Warning: Permanently added '10.128.0.227' (ECDSA) to the list of known hosts. [ 34.621051] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/11 02:13:57 fuzzer started [ 34.813165] kauditd_printk_skb: 10 callbacks suppressed [ 34.813173] audit: type=1400 audit(1568168037.429:36): avc: denied { map } for pid=6728 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 35.452767] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/11 02:13:58 dialing manager at 10.128.0.105:33975 2019/09/11 02:13:58 syscalls: 2466 2019/09/11 02:13:58 code coverage: enabled 2019/09/11 02:13:58 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/11 02:13:58 extra coverage: extra coverage is not supported by the kernel 2019/09/11 02:13:58 setuid sandbox: enabled 2019/09/11 02:13:58 namespace sandbox: enabled 2019/09/11 02:13:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/11 02:13:58 fault injection: enabled 2019/09/11 02:13:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/11 02:13:58 net packet injection: enabled 2019/09/11 02:13:58 net device setup: enabled [ 36.978625] random: crng init done 02:15:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 02:15:44 executing program 0: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 02:15:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0xa2d, 0x0, 0x0, {{{@in6=@local, @in=@empty}, {@in=@remote, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x4}}}, 0xf8}}, 0x0) 02:15:44 executing program 1: setuid(0xee01) semget(0x2, 0x0, 0x480) 02:15:44 executing program 2: r0 = socket(0x400000000000010, 0x802, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000003200c7560000000000000000000000000c00020002000000fdffffffe7db702178677b76f451dde7a18eca13f6b944c6f77ee5af3b85caf460dfceabc831953fe423d0415b810c325ffb7dd0ad1eb09f2389460cd84a000ead1a47815ff21db8ef47fc2cc2a601e1425ac6f659aaf1dea2df781f31efde9c574b35e97baafcd4c1af26a6d4bc6e1d700d21d1d57324b7bce22a157cd31db26e00bbda74fe68bfe6771c89789a53390293a605ec72fc6ac4e42ec702d7ab6c7e9ed39c330750e647aba975c2af79911464cac1e18989fcfd80f0b4d7b0e2fba256cb28130ade27a36cb29c419a49a81cd0c5ca78fdade18e"], 0x20}}, 0x0) 02:15:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) tkill(0x0, 0x1000000000016) [ 142.088644] audit: type=1400 audit(1568168144.699:37): avc: denied { map } for pid=6728 comm="syz-fuzzer" path="/root/syzkaller-shm569567940" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 142.145336] audit: type=1400 audit(1568168144.719:38): avc: denied { map } for pid=6746 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13513 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 142.292161] IPVS: ftp: loaded support on port[0] = 21 [ 143.076373] chnl_net:caif_netlink_parms(): no params data found [ 143.084216] IPVS: ftp: loaded support on port[0] = 21 [ 143.128739] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.135312] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.142260] device bridge_slave_0 entered promiscuous mode [ 143.150936] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.157294] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.164226] device bridge_slave_1 entered promiscuous mode [ 143.184274] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.193926] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.211974] IPVS: ftp: loaded support on port[0] = 21 [ 143.247246] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.254300] team0: Port device team_slave_0 added [ 143.262279] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.269262] team0: Port device team_slave_1 added [ 143.281737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.292366] chnl_net:caif_netlink_parms(): no params data found [ 143.301063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.371623] device hsr_slave_0 entered promiscuous mode [ 143.410248] device hsr_slave_1 entered promiscuous mode [ 143.465718] IPVS: ftp: loaded support on port[0] = 21 [ 143.474703] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.482288] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.488970] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.495539] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.502392] device bridge_slave_0 entered promiscuous mode [ 143.508753] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.515234] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.521983] device bridge_slave_1 entered promiscuous mode [ 143.542858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.553090] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.586147] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.593257] team0: Port device team_slave_0 added [ 143.623790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.630816] team0: Port device team_slave_1 added [ 143.639974] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.646372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.653062] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.659381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.667876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.676919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.684814] chnl_net:caif_netlink_parms(): no params data found [ 143.752597] device hsr_slave_0 entered promiscuous mode [ 143.810364] device hsr_slave_1 entered promiscuous mode [ 143.851061] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.869134] IPVS: ftp: loaded support on port[0] = 21 [ 143.882630] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.936285] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.942934] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.949725] device bridge_slave_0 entered promiscuous mode [ 143.957713] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.964131] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.970919] device bridge_slave_1 entered promiscuous mode [ 143.990138] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.998835] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.018592] chnl_net:caif_netlink_parms(): no params data found [ 144.038249] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.047076] team0: Port device team_slave_0 added [ 144.057477] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.063820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.070414] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.076747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.085343] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.092622] team0: Port device team_slave_1 added [ 144.099502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.115350] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.122941] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.130176] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.136680] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.144493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.211682] device hsr_slave_0 entered promiscuous mode [ 144.250311] device hsr_slave_1 entered promiscuous mode [ 144.299422] IPVS: ftp: loaded support on port[0] = 21 [ 144.311921] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.318281] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.325709] device bridge_slave_0 entered promiscuous mode [ 144.332894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.350551] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.357135] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.363997] device bridge_slave_1 entered promiscuous mode [ 144.370078] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.408203] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.421954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.468485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.483739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.498043] chnl_net:caif_netlink_parms(): no params data found [ 144.525547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.533257] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.540735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.549318] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.556474] team0: