500)) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000001540)) prctl$PR_SET_FP_MODE(0x2d, 0x1) fstat(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000001600)=[0xee01]) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001640)={0xa0, 0x0, 0x2, {{0x4, 0x0, 0x400, 0x6, 0x0, 0x2, {0x0, 0xffffffff, 0x81, 0x3b3, 0x6, 0x8000, 0xd3, 0x401, 0x1, 0x84, 0x3, r5, r6, 0x0, 0x7}}, {0x0, 0x1}}}, 0xa0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(r0, &(0x7f0000001a00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001740)={0x250, 0x9, 0x7, 0x300, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x7}, [@generic="a723c79abe36f11de19fd37ca23c46b7e765623129cea87697f290e5ea4390b58ef8c940705606ffbbf3ff78f746f756fa8a9b96dc72e53b8378e38f14f671e4bd472933c835225594a6c074f5286306dec6e524446e643daaff9eeb43687817625c7c0179329bd0364d0be801b310b72c1e3ee13fae3a5a2579070fa5d92bfb98abe6b683eb85f36cf7ca9d8bbaf05ed274c3d12d52060a7708b6d85f7aad33f09c53a396656c60ab7fc0e2c35a449fcca33c704677eec72cb13491e0f552d88fbb8007a311ba4557a4946a8ad299cac6", @generic="d4e97aa0677a8bfdc814dd0a6a", @generic="592f0cd74bd2acd60735fbebf60689ca7cf039be5764ea262fc633c1c1ff30c426052fa61d3b16f8081ee82a946b373ee6104ea4a89660320c8959f5f2de3ee10e98e3da21ce9f90c3647456d05a2a6814b7c7f8564f29b71643a3c6a8f54cf0c861f4253adcb10ef0cd23e630c1b575d0adf48b9f62e0b5a7bed8637aff167df99991157d38ec3e8d61512306f425cdbc10d934408d82503f77e67e625af16fabc67c7282828eaadf566f72a720444e955752db6cad0c03c9f29fdc587cb0247029346250a78c6635eef3eb", @typed={0x8, 0x15, @u32=0x1}, @generic="4d1fcf0c19ed184911aac17e8ebc7a33149458850e539bde7572d9b866f8f95ce48e66ff3b30e0c09a30e021688b96a09155b88e0a09c177a4a243ec340a7ed380f95f6c22769591be53408ad2c12c2a5ff8b91a7e9821c13a3aeb684fd0e9861b15ea254b6f745a7bc44ff9cbc9e0f1f810f2953059497acaeb312e5de8c034bbf3bab5753703"]}, 0x250}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001a40)={0x2, [0x80000001, 0x6]}, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000001b00)=0xf8) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000001b40)=0x2) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001b80)={0x7, [0xfffffffffffff001, 0x2, 0x2, 0x800, 0x8, 0x0, 0x1]}, 0x12) [ 166.288689] audit: type=1400 audit(1564385681.425:38): avc: denied { map } for pid=7193 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1119 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 167.100291] IPVS: ftp: loaded support on port[0] = 21 [ 167.448595] chnl_net:caif_netlink_parms(): no params data found [ 167.482808] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.489620] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.497201] device bridge_slave_0 entered promiscuous mode [ 167.504652] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.511144] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.518139] device bridge_slave_1 entered promiscuous mode [ 167.524309] IPVS: ftp: loaded support on port[0] = 21 [ 167.547421] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.558656] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 167.587201] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 167.595642] team0: Port device team_slave_0 added [ 167.605725] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.612995] team0: Port device team_slave_1 added [ 167.621545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.631667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.646278] IPVS: ftp: loaded support on port[0] = 21 [ 167.712525] device hsr_slave_0 entered promiscuous mode [ 167.750399] device hsr_slave_1 entered promiscuous mode [ 167.832030] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 167.853089] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 167.901324] chnl_net:caif_netlink_parms(): no params data found [ 167.942588] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.949088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.956140] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.962612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.981128] IPVS: ftp: loaded support on port[0] = 21 [ 168.036487] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.043505] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.050914] device bridge_slave_0 entered promiscuous mode [ 168.081028] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.087424] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.094530] device bridge_slave_1 entered promiscuous mode [ 168.117581] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 168.132998] chnl_net:caif_netlink_parms(): no params data found [ 168.142825] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.177577] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 168.185078] team0: Port device team_slave_0 added [ 168.195771] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 168.202990] team0: Port device team_slave_1 added [ 168.211668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.222578] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.248546] IPVS: ftp: loaded support on port[0] = 21 [ 168.276364] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.282871] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.289868] device bridge_slave_0 entered promiscuous mode [ 168.299436] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.306066] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.313207] device bridge_slave_1 entered promiscuous mode [ 168.392230] device hsr_slave_0 entered promiscuous mode [ 168.430453] device hsr_slave_1 entered promiscuous mode [ 168.470925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 168.479180] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 168.488632] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 168.497894] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.527618] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.545861] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.603504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.610564] chnl_net:caif_netlink_parms(): no params data found [ 168.621142] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 168.628392] team0: Port device team_slave_0 added [ 168.650194] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 168.657383] team0: Port device team_slave_1 added [ 168.663639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.684221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.703328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.722006] IPVS: ftp: loaded support on port[0] = 21 [ 168.754595] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.761400] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.768354] device bridge_slave_0 entered promiscuous mode [ 168.832321] device hsr_slave_0 entered promiscuous mode [ 168.870415] device hsr_slave_1 entered promiscuous mode [ 168.940751] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 168.947995] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 168.956036] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.962913] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.969906] device bridge_slave_1 entered promiscuous mode [ 