[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
syzkaller login: [ 32.777695] random: sshd: uninitialized urandom read (32 bytes read)
[ 33.057825] kauditd_printk_skb: 10 callbacks suppressed
[ 33.057837] audit: type=1400 audit(1568671995.715:35): avc: denied { map } for pid=6882 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[ 33.114366] random: sshd: uninitialized urandom read (32 bytes read)
[ 33.754451] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts.
[ 39.379165] random: sshd: uninitialized urandom read (32 bytes read)
2019/09/16 22:13:22 fuzzer started
[ 39.565486] audit: type=1400 audit(1568672002.225:36): avc: denied { map } for pid=6893 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[ 40.295513] random: cc1: uninitialized urandom read (8 bytes read)
2019/09/16 22:13:24 dialing manager at 10.128.0.105:38157
2019/09/16 22:13:31 syscalls: 2466
2019/09/16 22:13:31 code coverage: enabled
2019/09/16 22:13:31 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/09/16 22:13:31 extra coverage: extra coverage is not supported by the kernel
2019/09/16 22:13:31 setuid sandbox: enabled
2019/09/16 22:13:31 namespace sandbox: enabled
2019/09/16 22:13:31 Android sandbox: /sys/fs/selinux/policy does not exist
2019/09/16 22:13:31 fault injection: enabled
2019/09/16 22:13:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/09/16 22:13:31 net packet injection: enabled
2019/09/16 22:13:31 net device setup: enabled
[ 50.238467] random: crng init done
22:15:11 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
mlock(&(0x7f0000400000/0x4000)=nil, 0x4000)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
22:15:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5c0bcfe47bf070")
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x54}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)
22:15:11 executing program 1:
creat(&(0x7f0000000100)='./bus\x00', 0x0)
open(0x0, 0x0, 0x0)
creat(0x0, 0x0)
io_setup(0x10000, &(0x7f0000000000))
io_setup(0x401, &(0x7f0000000280))
pipe2$9p(0x0, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x0)
io_setup(0x8, 0x0)
22:15:11 executing program 2:
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'gretap0\x00'}, 0xffffffffffffff3d)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x0, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\xb9\xd9\xd3q\xa1h\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r0, 0x800000000008982, &(0x7f0000000080))
22:15:11 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()
22:15:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r0, &(0x7f00000004c0), 0x400000000000251, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000180), 0x40002e9, 0x0)
[ 149.062785] audit: type=1400 audit(1568672111.725:37): avc: denied { map } for pid=6893 comm="syz-fuzzer" path="/root/syzkaller-shm641321656" dev="sda1" ino=16490 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[ 149.099002] audit: type=1400 audit(1568672111.755:38): avc: denied { map } for pid=6911 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[ 149.461043] IPVS: ftp: loaded support on port[0] = 21
[ 150.272388] IPVS: ftp: loaded support on port[0] = 21
[ 150.272537] chnl_net:caif_netlink_parms(): no params data found
[ 150.328593] bridge0: port 1(bridge_slave_0) entered blocking state
[ 150.335647] bridge0: port 1(bridge_slave_0) entered disabled state
[ 150.343202] device bridge_slave_0 entered promiscuous mode
[ 150.351955] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.358330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 150.365316] device bridge_slave_1 entered promiscuous mode
[ 150.376716] IPVS: ftp: loaded support on port[0] = 21
[ 150.405394] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 150.415742] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 150.449323] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 150.457074] team0: Port device team_slave_0 added
[ 150.477988] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 150.485239] team0: Port device team_slave_1 added
[ 150.490676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 150.499755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 150.507254] chnl_net:caif_netlink_parms(): no params data found
[ 150.539486] IPVS: ftp: loaded support on port[0] = 21
[ 150.582210] device hsr_slave_0 entered promiscuous mode
[ 150.660510] device hsr_slave_1 entered promiscuous mode
[ 150.758856] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 150.773944] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 150.787556] bridge0: port 1(bridge_slave_0) entered blocking state
[ 150.794257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 150.801758] device bridge_slave_0 entered promiscuous mode
[ 150.835954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.843467] bridge0: port 2(bridge_slave_1) entered disabled state
[ 150.850787] device bridge_slave_1 entered promiscuous mode
[ 150.884251] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 150.892085] chnl_net:caif_netlink_parms(): no params data found
[ 150.908077] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.914612] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 150.921740] bridge0: port 1(bridge_slave_0) entered blocking state
[ 150.928161] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 150.938283] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 150.983344] IPVS: ftp: loaded support on port[0] = 21
[ 150.992108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 150.999609] team0: Port device team_slave_0 added
[ 151.021395] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 151.031350] team0: Port device team_slave_1 added
[ 151.037203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 151.047129] bridge0: port 1(bridge_slave_0) entered blocking state
[ 151.053833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 151.061535] device bridge_slave_0 entered promiscuous mode
[ 151.069511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 151.076394] bridge0: port 2(bridge_slave_1) entered disabled state
[ 151.083343] device bridge_slave_1 entered promiscuous mode
[ 151.104707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 151.126180] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 151.137068] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 151.212192] device hsr_slave_0 entered promiscuous mode
[ 151.250404] device hsr_slave_1 entered promiscuous mode
[ 151.292900] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 151.301199] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 151.308402] team0: Port device team_slave_0 added
[ 151.337927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 151.345520] bridge0: port 2(bridge_slave_1) entered disabled state
[ 151.356070] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 151.365132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 151.372733] team0: Port device team_slave_1 added
[ 151.401889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 151.410634] chnl_net:caif_netlink_parms(): no params data found
[ 151.428505] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 151.436308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 151.436486] IPVS: ftp: loaded support on port[0] = 21
