[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.777695] random: sshd: uninitialized urandom read (32 bytes read) [ 33.057825] kauditd_printk_skb: 10 callbacks suppressed [ 33.057837] audit: type=1400 audit(1568671995.715:35): avc: denied { map } for pid=6882 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.114366] random: sshd: uninitialized urandom read (32 bytes read) [ 33.754451] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. [ 39.379165] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/16 22:13:22 fuzzer started [ 39.565486] audit: type=1400 audit(1568672002.225:36): avc: denied { map } for pid=6893 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.295513] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/16 22:13:24 dialing manager at 10.128.0.105:38157 2019/09/16 22:13:31 syscalls: 2466 2019/09/16 22:13:31 code coverage: enabled 2019/09/16 22:13:31 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/16 22:13:31 extra coverage: extra coverage is not supported by the kernel 2019/09/16 22:13:31 setuid sandbox: enabled 2019/09/16 22:13:31 namespace sandbox: enabled 2019/09/16 22:13:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/16 22:13:31 fault injection: enabled 2019/09/16 22:13:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/16 22:13:31 net packet injection: enabled 2019/09/16 22:13:31 net device setup: enabled [ 50.238467] random: crng init done 22:15:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) 22:15:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5c0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x54}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 22:15:11 executing program 1: creat(&(0x7f0000000100)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) io_setup(0x10000, &(0x7f0000000000)) io_setup(0x401, &(0x7f0000000280)) pipe2$9p(0x0, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x0) io_setup(0x8, 0x0) 22:15:11 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'gretap0\x00'}, 0xffffffffffffff3d) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\xb9\xd9\xd3q\xa1h\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 22:15:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 22:15:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x400000000000251, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000180), 0x40002e9, 0x0) [ 149.062785] audit: type=1400 audit(1568672111.725:37): avc: denied { map } for pid=6893 comm="syz-fuzzer" path="/root/syzkaller-shm641321656" dev="sda1" ino=16490 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 149.099002] audit: type=1400 audit(1568672111.755:38): avc: denied { map } for pid=6911 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 149.461043] IPVS: ftp: loaded support on port[0] = 21 [ 150.272388] IPVS: ftp: loaded support on port[0] = 21 [ 150.272537] chnl_net:caif_netlink_parms(): no params data found [ 150.328593] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.335647] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.343202] device bridge_slave_0 entered promiscuous mode [ 150.351955] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.358330] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.365316] device bridge_slave_1 entered promiscuous mode [ 150.376716] IPVS: ftp: loaded support on port[0] = 21 [ 150.405394] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.415742] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.449323] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.457074] team0: Port device team_slave_0 added [ 150.477988] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.485239] team0: Port device team_slave_1 added [ 150.490676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.499755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.507254] chnl_net:caif_netlink_parms(): no params data found [ 150.539486] IPVS: ftp: loaded support on port[0] = 21 [ 150.582210] device hsr_slave_0 entered promiscuous mode [ 150.660510] device hsr_slave_1 entered promiscuous mode [ 150.758856] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.773944] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 150.787556] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.794257] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.801758] device bridge_slave_0 entered promiscuous mode [ 150.835954] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.843467] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.850787] device bridge_slave_1 entered promiscuous mode [ 150.884251] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.892085] chnl_net:caif_netlink_parms(): no params data found [ 150.908077] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.914612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.921740] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.928161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.938283] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.983344] IPVS: ftp: loaded support on port[0] = 21 [ 150.992108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.999609] team0: Port device team_slave_0 added [ 151.021395] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.031350] team0: Port device team_slave_1 added [ 151.037203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.047129] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.053833] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.061535] device bridge_slave_0 entered promiscuous mode [ 151.069511] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.076394] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.083343] device bridge_slave_1 entered promiscuous mode [ 151.104707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.126180] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 151.137068] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 151.212192] device hsr_slave_0 entered promiscuous mode [ 151.250404] device hsr_slave_1 entered promiscuous mode [ 151.292900] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 151.301199] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.308402] team0: Port device team_slave_0 added [ 151.337927] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.345520] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.356070] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 151.365132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.372733] team0: Port device team_slave_1 added [ 151.401889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.410634] chnl_net:caif_netlink_parms(): no params data found [ 151.428505] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.436308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.436486] IPVS: ftp: loaded support on port[0] = 21 [ 151.502292] device hsr_slave_0 entered promiscuous mode [ 151.540441] device hsr_slave_1 entered promiscuous mode [ 151.622373] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 151.644522] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 151.659664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.736903] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.745914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.759668] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.766593] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.773981] device