168.989009] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.021008] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.045750] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 169.054424] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.074262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.126865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.135057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.155501] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.163123] team0: Port device team_slave_0 added [ 169.169396] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.177201] team0: Port device team_slave_1 added [ 169.186604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 169.195714] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 169.202106] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.213913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.221398] chnl_net:caif_netlink_parms(): no params data found [ 169.231579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 169.241684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.254376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.262161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.269760] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.276186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.286208] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.311231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.322198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.331631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.339258] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.345898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.368742] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.379400] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 169.385689] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.398344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.406173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.453995] device hsr_slave_0 entered promiscuous mode [ 169.512116] device hsr_slave_1 entered promiscuous mode [ 169.551576] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 169.559804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 169.609736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.618250] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 169.657546] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.664720] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.671783] device bridge_slave_0 entered promiscuous mode [ 169.681123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 169.695802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.705882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.716031] chnl_net:caif_netlink_parms(): no params data found [ 169.725840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.733902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.742120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.749836] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.756559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.763808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.772362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.780012] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.786438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.793832] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.802320] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.809341] device bridge_slave_1 entered promiscuous mode [ 169.831152] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.842110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.851121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 169.863030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.871397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.879376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.887746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.901801] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 169.912816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 169.947198] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.954975] team0: Port device team_slave_0 added [ 169.961332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.968581] team0: Port device team_slave_1 added [ 169.974595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.987248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 169.995759] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.009410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 170.019263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.027312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.035145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.046959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.055337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.064958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 170.086874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 170.095131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.106479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.114515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.122431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.130558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.139090] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 170.181444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 170.189915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.204435] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 170.210959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.219484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.229132] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.235789] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.243432] device bridge_slave_0 entered promiscuous mode [ 170.282308] device hsr_slave_0 entered promiscuous mode [ 170.330414] device hsr_slave_1 entered promiscuous mode [ 170.370971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.380541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.388047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.395116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.416324] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.423133] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.431678] device bridge_slave_1 entered promiscuous mode [ 170.439090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 170.446777] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 170.457338] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 170.476054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.484082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.493408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 170.504538] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 170.514558] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 170.520720] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.531927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.546255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.554415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.562434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.570291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.577846] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.584251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.593567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 