Warning: Permanently added '[localhost]:58967' (ECDSA) to the list of known hosts. [ 76.860264][ T38] audit: type=1400 audit(1575023356.141:42): avc: denied { map } for pid=7846 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/29 10:29:16 fuzzer started 2019/11/29 10:29:17 dialing manager at 10.0.2.10:46599 2019/11/29 10:29:17 syscalls: 2543 2019/11/29 10:29:17 code coverage: enabled 2019/11/29 10:29:17 comparison tracing: enabled 2019/11/29 10:29:17 extra coverage: extra coverage is not supported by the kernel 2019/11/29 10:29:17 setuid sandbox: enabled 2019/11/29 10:29:17 namespace sandbox: enabled 2019/11/29 10:29:17 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 10:29:17 fault injection: enabled 2019/11/29 10:29:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 10:29:17 net packet injection: enabled 2019/11/29 10:29:17 net device setup: enabled 2019/11/29 10:29:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/29 10:29:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:29:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) [ 91.465466][ T38] audit: type=1400 audit(1575023370.751:43): avc: denied { map } for pid=7867 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=17749 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 10:29:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 91.663550][ T7868] IPVS: ftp: loaded support on port[0] = 21 [ 91.671699][ T7870] IPVS: ftp: loaded support on port[0] = 21 10:29:31 executing program 2: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) [ 91.812618][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 91.830590][ T7868] chnl_net:caif_netlink_parms(): no params data found 10:29:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x5460, 0x0) [ 91.871663][ T7874] IPVS: ftp: loaded support on port[0] = 21 [ 91.904145][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.913045][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.924452][ T7868] device bridge_slave_0 entered promiscuous mode [ 91.937837][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.946358][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.956447][ T7868] device bridge_slave_1 entered promiscuous mode [ 91.974623][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.981832][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.993901][ T7870] device bridge_slave_0 entered promiscuous mode [ 92.002908][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.010118][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state 10:29:31 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x12, 0x3fd, 0x0, 0x0, {0x10000007}}, 0x14}}, 0x0) [ 92.018123][ T7870] device bridge_slave_1 entered promiscuous mode [ 92.049584][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.063352][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.088051][ T7877] IPVS: ftp: loaded support on port[0] = 21 [ 92.094663][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.119068][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.145455][ T7868] team0: Port device team_slave_0 added [ 92.152327][ T7868] team0: Port device team_slave_1 added [ 92.166542][ T7870] team0: Port device team_slave_0 added [ 92.199836][ T7870] team0: Port device team_slave_1 added 10:29:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) [ 92.227645][ T7879] IPVS: ftp: loaded support on port[0] = 21 [ 92.286954][ T7868] device hsr_slave_0 entered promiscuous mode [ 92.353607][ T7868] device hsr_slave_1 entered promiscuous mode [ 92.495940][ T7870] device hsr_slave_0 entered promiscuous mode [ 92.554464][ T7870] device hsr_slave_1 entered promiscuous mode [ 92.614364][ T7870] debugfs: Directory 'hsr0' with parent '/' already present! [ 92.637031][ T7881] IPVS: ftp: loaded support on port[0] = 21 [ 92.668883][ T38] audit: type=1400 audit(1575023371.951:44): avc: denied { create } for pid=7868 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 92.693668][ T38] audit: type=1400 audit(1575023371.951:45): avc: denied { write } for pid=7868 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 92.718115][ T38] audit: type=1400 audit(1575023371.951:46): avc: denied { read } for pid=7868 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 92.760691][ T7868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.849455][ T7870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.953592][ T7868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.068492][ T7870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.160806][ T7868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.225071][ T7874] chnl_net:caif_netlink_parms(): no params data found [ 93.239320][ T7870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.306478][ T7870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.404921][ T7868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.507313][ T7877] chnl_net:caif_netlink_parms(): no params data found [ 93.568063][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.575024][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.582474][ T7874] device bridge_slave_0 entered promiscuous mode [ 93.592358][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.599628][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.609370][ T7874] device bridge_slave_1 entered promiscuous mode [ 93.640731][ T7879] chnl_net:caif_netlink_parms(): no params data found [ 93.654131][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.661082][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.669303][ T7877] device bridge_slave_0 entered promiscuous mode [ 93.691439][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.707493][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.715142][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.722972][ T7877] device bridge_slave_1 entered promiscuous mode [ 93.746979][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.785627][ T7881] chnl_net:caif_netlink_parms(): no params data found [ 93.800861][ T7874] team0: Port device team_slave_0 added [ 93.807090][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.816978][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.825357][ T7879] device bridge_slave_0 entered promiscuous mode [ 93.835083][ T7877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.850751][ T7874] team0: Port device team_slave_1 added [ 93.857792][ T7877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.867184][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.874478][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.882078][ T7879] device bridge_slave_1 entered promiscuous mode [ 93.925313][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.934409][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.943860][ T7881] device bridge_slave_0 entered promiscuous mode [ 93.958859][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.970242][ T7877] team0: Port device team_slave_0 added [ 93.976537][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.985067][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.992684][ T7881] device bridge_slave_1 entered promiscuous mode [ 94.009658][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.028722][ T7879] team0: Port device team_slave_0 added [ 94.036399][ T7877] team0: Port device team_slave_1 added [ 94.095148][ T7874] device hsr_slave_0 entered promiscuous mode [ 94.133450][ T7874] device hsr_slave_1 entered promiscuous mode [ 94.173646][ T7874] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.184095][ T7879] team0: Port device team_slave_1 added [ 94.191255][ T7881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.214017][ T7881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.275167][ T7879] device hsr_slave_0 entered promiscuous mode [ 94.353505][ T7879] device hsr_slave_1 entered promiscuous mode [ 94.393275][ T7879] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.465113][ T7877] device hsr_slave_0 entered promiscuous mode [ 94.503445][ T7877] device hsr_slave_1 entered promiscuous mode [ 94.563317][ T7877] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.577606][ T7881] team0: Port device team_slave_0 added [ 94.598619][ T7881] team0: Port device team_slave_1 added [ 94.631724][ T7874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.734983][ T7881] device hsr_slave_0 entered promiscuous mode [ 94.785109][ T7881] device hsr_slave_1 entered promiscuous mode [ 94.823333][ T7881] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.835111][ T7879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.897007][ T7879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.965252][ T7879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.025120][ T7874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.109540][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.124268][ T7879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.210343][ T7874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.274891][ T7874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.358597][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.380211][ T7877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.438472][ T7877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.498037][ T7877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.595218][ T7877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.706120][ T7881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.745532][ T7881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.845057][ T7881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.944906][ T7881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.003634][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.011641][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.021467][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.042409][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.051360][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.059441][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.066614][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.081486][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.089418][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.097706][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.107160][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.113856][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.121493][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.129733][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.147591][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.157213][ T7883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.165894][ T7883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.183900][ T7883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.192066][ T7883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.211338][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.219059][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.230754][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.239380][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.246655][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.254509][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.262986][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.271850][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.291065][ T7868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.303307][ T7868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.320771][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.330205][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.340787][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.349886][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.358731][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.367978][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.376752][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.384155][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.392004][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.420993][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.432722][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.441561][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.450509][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.459834][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.468803][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.477468][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.485938][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.494310][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.502838][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.524299][ T7870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.535880][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.545045][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.552597][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.560362][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.568236][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.575921][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.584450][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.594724][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.607198][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.629867][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.638436][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.647328][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.654465][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.674946][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.690711][ T7877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.701077][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.709447][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.718487][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.726944][ T952] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.734110][ T952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.742180][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.750730][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.759403][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.768020][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.776409][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.784942][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.793277][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.801190][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.809554][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.817007][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.824437][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.836130][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.853576][ T38] audit: type=1400 audit(1575023376.141:47): avc: denied { associate } for pid=7868 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 96.891228][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.898910][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.907372][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.915719][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.923574][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.931396][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.939406][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.950264][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.961390][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.975551][ T7877] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.993460][ T7881] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.012622][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.023004][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 10:29:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 97.038474][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.046094][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.054695][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.063849][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:29:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 97.099529][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:29:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 97.111019][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.120028][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 10:29:36 executing program 1: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) [ 97.131634][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state 10:29:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) [ 97.139071][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.147892][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.157272][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.166165][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.174888][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.183100][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.190615][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.198274][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.209570][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.218319][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.229217][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.238635][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.246008][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.253957][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 10:29:36 executing program 1: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) [ 97.262229][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.273336][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.280214][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state 10:29:36 executing program 1: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) [ 97.288112][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 10:29:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) [ 97.297325][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.306123][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.313232][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.313852][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.329583][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.337633][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.346165][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.354869][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.362321][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.370309][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.388211][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.398763][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.410394][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.421768][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.433595][ T952] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.442977][ T952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.454370][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.465601][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.491453][ T7877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.502205][ T7877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.516319][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.525127][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.537403][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.547036][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.559346][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.567737][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.579363][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.587927][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.596371][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.604789][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.612852][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.620935][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.643019][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.656841][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.667148][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.675951][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.685733][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.694581][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.702921][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.710982][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.730254][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.738653][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.746955][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.754433][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.766070][ T7881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.777262][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.789385][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.806525][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.814515][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.830703][ T38] audit: type=1400 audit(1575023377.111:48): avc: denied { open } for pid=7935 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 97.836677][ T7881] 8021q: adding VLAN 0 to HW filter on device batadv0 10:29:37 executing program 2: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) [ 97.865391][ T38] audit: type=1400 audit(1575023377.151:49): avc: denied { kernel } for pid=7935 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 10:29:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) [ 97.891519][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.899415][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 10:29:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x12, 0x3fd, 0x0, 0x0, {0x10000007}}, 0x14}}, 0x0) 10:29:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 10:29:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) 10:29:37 executing program 2: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) 10:29:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 10:29:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) 10:29:37 executing program 2: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) 10:29:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 10:29:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 10:29:37 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 10:29:37 executing program 2: write$selinux_access(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) 10:29:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x12, 0x3fd, 0x0, 0x0, {0x10000007}}, 0x14}}, 0x0) 10:29:37 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) 10:29:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) 10:29:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) 10:29:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 10:29:37 executing program 2: write$selinux_access(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) 10:29:37 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) 10:29:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x12, 0x3fd, 0x0, 0x0, {0x10000007}}, 0x14}}, 0x0) 10:29:37 executing program 5: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) 10:29:37 executing program 2: write$selinux_access(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) 10:29:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) 10:29:37 executing program 5: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) 10:29:37 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) 10:29:37 executing program 2: r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) 10:29:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 10:29:37 executing program 5: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) 10:29:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x12, 0x3fd, 0x0, 0x0, {0x10000007}}, 0x14}}, 0x0) 10:29:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000280)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYRES64], 0x8) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0xe2) r2 = dup2(r1, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000002c0)={0x1, 0x4}) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(r4, 0x10e, 0x1, &(0x7f0000000500)=""/230, &(0x7f00000001c0)=0xe6) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000100)={0xb, 0x101, {0x54, 0x80, 0x5, {0x100, 0x3ff}, {0x7fff, 0x3f}, @rumble={0x14, 0x2}}, {0xa4, 0x9, 0x3, {0x0, 0x5}, {0x9208, 0x1}, @cond=[{0x4000, 0x5, 0x0, 0x1, 0xffde, 0x9}, {0xfeff, 0x9a12, 0x2, 0x7, 0x8001, 0x6}]}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000000)='clear_refs\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r6, r7, 0x0, 0x1) times(0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) 10:29:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000100)) 10:29:37 executing program 2: r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) [ 98.593182][ C3] hrtimer: interrupt took 24502 ns 10:29:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 10:29:37 executing program 2: r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) [ 98.617508][ T8064] FAT-fs (loop1): bogus number of reserved sectors 10:29:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) [ 98.624528][ T8064] FAT-fs (loop1): Can't find a valid FAT filesystem 10:29:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 10:29:37 executing program 2: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 system_u:system_r:kernel_t:s0 1'], 0x4a) [ 203.553127][ C3] rcu: INFO: rcu_preempt self-detected stall on CPU [ 203.556484][ C3] rcu: 3-....: (10500 ticks this GP) idle=98e/1/0x4000000000000004 softirq=6821/6822 fqs=4736 [ 203.563204][ C3] (t=10502 jiffies g=5773 q=2039) [ 203.563204][ C3] NMI backtrace for cpu 3 [ 203.563204][ C3] CPU: 3 PID: 8050 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 203.583257][ C3] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 203.583257][ C3] Call Trace: [ 203.583257][ C3] [ 203.583257][ C3] dump_stack+0x197/0x210 [ 203.583257][ C3] nmi_cpu_backtrace.cold+0x70/0xb2 [ 203.583257][ C3] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 203.583257][ C3] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 203.583257][ C3] arch_trigger_cpumask_backtrace+0x14/0x20 [ 203.583257][ C3] rcu_dump_cpu_stacks+0x183/0x1cf [ 203.583257][ C3] ? find_next_bit+0x107/0x130 [ 203.583257][ C3] rcu_sched_clock_irq.cold+0x509/0xc02 [ 203.583257][ C3] ? raise_softirq+0x138/0x340 [ 203.583257][ C3] update_process_times+0x2d/0x70 [ 203.583257][ C3] tick_sched_handle+0xa2/0x190 [ 203.583257][ C3] tick_sched_timer+0x53/0x140 [ 203.583257][ C3] __hrtimer_run_queues+0x364/0xe40 [ 203.583257][ C3] ? tick_sched_do_timer+0x1b0/0x1b0 [ 203.583257][ C3] ? hrtimer_init+0x330/0x330 [ 203.583257][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 203.583257][ C3] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 203.583257][ C3] hrtimer_interrupt+0x314/0x770 [ 203.583257][ C3] smp_apic_timer_interrupt+0x160/0x610 [ 203.583257][ C3] apic_timer_interrupt+0xf/0x20 [ 203.583257][ C3] RIP: 0010:check_memory_region+0x13/0x1a0 [ 203.583257][ C3] Code: 48 89 e5 e8 3f e4 c7 05 5d c3 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 48 85 f6 0f 84 34 01 00 00 48 b8 ff ff ff ff ff 7f ff ff <55> 0f b6 d2 48 39 c7 48 89 e5 41 55 41 54 53 0f 86 07 01 00 00 4c [ 203.583257][ C3] RSP: 0018:ffff88807ed09ab0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 203.583257][ C3] RAX: ffff7fffffffffff RBX: ffff88807ed38140 RCX: ffffffff81626334 [ 203.583257][ C3] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807ed38220 [ 203.583257][ C3] RBP: ffff88807ed09ab8 R08: ffff88801391c1c0 R09: fffffbfff153779d [ 203.583257][ C3] R10: ffff88801391caf8 R11: ffff88801391c1c0 R12: ffff88807ed38220 [ 203.583257][ C3] R13: ffff88807ed09bc0 R14: ffff88807de36cc8 R15: ffff88807de360c0 [ 203.583257][ C3] ? apic_timer_interrupt+0xa/0x20 [ 203.583257][ C3] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 203.583257][ C3] ? __kasan_check_read+0x11/0x20 [ 203.583257][ C3] rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 203.583257][ C3] rcu_is_watching+0x10/0x30 [ 203.583257][ C3] in6_dev_get+0x242/0x2c0 [ 203.583257][ C3] icmp6_dst_alloc+0x20/0x4a0 [ 203.583257][ C3] mld_sendpack+0x625/0xed0 [ 203.583257][ C3] ? nf_hook.constprop.0+0x560/0x560 [ 203.583257][ C3] ? __this_cpu_preempt_check+0x2c/0x190 [ 203.583257][ C3] ? mld_send_initial_cr.part.0+0x10c/0x160 [ 203.583257][ C3] mld_send_initial_cr.part.0+0x114/0x160 [ 203.583257][ C3] mld_dad_timer_expire+0x42/0x230 [ 203.583257][ C3] call_timer_fn+0x1ac/0x780 [ 203.583257][ C3] ? mld_send_initial_cr.part.0+0x160/0x160 [ 203.583257][ C3] ? msleep_interruptible+0x150/0x150 [ 203.583257][ C3] ? mld_send_initial_cr.part.0+0x160/0x160 [ 203.583257][ C3] run_timer_softirq+0x6c3/0x1790 [ 203.583257][ C3] ? add_timer+0x930/0x930 [ 203.583257][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 203.583257][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 203.583257][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 203.583257][ C3] __do_softirq+0x262/0x98c [ 203.583257][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 203.583257][ C3] irq_exit+0x19b/0x1e0 [ 203.583257][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 203.583257][ C3] apic_timer_interrupt+0xf/0x20 [ 203.583257][ C3] [ 203.583257][ C3] RIP: 0010:generic_exec_single+0x33a/0x4c0 [ 203.583257][ C3] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 68 01 00 00 48 83 3d 2e 81 a9 07 00 0f 84 e0 00 00 00 e8 eb 2a 0b 00 48 89 df 57 9d <0f> 1f 44 00 00 45 31 ed e9 39 fe ff ff e8 d4 2a 0b 00 0f 0b e9 23 [ 203.583257][ C3] RSP: 0018:ffff88801a8d7a80 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13 [ 203.583257][ C3] RAX: 0000000000040000 RBX: 0000000000000216 RCX: ffffc90008a54000 [ 203.583257][ C3] RDX: 00000000000014c1 RSI: ffffffff8169b335 RDI: 0000000000000216 [ 203.583257][ C3] RBP: ffff88801a8d7ab0 R08: 1ffffffff15377bb R09: fffffbfff15377bc [ 203.583257][ C3] R10: fffffbfff15377bb R11: ffffffff8a9bbddf R12: 0000000000000200 [ 203.583257][ C3] R13: ffff88801a8d7b00 R14: ffff88801a8d7bd0 R15: ffffffff818bd170 [ 203.583257][ C3] ? perf_duration_warn+0x40/0x40 [ 203.583257][ C3] ? generic_exec_single+0x335/0x4c0 [ 203.583257][ C3] ? __perf_event_enable+0x930/0x930 [ 203.583257][ C3] smp_call_function_single+0x17c/0x480 [ 203.583257][ C3] ? perf_duration_warn+0x40/0x40 [ 203.583257][ C3] ? generic_exec_single+0x4c0/0x4c0 [ 203.583257][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 203.583257][ C3] ? __perf_event_enable+0x930/0x930 [ 203.583257][ C3] task_function_call+0xe9/0x180 [ 203.583257][ C3] ? perf_event_addr_filters_exec+0x310/0x310 [ 203.583257][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 203.583257][ C3] ? __perf_event_enable+0x930/0x930 [ 203.583257][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.583257][ C3] ? exclusive_event_installable+0x257/0x320 [ 203.583257][ C3] perf_install_in_context+0x308/0x5a0 [ 203.583257][ C3] ? list_add_event+0xed0/0xed0 [ 203.583257][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 203.583257][ C3] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 203.583257][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 203.583257][ C3] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 203.583257][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 203.583257][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 203.583257][ C3] ? put_timespec64+0xda/0x140 [ 203.583257][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 203.583257][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 203.583257][ C3] ? do_syscall_64+0x26/0x790 [ 203.583257][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.583257][ C3] ? do_syscall_64+0x26/0x790 [ 203.583257][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 203.583257][ C3] do_syscall_64+0xfa/0x790 [ 203.583257][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.583257][ C3] RIP: 0033:0x45a759 [ 203.583257][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 203.583257][ C3] RSP: 002b:00007f8fbfaf2c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 203.583257][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 203.583257][ C3] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 [ 203.583257][ C3] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 203.583257][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f8fbfaf36d4 [ 203.583257][ C3] R13: 00000000004aec17 R14: 00000000006f1cb0 R15: 00000000ffffffff