Warning: Permanently added '[localhost]:47732' (ECDSA) to the list of known hosts. syzkaller login: [ 102.231466][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 102.231481][ T39] audit: type=1400 audit(1579187563.160:42): avc: denied { map } for pid=8752 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/16 15:12:43 fuzzer started 2020/01/16 15:12:45 dialing manager at 10.0.2.10:38671 [ 104.377689][ T8767] ld (8767) used greatest stack depth: 23176 bytes left 2020/01/16 15:12:45 syscalls: 2863 2020/01/16 15:12:45 code coverage: enabled 2020/01/16 15:12:45 comparison tracing: enabled 2020/01/16 15:12:45 extra coverage: enabled 2020/01/16 15:12:45 setuid sandbox: enabled 2020/01/16 15:12:45 namespace sandbox: enabled 2020/01/16 15:12:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/16 15:12:45 fault injection: enabled 2020/01/16 15:12:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/16 15:12:45 net packet injection: enabled 2020/01/16 15:12:45 net device setup: enabled 2020/01/16 15:12:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/16 15:12:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 15:13:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 158.676306][ T39] audit: type=1400 audit(1579187619.600:43): avc: denied { map } for pid=8777 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=2063 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 15:13:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x0, 0x19) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x297, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') syncfs(0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r1, 0x5385, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000000000001, 0x20011, r2, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x5385, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x5385, &(0x7f0000000000)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x8, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000000000001, 0x20011, r4, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000000000001, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x5385, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x6c, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x58, 0x1, @m_police={0x54, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}, {0x4}}}}]}, 0x6c}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'team_slave_0\x00', @ifru_ivalue=0x6}) [ 158.948570][ T8778] IPVS: ftp: loaded support on port[0] = 21 15:13:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_UIE_OFF(r2, 0x7004) [ 158.975705][ T8780] IPVS: ftp: loaded support on port[0] = 21 15:13:40 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r3, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r2) [ 159.166212][ T8782] IPVS: ftp: loaded support on port[0] = 21 [ 159.206328][ T8778] chnl_net:caif_netlink_parms(): no params data found [ 159.231690][ T8780] chnl_net:caif_netlink_parms(): no params data found [ 159.346843][ T8787] IPVS: ftp: loaded support on port[0] = 21 [ 159.362505][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.374041][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.387461][ T8778] device bridge_slave_0 entered promiscuous mode [ 159.414585][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.429172][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.442835][ T8780] device bridge_slave_0 entered promiscuous mode [ 159.455136][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.466719][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.478140][ T8780] device bridge_slave_1 entered promiscuous mode [ 159.489038][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.500043][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.510860][ T8778] device bridge_slave_1 entered promiscuous mode [ 159.563757][ T8780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.581167][ T8780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.599021][ T8778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.618524][ T8778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.666636][ T8780] team0: Port device team_slave_0 added [ 159.676030][ T8780] team0: Port device team_slave_1 added [ 159.694111][ T8778] team0: Port device team_slave_0 added [ 159.704380][ T8778] team0: Port device team_slave_1 added [ 159.713473][ T8782] chnl_net:caif_netlink_parms(): no params data found [ 159.842124][ T8778] device hsr_slave_0 entered promiscuous mode [ 159.909104][ T8778] device hsr_slave_1 entered promiscuous mode [ 160.139914][ T8780] device hsr_slave_0 entered promiscuous mode [ 160.198265][ T8780] device hsr_slave_1 entered promiscuous mode [ 160.268102][ T8780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.281614][ T8780] Cannot create hsr debugfs directory [ 160.356402][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.368916][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.383251][ T8782] device bridge_slave_0 entered promiscuous mode [ 160.402594][ T8787] chnl_net:caif_netlink_parms(): no params data found [ 160.419459][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.430283][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.440212][ T8782] device bridge_slave_1 entered promiscuous mode [ 160.496502][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.512868][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.597605][ T8782] team0: Port device team_slave_0 added [ 160.760505][ T39] audit: type=1400 audit(1579187621.680:44): avc: denied { create } for pid=8780 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.799957][ T8782] team0: Port device team_slave_1 added [ 160.803170][ T39] audit: type=1400 audit(1579187621.690:45): avc: denied { write } for pid=8780 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.817182][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.848459][ T39] audit: type=1400 audit(1579187621.690:46): avc: denied { read } for pid=8780 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 160.856872][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.914416][ T8787] device bridge_slave_0 entered promiscuous mode [ 160.930354][ T8780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.009775][ T8780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.080639][ T8780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.162862][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.171648][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.182822][ T8787] device bridge_slave_1 entered promiscuous mode [ 161.216314][ T8778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.271284][ T8778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.349966][ T8780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.452124][ T8787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.479852][ T8778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.643208][ T8782] device hsr_slave_0 entered promiscuous mode [ 161.708711][ T8782] device hsr_slave_1 entered promiscuous mode [ 161.768277][ T8782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.783985][ T8782] Cannot create hsr debugfs directory [ 161.798781][ T8787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.824699][ T8778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.920244][ T8787] team0: Port device team_slave_0 added [ 161.939045][ T8787] team0: Port device team_slave_1 added [ 162.083344][ T8787] device hsr_slave_0 entered promiscuous mode [ 162.185771][ T8787] device hsr_slave_1 entered promiscuous mode [ 162.268390][ T8787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.278133][ T8787] Cannot create hsr debugfs directory [ 162.361298][ T8782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.452822][ T8782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.546058][ T8782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.601335][ T8782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.725057][ T8787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.781767][ T8787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.860347][ T8787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.955271][ T8787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.076303][ T8780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.116837][ T8778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.135820][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.149421][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.184209][ T8780] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.214435][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.229721][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.251709][ T8778] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.275089][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.317205][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.345833][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.363103][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.381528][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.405922][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.435327][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.449468][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.463662][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.474626][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.486622][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.508949][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.526013][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.537545][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.550979][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.575298][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.590172][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.603361][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.615343][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.625351][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.645587][ T8782] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.658343][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.669899][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.680023][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.690869][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.703134][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.714958][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.725902][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.737194][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.748601][ T8785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.779207][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.789717][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.800891][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.813703][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.824258][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.834958][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.845808][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.859265][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.871820][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.880982][ T8785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.890655][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.903740][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.913310][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.926701][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.935938][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.945675][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.960919][ T8787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.973670][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.994700][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.006545][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.017801][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.030113][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.040630][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.050533][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.060618][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.077428][ T8780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.090183][ T8780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.105171][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.121733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.132234][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.143145][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.159498][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.171180][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.185023][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.196632][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.206416][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.218491][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.229212][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.240235][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.256693][ T8787] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.277302][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.287372][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.299144][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.322552][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.366566][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.385070][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.393215][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.403731][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.419359][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.443813][ T8780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.465287][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.475407][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.487525][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.497827][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.508064][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.517380][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.527340][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.542329][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.557869][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.570109][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.580545][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.606600][ T8778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.621424][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.631965][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.645753][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.661019][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.676437][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.687421][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.706197][ T8787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.719608][ T8787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.736216][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.747214][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.759642][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.769415][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.779649][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.795452][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.807570][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.832453][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.842792][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.851504][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.861945][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.877057][ T8787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.900095][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.913700][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.939922][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.952996][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.964470][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.973946][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.983835][ T8780] device veth0_vlan entered promiscuous mode [ 164.993661][ T8778] device veth0_vlan entered promiscuous mode [ 165.009088][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.017637][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.027041][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.035876][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.045286][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.056547][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.074959][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.085058][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.094095][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.104594][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.115169][ T8782] device veth0_vlan entered promiscuous mode [ 165.126930][ T8778] device veth1_vlan entered promiscuous mode [ 165.143379][ T8780] device veth1_vlan entered promiscuous mode [ 165.155762][ T8782] device veth1_vlan entered promiscuous mode [ 165.187679][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.198361][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.208643][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.219064][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.228821][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.238191][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.250081][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.261848][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.275090][ T8787] device veth0_vlan entered promiscuous mode [ 165.279764][ T39] audit: type=1400 audit(1579187626.200:47): avc: denied { associate } for pid=8780 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 165.299326][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.338607][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.360048][ T8787] device veth1_vlan entered promiscuous mode [ 165.796807][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.846527][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.891797][ T39] audit: type=1400 audit(1579187626.820:48): avc: denied { open } for pid=8800 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 165.934162][ C0] hpet: Lost 2 RTC interrupts [ 165.970287][ T39] audit: type=1400 audit(1579187626.820:49): avc: denied { kernel } for pid=8800 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 15:13:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_UIE_OFF(r2, 0x7004) [ 166.013679][ T39] audit: type=1804 audit(1579187626.870:50): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir508334703/syzkaller.ObPRsa/0/bus" dev="sda1" ino=16564 res=1 [ 166.079074][ T39] audit: type=1804 audit(1579187626.880:51): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir508334703/syzkaller.ObPRsa/0/bus" dev="sda1" ino=16564 res=1 15:13:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_UIE_OFF(r2, 0x7004) 15:13:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_UIE_OFF(r2, 0x7004) [ 166.158513][ T39] audit: type=1804 audit(1579187627.070:52): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir508334703/syzkaller.ObPRsa/0/bus" dev="sda1" ino=16564 res=1 15:13:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_UIE_OFF(r2, 0x7004) 15:13:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_UIE_OFF(r2, 0x7004) [ 166.159244][ T39] audit: type=1804 audit(1579187627.090:53): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir508334703/syzkaller.ObPRsa/0/bus" dev="sda1" ino=16564 res=1 [ 166.248151][ T39] audit: type=1804 audit(1579187627.150:54): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir508334703/syzkaller.ObPRsa/0/bus" dev="sda1" ino=16564 res=1 [ 166.302504][ T39] audit: type=1804 audit(1579187627.150:55): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir508334703/syzkaller.ObPRsa/0/bus" dev="sda1" ino=16564 res=1 [ 166.628270][ C0] hrtimer: interrupt took 28832 ns [ 350.980520][ T33] ------------[ cut here ]------------ [ 350.998716][ T33] Type was not set for devlink port. [ 351.007872][ T33] WARNING: CPU: 1 PID: 33 at net/core/devlink.c:6399 devlink_port_type_warn+0x15/0x20 [ 351.008157][ T33] Kernel panic - not syncing: panic_on_warn set ... [ 351.008157][ T33] CPU: 1 PID: 33 Comm: kworker/1:1 Not tainted 5.5.0-rc6-syzkaller #0 [ 351.008157][ T33] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 351.008157][ T33] Workqueue: events devlink_port_type_warn [ 351.008157][ T33] Call Trace: [ 351.008157][ T33] dump_stack+0x197/0x210 [ 351.008157][ T33] ? devlink_free+0x2d0/0x2f0 [ 351.008157][ T33] panic+0x2e3/0x75c [ 351.008157][ T33] ? add_taint.cold+0x16/0x16 [ 351.008157][ T33] ? __kasan_check_write+0x14/0x20 [ 351.008157][ T33] ? __warn.cold+0x14/0x3e [ 351.008157][ T33] ? __warn+0xd9/0x1cf [ 351.008157][ T33] ? devlink_port_type_warn+0x15/0x20 [ 351.008157][ T33] __warn.cold+0x2f/0x3e [ 351.008157][ T33] ? devlink_port_type_warn+0x15/0x20 [ 351.008157][ T33] report_bug+0x289/0x300 [ 351.008157][ T33] do_error_trap+0x11b/0x200 [ 351.008157][ T33] do_invalid_op+0x37/0x50 [ 351.008157][ T33] ? devlink_port_type_warn+0x15/0x20 [ 351.008157][ T33] invalid_op+0x23/0x30 [ 351.008157][ T33] RIP: 0010:devlink_port_type_warn+0x15/0x20 [ 351.008157][ T33] Code: 89 df e8 de fc 7d fb e9 d3 fe ff ff 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 57 3d 40 fb 48 c7 c7 e0 56 d8 88 e8 ea ec 10 fb <0f> 0b 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 55 49 89 f5 41 54 [ 351.008157][ T33] RSP: 0018:ffffc900005d7d30 EFLAGS: 00010282 [ 351.008157][ T33] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 351.008157][ T33] RDX: 0000000000000000 RSI: ffffffff815e5396 RDI: fffff520000baf98 [ 351.008157][ T33] RBP: ffffc900005d7d30 R08: ffff88802c1b4980 R09: fffffbfff165e7be [ 351.008157][ T33] R10: fffffbfff165e7bd R11: ffffffff8b2f3def R12: ffff88801dca94c0 [ 351.008157][ T33] R13: 0000000000000080 R14: ffff88802c16ca00 R15: ffff88802d136b40 [ 351.008157][ T33] ? vprintk_func+0x86/0x189 [ 351.008157][ T33] process_one_work+0x9af/0x1740 [ 351.008157][ T33] ? pwq_dec_nr_in_flight+0x320/0x320 [ 351.008157][ T33] ? lock_acquire+0x190/0x410 [ 351.008157][ T33] worker_thread+0x98/0xe40 [ 351.008157][ T33] ? trace_hardirqs_on+0x67/0x240 [ 351.008157][ T33] kthread+0x361/0x430 [ 351.008157][ T33] ? process_one_work+0x1740/0x1740 [ 351.008157][ T33] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 351.008157][ T33] ret_from_fork+0x24/0x30 [ 351.008157][ T33] Kernel Offset: disabled [ 351.008157][ T33] Rebooting in 86400 seconds..