bridge_slave_0 entered promiscuous mode [ 151.784641] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.803713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.812314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.819640] chnl_net:caif_netlink_parms(): no params data found [ 151.828789] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.835640] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.842815] device bridge_slave_1 entered promiscuous mode [ 151.862853] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 151.874476] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 151.888005] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 151.894505] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.908305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.928418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.939641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.957342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.965644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.973741] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.980176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.987142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.996050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.003926] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.010347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.018486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 152.034924] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.042535] team0: Port device team_slave_0 added [ 152.048449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.057398] team0: Port device team_slave_1 added [ 152.062806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.070708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.084001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.116246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.125324] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 152.213711] device hsr_slave_0 entered promiscuous mode [ 152.260397] device hsr_slave_1 entered promiscuous mode [ 152.337389] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 152.344911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.352463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.361939] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 152.368220] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.378446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.393029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 152.399785] chnl_net:caif_netlink_parms(): no params data found [ 152.409726] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.416378] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.423566] device bridge_slave_0 entered promiscuous mode [ 152.430467] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.436835] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.444265] device bridge_slave_1 entered promiscuous mode [ 152.455441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.465219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.488257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.498050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.506134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.514506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.522708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.530659] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.537339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.544757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.551799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.562999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.574189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.590696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.598391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.609042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 152.616833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.629229] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.645645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.653883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.661935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.669985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.678143] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.684553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.693844] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 152.716076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.732302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 152.739428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.747737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.755531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.763573] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.770927] team0: Port device team_slave_0 added [ 152.776852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.784860] team0: Port device team_slave_1 added [ 152.792332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.799208] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.808070] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.816114] device bridge_slave_0 entered promiscuous mode [ 152.823157] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.829513] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.837219] device bridge_slave_1 entered promiscuous mode [ 152.846396] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 152.852927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.860845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.869317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.878808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.897506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.905856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.914854] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.924333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.942321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.949820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.958847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.979953] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.989656] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.001365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.011579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 153.053720] device hsr_slave_0 entered promiscuous mode [ 153.110489] device hsr_slave_1 entered promiscuous mode [ 153.156397] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.166850] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.176733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 153.184647] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.194017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.202078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.209831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.217277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.226461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 