Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 36.416791] audit: type=1800 audit(1569502566.516:33): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 36.440220] audit: type=1800 audit(1569502566.516:34): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.094390] audit: type=1400 audit(1569502571.196:35): avc: denied { map } for pid=7430 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. 2019/09/26 12:56:17 fuzzer started [ 47.600627] audit: type=1400 audit(1569502577.706:36): avc: denied { map } for pid=7439 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/26 12:56:19 dialing manager at 10.128.0.105:40603 2019/09/26 12:56:19 syscalls: 2488 2019/09/26 12:56:19 code coverage: enabled 2019/09/26 12:56:19 comparison tracing: enabled 2019/09/26 12:56:19 extra coverage: extra coverage is not supported by the kernel 2019/09/26 12:56:19 setuid sandbox: enabled 2019/09/26 12:56:19 namespace sandbox: enabled 2019/09/26 12:56:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/26 12:56:19 fault injection: enabled 2019/09/26 12:56:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/26 12:56:19 net packet injection: enabled 2019/09/26 12:56:19 net device setup: enabled 12:58:34 executing program 0: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0f34"], 0x2}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x10000000000000f3}}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="eabe9f303b222957eecbc6ff0700002759621c4e25aca1877c7e5255f910c28f5e87a648b9546a1ebed56adb3b91e741cc230dab56ad8e39ac079b906da58a5d1ab04e9d752a92806db0c8541ab3234dedb663fc73c7fe3c32325c4541008239fb1aace0ec8aaeca96b11a0d6e07106a0b90a13006037fe7f2de1ae06b6159e593831cbe6402508c5fa80ff01fabc1124af72bcd6bc0d826dd695b83e34f00c08df1183f833a52468f69201295ed569ac089387c9882ad999997c0fa5a93d051cb4036e4dbc85605566236ae", @ANYRESHEX, @ANYBLOB="ca4fd5dbc23e2372386bbbd31d005f3eac09035d791ab1536fb50f94f23e0497ba056aa6814ebb27f71fe9961b7086cc435d3ba00f4968b77b862f7802372c72540ebf3903c377d5af08e32fdae2d7dc25149222a44c732f93f1fc737c568335708026f91be4a4c530f98f24eadd402fb32aa9685dfe525b0e1c91de73", @ANYRES64], 0x0, 0x163}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 184.076649] audit: type=1400 audit(1569502714.176:37): avc: denied { map } for pid=7456 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1097 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 184.158576] IPVS: ftp: loaded support on port[0] = 21 12:58:34 executing program 1: pkey_alloc(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x9, 0xc00) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000002c0)={0x0, 0xfffffffb, 0x201d, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r2, r0) [ 184.258497] chnl_net:caif_netlink_parms(): no params data found [ 184.323777] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.339939] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.347497] device bridge_slave_0 entered promiscuous mode [ 184.372011] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.378444] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.400625] device bridge_slave_1 entered promiscuous mode [ 184.434362] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.443631] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.472502] IPVS: ftp: loaded support on port[0] = 21 12:58:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="91dca50d5e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r2, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80) [ 184.481097] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.488717] team0: Port device team_slave_0 added [ 184.511371] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.523370] team0: Port device team_slave_1 added [ 184.528715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.550892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.642600] device hsr_slave_0 entered promiscuous mode 12:58:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000000000000010000000000000007410000004c001808000f006574680000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb210f45d146f2e87454abdd845e4f5cda82023a60cc7759aa50f8d4296fbc1fe6df013e3e28310c53c941f3c0d982e61948e35824cb80bd3b9b8d12b0fd4ee652fb3720eae45673b35661d33c2e3e59819c3eacf0814e7a8d4d32868ebe45c9aeb8ebf407b9f87f596c2818cf21f125abe2d95bada38152b9cb872219e9193333c2845b38261f17f87ba62c033d3666430d856746d5580770cefbece2362b436f307df375bc0b53e26337931c870326ecd0f1961eaac2311d6769c2ae86ba78b66b472"], 0x68}}, 0x0) [ 184.701573] device hsr_slave_1 entered promiscuous mode [ 184.752519] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 184.792456] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 184.819225] IPVS: ftp: loaded support on port[0] = 21 [ 184.829804] chnl_net:caif_netlink_parms(): no params data found [ 184.856610] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.863076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.869973] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.876309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.910998] IPVS: ftp: loaded support on port[0] = 21 12:58:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0xd86, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 184.963738] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.970517] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.977876] device bridge_slave_0 entered promiscuous mode [ 184.987050] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.993643] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.003154] device bridge_slave_1 entered promiscuous mode [ 185.095010] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.122498] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.228230] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.235829] team0: Port device team_slave_0 added [ 185.243159] chnl_net:caif_netlink_parms(): no params data found 12:58:35 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r0, r1, 0x0, 0x7fffffa7) [ 185.304122] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.312842] team0: Port device team_slave_1 added [ 185.321261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.333870] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.352984] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.368568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.380966] chnl_net:caif_netlink_parms(): no params data found [ 185.389012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.427742] IPVS: ftp: loaded support on port[0] = 21 [ 185.446946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.456088] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.542563] device hsr_slave_0 entered promiscuous mode [ 185.589999] device hsr_slave_1 entered promiscuous mode [ 185.630265] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.637339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.645283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.653836] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 185.660022] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.668450] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.675701] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.683033] device bridge_slave_0 entered promiscuous mode [ 185.694292] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.707194] IPVS: ftp: loaded support on port[0] = 21 [ 185.712500] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.732794] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.739166] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.747681] device bridge_slave_1 entered promiscuous mode [ 185.768786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.775925] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.782833] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.790012] device bridge_slave_0 entered promiscuous mode [ 185.802962] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.813546] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.826866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.834777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.842646] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.848986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.867895] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.874441] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.881481] device bridge_slave_1 entered promiscuous mode [ 