Port device team_slave_0 added [ 144.565949] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.573168] team0: Port device team_slave_1 added [ 144.578737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.585982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.595180] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.608736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.618571] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.624781] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.639877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.649280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.662219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.668917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.677911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.684109] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.704282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.753812] device hsr_slave_0 entered promiscuous mode [ 144.800253] device hsr_slave_1 entered promiscuous mode [ 144.840838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.847903] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.857019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.864737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.872498] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.878816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.885673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.893853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.901394] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.907716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.914568] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.921038] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.927777] device bridge_slave_0 entered promiscuous mode [ 144.935997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.945459] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.954007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.961740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.969459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.977334] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.983688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.991014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.998769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.006310] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.012636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.019558] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.026243] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.033428] device bridge_slave_1 entered promiscuous mode [ 145.082591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.092305] chnl_net:caif_netlink_parms(): no params data found [ 145.104948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.120765] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.129355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.142474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.157449] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.169003] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.195781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.212104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.219859] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.226920] team0: Port device team_slave_0 added [ 145.236539] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.243189] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.249906] device bridge_slave_0 entered promiscuous mode [ 145.256723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.265916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.274180] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.281365] team0: Port device team_slave_1 added [ 145.286365] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.293073] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.299798] device bridge_slave_1 entered promiscuous mode [ 145.306284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.314262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.321882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.329960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.338851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.349955] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.356434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.370111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.383792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.394529] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.402244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.409466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.417465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.425020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.432659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.440194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.446891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.453718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.461890] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.470860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.479173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.492209] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.498261] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.504860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.515559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.523106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.530560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.538721] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.554347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.570512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.578975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.594429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.602062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.609273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.617343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.624993] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.631323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.638096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.645839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.701810] device hsr_slave_0 entered promiscuous mode [ 145.750746] device hsr_slave_1 entered promiscuous mode [ 145.790897] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.801398] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.807385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.815939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.823462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.830795] team0: Port device team_slave_0 added [ 145.836150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.844271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.851760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.861483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.869624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.877309] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.894834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.902308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.908290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.915628] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.924002] team0: Port device team_slave_1 added [ 145.929252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.936863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.944598] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.950949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.957708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.966672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.975426] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 