[ 96.050859][ T27] audit: type=1800 audit(1581272345.442:36): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 96.850327][ T27] audit: type=1400 audit(1581272346.322:37): avc: denied { watch } for pid=10767 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.36' (ECDSA) to the list of known hosts. 2020/02/09 18:19:16 fuzzer started syzkaller login: [ 106.757888][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 106.757904][ T27] audit: type=1400 audit(1581272356.232:42): avc: denied { map } for pid=10858 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2020/02/09 18:19:18 dialing manager at 10.128.0.26:44305 2020/02/09 18:19:18 syscalls: 2965 2020/02/09 18:19:18 code coverage: enabled 2020/02/09 18:19:18 comparison tracing: enabled 2020/02/09 18:19:18 extra coverage: enabled 2020/02/09 18:19:18 setuid sandbox: enabled 2020/02/09 18:19:18 namespace sandbox: enabled 2020/02/09 18:19:18 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/09 18:19:18 fault injection: enabled 2020/02/09 18:19:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/09 18:19:18 net packet injection: enabled 2020/02/09 18:19:18 net device setup: enabled 2020/02/09 18:19:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/09 18:19:18 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 108.936159][ T27] audit: type=1400 audit(1581272358.412:43): avc: denied { integrity } for pid=10873 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 18:21:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bea1698f9ccce083479b059049f4653a08c74a8c7012086793454de4a71add9fb6b3982d721f8dfbe0a805ff955992d7fef46541b52c2543"]) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) ioperm(0x0, 0x4, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getpgrp(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) r3 = inotify_init1(0x81800) close(r3) prctl$PR_GET_THP_DISABLE(0x2a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x96800, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x8, 0x6, 0xff, 0x5, 0x0, 0x2c1, 0x820, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0xe}, 0x10600, 0xdc, 0x10001, 0x3, 0x80000000, 0x0, 0x2}, 0x0, 0x0, r6, 0x8) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYPTR, @ANYRES32]) write$eventfd(r5, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000540)) [ 212.176147][ T27] audit: type=1400 audit(1581272461.652:44): avc: denied { map } for pid=10875 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=94 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 18:21:01 executing program 1: open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) pipe(0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0), 0xfffffe50) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x98) creat(0x0, 0x0) creat(0x0, 0x0) [ 212.441084][T10876] IPVS: ftp: loaded support on port[0] = 21 [ 212.598787][T10876] chnl_net:caif_netlink_parms(): no params data found 18:21:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x0) [ 212.649161][T10879] IPVS: ftp: loaded support on port[0] = 21 [ 212.809138][T10876] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.817162][T10876] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.827108][T10876] device bridge_slave_0 entered promiscuous mode [ 212.839891][T10876] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.848144][T10876] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.856630][T10876] device bridge_slave_1 entered promiscuous mode [ 212.882393][T10883] IPVS: ftp: loaded support on port[0] = 21 [ 212.917247][T10876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 18:21:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x1, 0x102, 0x8000003, 0xfffc, 0x20}, 0x20) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000023c0)={0x0, @in={0x2, 0x0, @remote}, @xdp, @l2tp={0x2, 0x0, @local}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000023c0)={0x0, @in={0x2, 0x0, @remote}, @xdp, @l2tp={0x2, 0x0, @local}}) recvmmsg(r3, &(0x7f0000005d40)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000500)=""/238, 0xee}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000200)=""/62, 0x3e}], 0x7}, 0x9}, {{&(0x7f0000000600)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000740)=""/96, 0x60}, {0x0}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/189, 0xbd}], 0x6, &(0x7f0000001940)=""/4096, 0x1000}}, {{&(0x7f0000002940)=@isdn, 0x80, &(0x7f0000003dc0)=[{&(0x7f00000029c0)=""/164, 0xa4}, {&(0x7f0000002a80)=""/144, 0x90}, {&(0x7f0000002b40)=""/159, 0x9f}, {&(0x7f0000002c00)=""/55, 0x37}, {&(0x7f0000002c40)=""/44, 0x2c}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/75, 0x4b}, {&(0x7f0000003d00)=""/177, 0xb1}], 0x8}, 0x7}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000003e00)=""/56, 0x38}, {0x0}, {&(0x7f0000003f80)=""/33, 0x21}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/201, 0xc9}], 0x5}, 0x2}, {{&(0x7f0000005100)=@nfc_llcp, 0x80, &(0x7f0000005200)=[{&(0x7f0000005180)=""/20, 0x14}, {&(0x7f00000051c0)=""/23, 0x17}], 0x2}, 0x81}, {{&(0x7f0000005240)=@isdn, 0x80, &(0x7f0000005800)=[{0x0}, {&(0x7f0000005440)=""/202, 0xca}, {&(0x7f0000005540)=""/44, 0x2c}, {&(0x7f0000005580)=""/92, 0x5c}, {&(0x7f0000005600)=""/166, 0xa6}, {&(0x7f00000056c0)=""/173, 0xad}, {&(0x7f0000005780)=""/87, 0x57}], 0x7, &(0x7f0000005840)=""/144, 0x90}, 0x10000}, {{&(0x7f0000005900)=@caif=@util, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005980)=""/246, 0xf6}, {&(0x7f0000005a80)=""/84, 0x54}, {&(0x7f0000005b00)=""/232, 0xe8}, {&(0x7f0000005c00)=""/31, 0x1f}], 0x4, &(0x7f0000005c80)=""/145, 0x91}, 0xf8d}], 0x7, 0x10000, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000005ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005e80)={&(0x7f0000005e40)={0x3c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x72}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000005) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) dup2(r0, r5) [ 212.962503][T10876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.056321][T10876] team0: Port device team_slave_0 added [ 213.076026][T10876] team0: Port device team_slave_1 added [ 213.086618][T10879] chnl_net:caif_netlink_parms(): no params data found [ 213.178997][T10876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.192951][T10876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.219322][T10876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.258172][T10886] IPVS: ftp: loaded support on port[0] = 21 [ 