185.907940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.923403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.932746] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.946606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.954803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.962679] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.969059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.997100] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.004792] team0: Port device team_slave_0 added [ 186.011677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.019083] team0: Port device team_slave_1 added [ 186.024648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.032976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.042522] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.050659] team0: Port device team_slave_0 added [ 186.066197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.076783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.132621] device hsr_slave_0 entered promiscuous mode [ 186.189910] device hsr_slave_1 entered promiscuous mode [ 186.230426] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.237694] team0: Port device team_slave_1 added [ 186.243135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.263977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.274141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.286064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.293040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.320970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.328684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.338631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.346444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.355891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.364315] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.382923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.393376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.412040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 186.420825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.427540] chnl_net:caif_netlink_parms(): no params data found [ 186.491511] device hsr_slave_0 entered promiscuous mode [ 186.530089] device hsr_slave_1 entered promiscuous mode [ 186.573632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 186.582156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.590631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.598222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.605979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.645849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.654494] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.663389] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 186.670288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.678100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.684831] chnl_net:caif_netlink_parms(): no params data found [ 186.702436] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.753586] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.766190] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.773871] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.784148] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 186.791499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.798352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.822198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.830355] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.836708] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.844113] device bridge_slave_0 entered promiscuous mode [ 186.851779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.858295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.866705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.875864] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.882236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.889477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.900852] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.907261] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.914787] device bridge_slave_0 entered promiscuous mode [ 186.922277] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.928620] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.936296] device bridge_slave_1 entered promiscuous mode [ 186.942648] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.948986] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.956490] device bridge_slave_1 entered promiscuous mode [ 186.975379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.986464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.999698] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.021370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.029122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.036865] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.043621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.056285] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.075941] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.084859] team0: Port device team_slave_0 added [ 187.091562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.098618] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.107184] team0: Port device team_slave_1 added [ 187.118065] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.126209] audit: type=1400 audit(1569502717.216:38): avc: denied { associate } for pid=7457 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 187.132465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.165019] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.173936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.186083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.198937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.208881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.219020] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.225766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.281442] device hsr_slave_0 entered promiscuous mode [ 187.319938] device hsr_slave_1 entered promiscuous mode [ 187.380257] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.388117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.396769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.405267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.422599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.441762] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 187.447840] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.459154] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.467273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.475806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 12:58:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f0000000040)}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d3d2cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="e6c55c6601000000010000009b3d72748d52864e01000000002ee70a67757310554a9ca66864eef1c8c72bdc354f15bdd0cec321957080d19ce4d725f38b6c78f0bebc317630"], 0x0, 0x5a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 187.494531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.509505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.531732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.551562] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.558975] team0: Port device team_slave_0 added [ 187.565003] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.572897] team0: Port device team_slave_1 added [ 187.578552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.586855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 12:58:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000140)=[@enter_looper], 0x1, 0x0, &(0x7f0000000480)="1f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x48, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @register_looper], 0x0, 0x0, 0x0}) [ 187.595976] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.602395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.611445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.619177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.628576] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.637950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.652209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.665901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.678011] audit: type=1400 audit(1569502717.776:39): avc: denied { map } for pid=7488 comm="syz-executor.0" path="/dev/binder0" dev="devtmpfs" ino=15899 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 