145.987781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.996218] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.003775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.013133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.021137] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.028797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.039470] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.046497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.054980] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.061202] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.067553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.075226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.083020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.090500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.097900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.105537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.112341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.119116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.128360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.140753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.149377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.166623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.175141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.183139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.190634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.198334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.206235] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.212586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.219397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.227053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.234525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.244162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.258149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.267158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.277147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.288684] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.295060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.304917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.313551] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.319532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.362772] device hsr_slave_0 entered promiscuous mode [ 146.400321] device hsr_slave_1 entered promiscuous mode [ 146.440829] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.448341] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.463814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.475194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.487838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.498462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.506092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.514097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.522569] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.528740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.537739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.548468] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.559397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.569730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.577772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.590724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.605305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.616443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.626297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 02:15:49 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 146.641867] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.647966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.655840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.663499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.671597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.679454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.733488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.752056] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.770947] Option '‘.›–Vn¿' to dns_resolver key: bad/missing value [ 146.771678] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 02:15:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffffffffffea5) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)="40bfd09d3cbbd9", 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:49 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f000057c000/0x2000)=nil) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="0bcbe0ea70221dbb37f271264ecb9b95"}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 146.796053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.805921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.816531] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.828834] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 146.839414] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 146.872893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.886806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.912139] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.918204] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.938846] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.947705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.956085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:15:49 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000017c0)={{&(0x7f0000813000/0x4000)=nil, 0xe07000}}) [ 146.972202] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.981167] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.987217] 8021q: adding VLAN 0 to HW filter on device team0 02:15:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x800001ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f0000000640)=0x1e) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x3, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x2) openat(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x121441, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@multicast1}}, {{@in=@local}}}, &(0x7f0000000100)=0xe8) preadv(r1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x1f) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) [ 147.027207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.038752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.055190] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.061586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.070475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 02:15:49 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000080)={0x7fff, 0x0, 0x1, 0x100000000, 0x10, 0x37}) r0 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000240)="6bc64a131a8da1162237a2909689fa634b48eb91") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0xe1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000000)=""/36, &(0x7f0000000140)=0x89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000180)) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r5, &(0x7f0000000800)="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", 0x600) sendfile(r5, r6, 0x0, 0x10000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x48040, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f00000003c0)) pipe(&(0x7f0000000200)) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000000c0)) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000340)='vmnet0\x00', 0x7, 0x0) [ 147.079354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.088131] hrtimer: interrupt took 24460 ns [ 147.097540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 02:15:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 147.120189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.127169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.154741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.166646] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.173030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.179958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.187840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.196261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.209018] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.215394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.233985] audit: type=1800 audit(1568168149.849:39): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16532 res=0 [ 147.271668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.284086] audit: type=1804 audit(1568168149.849:40): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir317091552/syzkaller.VRKMMV/3/file0" dev="sda1" ino=16532 res=1 [ 147.285464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.333365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.346285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.355554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.389803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.397536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.405742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.413582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.421573] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.427917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.435569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.444614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.455282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.462899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.475376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.484176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.493798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.501639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.509223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.518900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.533255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.544705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.552686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.564445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.572760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.579972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.587968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 02:15:50 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x800001ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f0000000640)=0x1e) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x3, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x2) openat(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x121441, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@multicast1}}, {{@in=@local}}}, &(0x7f0000000100)=0xe8) preadv(r1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x1f) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 02:15:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x800001ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f0000000640)=0x1e) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x3, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x2) openat(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x121441, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@multicast1}}, {{@in=@local}}}, &(0x7f0000000100)=0xe8) preadv(r1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x1f) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) [ 147.597528] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.604122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.612223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.635633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.659264] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.666714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.675447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.687622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.695851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.703686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.726815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.748276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.762523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.776155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.784308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.790860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.807377] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.818293] 8021q: adding VLAN 0 to HW filter on device batadv0 02:15:51 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) ioctl$SIOCAX25GETUID(r0, 0x89e0, 0x0) 02:15:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:52 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'netdevsim0\x00'}}, 0x70e000) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d80300"/12], 0xc) 02:15:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000022000000070000000000000095000000000000006208206903d64063b78f2f2f960ac76c63ec7064d43a0000451500000000000088a03f72afb0da05f77ddbb90883b0ed4987270096386dc684cd0d10d48abd01b74757f77ef854b1c46c76c2a5a56f3bd8e2a591aafbba9323ba5106181bd438107c16a90ea803d33e1d127e40bd47d0aef215b96a828631f46709ad786c9b748fa0b1"], &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x3e, 0x0, &(0x7f0000000400)="f460cdfbef24080000000a9386dd6a00000000072ceb3014cd3ec8b355c1e1380081ffad0c0000e8d5000000019a0f00f3248cadb441b910880b5d840000", 0x0, 0x401}, 0x28) 02:15:52 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x28007d) sendfile(r4, r4, 0x0, 0x2008000fffffffe) 02:15:52 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000080)={0x7fff, 0x0, 0x1, 0x100000000, 0x10, 0x37}) r0 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000240)="6bc64a131a8da1162237a2909689fa634b48eb91") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0xe1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000000)=""/36, &(0x7f0000000140)=0x89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000180)) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r5, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576b31e5fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r5, r6, 0x0, 0x10000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x48040, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f00000003c0)) pipe(&(0x7f0000000200)) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f00000000c0)) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000340)='vmnet0\x00', 0x7, 0x0) 02:15:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = gettid() fcntl$lock(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x13) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 02:15:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:15:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000003c0)={0x77359400}, 0x10) [ 149.852167] audit: type=1800 audit(1568168152.459:41): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16556 res=0 02:15:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 149.942019] audit: type=1804 audit(1568168152.499:42): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir317091552/syzkaller.VRKMMV/4/file0" dev="sda1" ino=16556 res=1 02:15:52 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=']\x00', 0xfffffffffffffffb) 02:15:52 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'netdevsim0\x00'}}, 0x70e000) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d80300"/12], 0xc) 02:15:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000000040)={'bond0\x00\x03\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x1, 0x8, @fr_pvc=0x0}}) 02:15:53 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x28007d) sendfile(r4, r4, 0x0, 0x2008000fffffffe) 02:15:53 executing program 5: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}}) [ 150.564689] syz-executor.5 (6901) used greatest stack depth: 24048 bytes left 02:15:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lseek(r0, 0x20000000000000, 0x0) 02:15:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:55 executing program 2: r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x10) 02:15:55 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'netdevsim0\x00'}}, 0x70e000) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d80300"/12], 0xc) 02:15:55 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x20000000000002, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 