213.287476][T10876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.297096][T10876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.326067][T10876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 18:21:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getpid() mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) [ 213.468194][T10876] device hsr_slave_0 entered promiscuous mode [ 213.523424][T10876] device hsr_slave_1 entered promiscuous mode [ 213.598948][T10883] chnl_net:caif_netlink_parms(): no params data found [ 213.664924][T10891] IPVS: ftp: loaded support on port[0] = 21 [ 213.666443][T10879] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.678650][T10879] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.687589][T10879] device bridge_slave_0 entered promiscuous mode 18:21:03 executing program 5: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getpgrp(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) inotify_init1(0x81800) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x96800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x8, 0x6, 0xff, 0x5, 0x0, 0x2c1, 0x820, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0xe}, 0x0, 0xdc, 0x10001, 0x3, 0x80000000, 0x0, 0x2}, 0x0, 0x0, r1, 0x8) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYPTR, @ANYBLOB="bef4653a08c74a8c7012086693454dd7e9ac73d89ffbe0a805ff955992d7fef46541b52c2543690ec8152a4e9800000000000000"]) write$eventfd(r0, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000540)) [ 213.739698][T10879] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.748486][T10879] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.759999][T10879] device bridge_slave_1 entered promiscuous mode [ 213.905707][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.912801][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.924566][T10883] device bridge_slave_0 entered promiscuous mode [ 213.934477][T10879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.964591][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.971662][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.983880][T10883] device bridge_slave_1 entered promiscuous mode [ 214.006733][T10879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.034079][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.050394][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.054560][T10896] IPVS: ftp: loaded support on port[0] = 21 [ 214.066263][T10886] chnl_net:caif_netlink_parms(): no params data found [ 214.105812][T10879] team0: Port device team_slave_0 added [ 214.137938][T10883] team0: Port device team_slave_0 added [ 214.145233][T10879] team0: Port device team_slave_1 added [ 214.157576][T10883] team0: Port device team_slave_1 added [ 214.236235][ T27] audit: type=1400 audit(1581272463.712:45): avc: denied { create } for pid=10876 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 214.290455][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.302098][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.328446][ T27] audit: type=1400 audit(1581272463.772:46): avc: denied { write } for pid=10876 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 214.328519][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.358625][ T27] audit: type=1400 audit(1581272463.772:47): avc: denied { read } for pid=10876 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 214.411292][T10879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.420672][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.446845][T10879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.458238][T10876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.547648][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.554674][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.581302][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.599250][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.608405][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.616586][T10886] device bridge_slave_0 entered promiscuous mode [ 214.625158][T10879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.632187][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.658517][T10879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.669795][T10876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.729497][T10876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.796584][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.804728][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.813601][T10886] device bridge_slave_1 entered promiscuous mode [ 214.843045][T10891] chnl_net:caif_netlink_parms(): no params data found [ 214.870207][T10876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.995895][T10879] device hsr_slave_0 entered promiscuous mode [ 215.055012][T10879] device hsr_slave_1 entered promiscuous mode [ 215.093083][T10879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.100833][T10879] Cannot create hsr debugfs directory [ 215.134666][T10896] chnl_net:caif_netlink_parms(): no params data found [ 215.147477][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.216144][T10883] device hsr_slave_0 entered promiscuous mode [ 215.253377][T10883] device hsr_slave_1 entered promiscuous mode [ 215.303106][T10883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.311918][T10883] Cannot create hsr debugfs directory [ 215.319041][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.387911][T10891] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.395367][T10891] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.403430][T10891] device bridge_slave_0 entered promiscuous mode [ 215.455086][T10891] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.462184][T10891] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.476334][T10891] device bridge_slave_1 entered promiscuous mode [ 215.507607][T10896] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.514813][T10896] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.523578][T10896] device bridge_slave_0 entered promiscuous mode [ 215.539124][T10886] team0: Port device team_slave_0 added [ 215.558388][T10896] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.566132][T10896] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.575162][T10896] device bridge_slave_1 entered promiscuous mode [ 215.589875][T10886] team0: Port device team_slave_1 added [ 