170.608828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.616909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.626123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.634242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.642725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.650822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.658237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.666379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.674480] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.680888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.689776] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 170.696349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.706527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 170.714577] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.733843] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 170.746729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.757247] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.766695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 170.792181] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 170.798869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.807000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.814181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.824821] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 170.831763] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.839403] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.851651] team0: Port device team_slave_0 added [ 170.865349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.876707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 170.894560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.903756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.912580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.920666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.928183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.935480] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.943159] team0: Port device team_slave_1 added [ 170.949105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.962831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.972655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 170.982619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.991126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 171.000860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.009115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.017190] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.023631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.031635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.039631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.048101] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.054553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.062015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.069851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.078040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.085821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.093603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.104002] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.158275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.167958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 171.177628] hfs: umask requires a value [ 171.189432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.199590] hfs: unable to parse mount options 07:34:46 executing program 0: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000005100)=""/211) [ 171.205010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.226368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 07:34:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/235, 0xeb}], 0x1, 0x0) [ 171.273907] device hsr_slave_0 entered promiscuous mode [ 171.301449] device hsr_slave_1 entered promiscuous mode 07:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x8040800) 07:34:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x83}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 171.335081] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 171.352109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.359707] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 171.393181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.415942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.425677] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 07:34:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x8b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 171.436837] EXT4-fs warning (device sda1): ext4_group_extend:1764: will only finish group (524288 blocks, 256 new) [ 171.447188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.454819] EXT4-fs warning (device sda1): ext4_group_extend:1770: can't read last block, resize aborted [ 171.482114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 07:34:46 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) [ 171.501024] EXT4-fs warning (device sda1): ext4_group_extend:1764: will only finish group (524288 blocks, 256 new) [ 171.501985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.512146] EXT4-fs warning (device sda1): ext4_group_extend:1770: can't read last block, resize aborted [ 171.537631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.549860] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 171.567394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.581702] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 171.593386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 07:34:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x4d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 171.599866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.623592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.632907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.654464] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 171.671862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.691377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.698359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.717207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 171.726272] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 171.733102] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.745824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.753586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.766453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 171.776608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.785836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.796294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 171.805215] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 