Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. [ 41.139574] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/15 17:34:11 fuzzer started [ 41.336708] audit: type=1400 audit(1568568851.461:36): avc: denied { map } for pid=6892 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 41.688713] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/15 17:34:12 dialing manager at 10.128.0.105:34685 2019/09/15 17:34:12 syscalls: 2466 2019/09/15 17:34:12 code coverage: enabled 2019/09/15 17:34:12 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/15 17:34:12 extra coverage: extra coverage is not supported by the kernel 2019/09/15 17:34:12 setuid sandbox: enabled 2019/09/15 17:34:12 namespace sandbox: enabled 2019/09/15 17:34:12 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/15 17:34:12 fault injection: enabled 2019/09/15 17:34:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/15 17:34:12 net packet injection: enabled 2019/09/15 17:34:12 net device setup: enabled [ 43.467406] random: crng init done 17:36:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@multicast1, @local, 0x0, 0x3, [@rand_addr=0xfffffffffffffffb, @rand_addr, @empty]}, 0x1c) 17:36:04 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda0600ea11000000050000000000000000000000000049bb000000", 0x29}], 0x1) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/444], 0x1c}}, 0x0) [ 154.133493] audit: type=1400 audit(1568568964.261:37): avc: denied { map } for pid=6892 comm="syz-fuzzer" path="/root/syzkaller-shm620795052" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 17:36:04 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r2, 0x4004743c, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 17:36:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000140)) 17:36:04 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 154.162578] audit: type=1400 audit(1568568964.271:38): avc: denied { map } for pid=6909 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13699 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 154.521258] IPVS: ftp: loaded support on port[0] = 21 [ 155.362315] IPVS: ftp: loaded support on port[0] = 21 [ 155.369332] chnl_net:caif_netlink_parms(): no params data found [ 155.427937] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.435311] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.442916] device bridge_slave_0 entered promiscuous mode [ 155.450300] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.456770] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.464247] device bridge_slave_1 entered promiscuous mode [ 155.465286] IPVS: ftp: loaded support on port[0] = 21 [ 155.495961] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.505897] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.529243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.536704] team0: Port device team_slave_0 added [ 155.542446] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.549650] team0: Port device team_slave_1 added [ 155.562464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.583738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.652201] device hsr_slave_0 entered promiscuous mode [ 155.690531] device hsr_slave_1 entered promiscuous mode [ 155.733988] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.743157] chnl_net:caif_netlink_parms(): no params data found [ 155.752164] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.783741] IPVS: ftp: loaded support on port[0] = 21 [ 155.811490] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.817976] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.825274] device bridge_slave_0 entered promiscuous mode [ 155.833518] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.839876] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.847590] device bridge_slave_1 entered promiscuous mode [ 155.873639] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.880111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.887294] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.893731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.923014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.932247] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.971624] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.979072] team0: Port device team_slave_0 added [ 155.984964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.992177] team0: Port device team_slave_1 added [ 155.999385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.007568] chnl_net:caif_netlink_parms(): no params data found [ 156.015758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.083113] device hsr_slave_0 entered promiscuous mode [ 156.120574] device hsr_slave_1 entered promiscuous mode [ 156.183371] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.203737] IPVS: ftp: loaded support on port[0] = 21 [ 156.209246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.292135] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.298530] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.307100] device bridge_slave_0 entered promiscuous mode [ 156.315865] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.322526] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.330091] device bridge_slave_1 entered promiscuous mode [ 156.356722] chnl_net:caif_netlink_parms(): no params data found [ 156.375907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.394275] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.400701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.407314] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.413801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.423478] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.433281] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.441322] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.448596] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.455390] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.502905] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.510763] team0: Port device team_slave_0 added [ 156.518594] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.526063] team0: Port device team_slave_1 added [ 156.533293] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.539638] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.546764] device bridge_slave_0 entered promiscuous mode [ 156.558516] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.566781] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.573798] device bridge_slave_1 entered promiscuous mode [ 156.582300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.591389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.598821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.607162] IPVS: ftp: loaded support on port[0] = 21 [ 156.623974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.649670] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.679643] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.732374] device hsr_slave_0 entered promiscuous mode [ 156.770543] device hsr_slave_1 entered promiscuous mode [ 156.812843] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.823408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.832352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.840143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.859410] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.915671] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.923577] team0: Port device team_slave_0 added [ 156.930798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.937943] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.944550] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.954443] chnl_net:caif_netlink_parms(): no params data found [ 156.963293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.970981] team0: Port device team_slave_1 added [ 156.977711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.988681] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.005196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.014245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.034086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.042400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.051174] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.057542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.067857] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.081220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.144373] device hsr_slave_0 entered promiscuous