[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.867153] random: sshd: uninitialized urandom read (32 bytes read) [ 33.121895] kauditd_printk_skb: 9 callbacks suppressed [ 33.121904] audit: type=1400 audit(1569198973.583:35): avc: denied { map } for pid=6889 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.164754] random: sshd: uninitialized urandom read (32 bytes read) [ 33.817423] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. [ 39.286294] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/23 00:36:19 fuzzer started [ 39.478819] audit: type=1400 audit(1569198979.933:36): avc: denied { map } for pid=6899 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.094756] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/23 00:36:21 dialing manager at 10.128.0.105:42531 2019/09/23 00:36:21 syscalls: 2472 2019/09/23 00:36:21 code coverage: enabled 2019/09/23 00:36:21 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/23 00:36:21 extra coverage: extra coverage is not supported by the kernel 2019/09/23 00:36:21 setuid sandbox: enabled 2019/09/23 00:36:21 namespace sandbox: enabled 2019/09/23 00:36:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/23 00:36:21 fault injection: enabled 2019/09/23 00:36:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/23 00:36:21 net packet injection: enabled 2019/09/23 00:36:21 net device setup: enabled [ 41.766429] random: crng init done 00:38:12 executing program 5: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) r0 = gettid() ptrace$peekuser(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x0, 0x0, 0x0) tkill(r0, 0x13) 00:38:12 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200000, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) getpid() acct(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r5+30000000}}, 0x0) r6 = gettid() tkill(r6, 0x1004000000013) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x1) 00:38:12 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2], &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x5b) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'hsr0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\xc3', 0x1001}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)) 00:38:12 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 00:38:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x2c, 0x2c, 0x701, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) [ 151.748145] audit: type=1400 audit(1569199092.203:37): avc: denied { map } for pid=6899 comm="syz-fuzzer" path="/root/syzkaller-shm098279001" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 151.793923] audit: type=1400 audit(1569199092.223:38): avc: denied { map } for pid=6916 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13807 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 152.031190] IPVS: ftp: loaded support on port[0] = 21 [ 152.880481] chnl_net:caif_netlink_parms(): no params data found [ 152.888156] IPVS: ftp: loaded support on port[0] = 21 [ 152.921811] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.929200] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.936499] device bridge_slave_0 entered promiscuous mode [ 152.949561] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.956205] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.963632] device bridge_slave_1 entered promiscuous mode [ 152.988123] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.998611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.012481] IPVS: ftp: loaded support on port[0] = 21 [ 153.026437] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.034092] team0: Port device team_slave_0 added [ 153.041760] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.048808] team0: Port device team_slave_1 added [ 153.054357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.061956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.122369] device hsr_slave_0 entered promiscuous mode [ 153.170476] device hsr_slave_1 entered promiscuous mode [ 153.261483] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.268613] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.320825] chnl_net:caif_netlink_parms(): no params data found [ 153.340163] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.346709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.353734] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.360528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.411657] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.418024] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.426249] device bridge_slave_0 entered promiscuous mode [ 153.431266] IPVS: ftp: loaded support on port[0] = 21 [ 153.437668] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.444128] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.451768] device bridge_slave_1 entered promiscuous mode [ 153.482667] chnl_net:caif_netlink_parms(): no params data found [ 153.503126] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.525714] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.574809] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.581415] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.588191] device bridge_slave_0 entered promiscuous mode [ 153.594979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.602357] team0: Port device team_slave_0 added [ 153.611050] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.617400] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.625006] device bridge_slave_1 entered promiscuous mode [ 153.631524] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.638527] team0: Port device team_slave_1 added [ 153.644740] IPVS: ftp: loaded support on port[0] = 21 [ 153.647252] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 153.656537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.673703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.681606] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.689751] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.698733] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.707735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.733976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.743019] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.762080] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.822092] device hsr_slave_0 entered promiscuous mode [ 153.860440] device hsr_slave_1 entered promiscuous mode [ 153.912813] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.919957] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.927643] team0: Port device team_slave_0 added [ 153.934003] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 153.940364] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.948787] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 153.957585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.967669] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.975019] team0: Port device team_slave_1 added [ 154.023094] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.031024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.038249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.048153] chnl_net:caif_netlink_parms(): no params data found [ 154.062638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.070701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.078295] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.084862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.093950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 154.162427] device hsr_slave_0 entered promiscuous mode [ 154.210638] device hsr_slave_1 entered promiscuous mode [ 154.252985] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.259790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.267557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.275174] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.281732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.291092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 154.311707] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.323875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.334565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 154.348005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 154.355675] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.367720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.375840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.385173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.393511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.393707] IPVS: ftp: loaded support on port[0] = 21 [ 154.407237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.436338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.444383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.454105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 154.472278] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.478876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.487031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.496928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 