215.612028][T10891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.628649][T10891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.661717][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.668902][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.696226][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.723928][T10891] team0: Port device team_slave_0 added [ 215.741722][T10896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.756285][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.765835][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.792171][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.806498][T10891] team0: Port device team_slave_1 added [ 215.827968][T10896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.914883][T10891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.921853][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.948927][T10891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.971332][T10896] team0: Port device team_slave_0 added [ 216.035059][T10886] device hsr_slave_0 entered promiscuous mode [ 216.093417][T10886] device hsr_slave_1 entered promiscuous mode [ 216.143123][T10886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.150701][T10886] Cannot create hsr debugfs directory [ 216.167943][T10891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.176079][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.202277][T10891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.218624][T10896] team0: Port device team_slave_1 added [ 216.270546][T10896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.277775][T10896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.304444][T10896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.353721][T10896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.360703][T10896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.386788][T10896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.426203][T10891] device hsr_slave_0 entered promiscuous mode [ 216.493457][T10891] device hsr_slave_1 entered promiscuous mode [ 216.543034][T10891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.550707][T10891] Cannot create hsr debugfs directory [ 216.556626][T10883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.607634][T10883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.715455][T10883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.805046][T10896] device hsr_slave_0 entered promiscuous mode [ 216.873508][T10896] device hsr_slave_1 entered promiscuous mode [ 216.933092][T10896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.940678][T10896] Cannot create hsr debugfs directory [ 216.975862][T10883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.090434][T10876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.104504][T10879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.137925][T10879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.224662][T10879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.260985][T10879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.346490][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.362253][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.380958][T10876] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.388615][T10886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.452268][T10886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.497319][T10886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.573010][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.581670][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.595759][ T2711] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.603015][ T2711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.629886][T10886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.660686][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.742434][T10891] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.810890][T10891] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.874476][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.883745][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.892171][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.901420][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.909064][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.954724][T10891] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.006204][T10891] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.076625][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.111689][T10896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.183371][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.192229][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.217754][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.228130][T10896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.265672][T10896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.305736][T10896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.356803][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.365177][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.374368][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.384833][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.393585][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.434881][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.446158][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.467156][T10879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.475257][T10876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.500488][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.511329][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.531019][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.550667][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.559913][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.567944][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.576933][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.585994][ T2796] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.593410][ T2796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.617030][T10879] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.644067][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.651995][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.661272][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.670925][ T2704] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.679086][ T2704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.687460][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.741123][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.750046][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.759566][ T2711] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.766711][ T2711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.775373][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.789667][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.798347][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.807487][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.818320][ T2711] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.825759][ T2711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.835595][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.843465][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.873610][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.885714][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.896693][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.907211][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.929382][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.938535][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.950696][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.994593][T10876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.015078][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.024254][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.032757][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.043623][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.052201][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.067300][T10883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.079386][T10883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.110741][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.119647][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.128820][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.139847][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.148972][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.158868][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.179098][T10891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.217383][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.227831][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.240981][T10886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.256698][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.266774][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.287688][T10879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.326239][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.335285][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.353823][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.375549][T10886] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.398176][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.410654][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.418650][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.427327][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.436110][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.444802][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.454010][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.461820][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.473598][T10876] device veth0_vlan entered promiscuous mode [ 219.484027][T10891] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.493698][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.502347][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.514430][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.521562][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.530093][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.576940][T10876] device veth1_vlan entered promiscuous mode [ 219.590314][T10896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.600788][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.610039][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.619423][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.628424][ T2706] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.635569][ T2706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.644090][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.693741][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.702579][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.712586][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.721854][ T2796] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.729023][ T2796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.738127][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.747149][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.756118][ T2796] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.763405][ T2796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.771518][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.782787][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.790516][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.798226][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.807668][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.816504][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.863477][T10879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.873819][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.882035][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.892417][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.901558][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.910723][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.919634][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.928231][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.938177][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.946892][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.955753][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.964433][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.972265][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.980476][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.988483][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.013185][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.021573][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.035671][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.044736][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.068639][T10896] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.102548][T10886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.112091][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.122359][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.131260][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.140062][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.162510][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.170408][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.178662][T10883] device