153.242603] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.253442] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 153.259625] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.267917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.276428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.289876] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.300893] team0: Port device team_slave_0 added [ 153.316384] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.323702] team0: Port device team_slave_1 added [ 153.331311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.342350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.351663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 153.359723] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 153.367685] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.374819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.387101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.394208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.402836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.412153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.420406] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.426840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.434386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.465605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 153.475153] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.532415] device hsr_slave_0 entered promiscuous mode [ 153.570482] device hsr_slave_1 entered promiscuous mode [ 153.620891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.628721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.637091] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.643802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.653368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 153.661621] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.671388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.680529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.695153] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.708498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.724971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.736665] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 153.748891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.757039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.764734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.778729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.788942] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 153.797864] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.805313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.813946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.822526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.841890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.861718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 153.877525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.887106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.896444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.904697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.919617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.933879] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.940468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.949341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 153.964286] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 153.972790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 153.982877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.989457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.996663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.006339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.014214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.022827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.030538] bridge0: port 2(bridge_slave_1) entered blocking state 22:15:16 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40) 22:15:16 executing program 1: getrandom(&(0x7f0000000080)=""/108, 0xfc10868197c55658, 0x0) [ 154.036910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.055386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 154.072789] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.088605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.099659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.130658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 22:15:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 154.139040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.157966] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 154.169208] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.191872] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 154.197962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.219416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 154.231407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.238796] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 154.266427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.291074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 154.298852] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 154.307017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.316332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.324858] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.331443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.338527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.357266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 154.367357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 154.386063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.399061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.412146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.419875] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.426460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.440281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.448102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.461249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.471312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 154.481129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.496780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.507850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.521722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.533248] 8021q: adding VLAN 0 to HW filter on device batadv0 22:15:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 154.568090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.603729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 154.621600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 154.629172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.642150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.653887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.666121] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 22:15:17 executing program 0: setrlimit(0x7, &(0x7f00000001c0)) epoll_create1(0x0) [ 154.678166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 154.699006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 