187.682672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.711899] audit: type=1400 audit(1569502717.776:40): avc: denied { set_context_mgr } for pid=7488 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 187.736829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.744457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.752736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.762060] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.768524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.775742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.782710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.789528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.797263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.804836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.815866] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 187.823377] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.831156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.858483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.913080] device hsr_slave_0 entered promiscuous mode [ 187.950045] device hsr_slave_1 entered promiscuous mode [ 187.991031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.007224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.014952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.022538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.030436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.037999] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.044381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.052168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.059047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.068357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.077545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 188.087663] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 188.095654] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 188.103550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.112495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.120504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.127912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.135804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.143713] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.150202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.158532] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.164778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.185416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.198151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.206016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.215354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.227443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.236478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.248703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.256244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.264559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.272444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.284360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.292471] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.302671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.311794] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.321170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 188.329168] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.336895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.344970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.352605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.360269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.367137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.376064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.386199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 188.395422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.403570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.411340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.418792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.426581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.435274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.443828] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.450217] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.459066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.466496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.476572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.477093] binder: BINDER_SET_CONTEXT_MGR already set [ 188.489188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.490393] binder: 7488:7489 ioctl 40046207 0 returned -16 12:58:38 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(0x0, 0x0, 0x0) gettid() getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/dev\x00') sendfile(r4, r5, 0x0, 0x6f0a77bd) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getpid() fcntl$getown(r2, 0x9) inotify_init() inotify_add_watch(0xffffffffffffffff, 0x0, 0x80) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 188.498675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.510912] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.517258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.526051] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.535766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.546738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 188.569098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.583566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.591969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.599426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.609356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 188.623185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.638822] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.670191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.678988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.695987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.712940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.727688] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.734128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.752526] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.764458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.779616] hrtimer: interrupt took 30970 ns [ 188.794629] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.807470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.846566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.863710] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.884036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.922071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.957723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 12:58:39 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="cd80"], 0x2}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825a55f910c28f5e87a64820546a1ebed56adbd5b57f67b95778e2569f8e39808e0b61a0bf6a301ffe", @ANYRES16=0x0, @ANYPTR64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e0c55c5d9eb82ee4d00100010029a741efca44f937d049248204007296d961244e2e0c734057548c402dc43b3897cc275fd87f333c9631b8c40dd887fc8dd4f9ad4c079521dfdaf3d0fe090000", @ANYRESHEX], 0x0, 0xc9}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 188.983317] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.989540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.018497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 12:58:39 executing program 0: clone(0x1236c900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ptrace(0x10, r0) [ 189.051664] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.057854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.076572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.092816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 12:58:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0xc000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000200)={0x0, {}, 0x2, 0x14000000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "f28e434ebf5e9787", "989c488c1ddfc1a8fe455c25e4e25f1f", "bdf80d78", "3f801c42a40380dc"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0x3, 0x0, 0x0, 0x0) r3 = syz_open_dev$dmmidi(0x0, 0xcc, 0x180400) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) [ 189.104160] ptrace attach of "/root/syz-executor.1"[7516] was attempted by "/root/syz-executor.1"[7517] [ 