154.504113] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.511546] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.518439] device bridge_slave_0 entered promiscuous mode [ 154.526247] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.532813] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.539704] device bridge_slave_1 entered promiscuous mode [ 154.553647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.562592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.571560] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 154.577573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.649054] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 154.662454] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.673504] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.698865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.716795] chnl_net:caif_netlink_parms(): no params data found [ 154.727319] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.735113] team0: Port device team_slave_0 added [ 154.740992] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.748073] team0: Port device team_slave_1 added [ 154.753825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.761499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.772989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.790643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.798961] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.863781] device hsr_slave_0 entered promiscuous mode [ 154.910564] device hsr_slave_1 entered promiscuous mode [ 154.952636] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.959706] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.969721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.976840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.994311] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.001149] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.017344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.033086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.047166] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.055976] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.066267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.081043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.088812] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.095209] bridge0: port 1(bridge_slave_0) entered forwarding state 00:38:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) sendto(r2, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xf5c, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x1730}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1030}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x390, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) [ 155.104674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.133529] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.147032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.158140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.166336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.174265] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.180655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.187835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.194972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.205200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.217539] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.224202] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.231301] device bridge_slave_0 entered promiscuous mode [ 155.255956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.265714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.274613] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.281090] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.287396] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.293841] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.301117] device bridge_slave_1 entered promiscuous mode [ 155.319592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.332620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.353329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 00:38:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) sendto(r2, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xf5c, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x1728}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1030}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x390, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) [ 155.370831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.385157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.397176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.405219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.413450] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.419796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.426848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.433897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.444919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 155.456969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 00:38:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) flistxattr(r1, &(0x7f0000000000)=""/148, 0x94) [ 155.478755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.489642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.507866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.516146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.524028] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.530429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.539305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 155.547244] chnl_net:caif_netlink_parms(): no params data found [ 155.557209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.567853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.575488] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.584990] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.594165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.602495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.609847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.619152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 00:38:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x0, 0x1}) [ 155.632570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.640641] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.652998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.661843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.669611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.681527] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 155.687540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.713685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 00:38:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "9645e89650196a1a", "45b6e022dbf1fb07ff029bb594c2dcd09a59ebdbe2da06595dfd2797fa4d91bc", "b2d2c111", "b2134e61152bd8a8"}, 0x38) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000200)='C', 0x1}], 0x2) [ 155.729883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.740875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.754504] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 155.773498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 155.782484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.789110] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.796641] team0: Port device team_slave_0 added [ 155.803060] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.811185] team0: Port device team_slave_1 added [ 155.816754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.824688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.832393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.840565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.847404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.873760] bridge0: port 1(bridge_slave_0) entered blocking state 00:38:16 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xf5c, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x1748}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1030}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x390, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) [ 155.880251] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.887195] device bridge_slave_0 entered promiscuous mode [ 155.894619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.902063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.911230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.921870] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.938778] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.947285] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.954917] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.962732] device bridge_slave_1 entered promiscuous mode [ 155.987042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 