veth0_vlan entered promiscuous mode [ 220.211440][T10876] device veth0_macvtap entered promiscuous mode [ 220.227215][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.238496][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.247687][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.256589][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.265179][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.276065][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.284765][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.293188][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.301232][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.309841][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.319136][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.327270][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.342713][T10891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.356958][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.366124][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.375206][ T2796] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.382293][ T2796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.395619][T10876] device veth1_macvtap entered promiscuous mode [ 220.411405][T10883] device veth1_vlan entered promiscuous mode [ 220.466723][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.480325][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.489162][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.497533][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.537960][T10876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.549029][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.559308][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.568128][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.576763][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.584953][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.596295][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.606225][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.617389][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.629063][T10879] device veth0_vlan entered promiscuous mode [ 220.644604][T10891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.666739][T10876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.682188][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.698422][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.709082][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.740407][T10886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.775249][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.794012][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.802685][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.812188][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.821353][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.830025][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.839712][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.867669][T10879] device veth1_vlan entered promiscuous mode [ 220.883901][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.895520][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.904317][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.921915][T10896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.934761][T10896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.963243][T10883] device veth0_macvtap entered promiscuous mode [ 220.970977][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.984893][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.997503][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.073465][T10883] device veth1_macvtap entered promiscuous mode [ 221.135705][ T27] audit: type=1400 audit(1581272470.612:48): avc: denied { associate } for pid=10876 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 221.188280][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.200231][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.209061][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.218552][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.228342][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.236192][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.244093][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.252512][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.278975][T10879] device veth0_macvtap entered promiscuous mode [ 221.296542][T10879] device veth1_macvtap entered promiscuous mode [ 221.306517][T10896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.332148][T10886] device veth0_vlan entered promiscuous mode [ 221.363855][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.372034][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.412228][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.439474][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.448952][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.458401][ T27] audit: type=1400 audit(1581272470.922:49): avc: denied { open } for pid=10916 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 221.484965][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.492358][ T27] audit: type=1400 audit(1581272470.922:50): avc: denied { kernel } for pid=10916 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 221.518027][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.538858][ T27] audit: type=1400 audit(1581272470.922:51): avc: denied { confidentiality } for pid=10916 comm="syz-executor.0" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 221.567960][T10886] device veth1_vlan entered promiscuous mode [ 221.584408][ C0] hrtimer: interrupt took 35133 ns [ 221.590910][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.608289][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.625859][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.681784][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.695721][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.725550][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.747419][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 