171.812265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.819824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.833220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.841670] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.848066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.857584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.873115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.881182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.889040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.897222] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.903637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.913662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.926433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.936865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.944917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.957762] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 171.967539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.974894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.983991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.997154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.009083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.020575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.031264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.039160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.060683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 172.076997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.083816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.094727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.105142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 172.124866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 07:34:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x9d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 172.136283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.150881] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.157757] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 172.169062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.192483] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.200299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.211392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.227950] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 172.234773] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.247256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.264098] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 172.278042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.286980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.300778] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.307198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.325214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.336685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.344212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.352274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.359918] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.366364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.378568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 172.388748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.396453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.405783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.416820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.425502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.433073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.441475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.449183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.458804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.466786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.476851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.489821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 172.498145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.509669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.519667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 172.532779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.540696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.554310] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 172.560829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.574410] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 172.585293] 8021q: adding VLAN 0 to HW filter on device batadv0 07:34:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x75}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 07:34:48 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x4a}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 07:34:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000400)=""/142, 0x8e}], 0x1025, 0x0, 0xfffffffffffffd79}}], 0x0, 0x0, 0x0) close(r1) openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) readv(r1, &(0x7f00000002c0), 0x17a) 07:34:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x8a}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 07:34:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000400)=""/142, 0x8e}], 0x1025, 0x0, 0xfffffffffffffd79}}], 0x0, 0x0, 0x0) close(r1) openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) readv(r1, &(0x7f00000002c0), 0x17a) 07:34:48 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 173.770711] audit: type=1400 audit(1564385688.955:39): avc: denied { name_bind } for pid=7318 comm="syz-executor.3" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 07:34:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="72a33e03f30000000000000000003dca9fecf221fb0bb000000000000000003fcb"], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:34:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x2, &(0x7f0000000180)=@raw=[@map={0xffffff85, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x18}], &(0x7f0000000340)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 173.816321] hrtimer: interrupt took 36747 ns 07:34:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000027000500d25a80648c63940d0300fc001000084002000000053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 07:34:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x50}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 07:34:49 executing program 1: [ 173.850872] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 173.872969] audit: type=1400 audit(1564385688.955:40): avc: denied { node_bind } for pid=7318 comm="syz-executor.3" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 07:34:49 executing program 4: 07:34:49 executing program 3: 07:34:49 executing program 5: 07:34:49 executing program 1: 07:34:49 executing program 4: 07:34:49 executing program 2: [ 174.029673] audit: type=1400 audit(1564385688.955:41): avc: denied { name_connect } for pid=7318 comm="syz-executor.3" dest=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 07:34:49 executing program 0: 07:34:49 executing program 5: 07:34:49 executing program 2: 07:34:49 executing program 4: 07:34:49 executing program 1: 07:34:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x8000013f}}, 0x30a) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r2, 0x2, 0x4, 0x400000}}, 0x20) [ 174.165377] audit: type=1400 audit(1564385689.115:42): avc: denied { create } for pid=7335 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:34:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000400)=""/142, 0x8e}], 0x1025, 0x0, 0xfffffffffffffd79}}], 0x0, 0x0, 0x0) close(r1) openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) readv(r1, &(0x7f00000002c0), 0x17a) 07:34:49 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) 07:34:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000400)=""/142, 0x8e}], 0x1025, 0x0, 0xfffffffffffffd79}}], 0x0, 0x0, 0x0) close(r1) openat$cgroup_int(r0, &(0x7f0000000080)='io.bfq.weight\x00\xf8\x93\f\x06\xd5\x7f\x82c\x9f\xb0R\xc9\xe3\x9b\x1ezpVo?