155.998352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.007061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.015757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.026200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.035346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.043786] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.050186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.064500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.075908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 00:38:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@uni_xlate='uni_xlate=1'}, {@shortname_winnt='shortname=winnt'}]}) [ 156.089535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.101231] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.116219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.125233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.140659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.151936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.175159] FAT-fs (loop5): bogus number of reserved sectors [ 156.189198] device hsr_slave_0 entered promiscuous mode [ 156.195556] FAT-fs (loop5): Can't find a valid FAT filesystem [ 156.220426] device hsr_slave_1 entered promiscuous mode [ 156.223529] hrtimer: interrupt took 29344 ns [ 156.250821] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.258850] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.271453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.278678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.292205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.302705] FAT-fs (loop5): bogus number of reserved sectors [ 156.310837] FAT-fs (loop5): Can't find a valid FAT filesystem [ 156.313251] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.323135] bridge0: port 2(bridge_slave_1) entered forwarding state 00:38:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000330019010000000000efffff01100000ffd38d9b0c0001000600060088480000"], 0x24}}, 0x0) [ 156.347786] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 156.355322] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.375602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.383708] team0: Port device team_slave_0 added [ 156.389330] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.402895] audit: type=1400 audit(1569199096.863:39): avc: denied { create } for pid=6999 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 156.428028] team0: Port device team_slave_1 added [ 156.433697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.440883] audit: type=1400 audit(1569199096.863:40): avc: denied { write } for pid=6999 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 156.471632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.488719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.506852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.515003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.524802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.533609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.550875] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.566391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.575010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.583610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.591543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.644204] device hsr_slave_0 entered promiscuous mode [ 156.680476] device hsr_slave_1 entered promiscuous mode [ 156.721258] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.741065] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.748930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.759451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.770951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.778756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.786497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.794384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.805750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.815886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.826715] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.834485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.855065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.866045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.881685] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 156.905210] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.911943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.925262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.936628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.954709] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.968202] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.975651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.988583] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.998122] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.014002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.025702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.035899] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.045923] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.056854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.065782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.073886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.081868] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.088349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.095987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.106898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.116563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.125471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.139596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.147381] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.153790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.161495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.171583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.179952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.196950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.205974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.213915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.221493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.233524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.243859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.253498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.261380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.268925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.276606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.286618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.299479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.306104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.313804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.324599] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.330978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.338797] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.347931] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.356623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.364288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.373696] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.379770] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.391125] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.400572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.414925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.422201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.434600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.442457] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.448807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.461096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.469964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.477490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.485314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.493211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.501815] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.508495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.515727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.529445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.536500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.547428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.555168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.563172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.571410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.581284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.589781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.597411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.605205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.612897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.621032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.632298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.639415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.647124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.656762] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.664014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.677750] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.689463] 