mode [ 157.180561] device hsr_slave_1 entered promiscuous mode [ 157.242562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.249820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.256886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.264954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.272972] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.279625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.289201] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.296195] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.309603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.316724] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.324692] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.331564] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.338578] device bridge_slave_0 entered promiscuous mode [ 157.345464] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.352486] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.359587] device bridge_slave_1 entered promiscuous mode [ 157.372262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.382563] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.396877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.406459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.417445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.425630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.438871] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.447639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.455685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.463709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.471526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.479199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.488322] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.494950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.502533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.514757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.524263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.533357] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.542530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.553733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.561180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.568986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.578292] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.584928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.592066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.599737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.607546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.615225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.622800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.633110] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.643580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.667406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.678297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.693413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.701022] team0: Port device team_slave_0 added [ 157.707795] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.717741] team0: Port device team_slave_1 added [ 157.725208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.733798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.747045] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.753461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.765643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.773994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.783957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.833777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.849130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.858741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.866805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.875489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.886379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.910643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.917643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.926408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.938384] chnl_net:caif_netlink_parms(): no params data found [ 157.982592] device hsr_slave_0 entered promiscuous mode [ 158.020416] device hsr_slave_1 entered promiscuous mode [ 158.062859] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 158.081144] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.094984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 158.107604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.115101] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.135195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.146077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.155082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.168146] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 158.176718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.192856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.200808] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.208778] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.237807] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.247566] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.261249] device bridge_slave_0 entered promiscuous mode [ 158.267753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.274826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.283968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.293054] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.303695] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 158.312288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.320881] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.329032] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.336956] device bridge_slave_1 entered promiscuous mode [ 158.346310] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.352951] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.361337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.373240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 17:36:08 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) [ 158.384085] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.396622] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.418353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.441658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.450184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.457865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.465697] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.472075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.479542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.489960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.499230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.511556] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.522622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.529627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.538417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.546573] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.553059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.560282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.568070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.576201] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.582579] bridge0: port 2(bridge_slave_1) entered forwarding state 17:36:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@loopback, 0x0, r2}) [ 158.589555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.607293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.626512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.648680] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.657433] team0: Port device team_slave_0 added [ 158.663341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.671291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.678955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.686647] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.693013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.702694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.714703] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.722720] team0: Port device team_slave_1 added [ 