\xfc\xa3@\xd5\x9b\xfdW\x86\xdf\x1a\x87\x95\x8bM\x8e~\xc11U\v\x8e\xd5\x95\xde\xfd\xe8\x91\x8f\xd4\x9e\x82Big\xe3.\xba{Q6\x10!:\xa9$F\x16$\xc1\n5\xca0T\xdd\xeaYs\xbf+\x9e/\xea\x19\xa2{\t\x9c\xce#5\x91\x13\xf8\x96\x84)=\x9cf\xfb\xd9\x16\x97\xbf\x91d\xb3\xa9M\xad}\xd2\x1d\xfe\xe4\xedJh#\xdc\x19\xf4\t\xf1(\"\xcde\x04p\x80\xe8\xd5\xf9\xc8Z\xb9\xa2\xea\x0f~R)V', 0x2, 0x0) readv(r1, &(0x7f00000002c0), 0x17a) 07:34:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x40000000000026d, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') connect$l2tp(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x26c, 0x0) 07:34:49 executing program 1: dup(0xffffffffffffffff) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0xa, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video35\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395544) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) 07:34:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@local}}, 0x25f) [ 174.349517] kasan: CONFIG_KASAN_INLINE enabled 07:34:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0xffb3) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) dup2(r1, r0) 07:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) [ 174.397737] audit: type=1400 audit(1564385689.125:43): avc: denied { write } for pid=7335 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 174.399584] kasan: GPF could be caused by NULL-ptr deref or user memory access 07:34:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="19da8915ffe1", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c0e544", 0x18, 0x40000000003a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0xffffff83, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) 07:34:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x58000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580, 0x0, 0x0, 0x0, 0x0, 0xff00], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 07:34:49 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x63, 0xb201, 0x22}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 174.608387] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 174.614678] Modules linked in: [ 174.617902] CPU: 1 PID: 7382 Comm: syz-executor.5 Not tainted 4.14.134 #30 [ 174.625006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.635617] task: ffff8880a904a700 task.stack: ffff888059b50000 [ 174.637894] kobject: 'loop0' (ffff8880a48f8e20): kobject_uevent_env [ 174.641686] RIP: 0010:rxrpc_connect_call+0xc9/0x41a0 [ 174.641691] RSP: 0018:ffff888059b57738 EFLAGS: 00010206 [ 174.641699] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c06e000 [ 174.641703] RDX: 0000000000000003 RSI: ffffffff8593c089 RDI: 0000000000000018 [ 174.641708] RBP: ffff888059b57880 R08: 0000000000000001 R09: ffff8880a904afa0 [ 174.641712] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808b966c00 [ 174.641717] R13: ffff88805c8688a0 R14: ffff88805c868890 R15: ffff888059b57998 [ 174.641724] FS: 00007f939444a700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 07:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x58000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x3580, 0x0, 0x0, 0x0, 0x0, 0xff00], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 07:34:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1fe, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000080)="150300000600400000000200850cf7c21975e697080080356b2a2fcddad8897c6f11876d886b662100080000d51cc5470a66e79f60d8b33deae307d02f74610000000000b7c3d66412e3a9a0", 0x4c, 0x0, 0x0, 0x0) [ 174.641729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.641733] CR2: 00007ffe53ddc978 CR3: 000000008c795000 CR4: 00000000001406e0 [ 174.641740] Call Trace: [ 174.641755] ? release_sock+0x14a/0x1b0 [ 174.641770] ? rxrpc_discard_expired_client_conns+0x7e0/0x7e0 [ 174.641780] ? __local_bh_enable_ip+0x99/0x1a0 [ 174.641791] ? trace_hardirqs_on_caller+0x400/0x590 [ 174.641800] ? release_sock+0x14a/0x1b0 [ 174.641807] ? trace_hardirqs_on+0xd/0x10 [ 174.641814] ? __local_bh_enable_ip+0x99/0x1a0 [ 174.641823] ? _raw_spin_unlock_bh+0x31/0x40 [ 174.641835] rxrpc_new_client_call+0x8f7/0x1420 [ 174.641845] ? rxrpc_do_sendmsg+0x91a/0x1103 [ 174.641853] rxrpc_do_sendmsg+0x91a/0x1103 [ 174.641863] ? rxrpc_kernel_send_data+0x470/0x470 [ 174.641875] rxrpc_sendmsg+0x48a/0x650 [ 174.641886] ? security_socket_sendmsg+0x89/0xb0 [ 174.641893] ? rxrpc_sock_destructor+0x130/0x130 [ 174.641901] sock_sendmsg+0xce/0x110 [ 174.641907] ___sys_sendmsg+0x349/0x840 [ 174.641916] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 174.641929] ? __fget+0x210/0x370 [ 174.641941] ? lock_downgrade+0x6e0/0x6e0 [ 174.641952] ? __fget+0x237/0x370 [ 174.641963] ? __fget_light+0x172/0x1f0 [ 174.641972] ? __fdget+0x1b/0x20 [ 174.641979] ? sockfd_lookup_light+0xb4/0x160 [ 174.641988] __sys_sendmmsg+0x152/0x3a0 [ 174.641997] ? SyS_sendmsg+0x50/0x50 [ 174.642013] ? kasan_check_read+0x11/0x20 [ 174.642023] ? _copy_to_user+0x87/0xd0 [ 174.642034] ? put_timespec64+0xb4/0x100 [ 174.642041] ? nsecs_to_jiffies+0x30/0x30 [ 174.642055] ? SyS_clock_gettime+0xf8/0x180 [ 174.642066] SyS_sendmmsg+0x35/0x60 [ 174.642074] ? __sys_sendmmsg+0x3a0/0x3a0 [ 174.642086] do_syscall_64+0x1e8/0x640 [ 174.642095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.642107] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.642115] RIP: 0033:0x459829 [ 174.642119] RSP: 002b:00007f9394449c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.642129] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459829 [ 174.642134] RDX: 0000000000000001 RSI: 0000000020005c00 RDI: 0000000000000003 [ 174.642139] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 174.642144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f939444a6d4 [ 174.642149] R13: 00000000004c6fe8 R14: 00000000004dc518 R15: 00000000ffffffff [ 174.642158] Code: e8 03 80 3c 18 00 0f 85 6f 39 00 00 48 8b 85 28 ff ff ff 48 8b 18 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8a 39 00 00 48 8b 5b 18 48 8d bb 00 02 00 00 [ 174.642351] RIP: rxrpc_connect_call+0xc9/0x41a0 RSP: ffff888059b57738 [ 174.719258] ---[ end trace 3975af7fa06b343c ]--- [ 174.765460] kobject: 'loop0' (ffff8880a48f8e20): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 174.796837] Kernel panic - not syncing: Fatal exception [ 174.979687] Kernel Offset: disabled [ 174.983326] Rebooting in 86400 seconds..