[ 151.502292] device hsr_slave_0 entered promiscuous mode
[ 151.540441] device hsr_slave_1 entered promiscuous mode
[ 151.622373] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 151.644522] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 151.659664] 8021q: adding VLAN 0 to HW filter on device bond0
[ 151.736903] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 151.745914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 151.759668] bridge0: port 1(bridge_slave_0) entered blocking state
[ 151.766593] bridge0: port 1(bridge_slave_0) entered disabled state
[ 151.773981] device bridge_slave_0 entered promiscuous mode
[ 151.784641] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 151.803713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 151.812314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 151.819640] chnl_net:caif_netlink_parms(): no params data found
[ 151.828789] bridge0: port 2(bridge_slave_1) entered blocking state
[ 151.835640] bridge0: port 2(bridge_slave_1) entered disabled state
[ 151.842815] device bridge_slave_1 entered promiscuous mode
[ 151.862853] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 151.874476] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 151.888005] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 151.894505] 8021q: adding VLAN 0 to HW filter on device team0
[ 151.908305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 151.928418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 151.939641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 151.957342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 151.965644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 151.973741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 151.980176] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 151.987142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 151.996050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 152.003926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.010347] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 152.018486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 152.034924] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 152.042535] team0: Port device team_slave_0 added
[ 152.048449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 152.057398] team0: Port device team_slave_1 added
[ 152.062806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 152.070708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 152.084001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 152.116246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 152.125324] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 152.213711] device hsr_slave_0 entered promiscuous mode
[ 152.260397] device hsr_slave_1 entered promiscuous mode
[ 152.337389] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 152.344911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 152.352463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 152.361939] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 152.368220] 8021q: adding VLAN 0 to HW filter on device team0
[ 152.378446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 152.393029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 152.399785] chnl_net:caif_netlink_parms(): no params data found
[ 152.409726] bridge0: port 1(bridge_slave_0) entered blocking state
[ 152.416378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 152.423566] device bridge_slave_0 entered promiscuous mode
[ 152.430467] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.436835] bridge0: port 2(bridge_slave_1) entered disabled state
[ 152.444265] device bridge_slave_1 entered promiscuous mode
[ 152.455441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 152.465219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 152.488257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 152.498050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 152.506134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 152.514506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 152.522708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 152.530659] bridge0: port 1(bridge_slave_0) entered blocking state
[ 152.537339] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 152.544757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 152.551799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 152.562999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 152.574189] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 152.590696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 152.598391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 152.609042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 152.616833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 152.629229] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 152.645645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 152.653883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 152.661935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 152.669985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 152.678143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.684553] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 152.693844] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 152.716076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 152.732302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 152.739428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 152.747737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 152.755531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 152.763573] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 152.770927] team0: Port device team_slave_0 added
[ 152.776852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 152.784860] team0: Port device team_slave_1 added
[ 152.792332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 152.799208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 152.808070] bridge0: port 1(bridge_slave_0) entered disabled state
[ 152.816114] device bridge_slave_0 entered promiscuous mode
[ 152.823157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.829513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 152.837219] device bridge_slave_1 entered promiscuous mode
[ 152.846396] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 152.852927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 152.860845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 152.869317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 152.878808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 152.897506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 152.905856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 152.914854] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 152.924333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 152.942321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 152.949820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 152.958847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 152.979953] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 152.989656] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 153.001365] 8021q: adding VLAN 0 to HW filter on device bond0