154.710168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.717691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 22:15:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000240)) [ 154.736129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.744095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.756013] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 154.770675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.780528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.789633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 154.816003] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.827492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.835205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.847099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.856283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.868314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.876391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.888199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:15:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010002000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x90) [ 154.931115] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 154.939648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 154.959876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.979172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.004327] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.017502] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.031757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.043856] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 155.051128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.062442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.076960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.085509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.093635] bridge0: port 1(bridge_slave_0) entered blocking state 22:15:17 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fd) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) 22:15:17 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) [ 155.100205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.107713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.127831] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 155.161596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.183680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.196333] audit: type=1400 audit(1568672117.855:39): avc: denied { set_context_mgr } for pid=7005 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 155.224674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.233284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.241591] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.247957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.255200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.266804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.278134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.288799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.302153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.311037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.319321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.327536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.338615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 155.349052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.357743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.371458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 155.382861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 155.389953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.398194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.405929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.429685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.439936] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 155.446970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.477349] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 155.499213] 8021q: adding VLAN 0 to HW filter on device batadv0 22:15:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f00000000c0)={'sit0\x00', 0x0}) 22:15:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)) 22:15:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000100)={'system_u:object_r:system_cron_spool_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x6c) 22:15:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)) 22:15:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 22:15:19 executing program 2: fdatasync(0xffffffffffffffff) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab0a, 0x0) 22:15:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x125f, 0x0) 22:15:19 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) 22:15:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaaae7, &(0x7f0000000540)=[{&(0x7f0000000080)="c62da7b811b41c48b28094f6c0071cf1fa6ab43385b300ee9fcee5e424dbaf2ccd9db6cabf1524cbc7b79469fdad3c84", 0xffffffffffffff8c, 0x8003}, {0x0}], 0x402c062, 0x0) 22:15:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00@\x00', 0x1801}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\r\xc2\x00\t\x00\x00\x00\x80\x00'}) 22:15:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000380)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000001280)='./file0\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) [ 157.028598] 9pnet: Insufficient options for proto=fd 22:15:19 executing program 0: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2f5fa26) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) ftruncate(r0, 0x0) 22:15:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x0) 22:15:19 executing program 3: setxattr$security_smack_transmute(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x3) r0 = socket(0x1, 0x0, 0x7) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000540), &(0x7f00000004c0)=0x4) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000005c0)={@ipv4={[], [], @rand_addr=0x4d402332}, @remote, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x100000001, 0x8bfd, 0xd0, 0x400, 0x7, 0x40}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0xc000000000, 0x2000) request_key(&(0x7f0000000900)='rxrpc_s\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)='-self-\x00', 0xfffffffffffffff8) add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) fadvise64(r2, 0x800000, 0x3, 0x4) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101080, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty}, &(0x7f0000000780)=0xc) setsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f00000007c0)={@loopback, r7}, 0x14) write$P9_RREADLINK(r6, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000380)=0x9) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000580)='/dev/urandom\x00', 0x1, 0x0) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000800)="66272eaa06a51a7d7226b96c2afb86ce08ef206b217688545660d86fe1f9c065e14cd72ace015de136876bff95ab12204af3a19a121cafc578add591ed5cdf36debdfe982b958c73b950c20791a2518c94a6d94d38e8093c3fae17f19015d49732509ed467082e75cc9ad0410509b6461a9ede4dee14f906c34252e8639cb99db404843e87bc912683adedae11e4a4462eff26c24152cbba49c3168b5bc240c1032280b3af260175f3bd341e1fdb74f3c60d51a252adb9dd5d410f36b4bf", 