8021q: adding VLAN 0 to HW filter on device batadv0 00:38:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r1, &(0x7f0000000140)={0x0, 0x3a, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 00:38:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5e0bcfe47bf070") fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, 0x0, r3) 00:38:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x0, 0x4}) 00:38:19 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = dup(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2], &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x5b) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'hsr0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\xc3', 0x1001}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)) 00:38:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 00:38:19 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 00:38:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08dca50d5e0bcfe47bf070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}]}) [ 158.791982] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 158.835887] audit: type=1400 audit(1569199099.293:41): avc: denied { create } for pid=7050 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 00:38:19 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 00:38:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f0000000000)) [ 158.879907] ISOFS: Unable to identify CD-ROM format. [ 158.936057] audit: type=1400 audit(1569199099.323:42): avc: denied { bind } for pid=7050 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 158.945056] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 00:38:19 executing program 5: openat$snapshot(0xffffffffffffff9c, 0x0, 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) syz_open_procfs(0x0, 0x0) [ 158.983232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:38:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000001500)='/dev/vcsa#\x00', 0x1, 0x141001) write$UHID_INPUT(r0, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x1006) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000005c0)) ptrace(0xffffffffffffffff, 0x0) 00:38:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @broadcast}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x22, 0x0, 0x0) [ 159.086608] ISOFS: Unable to identify CD-ROM format. 00:38:19 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xf5c, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x1730}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1030}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x390, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 00:38:19 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'eql\x00', r2}) fstat(0xffffffffffffffff, &(0x7f0000000dc0)) 00:38:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'hsr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\xc3', 0x1001}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000100)) 00:38:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017P\xe5\xf7\x02\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x96%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x1d\x00'}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00'}) 00:38:19 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x8000003}) 00:38:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000001200)) 00:38:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0x0, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2}}, 0x20) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x1006) close(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 00:38:19 executing program 2: syz_open_dev$cec(0x0, 0x2, 0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00'}) [ 159.330701] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.336809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:38:19 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'lo\x00'}) 00:38:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010002000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x6ae, 0x4) sendto(r0, &(0x7f0000000080)="c5", 0x34000, 0x0, 0x0, 0x0) 00:38:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), 0x4) [ 159.388415] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 00:38:19 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017P\xe5\xf7\x02\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x96%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x1d\x00'}) [ 159.429284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:38:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x148, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffffb, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000029000100ef0059126500000000000000", @ANYRES32=r4, @ANYBLOB="f4ff00000000000004000000"], 0xb5}}, 0x0) [ 159.549093] BUG: unable to handle kernel NULL pointer dereference at (null) [ 159.557115] IP: (null) [ 159.560471] PGD 81f9e067 P4D 81f9e067 PUD a0b64067 PMD 0 [ 159.566027] Oops: 0010 [#1] PREEMPT SMP KASAN [ 159.570519] Modules linked in: [ 159.573713] CPU: 1 PID: 7152 Comm: syz-executor.4 Not tainted 4.14.146 #0 [ 159.580639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.590063] task: ffff88805d2345c0 task.stack: ffff88805d238000 [ 159.596102] RIP: 0010: (null) [ 159.599964] RSP: 0018:ffff88805d23f5e8 EFLAGS: 00010246 [ 159.605364] RAX: dffffc0000000000 RBX: ffffffff86f15e00 RCX: ffffc9000ca73000 [ 159.612664] RDX: 1ffffffff0de2bc8 RSI: 0000000000000001 RDI: ffff8880a82064c0 [ 159.619933] RBP: ffff88805d23f6c0 R08: 1ffff1100ba47ee8 R09: ffff88805d23f740 [ 159.627187] R10: ffffed100ba47ef3 R11: ffff88805d23f79f R12: ffff88805d23f698 [ 159.634437] R13: ffff8880a82064c0 R14: 0000000000000001 R15: 0000000000000000 [ 159.641691] FS: 00007f3ceab3d700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 159.649894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.655761] CR2: 0000000000000000 CR3: 000000008826b000 CR4: 00000000001406e0 [ 159.663020] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.670353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.677610] Call Trace: [ 159.680180] tc_bind_tclass+0x124/0x400 [ 159.684132] ? security_capable+0x8e/0xc0 [ 159.688259] ? __qdisc_calculate_pkt_len+0x2e0/0x2e0 [ 159.693341] ? memset+0x32/0x40 [ 159.696597] ? qdisc_match_from_root+0x14f/0x230 [ 159.701332] tc_ctl_tclass+0x94a/0xa70 [ 159.705196] ? qdisc_tree_reduce_backlog+0x4a0/0x4a0 [ 159.710274] ? rtnetlink_rcv_msg+0x305/0xb70 [ 159.714663] ? qdisc_tree_reduce_backlog+0x4a0/0x4a0 [ 159.719755] rtnetlink_rcv_msg+0x3eb/0xb70 [ 159.723969] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 159.728564] ? netlink_deliver_tap+0x93/0x8f0 [ 159.733153] netlink_rcv_skb+0x14f/0x3c0 [ 159.737215] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 159.741781] ? lock_downgrade+0x6e0/0x6e0 [ 159.745912] ? netlink_ack+0x9a0/0x9a0 [ 159.749792] ? netlink_deliver_tap+0xba/0x8f0 [ 159.754269] rtnetlink_rcv+0x1d/0x30 [ 159.757980] netlink_unicast+0x45d/0x640 [ 159.762036] ? netlink_attachskb+0x6a0/0x6a0 [ 159.766431] ? security_netlink_send+0x81/0xb0 [ 159.771080] netlink_sendmsg+0x7c4/0xc60 [ 159.775207] ? netlink_unicast+0x640/0x640 [ 159.779432] ? security_socket_sendmsg+0x89/0xb0 [ 159.784341] ? netlink_unicast+0x640/0x640 [ 159.788552] sock_sendmsg+0xce/0x110 [ 159.792254] ___sys_sendmsg+0x70a/0x840 [ 159.796205] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 159.800940] ? __fget+0x210/0x370 [ 159.804386] ? find_held_lock+0x35/0x130 [ 159.808435] ? __fget+0x210/0x370 [ 159.811868] ? lock_downgrade+0x6e0/0x6e0 [ 159.815993] ? __fget+0x237/0x370 [ 159.819423] ? __fget_light+0x172/0x1f0 [ 159.823397] ? __fdget+0x1b/0x20 [ 159.826741] ? sockfd_lookup_light+0xb4/0x160 [ 159.831402] __sys_sendmsg+0xb9/0x140 [ 159.835200] ? SyS_shutdown+0x170/0x170 [ 159.839165] ? put_timespec64+0xb4/0x100 [ 159.843224] ? SyS_clock_gettime+0xf8/0x180 [ 159.847551] SyS_sendmsg+0x2d/0x50 [ 159.851073] ? __sys_sendmsg+0x140/0x140 [ 159.855117] do_syscall_64+0x1e8/0x640 [ 159.858984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.863807] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 159.868992] RIP: 0033:0x459a09 [ 159.872161] RSP: 002b:00007f3ceab3cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.879857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 159.887115] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 00:38:20 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="8d", 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 159.894510] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 159.901937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ceab3d6d4 [ 159.909194] R13: 00000000004c7933 R14: 00000000004dd328 R15: 00000000ffffffff [ 159.916710] Code: Bad RIP value. [ 159.920158] RIP: (null) RSP: ffff88805d23f5e8 [ 159.925666] CR2: 0000000000000000 [ 159.932174] ---[ end trace a7ad2f47b0516cfc ]--- [ 159.932871] kobject: 'loop2' (ffff8880a49a57e0): kobject_uevent_env [ 159.937172] Kernel panic - not syncing: Fatal exception [ 159.950180] Kernel Offset: disabled [ 159.953803] Rebooting in 86400 seconds..