[ 153.011579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 153.053720] device hsr_slave_0 entered promiscuous mode
[ 153.110489] device hsr_slave_1 entered promiscuous mode
[ 153.156397] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 153.166850] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 153.176733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 153.184647] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 153.194017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 153.202078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 153.209831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 153.217277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 153.226461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 153.242603] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 153.253442] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 153.259625] 8021q: adding VLAN 0 to HW filter on device team0
[ 153.267917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 153.276428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 153.289876] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 153.300893] team0: Port device team_slave_0 added
[ 153.316384] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 153.323702] team0: Port device team_slave_1 added
[ 153.331311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 153.342350] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 153.351663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 153.359723] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 153.367685] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 153.374819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 153.387101] 8021q: adding VLAN 0 to HW filter on device bond0
[ 153.394208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 153.402836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 153.412153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 153.420406] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.426840] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 153.434386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 153.465605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 153.475153] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 153.532415] device hsr_slave_0 entered promiscuous mode
[ 153.570482] device hsr_slave_1 entered promiscuous mode
[ 153.620891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 153.628721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 153.637091] bridge0: port 2(bridge_slave_1) entered blocking state
[ 153.643802] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 153.653368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 153.661621] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 153.671388] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 153.680529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 153.695153] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 153.708498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 153.724971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 153.736665] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 153.748891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 153.757039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 153.764734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 153.778729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 153.788942] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 153.797864] 8021q: adding VLAN 0 to HW filter on device team0
[ 153.805313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 153.813946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 153.822526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 153.841890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 153.861718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 153.877525] 8021q: adding VLAN 0 to HW filter on device bond0
[ 153.887106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 153.896444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 153.904697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 153.919617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 153.933879] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.940468] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 153.949341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 153.964286] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 153.972790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 153.982877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 153.989457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 153.996663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 154.006339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 154.014214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 154.022827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 154.030538] bridge0: port 2(bridge_slave_1) entered blocking state
22:15:16 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]})
open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40)
22:15:16 executing program 1:
getrandom(&(0x7f0000000080)=""/108, 0xfc10868197c55658, 0x0)
[ 154.036910] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.055386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 154.072789] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 154.088605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 154.099659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 154.130658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
22:15:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
[ 154.139040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 154.157966] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 154.169208] 8021q: adding VLAN 0 to HW filter on device team0
[ 154.191872] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 154.197962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 154.219416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 154.231407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 154.238796] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 154.266427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 154.291074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 154.298852] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 154.307017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 154.316332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 154.324858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.331443] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 154.338527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 154.357266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 154.367357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 154.386063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 154.399061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 154.412146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 154.419875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.426460] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.440281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 154.448102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 154.461249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 154.471312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 154.481129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 154.496780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 154.507850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 154.521722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 154.533248] 8021q: adding VLAN 0 to HW filter on device batadv0