02:15:55 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) clock_gettime(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x28007d) sendfile(r2, r2, 0x0, 0x2008000fffffffe) 02:15:55 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 02:15:55 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x40021, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)=0xff000000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 02:15:55 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'netdevsim0\x00'}}, 0x70e000) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d80300"/12], 0xc) 02:15:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:55 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)='fusectl\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000140)='.', 0x0, 0x3002480, 0x0) 02:15:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) 02:15:55 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f00000017c0)={{&(0x7f0000b04000/0x2000)=nil, 0x2000}}) 02:15:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 02:15:55 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'netdevsim0\x00'}}, 0x70e000) 02:15:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 02:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0xe7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "01bf4acfb23bc82c", "b4fc78fcd2ff522f675cbe33b067712a7577fd307906290060b073d01c76c1fc", "4932efc8", "aeaaf2efa590d694"}, 0x38) sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:15:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 153.623742] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:15:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:15:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x2, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16]}, 0x7a) 02:15:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fstat(0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f7ffffffffffffff797074667320"], 0x1, 0x0) clone(0xffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 02:15:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 153.685743] audit: type=1400 audit(1568168156.299:43): avc: denied { map } for pid=7020 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27326 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 153.717606] kasan: CONFIG_KASAN_INLINE enabled [ 153.738414] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 153.755511] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 153.761758] Modules linked in: [ 153.764931] CPU: 0 PID: 7021 Comm: syz-executor.0 Not tainted 4.14.143 #0 [ 153.771845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.781177] task: ffff88805e504680 task.stack: ffff88805e508000 [ 153.787215] RIP: 0010:tcp_push+0xe9/0x610 [ 153.791336] RSP: 0018:ffff88805e50fa48 EFLAGS: 00010202 [ 153.796685] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007a4b000 [ 153.804027] RDX: 0000000000000007 RSI: ffffffff85231b30 RDI: 0000000000000038 [ 153.811275] RBP: ffff88805e50fa98 R08: ffff888092e3499c R09: ffff88805e504f20 [ 153.818525] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888092e34100 [ 153.825770] R13: 0000000000000000 R14: ffff888092e34994 R15: 0000000000000000 [ 153.833020] FS: 00007f4c4f79f700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 153.841221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.847080] CR2: 0000000000625208 CR3: 000000008a631000 CR4: 00000000001426f0 [ 153.854328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.861573] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.868817] Call Trace: [ 153.871381] tcp_sendmsg_locked+0x2307/0x3200 [ 153.875855] ? tcp_sendpage+0x60/0x60 [ 153.879635] ? trace_hardirqs_on_caller+0x400/0x590 [ 153.884626] ? trace_hardirqs_on+0xd/0x10 [ 153.888749] tcp_sendmsg+0x30/0x50 [ 153.892264] inet_sendmsg+0x122/0x500 [ 153.896056] ? inet_recvmsg+0x500/0x500 [ 153.900006] sock_sendmsg+0xce/0x110 [ 153.903704] SYSC_sendto+0x206/0x310 [ 153.907393] ? SYSC_connect+0x2d0/0x2d0 [ 153.911345] ? kasan_check_read+0x11/0x20 [ 153.915469] ? _copy_to_user+0x87/0xd0 [ 153.919334] ? put_timespec64+0xb4/0x100 [ 153.923372] ? nsecs_to_jiffies+0x30/0x30 [ 153.927499] ? SyS_clock_gettime+0xf8/0x180 [ 153.931799] SyS_sendto+0x40/0x50 [ 153.935317] ? SyS_getpeername+0x30/0x30 [ 153.939360] do_syscall_64+0x1e8/0x640 [ 153.943313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.948137] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 153.953300] RIP: 0033:0x4598e9 [ 153.956467] RSP: 002b:00007f4c4f79ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 153.964152] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 153.971416] RDX: ffffffffffffffc1 RSI: 00000000200005c0 RDI: 0000000000000004 [ 153.978660] RBP: 000000000075bf20 R08: 0000000000000000 R09: 1201000000003618 02:15:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r1, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000580)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x1}]}}}}}}}}, 0x0) [ 153.985903] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c4f79f6d4 [ 153.993152] R13: 00000000004c7880 R14: 00000000004dd188 R15: 00000000ffffffff [ 154.000399] Code: 00 4d 8d 84 24 9c 08 00 00 4c 89 45 b8 e8 40 c7 39 fc 48 8d 7b 38 4c 8b 45 b8 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 06 0f 8e 1e 04 00 00 48 b8 00 00 00 00 00 [ 154.019485] RIP: tcp_push+0xe9/0x610 RSP: ffff88805e50fa48 02:15:56 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'netdevsim0\x00'}}, 0x70e000) 02:15:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="435919116cfb", 0x0, 0x0, 0x0, 0x0, 0x0}) 02:15:56 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) connect(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 154.036830] kobject: 'loop2' (ffff8880a4974f20): kobject_uevent_env [ 154.037044] kobject: 'kvm' (ffff888219fd2e10): kobject_uevent_env [ 154.047350] encrypted_key: master key parameter '' is invalid [ 154.055999] kobject: 'kvm' (ffff888219fd2e10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 154.058627] kobject: 'loop2' (ffff8880a4974f20): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 154.069923] syz-executor.2 (7039) used greatest stack depth: 23864 bytes left [ 154.079655] encrypted_key: master key parameter '' is invalid 02:15:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe8003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 154.096591] kobject: 'kvm' (ffff888219fd2e10): kobject_uevent_env [ 154.105809] kobject: 'kvm' (ffff888219fd2e10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 154.117357] kobject: 'loop4' (ffff8880a4a27220): kobject_uevent_env [ 154.122620] kobject: 'kvm' (ffff888219fd2e10): kobject_uevent_env [ 154.130123] kobject: 'loop4' (ffff8880a4a27220): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 154.130514] kobject: 'loop1' (ffff8880a4938620): kobject_uevent_env 02:15:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffffff}}) [ 154.148325] kobject: 'kvm' (ffff888219fd2e10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 154.165026] kobject: 'kvm' (ffff888219fd2e10): kobject_uevent_env [ 154.171342] kobject: 'kvm' (ffff888219fd2e10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 154.172290] kobject: 'kvm' (ffff888219fd2e10): kobject_uevent_env [ 154.182081] kobject: 'loop1' (ffff8880a4938620): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 154.188100] kobject: 'kvm' (ffff888219fd2e10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 154.197719] kobject: 'kvm' (ffff888219fd2e10): kobject_uevent_env [ 154.211478] kobject: 'kvm' (ffff888219fd2e10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 154.225039] kobject: 'loop2' (ffff8880a4974f20): kobject_uevent_env [ 154.231665] ---[ end trace 039c07944eec75be ]--- [ 154.232162] kobject: 'loop2' (ffff8880a4974f20): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 154.236542] Kernel panic - not syncing: Fatal exception [ 154.246485] kobject: 'loop3' (ffff8880a49e51a0): kobject_uevent_env [ 154.252386] Kernel Offset: disabled [ 154.262425] Rebooting in 86400 seconds..