221.765976][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.788600][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.811108][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.822326][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.833317][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.846230][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.858063][T10879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.877873][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.886525][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.895681][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.914152][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 18:21:11 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x52005) close(0xffffffffffffffff) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000000c0)=0x7) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) close(r0) ftruncate(0xffffffffffffffff, 0x208200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x8000, 0x1ff, 0x0, 0xffffffffffffffff, 0xe00300, [0x0, 0x0, 0x0, 0xa]}, 0x3c) [ 221.922602][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.932318][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.942806][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.956499][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.964687][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.005780][T10891] device veth0_vlan entered promiscuous mode [ 222.023614][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.032630][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.062095][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.078947][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.089459][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.115112][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.125165][ T27] audit: type=1400 audit(1581272471.592:52): avc: denied { map_create } for pid=10924 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 222.159301][T10879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.207158][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.248042][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.384366][T10891] device veth1_vlan entered promiscuous mode [ 222.493763][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.511821][ T2704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.558060][T10886] device veth0_macvtap entered promiscuous mode [ 222.690364][ T27] audit: type=1400 audit(1581272472.162:53): avc: denied { create } for pid=10927 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 222.725615][T10886] device veth1_macvtap entered promiscuous mode 18:21:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0xbf, 0x4, 0x4, 0x100000, 0x6, {}, {0x1, 0x0, 0x1f, 0x5, 0x0, 0x0, "48721a00"}, 0x0, 0x2, @fd=r4, 0x0, 0x0, r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000240)={0x0, 0x0}) getsockname$inet6(r3, 0x0, &(0x7f0000000200)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x159, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001d008104e00f80ecdb4cb902020000000100000081000afb12000100200fda1b40d819a906000500000f", 0x33fe0}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 222.735486][ T27] audit: type=1400 audit(1581272472.202:54): avc: denied { write } for pid=10927 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 222.779565][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.816497][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.831940][ T27] audit: type=1400 audit(1581272472.302:55): avc: denied { map_read map_write } for pid=10924 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 222.868207][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.881462][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.891753][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.901643][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:21:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31821b77481e35fd000c000800ee4000557260ed6cdf9a6505bc4c1d19e0436c78a69f6cd40002000000000137afbe050000005e33a89a235077d4ecf242b77b9b7516e3430c341a73903e8001b95bab58186fb9bb9375f34308ec9c645cb3a869c9d79e62ec5ff81e75adedf879c02c2e02035edbb506b1d5272a4b", @ANYRES32, @ANYBLOB="8a0008005bfb166eb20dfb9c2de49fa5a62a106f1727765f306e63328c3715aff6e665d9c6a23f2513adaa0e5ee99773ec9c13b19166d85fb22b3259ad326283f17e6e508e814237d0e030de890f505f1a937216d4e40819d3c29b16e435a7544546cd9c4d51d29ff6d4dd3bef5a5dadcf8db629c2935aa37500"/135], 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 222.953145][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.963899][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.976298][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.987433][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.001066][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.018045][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.048534][T10886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.065120][T10896] device veth0_vlan entered promiscuous mode [ 223.125471][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.136929][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.157191][T10937] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. 18:21:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bea1698f9ccce083479b059049f4653a08c74a8c7012086793454de4a71add9fb6b3982d721f8dfbe0a805ff955992d7fef46541b52c2543"]) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) ioperm(0x0, 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getpgrp(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r2 = inotify_init1(0x81800) close(r2) prctl$PR_GET_THP_DISABLE(0x2a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x96800, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x8, 0x6, 0xff, 0x0, 0x0, 0x0, 0x820, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x10600, 0xdc, 0x10001, 0x3, 0x80000000, 0x0, 0x2}, 0x0, 0x0, r5, 0x8) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRESHEX, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bef4653a08c74a8c7012086693454dd7e9ac73d89ffbe0a805ff955992d7fef46541b52c2543690ec8152a4e98000000000000"]) write$eventfd(r4, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000540)) [ 223.179235][T10891] device veth0_macvtap entered promiscuous mode [ 223.193792][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.210205][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:21:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3000000, 