22:15:17 executing program 0:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0xe)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
[ 154.568090] 8021q: adding VLAN 0 to HW filter on device bond0
[ 154.603729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 154.621600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 154.629172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 154.642150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 154.653887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 154.666121] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
22:15:17 executing program 0:
setrlimit(0x7, &(0x7f00000001c0))
epoll_create1(0x0)
[ 154.678166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 154.699006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 154.710168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 154.717691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
22:15:17 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
timer_create(0x0, 0x0, &(0x7f0000000540))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, 0x0)
timer_gettime(0x0, &(0x7f0000000240))
[ 154.736129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 154.744095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 154.756013] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 154.770675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 154.780528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 154.789633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 154.816003] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 154.827492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 154.835205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 154.847099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 154.856283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 154.868314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 154.876391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 154.888199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
22:15:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x1, 0x8010002000000084)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x90)
[ 154.931115] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 154.939648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 154.959876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 154.979172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 155.004327] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 155.017502] 8021q: adding VLAN 0 to HW filter on device team0
[ 155.031757] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 155.043856] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 155.051128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 155.062442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 155.076960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 155.085509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 155.093635] bridge0: port 1(bridge_slave_0) entered blocking state
22:15:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fd)
fcntl$setstatus(r1, 0x4, 0x6100)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x4003fe)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4})
22:15:17 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)
[ 155.100205] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 155.107713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 155.127831] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 155.161596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 155.183680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 155.196333] audit: type=1400 audit(1568672117.855:39): avc: denied { set_context_mgr } for pid=7005 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[ 155.224674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 155.233284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 155.241591] bridge0: port 2(bridge_slave_1) entered blocking state
[ 155.247957] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 155.255200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 155.266804] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 155.278134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 155.288799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 155.302153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 155.311037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 155.319321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 155.327536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 155.338615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 155.349052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 155.357743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 155.371458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 155.382861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 155.389953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 155.398194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 155.405929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 155.429685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 155.439936] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 155.446970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 155.477349] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 155.499213] 8021q: adding VLAN 0 to HW filter on device batadv0
22:15:18 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f00000000c0)={'sit0\x00', 0x0})
22:15:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280))
22:15:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0)
write$selinux_access(r1, &(0x7f0000000100)={'system_u:object_r:system_cron_spool_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x6c)
22:15:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000))
22:15:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
22:15:19 executing program 2:
fdatasync(0xffffffffffffffff)
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab0a, 0x0)
22:15:19 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SIZE(r0, 0x125f, 0x0)
22:15:19 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)
22:15:19 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaaae7, &(0x7f0000000540)=[{&(0x7f0000000080)="c62da7b811b41c48b28094f6c0071cf1fa6ab43385b300ee9fcee5e424dbaf2ccd9db6cabf1524cbc7b79469fdad3c84", 0xffffffffffffff8c, 0x8003}, {0x0}], 0x402c062, 0x0)
22:15:19 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00@\x00', 0x1801})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\r\xc2\x00\t\x00\x00\x00\x80\x00'})