158.728166] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.740747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.748733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.756972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.766552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.777837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 17:36:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) [ 158.799991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.808177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.818221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.828393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.859097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.867834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.876021] audit: type=1400 audit(1568568969.001:39): avc: denied { create } for pid=6962 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 158.885457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 17:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) fcntl$setstatus(r1, 0x4, 0x80000000002c00) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff}, 0x20) [ 158.907250] audit: type=1400 audit(1568568969.001:40): avc: denied { write } for pid=6962 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 158.918943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.944135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.954143] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.966096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.975666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.033500] device hsr_slave_0 entered promiscuous mode [ 159.070625] device hsr_slave_1 entered promiscuous mode [ 159.111122] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.121130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.128939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.139845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.147414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.156769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.167022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.177140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.184829] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.193684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.207828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.218282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.242880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.254277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.262339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.271079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.281833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.292050] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.298292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:36:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{}, {0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:36:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$EVIOCSFF(r0, 0x40304580, 0x0) [ 159.311880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.332958] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.339361] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.347689] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 159.365042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.385605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.405873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.424041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.438332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.453716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.462490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.470674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.478365] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.485018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.496088] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.505898] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.513241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.525502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.534988] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.549912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.575952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.584649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.593860] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.600355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.618707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.636777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.649052] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.665587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.690683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.704996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.716016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.725142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.733352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.742285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.755860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.770248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.784209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.794008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.807505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.816212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.827919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.838637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.849792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.864001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.877773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.892618] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.901638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.915812] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.929749] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.942609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.954920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.963209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.972168] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.978280] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.998139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.006545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.015250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.019306] audit: type=1400 audit(1568568970.141:41): avc: denied { read } for pid=7002 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.023656] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.052979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.060672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.071422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.079221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.091633] PPPIOCDETACH file->f_count=2 [ 160.092387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.107707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.116915] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.123452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.136419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.145544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.157733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 17:36:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) 17:36:10 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:36:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{}, {0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:36:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() getpgid(r1) [ 160.192673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.216918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.239522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.248775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.276072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.287179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.303310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.326819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.335320] usb usb5: usbfs: process 7029 (syz-executor.3) did not claim interface 0 before use [ 160.350444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.361536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.375580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.385604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.401280] usb usb5: usbfs: process 7029 (syz-executor.3) did not claim