0xbe}], 0x1) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000003c0)={0x29, 0x1, 0x7f, 0xfffffffffffffb4b, "0100e1d1ea000000afa68a69da0000000000000000000800"}) ioctl$EVIOCGSW(r1, 0x8040451b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000180), 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r9 = dup2(r3, r3) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000500)={0x0, 0x148, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x1}}, 0x0) write$cgroup_type(r9, &(0x7f0000000140)='threaded\x00', 0xfffffebd) 22:15:19 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2f5fa26) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYRES32], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) ftruncate(r0, 0x0) 22:15:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) [ 157.217176] ptrace attach of "/root/syz-executor.0"[7094] was attempted by "/root/syz-executor.0"[7098] [ 157.253364] hrtimer: interrupt took 50315 ns [ 157.302350] ptrace attach of "/root/syz-executor.4"[7106] was attempted by "/root/syz-executor.4"[7107] 22:15:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) 22:15:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab09, 0x101) 22:15:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000480)='./file0/file0\x00') 22:15:20 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) [ 157.775816] audit: type=1400 audit(1568672120.435:40): avc: denied { associate } for pid=7119 comm="syz-executor.5" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 22:15:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x84) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002b40)="7156f306df0ed46061f065d70a6109e4", 0x10) 22:15:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@flushsa={0x14, 0x15, 0x507}, 0x14}}, 0x0) 22:15:20 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9) 22:15:20 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11f6af0d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 22:15:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x148}) 22:15:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [], [0x3a]}) 22:15:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="e0d20400cd80"], 0x6}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388", @ANYRES16=0x0, @ANYPTR64, @ANYRESHEX, @ANYBLOB="e6c55c5d00010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad4c079521dfdaf3d0fef515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5", @ANYRESHEX], 0x0, 0x150}, 0x20) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 22:15:20 executing program 5: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f00000002c0)) epoll_create(0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 22:15:20 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffeee) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) 22:15:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) [ 158.123575] ptrace attach of "/root/syz-executor.3"[7158] was attempted by "/root/syz-executor.3"[7160] 22:15:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x7) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed [ 158.326304] dump_stack+0x138/0x197 [ 158.326317] panic+0x1f2/0x426 [ 158.326324] ? add_taint.cold+0x16/0x16 [ 158.326335] ? tcp_retransmit_timer+0x1ac5/0x2560 [ 158.326346] ? tcp_retransmit_timer+0x1ac5/0x2560 [ 158.326354] __warn.cold+0x2f/0x36 [ 158.333637] kobject: 'nr0' (ffff88805c508df0): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 158.342238] ? ist_end_non_atomic+0x10/0x10 [ 158.342253] ? tcp_retransmit_timer+0x1ac5/0x2560 [ 158.342264] report_bug+0x216/0x254 [ 158.342275] do_error_trap+0x1bb/0x310 [ 158.342284] ? math_error+0x360/0x360 [ 158.342296] ? __lock_acquire+0x5f7/0x4620 [ 158.342303] ? trace_hardirqs_on+0x10/0x10 [ 158.342310] ? __lock_acquire+0x5f7/0x4620 [ 158.342317] ? trace_hardirqs_on+0x10/0x10 [ 158.342331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 158.342342] do_invalid_op+0x1b/0x20 [ 158.342351] invalid_op+0x1b/0x40 [ 158.342359] RIP: 0010:tcp_retransmit_timer+0x1ac5/0x2560 [ 158.342362] RSP: 0018:ffff8880aef07c88 EFLAGS: 00010206 [ 158.342369] RAX: ffff88809baba280 RBX: ffff8880646f0100 RCX: 0000000000000004 [ 158.342373] RDX: 0000000000000100 RSI: ffff88806096880c RDI: ffff8880609689d8 [ 158.342377] RBP: ffff8880aef07ce8 R08: 0000002604f6f64a R09: ffff88821fff8048 [ 158.342380] R10: ffff88821fff8050 R11: 0000000000000001 R12: ffff888060968000 [ 158.342385] R13: ffff88806096869a R14: ffff888060968030 R15: 0000000000000000 [ 158.342401] ? tcp_retransmit_timer+0x1ac5/0x2560 [ 158.342410] ? sched_clock+0x2e/0x50 [ 158.342420] tcp_write_timer_handler+0x479/0x7e0 [ 158.342434] tcp_write_timer+0xd8/0x180 [ 158.519704] call_timer_fn+0x161/0x670 [ 158.523604] ? tcp_write_timer_handler+0x7e0/0x7e0 [ 158.528539] ? __next_timer_interrupt+0x140/0x140 [ 158.533450] ? trace_hardirqs_on_caller+0x19b/0x590 [ 158.538745] run_timer_softirq+0x5b4/0x1570 [ 158.543196] ? tcp_write_timer_handler+0x7e0/0x7e0 [ 158.548131] ? add_timer+0xae0/0xae0 [ 158.551855] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 158.557391] __do_softirq+0x244/0x9a0 [ 158.561201] ? sched_clock+0x2e/0x50 [ 158.564926] irq_exit+0x160/0x1b0 [ 158.568397] smp_apic_timer_interrupt+0x146/0x5e0 [ 158.573482] apic_timer_interrupt+0x96/0xa0 [ 158.577811] [ 158.580068] RIP: 0010:kmem_cache_alloc+0x2b0/0x780 [ 158.584992] RSP: 0018:ffff88809feefd38 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 158.592705] RAX: 0000000000000007 RBX: 00000000014000c0 RCX: 0000000000000000 [ 158.599975] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286 [ 158.607239] RBP: ffff88809feefda0 R08: ffff88809baba280 R09: 0000000000000000 [ 158.614496] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805c600980 [ 158.621779] R13: ffff8880aa9e0cc0 R14: ffff8880aa9e0cc0 R15: 00000000014000c0 [ 158.629084] ? fd_install+0x4d/0x60 [ 158.630537] kobject: 'loop1' (ffff8880a4a397a0): kobject_uevent_env [ 158.632722] getname_flags+0xcb/0x580 [ 158.632734] getname+0x1a/0x20 [ 158.632743] do_sys_open+0x1e7/0x430 [ 158.632754] ? filp_open+0x70/0x70 [ 158.632764] ? SyS_setsockopt+0x210/0x210 [ 158.632773] SyS_open+0x2d/0x40 [ 158.632779] ? do_sys_open+0x430/0x430 [ 158.632788] do_syscall_64+0x1e8/0x640 [ 158.632794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 158.632805] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 158.632811] RIP: 0033:0x7efe9a6c3120 [ 158.632815] RSP: 002b:00007ffcf5f83748 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 158.632822] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007efe9a6c3120 [ 158.632825] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000561f694ab9b0 [ 158.632829] RBP: 0000561f694a3348 R08: 746e65727275632f R09: 00007efe9add6b15 [ 158.632833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.639626] kobject: 'loop1' (ffff8880a4a397a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 158.643136] R13: 0000561f694a3140 R14: 00007ffcf5f837e8 R15: 0000000000000005 [ 158.648308] Kernel Offset: disabled [ 158.741834] Rebooting in 86400 seconds..