22:15:19 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000380)='./file0\x00', 0x8001420, 0x0)
open(&(0x7f0000001280)='./file0\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
[ 157.028598] 9pnet: Insufficient options for proto=fd
22:15:19 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x6)
ftruncate(r0, 0x0)
22:15:19 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x0)
22:15:19 executing program 3:
setxattr$security_smack_transmute(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x3)
r0 = socket(0x1, 0x0, 0x7)
getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000540), &(0x7f00000004c0)=0x4)
pipe2(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000005c0)={@ipv4={[], [], @rand_addr=0x4d402332}, @remote, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x100000001, 0x8bfd, 0xd0, 0x400, 0x7, 0x40})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0xc000000000, 0x2000)
request_key(&(0x7f0000000900)='rxrpc_s\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)='-self-\x00', 0xfffffffffffffff8)
add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
fadvise64(r2, 0x800000, 0x3, 0x4)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101080, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000740)={<r7=>0x0, @empty}, &(0x7f0000000780)=0xc)
setsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f00000007c0)={@loopback, r7}, 0x14)
write$P9_RREADLINK(r6, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000380)=0x9)
clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$random(0xffffffffffffff9c, &(0x7f0000000580)='/dev/urandom\x00', 0x1, 0x0)
writev(r5, &(0x7f0000000700)=[{&(0x7f0000000800)="66272eaa06a51a7d7226b96c2afb86ce08ef206b217688545660d86fe1f9c065e14cd72ace015de136876bff95ab12204af3a19a121cafc578add591ed5cdf36debdfe982b958c73b950c20791a2518c94a6d94d38e8093c3fae17f19015d49732509ed467082e75cc9ad0410509b6461a9ede4dee14f906c34252e8639cb99db404843e87bc912683adedae11e4a4462eff26c24152cbba49c3168b5bc240c1032280b3af260175f3bd341e1fdb74f3c60d51a252adb9dd5d410f36b4bf", 0xbe}], 0x1)
ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000003c0)={0x29, 0x1, 0x7f, 0xfffffffffffffb4b, "0100e1d1ea000000afa68a69da0000000000000000000800"})
ioctl$EVIOCGSW(r1, 0x8040451b, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000180), 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r9 = dup2(r3, r3)
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000500)={0x0, 0x148, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x1}}, 0x0)
write$cgroup_type(r9, &(0x7f0000000140)='threaded\x00', 0xfffffebd)
22:15:19 executing program 4:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2f5fa26)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYRES32], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x6)
ftruncate(r0, 0x0)
22:15:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r0)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0)
[ 157.217176] ptrace attach of "/root/syz-executor.0"[7094] was attempted by "/root/syz-executor.0"[7098]
[ 157.253364] hrtimer: interrupt took 50315 ns
[ 157.302350] ptrace attach of "/root/syz-executor.4"[7106] was attempted by "/root/syz-executor.4"[7107]
22:15:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r0)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0)
22:15:20 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab09, 0x101)
22:15:20 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
rmdir(&(0x7f0000000480)='./file0/file0\x00')
22:15:20 executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)
[ 157.775816] audit: type=1400 audit(1568672120.435:40): avc: denied { associate } for pid=7119 comm="syz-executor.5" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
22:15:20 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x3, 0x84)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
write(r1, &(0x7f0000002b40)="7156f306df0ed46061f065d70a6109e4", 0x10)
22:15:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@flushsa={0x14, 0x15, 0x507}, 0x14}}, 0x0)
22:15:20 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9)
22:15:20 executing program 0:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11f6af0d5e0bcfe47bf070")
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r4 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)
22:15:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x148})
22:15:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [], [0x3a]})
22:15:20 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="e0d20400cd80"], 0x6}}, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388", @ANYRES16=0x0, @ANYPTR64, @ANYRESHEX, @ANYBLOB="e6c55c5d00010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad4c079521dfdaf3d0fef515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5", @ANYRESHEX], 0x0, 0x150}, 0x20)
tkill(r1, 0x39)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
22:15:20 executing program 5:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap$binder(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
pipe(&(0x7f00000002c0))
epoll_create(0xe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
22:15:20 executing program 3:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0))
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffeee)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r0=>0x0})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
lstat(0x0, 0x0)
22:15:20 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r1, &(0x7f0000000040)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
[ 158.123575] ptrace attach of "/root/syz-executor.3"[7158] was attempted by "/root/syz-executor.3"[7160]
22:15:20 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x7)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x8000000000000)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}, 0x45c)
mlockall(0x4)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0))
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)="e4325fdfdc0b2cf7915a850fd3668240741426f2d3c15c32e9c5170a8c1595176ac14b")
openat$zero(0xffffffffffffff9c, 0x0, 0x1ffd, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x3)
sysinfo(&(0x7f00000007c0)=""/154)
ioctl$BLKPG(r3, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)})
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080))
[ 158.174838] audit: type=1400 audit(1568672120.835:41): avc: denied { map } for pid=7164 comm="syz-executor.4" path=2F6D656D66643A0B656D31C1F8A68D4EC0A35CE2CBA2BAE5F497AC232AFF202864656C6574656429 dev="tmpfs" ino=27991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1
[ 158.233586] audit: type=1400 audit(1568672120.895:42): avc: denied { map } for pid=7171 comm="syz-executor.4" path="/dev/binder0" dev="devtmpfs" ino=723 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1
[ 158.259453] binder: 7171:7172 ioctl 54a0 0 returned -22
[ 158.283407] binder: 7171:7172 ioctl 8904 200001c0 returned -22
[ 158.321264] ------------[ cut here ]------------
[ 158.323252] kobject: 'nr0' (ffff88805c508df0): kobject_uevent_env
[ 158.326259] WARNING: CPU: 1 PID: 6817 at net/ipv4/tcp_timer.c:429 tcp_retransmit_timer+0x1ac5/0x2560
[ 158.326269] Kernel panic - not syncing: panic_on_warn set ...