189.104571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.147052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.160739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 12:58:39 executing program 2: socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r2, &(0x7f00000017c0), 0x2cb, 0x400000000000) [ 189.177485] audit: type=1400 audit(1569502719.276:41): avc: denied { sys_admin } for pid=7522 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 189.194186] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 189.242796] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.247051] audit: type=1400 audit(1569502719.306:42): avc: denied { create } for pid=7519 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 189.269126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 12:58:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r5, 0x1}}, 0x18) [ 189.280879] audit: type=1400 audit(1569502719.306:43): avc: denied { write } for pid=7519 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 189.305135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.319119] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 189.336006] audit: type=1400 audit(1569502719.306:44): avc: denied { read } for pid=7519 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:58:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f20e06635000001000f22e0660f71d300dadec4c3c5cf600b010500002e660f388209677d00640f1a070f01df65670fc79b00580000", 0x36}], 0xaaaabb8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0xc83, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007bf1551f07000000bd164466000000001f000000ce3c00009f0100000000000000000000000000000b40000007000000020000007c0776000100000006000000ff03000000000000000000000000000007000000000000000500000048"]) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000002c0)=""/22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 189.395179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.411198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 189.427598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.435938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.455771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.475783] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 189.482275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.543278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.592800] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.599193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.660770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.668685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.677454] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.683873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.693745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.703630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.714695] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 189.721453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.734146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 12:58:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0xffffffffffffffff}}}, 0x90) [ 189.764154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.785825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.805241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.824046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.837377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.856362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.864421] ------------[ cut here ]------------ [ 189.877073] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 189.883582] WARNING: CPU: 1 PID: 7556 at kernel/fork.c:677 __put_task_struct.cold+0x29/0x48 [ 189.892080] Kernel panic - not syncing: panic_on_warn set ... [ 189.892080] [ 189.901363] CPU: 1 PID: 7556 Comm: syz-executor.2 Not tainted 4.19.75 #0 [ 189.908200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.917555] Call Trace: [ 189.920150] dump_stack+0x172/0x1f0 [ 189.923783] panic+0x263/0x507 [ 189.926977] ? __warn_printk+0xf3/0xf3 [ 189.930879] ? __put_task_struct.cold+0x29/0x48 [ 189.932032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.935553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.944304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.947817] ? __warn.cold+0x5/0x4a [ 189.958600] ? __warn+0xe8/0x1d0 [ 189.961976] ? __put_task_struct.cold+0x29/0x48 [ 189.962509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.966655] __warn.cold+0x20/0x4a [ 189.977262] ? lockdep_hardirqs_on+0x415/0x5d0 [ 189.978507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.981837] ? __put_task_struct.cold+0x29/0x48 [ 189.981855] report_bug+0x263/0x2b0 [ 189.981876] do_error_trap+0x204/0x360 [ 189.988220] kobject: 'vlan0' (00000000ed700a85): kobject_add_internal: parent: 'mesh', set: '' [ 189.992567] ? math_error+0x340/0x340 [ 189.992579] ? preempt_count_add+0xbc/0x1b0 [ 189.992596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.998636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 190.000076] ? wake_up_klogd+0x99/0xd0 [ 190.000089] ? vprintk_emit+0x264/0x690 [ 190.000103] ? error_entry+0x7c/0xe0 [ 190.000121] ? trace_hardirqs_off_caller+0x65/0x220 [ 190.010424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.013176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.018037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.023002] do_invalid_op+0x1b/0x20 [ 190.023016] invalid_op+0x14/0x20 [ 190.023033] RIP: 0010:__put_task_struct.cold+0x29/0x48 [ 190.030800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.033650] Code: ff e8 20 7d 2c 00 48 c7 c7 20 45 49 87 e8 f8 e3 16 00 0f 0b e9 34 4b ff ff e8 08 7d 2c 00 48 c7 c7 20 45 49 87 e8 e0 e3 16 00 <0f> 0b e9 c5 4a ff ff e8 f0 7c 2c 00 48 c7 c7 20 45 49 87 e8 c8 e3 [ 190.051846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 190.052807] RSP: 0018:ffff888056aefcd8 EFLAGS: 00010286 [ 190.060467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 190.069107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.071925] RAX: 0000000000000024 RBX: 0000000000000000 RCX: 0000000000000000 [ 190.071934] RDX: 0000000000000000 RSI: ffffffff8155dbd6 RDI: ffffed100ad5df8d [ 190.071941] RBP: ffff888056aefd00 R08: 0000000000000024 R09: 0000000000000000 [ 190.071948] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888056b56240 [ 190.071959] R13: ffff88808e9f28f0 R14: 0000000000000000 R15: 0000000000000000 [ 190.071987] ? vprintk_func+0x86/0x189 [ 190.077702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.084325] ? __put_task_struct.cold+0x29/0x48 [ 190.084341] rdma_restrack_del+0x1da/0x240 [ 190.084356] rdma_destroy_id+0xac/0xab0 [ 190.120082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.122007] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 190.129505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.136347] ? complete+0x61/0x80 [ 190.136366] ucma_close+0x115/0x320 [ 190.136383] ? ucma_free_ctx+0xb90/0xb90 [ 190.151453] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 190.158188] __fput+0x2dd/0x8b0 [ 190.179497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.180997] ____fput+0x16/0x20 [ 190.181012] task_work_run+0x145/0x1c0 [ 190.181033] exit_to_usermode_loop+0x273/0x2c0 [ 190.188041] audit: type=1800 audit(1569502719.996:45): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16532 res=0 [ 190.189230] do_syscall_64+0x53d/0x620 [ 190.200765] audit: type=1804 audit(1569502719.996:46): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir614265631/syzkaller.70UcOg/0/file0" dev="sda1" ino=16532 res=1 [ 190.201400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.224167] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 190.225449] RIP: 0033:0x413711 [ 190.225463] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 190.225473] RSP: 002b:00007ffef2123760 EFLAGS: 00000293 [ 190.228783] audit: type=1804 audit(1569502719.996:47): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir614265631/syzkaller.70UcOg/0/file0" dev="sda1" ino=16532 res=1 [ 190.235116] ORIG_RAX: 0000000000000003 [ 190.235124] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413711 [ 190.235131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 190.235140] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 190.235147] R10: 00007ffef2123840 R11: 0000000000000293 R12: 000000000075bfc8 [ 190.235155] R13: 000000000002e58c R14: 00000000007605d0 R15: 000000000075bfd4 [ 190.239764] Kernel Offset: disabled [ 190.409665] Rebooting in 86400 seconds..