interface 0 before use [ 160.412426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.421503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.442315] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 160.448455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:36:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000003f80)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) dup2(r0, r1) [ 160.495268] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.513538] 8021q: adding VLAN 0 to HW filter on device batadv0 17:36:11 executing program 2: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a0500000000000000422cb4963a160161b1cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x34d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="3a38d05f979ec18bdb544a3ebafe2015282c870c965afd6f55635c55ee15078699cfeb3211341d683326c79f5fc1c985b26df42f8363", 0x36, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r0, r1, r2}, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={'sha384\x00'}}) 17:36:11 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0x7, &(0x7f0000000380), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 17:36:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000000) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000001280)='./file1\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000001680)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8='utf8=1'}, {@shortname_mixed='shortname=mixed'}], [{@uid_gt={'uid>', 0xee01}}]}) 17:36:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{}, {0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:36:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) creat(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3f00, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:36:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000003f80)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) dup2(r0, r1) [ 161.819926] hrtimer: interrupt took 36004 ns 17:36:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getrandom(&(0x7f0000000080)=""/158, 0x9e, 0x0) 17:36:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) fcntl$setstatus(r1, 0x4, 0x80000000002c00) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="4d000f00df00ff04004364f63be8a2f3", 0x0, 0x1}, 0xfffffe30) 17:36:12 executing program 2: r0 = socket$kcm(0x10, 0x2000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="230000002c000104bfa9d345e7eb8d99c1ffffffffffffff43bc59198183fe204ee2d7", 0x23}], 0x1}, 0x0) 17:36:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 17:36:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{}, {0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:36:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x3}]}) 17:36:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) [ 162.002968] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000060929" or missing value 17:36:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f0000000280)=0x81, 0x28a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x208, 0xa5) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x4, @mcast1, 0x101}}, 0x0, 0x8, 0x0, "9fc72b543b28dd4728c3988b7adea76fa59f716c731782304d2a8b2baf8c1724fb01b86d7c1d88f3c7322926d8f0fcdb51b5df3ba8b696320eb85ae1bd8e6af048c54f27e0dad819d7cb50aaa2bc300f"}, 0xd8) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x100000299, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x6e) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r3, 0x7fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000ffffbffe) [ 162.181730] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000060929" or missing value 17:36:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000000) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000001280)='./file1\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000001680)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8='utf8=1'}, {@shortname_mixed='shortname=mixed'}], [{@uid_gt={'uid>', 0xee01}}]}) 17:36:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x3}]}) [ 162.226734] kasan: CONFIG_KASAN_INLINE enabled [ 162.238992] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 162.267077] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 162.269656] kobject: 'loop3' (ffff8880a49fcb60): kobject_uevent_env [ 162.273354] Modules linked in: [ 162.273372] CPU: 1 PID: 7114 Comm: syz-executor.4 Not tainted 4.14.143 #0 [ 162.273378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.273386] task: ffff88808875a200 task.stack: ffff88805cc38000 [ 162.273406] RIP: 0010:do_tcp_sendpages+0x33d/0x18f0 [ 162.273410] RSP: 0018:ffff88805cc3f6b0 EFLAGS: 00010202 [ 162.273419] RAX: 0000000000000010 RBX: 0000000000000000 RCX: ffffc90009448000 [ 162.273425] RDX: 0000000000001277 RSI: ffffffff8523f03b RDI: 0000000000000080 [ 162.273431] RBP: ffff88805cc3f7d8 R08: ffff88808875a200 R09: 0000000000000001 [ 162.273437] R10: 0000000000000000 R11: ffff88808875a200 R12: 0000000000000075 [ 162.273442] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88809db04c40 [ 162.273450] FS: 00007faef318b700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 162.273455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.273459] CR2: 00000000020c43e8 CR3: 0000000082d15000 CR4: 00000000001406e0 [ 162.273466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.273471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.273474] Call Trace: [ 162.273488] ? lock_sock_nested+0x9e/0x110 [ 162.273505] ? sk_stream_alloc_skb+0x780/0x780 [ 162.282979] kobject: 'loop3' (ffff8880a49fcb60): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 162.283136] ? tcp_rate_check_app_limited+0x2ba/0x320 [ 162.414158] tcp_sendpage_locked+0x88/0x140 [ 162.418484] tcp_sendpage+0x3f/0x60 [ 162.422127] inet_sendpage+0x157/0x580 [ 162.426007] ? tcp_sendpage_locked+0x140/0x140 [ 162.430577] kernel_sendpage+0x92/0xf0 [ 162.434444] ? inet_sendmsg+0x500/0x500 [ 162.438400] sock_sendpage+0x8b/0xc0 [ 162.442109] ? kernel_sendpage+0xf0/0xf0 [ 162.446153] pipe_to_sendpage+0x242/0x340 [ 162.450291] ? direct_splice_actor+0x190/0x190 [ 162.454857] __splice_from_pipe+0x348/0x780 [ 162.459167] ? direct_splice_actor+0x190/0x190 [ 162.463738] ? direct_splice_actor+0x190/0x190 [ 162.468304] splice_from_pipe+0xf0/0x150 [ 162.472433] ? splice_shrink_spd+0xb0/0xb0 [ 162.476672] generic_splice_sendpage+0x3c/0x50 [ 162.481237] ? splice_from_pipe+0x150/0x150 [ 162.485551] direct_splice_actor+0x123/0x190 [ 162.489943] splice_direct_to_actor+0x29e/0x7b0 [ 162.494596] ? generic_pipe_buf_nosteal+0x10/0x10 [ 162.499434] ? do_splice_to+0x170/0x170 [ 162.503392] ? rw_verify_area+0xea/0x2b0 [ 162.507436] do_splice_direct+0x18d/0x230 [ 162.511613] ? splice_direct_to_actor+0x7b0/0x7b0 [ 162.516440] ? rw_verify_area+0xea/0x2b0 [ 162.520486] do_sendfile+0x4db/0xbd0 [ 162.524188] ? do_compat_pwritev64+0x140/0x140 [ 162.528774] ? kasan_check_write+0x14/0x20 [ 162.532991] ? _copy_from_user+0x99/0x110 [ 162.537123] SyS_sendfile64+0x9d/0x110 [ 162.541023] ? SyS_sendfile+0x130/0x130 [ 162.544999] ? do_syscall_64+0x53/0x640 [ 162.549139] ? SyS_sendfile+0x130/0x130 [ 162.553101] do_syscall_64+0x1e8/0x640 [ 162.556986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 162.561820] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 162.566998] RIP: 0033:0x4598e9 [ 162.570170] RSP: 002b:00007faef318ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 162.577859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004598e9 [ 162.585114] RDX: 0000000020d83ff8 RSI: 0000000000000007 RDI: 0000000000000005 [ 162.592368] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 162.599620] R10: 00008000ffffbffe R11: 0000000000000246 R12: 00007faef318b6d4 [ 162.606886] R13: 00000000004c709e R14: 00000000004dc750 R15: 00000000ffffffff [ 162.614148] Code: ff ff 48 0f 44 d8 e8 43 f2 38 fc 4d 85 e4 0f 84 9b 03 00 00 e8 35 f2 38 fc 48 8d bb 80 00 00 00 44 8b 65 a8 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 74 08 3c 03 0f 8e 85 11 00 00 44 2b a3 80 [ 162.633298] RIP: do_tcp_sendpages+0x33d/0x18f0 RSP: ffff88805cc3f6b0 [ 162.649532] ---[ end trace da2f57c1a099b980 ]--- [ 162.654456] kobject: 'kvm' (ffff88821980a450): kobject_uevent_env [ 162.661198] kobject: 'loop0' (ffff8880a4910160): kobject_uevent_env [ 162.661443] Kernel panic - not syncing: Fatal exception [ 162.667646] kobject: 'loop0' (ffff8880a4910160): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 162.674916] Kernel Offset: disabled [ 162.688348] Rebooting in 86400 seconds..