[ 158.326269]
[ 158.326278] CPU: 1 PID: 6817 Comm: mcstransd Not tainted 4.14.144 #0
[ 158.326283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 158.326287] Call Trace:
[ 158.326291] <IRQ>
[ 158.326304] dump_stack+0x138/0x197
[ 158.326317] panic+0x1f2/0x426
[ 158.326324] ? add_taint.cold+0x16/0x16
[ 158.326335] ? tcp_retransmit_timer+0x1ac5/0x2560
[ 158.326346] ? tcp_retransmit_timer+0x1ac5/0x2560
[ 158.326354] __warn.cold+0x2f/0x36
[ 158.333637] kobject: 'nr0' (ffff88805c508df0): fill_kobj_path: path = '/devices/virtual/net/nr0'
[ 158.342238] ? ist_end_non_atomic+0x10/0x10
[ 158.342253] ? tcp_retransmit_timer+0x1ac5/0x2560
[ 158.342264] report_bug+0x216/0x254
[ 158.342275] do_error_trap+0x1bb/0x310
[ 158.342284] ? math_error+0x360/0x360
[ 158.342296] ? __lock_acquire+0x5f7/0x4620
[ 158.342303] ? trace_hardirqs_on+0x10/0x10
[ 158.342310] ? __lock_acquire+0x5f7/0x4620
[ 158.342317] ? trace_hardirqs_on+0x10/0x10
[ 158.342331] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 158.342342] do_invalid_op+0x1b/0x20
[ 158.342351] invalid_op+0x1b/0x40
[ 158.342359] RIP: 0010:tcp_retransmit_timer+0x1ac5/0x2560
[ 158.342362] RSP: 0018:ffff8880aef07c88 EFLAGS: 00010206
[ 158.342369] RAX: ffff88809baba280 RBX: ffff8880646f0100 RCX: 0000000000000004
[ 158.342373] RDX: 0000000000000100 RSI: ffff88806096880c RDI: ffff8880609689d8
[ 158.342377] RBP: ffff8880aef07ce8 R08: 0000002604f6f64a R09: ffff88821fff8048
[ 158.342380] R10: ffff88821fff8050 R11: 0000000000000001 R12: ffff888060968000
[ 158.342385] R13: ffff88806096869a R14: ffff888060968030 R15: 0000000000000000
[ 158.342401] ? tcp_retransmit_timer+0x1ac5/0x2560
[ 158.342410] ? sched_clock+0x2e/0x50
[ 158.342420] tcp_write_timer_handler+0x479/0x7e0
[ 158.342434] tcp_write_timer+0xd8/0x180
[ 158.519704] call_timer_fn+0x161/0x670
[ 158.523604] ? tcp_write_timer_handler+0x7e0/0x7e0
[ 158.528539] ? __next_timer_interrupt+0x140/0x140
[ 158.533450] ? trace_hardirqs_on_caller+0x19b/0x590
[ 158.538745] run_timer_softirq+0x5b4/0x1570
[ 158.543196] ? tcp_write_timer_handler+0x7e0/0x7e0
[ 158.548131] ? add_timer+0xae0/0xae0
[ 158.551855] ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 158.557391] __do_softirq+0x244/0x9a0
[ 158.561201] ? sched_clock+0x2e/0x50
[ 158.564926] irq_exit+0x160/0x1b0
[ 158.568397] smp_apic_timer_interrupt+0x146/0x5e0
[ 158.573482] apic_timer_interrupt+0x96/0xa0
[ 158.577811] </IRQ>
[ 158.580068] RIP: 0010:kmem_cache_alloc+0x2b0/0x780
[ 158.584992] RSP: 0018:ffff88809feefd38 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
[ 158.592705] RAX: 0000000000000007 RBX: 00000000014000c0 RCX: 0000000000000000
[ 158.599975] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286
[ 158.607239] RBP: ffff88809feefda0 R08: ffff88809baba280 R09: 0000000000000000
[ 158.614496] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805c600980
[ 158.621779] R13: ffff8880aa9e0cc0 R14: ffff8880aa9e0cc0 R15: 00000000014000c0
[ 158.629084] ? fd_install+0x4d/0x60
[ 158.630537] kobject: 'loop1' (ffff8880a4a397a0): kobject_uevent_env
[ 158.632722] getname_flags+0xcb/0x580
[ 158.632734] getname+0x1a/0x20
[ 158.632743] do_sys_open+0x1e7/0x430
[ 158.632754] ? filp_open+0x70/0x70
[ 158.632764] ? SyS_setsockopt+0x210/0x210
[ 158.632773] SyS_open+0x2d/0x40
[ 158.632779] ? do_sys_open+0x430/0x430
[ 158.632788] do_syscall_64+0x1e8/0x640
[ 158.632794] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 158.632805] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 158.632811] RIP: 0033:0x7efe9a6c3120
[ 158.632815] RSP: 002b:00007ffcf5f83748 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 158.632822] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007efe9a6c3120
[ 158.632825] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000561f694ab9b0
[ 158.632829] RBP: 0000561f694a3348 R08: 746e65727275632f R09: 00007efe9add6b15
[ 158.632833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 158.639626] kobject: 'loop1' (ffff8880a4a397a0): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 158.643136] R13: 0000561f694a3140 R14: 00007ffcf5f837e8 R15: 0000000000000005
[ 158.648308] Kernel Offset: disabled
[ 158.741834] Rebooting in 86400 seconds..