0x2000000000002) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) [ 223.232649][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.249908][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.280285][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.311455][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.324209][T10886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.355660][T10896] device veth1_vlan entered promiscuous mode [ 223.369671][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.369908][T10946] mmap: syz-executor.2 (10946) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 223.378843][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.379848][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.380743][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.419624][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.493462][T10891] device veth1_macvtap entered promiscuous mode [ 223.574770][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.674879][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.704536][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.716418][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.727063][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.737052][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.747638][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.757797][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.768484][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.788545][T10891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.853058][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.872518][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.923264][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.980555][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.990625][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.001816][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.012267][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.024079][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.034204][T10891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.052760][T10891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.065973][T10891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.143578][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.159086][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.237416][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.249825][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.313821][T10896] device veth0_macvtap entered promiscuous mode 18:21:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bea1698f9ccce083479b059049f4653a08c74a8c7012086793454de4a71add9fb6b3982d721f8dfbe0a805ff955992d7fef46541b52c2543"]) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) ioperm(0x0, 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getpgrp(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r2 = inotify_init1(0x81800) close(r2) prctl$PR_GET_THP_DISABLE(0x2a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x96800, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x8, 0x6, 0xff, 0x0, 0x0, 0x0, 0x820, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x10600, 0xdc, 0x10001, 0x3, 0x80000000, 0x0, 0x2}, 0x0, 0x0, r5, 0x8) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRESHEX, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bef4653a08c74a8c7012086693454dd7e9ac73d89ffbe0a805ff955992d7fef46541b52c2543690ec8152a4e98000000000000"]) write$eventfd(r4, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000540)) 18:21:13 executing program 1: open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) pipe(0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0), 0xfffffe50) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x98) creat(0x0, 0x0) creat(0x0, 0x0) [ 224.407928][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.441820][T10896] device veth1_macvtap entered promiscuous mode [ 224.722581][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.757770][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.800156][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.845464][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.888893][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.900875][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.911223][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.922001][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.932451][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 224.943283][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.956069][T10896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.975868][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.997679][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.020483][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.045849][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.077361][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 18:21:14 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bea1698f9ccce083479b059049f4653a08c74a8c7012086793454de4a71add9fb6b3982d721f8dfbe0a805ff955992d7fef46541b52c2543"]) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) ioperm(0x0, 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getpgrp(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r2 = inotify_init1(0x81800) close(r2) prctl$PR_GET_THP_DISABLE(0x2a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x96800, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x8, 0x6, 0xff, 0x0, 0x0, 0x0, 0x820, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x10600, 0xdc, 0x10001, 0x3, 0x80000000, 0x0, 0x2}, 0x0, 0x0, r5, 0x8) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRESHEX, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bef4653a08c74a8c7012086693454dd7e9ac73d89ffbe0a805ff955992d7fef46541b52c2543690ec8152a4e98000000000000"]) write$eventfd(r4, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000540)) [ 225.103950][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.130441][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.141434][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:21:14 executing program 1: open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) pipe(0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0), 0xfffffe50) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x98) creat(0x0, 0x0) creat(0x0, 0x0) [ 225.151796][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.197878][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.207925][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.220188][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.246016][T10896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.264080][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.282787][ T2796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:21:14 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bea1698f9ccce083479b059049f4653a08c74a8c7012086793454de4a71add9fb6b3982d721f8dfbe0a805ff955992d7fef46541b52c2543"]) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) ioperm(0x0, 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getpgrp(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r2 = inotify_init1(0x81800) close(r2) prctl$PR_GET_THP_DISABLE(0x2a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x96800, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x8, 0x6, 0xff, 0x0, 0x0, 0x0, 0x820, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x10600, 0xdc, 0x10001, 0x3, 0x80000000, 0x0, 0x2}, 0x0, 0x0, r5, 0x8) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRESHEX, @ANYRES64, @ANYPTR, @ANYRES32, @ANYBLOB="bef4653a08c74a8c7012086693454dd7e9ac73d89ffbe0a805ff955992d7fef46541b52c2543690ec8152a4e98000000000000"]) write$eventfd(r4, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000540)) [ 225.576149][T10982] ------------[ cut here ]------------ [ 225.595425][T10982] refcount_t: underflow; use-after-free. [ 225.608615][T10982] WARNING: CPU: 0 PID: 10982 at lib/refcount.c:28 refcount_warn_saturate+0x1dc/0x1f0 [ 225.618099][T10982] Kernel panic - not syncing: panic_on_warn set ... 18:21:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getpid() mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) [ 225.624703][T10982] CPU: 0 PID: 10982 Comm: syz-executor.1 Not tainted 5.5.0-syzkaller #0 [ 225.633029][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.643090][T10982] Call Trace: [ 225.646401][T10982] dump_stack+0x197/0x210 [ 225.650761][T10982] ? refcount_warn_saturate+0x1d0/0x1f0 [ 225.656326][T10982] panic+0x2e3/0x75c [ 225.660285][T10982] ? add_taint.cold+0x16/0x16 [ 225.665025][T10982] ? __kasan_check_write+0x14/0x20 [ 225.670160][T10982] ? __warn.cold+0x14/0x3e [ 225.674602][T10982] ? __warn+0xd9/0x1cf [ 225.678696][T10982] ? refcount_warn_saturate+0x1dc/0x1f0 [ 225.684372][T10982] __warn.cold+0x2f/0x3e [ 225.688638][T10982] ? refcount_warn_saturate+0x1dc/0x1f0 [ 225.694378][T10982] report_bug+0x289/0x300 [ 225.698740][T10982] do_error_trap+0x11b/0x200 [ 225.703361][T10982] do_invalid_op+0x37/0x50 [ 225.707808][T10982] ? refcount_warn_saturate+0x1dc/0x1f0 [ 225.713400][T10982] invalid_op+0x23/0x30 [ 225.717572][T10982] RIP: 0010:refcount_warn_saturate+0x1dc/0x1f0 [ 225.723863][T10982] Code: e9 d8 fe ff ff 48 89 df e8 31 51 12 fe e9 85 fe ff ff e8 07 ab d3 fd 48 c7 c7 c0 7c 91 88 c6 05 2e 11 ff 06 01 e8 e3 f6 a3 fd <0f> 0b e9 ac fe ff ff 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 [ 225.743476][T10982] RSP: 0018:ffffc900037d7720 EFLAGS: 00010286 [ 225.749563][T10982] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 225.757545][T10982] RDX: 0000000000000000 RSI: ffffffff815e9b16 RDI: fffff520006faed6 [ 225.765528][T10982] RBP: ffffc900037d7730 R08: ffff888099e20240 R09: ffffed1015d06659 [ 225.773615][T10982] R10: ffffed1015d06658 R11: ffff8880ae8332c7 R12: 0000000000000003 [ 225.781598][T10982] R13: ffff8880a01fba44 R14: 0000000000008100 R15: ffff88809fa7f800 [ 225.789615][T10982] ? vprintk_func+0x86/0x189 [ 225.794288][T10982] sock_wfree+0x1f8/0x260 [ 225.798648][T10982] sctp_wfree+0x389/0x990 [ 225.803004][T10982] ? __sctp_write_space+0x5d0/0x5d0 [ 225.808338][T10982] skb_release_head_state+0xeb/0x260 [ 225.813649][T10982] skb_release_all+0x16/0x60 [ 225.818265][T10982] consume_skb+0xfb/0x410 [ 225.822630][T10982] sctp_chunk_put+0x1d4/0x2f0 [ 225.827338][T10982] sctp_chunk_free+0x56/0x70 [ 225.831950][T10982] __sctp_outq_teardown+0x71f/0xc60 [ 225.837180][T10982] sctp_outq_free+0x16/0x20 [ 225.841705][T10982] sctp_association_free+0x208/0x7e0 [ 225.847022][T10982] sctp_do_sm+0x3b9a/0x5330 [ 225.851677][T10982] ? __kmalloc_node_track_caller+0x3d/0x70 [ 225.857524][T10982] ? sctp_do_8_2_transport_strike.isra.0+0xa80/0xa80 [ 225.864245][T10982] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 225.870441][T10982] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 225.876004][T10982] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 225.882009][T10982] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 225.887838][T10982] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 225.893597][T10982] ? sctp_init_cause+0x1ae/0x230 [ 225.898921][T10982] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 225.904841][T10982] ? skb_put+0x177/0x1d0 [ 225.909102][T10982] ? memcpy+0x46/0x50 [ 225.913118][T10982] sctp_primitive_ABORT+0xa0/0xd0 [ 225.918270][T10982] sctp_close+0x259/0x960 [ 225.922676][T10982] ? sctp_accept+0x710/0x710 [ 225.927318][T10982] ? __kasan_check_write+0x14/0x20 [ 225.932449][T10982] ? down_write+0xdf/0x150 [ 225.936884][T10982] ? ip_mc_drop_socket+0x211/0x270 [ 225.942231][T10982] inet_release+0xed/0x200 [ 225.946696][T10982] __sock_release+0xce/0x280 [ 225.951316][T10982] sock_close+0x1e/0x30 [ 225.955489][T10982] __fput+0x2ff/0x890 [ 225.959495][T10982] ? __sock_release+0x280/0x280 [ 225.964369][T10982] ____fput+0x16/0x20 [ 225.968382][T10982] task_work_run+0x145/0x1c0 [ 225.973005][T10982] exit_to_usermode_loop+0x316/0x380 [ 225.978314][T10982] do_syscall_64+0x676/0x790 [ 225.982927][T10982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.988862][T10982] RIP: 0033:0x414f31 [ 225.992768][T10982] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 226.012568][T10982] RSP: 002b:00007fffc271e760 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 226.021076][T10982] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 0000000000414f31 [ 226.029059][T10982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 226.037045][T10982] RBP: 0000000000000001 R08: ffffffff81340eb6 R09: 000000005e7c5afe [ 226.045034][T10982] R10: 00007fffc271e840 R11: 0000000000000293 R12: 000000000075bf20 [ 226.053018][T10982] R13: 00000000000370fd R14: 0000000000761988 R15: 000000000075bf2c [ 226.061113][T10982] ? no_context+0x96/0xa30 [ 226.067078][T10982] Kernel Offset: disabled [ 226.071641][T10982] Rebooting in 86400 seconds..