Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:24318' (ECDSA) to the list of known hosts. syzkaller login: [ 132.264101][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 132.264350][ T38] audit: type=1400 audit(1579168577.173:42): avc: denied { map } for pid=9297 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16524 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/16 09:56:17 fuzzer started 2020/01/16 09:56:20 dialing manager at 10.0.2.10:46113 2020/01/16 09:56:21 syscalls: 2863 2020/01/16 09:56:21 code coverage: enabled 2020/01/16 09:56:21 comparison tracing: enabled 2020/01/16 09:56:21 extra coverage: enabled 2020/01/16 09:56:21 setuid sandbox: enabled 2020/01/16 09:56:21 namespace sandbox: enabled 2020/01/16 09:56:21 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/16 09:56:21 fault injection: enabled 2020/01/16 09:56:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/16 09:56:21 net packet injection: enabled 2020/01/16 09:56:21 net device setup: enabled 2020/01/16 09:56:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/16 09:56:21 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 144.333818][ C0] hrtimer: interrupt took 47054379 ns 09:57:22 executing program 0: syz_open_dev$media(0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000090000000500000000040000", @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB="0300000000000000"], @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="576f00f74e3f9c00000000000000370006000000000000000b000000000000002b001761000000000100000000000000b80f66ce0b254c49b3ef55718b4a48275ecf9d1ac57747040c3ac632120bc9d4e2854017b4b8422085959ecbec1717daf4befccc034f8e71c58dbdf31b5d0e1196cd52f0df5e9abb4f82c3d956d58c8d73d91e3a40ec143a358e5718c6ced44e8d049d737b8699e9ee232005f88dd6b60d28c12e6344a1f134f1f01908a32613bd2264ec3e96e16d9ca1279f823a55aacd8e841818357bb3c4f9d6cf5786915e0e0f872e521eb7f364c6c71965aa93d6d8bf065b41d73656314fc98bd51cef5279e900000000000000"], 0x58}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000680)='./bus\x00', &(0x7f0000000800)='trusted.overlay.upper\x00', &(0x7f0000000900)={0x0, 0xfb, 0x15, 0x0, 0x2, "0a131a17536658b2bea29436913fe61e"}, 0x15, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000640)) r2 = open(0x0, 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) socket(0x0, 0x803, 0x0) 09:57:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$binfmt_aout(r1, &(0x7f00000000c0)={{}, "564b3b4479b16cbee281f444cfdf4373d258036a118293739f1eda569ee4396db78abeaca0d2b076ad1b63"}, 0x9b) [ 197.618851][ T38] audit: type=1400 audit(1579168642.523:43): avc: denied { map } for pid=9320 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23575 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 09:57:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f00000000c0)={'\x00', @ifru_names}) 09:57:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2) [ 198.144734][ T9323] IPVS: ftp: loaded support on port[0] = 21 [ 198.144740][ T9325] IPVS: ftp: loaded support on port[0] = 21 [ 198.144862][ T9322] IPVS: ftp: loaded support on port[0] = 21 [ 198.263620][ T9327] IPVS: ftp: loaded support on port[0] = 21 [ 198.418681][ T9325] chnl_net:caif_netlink_parms(): no params data found [ 198.461778][ T9322] chnl_net:caif_netlink_parms(): no params data found [ 198.561338][ T9323] chnl_net:caif_netlink_parms(): no params data found [ 198.584432][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.609118][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.627047][ T9322] device bridge_slave_0 entered promiscuous mode [ 198.669897][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.685807][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.705720][ T9325] device bridge_slave_0 entered promiscuous mode [ 198.723870][ T9325] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.735251][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.747260][ T9325] device bridge_slave_1 entered promiscuous mode [ 198.759666][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.772226][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.784329][ T9322] device bridge_slave_1 entered promiscuous mode [ 198.839820][ T9327] chnl_net:caif_netlink_parms(): no params data found [ 198.860423][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.888608][ T9322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.911916][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.931008][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.974079][ T9322] team0: Port device team_slave_0 added [ 198.987825][ T9322] team0: Port device team_slave_1 added [ 199.000223][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.008506][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.025787][ T9323] device bridge_slave_0 entered promiscuous mode [ 199.051812][ T9325] team0: Port device team_slave_0 added [ 199.080382][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.097106][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.117571][ T9323] device bridge_slave_1 entered promiscuous mode [ 199.138828][ T9325] team0: Port device team_slave_1 added [ 199.183999][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.199312][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.214593][ T9327] device bridge_slave_0 entered promiscuous mode [ 199.321659][ T9322] device hsr_slave_0 entered promiscuous mode [ 199.399864][ T9322] device hsr_slave_1 entered promiscuous mode [ 199.502966][ T9323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.535942][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.557038][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.580846][ T9327] device bridge_slave_1 entered promiscuous mode [ 199.630454][ T9323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.770896][ T9325] device hsr_slave_0 entered promiscuous mode [ 199.828597][ T9325] device hsr_slave_1 entered promiscuous mode [ 199.888365][ T9325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.911808][ T9325] Cannot create hsr debugfs directory [ 199.936922][ T9323] team0: Port device team_slave_0 added [ 199.963108][ T9327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.981029][ T9323] team0: Port device team_slave_1 added [ 200.005974][ T9327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.110966][ T9323] device hsr_slave_0 entered promiscuous mode [ 200.178703][ T9323] device hsr_slave_1 entered promiscuous mode [ 200.238296][ T9323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.249645][ T9323] Cannot create hsr debugfs directory [ 200.272807][ T9327] team0: Port device team_slave_0 added [ 200.294590][ T9327] team0: Port device team_slave_1 added [ 200.460658][ T9327] device hsr_slave_0 entered promiscuous mode [ 200.509914][ T9327] device hsr_slave_1 entered promiscuous mode [ 200.558295][ T9327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.569283][ T9327] Cannot create hsr debugfs directory [ 200.585579][ T38] audit: type=1400 audit(1579168645.493:44): avc: denied { create } for pid=9322 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.586922][ T9322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.632947][ T38] audit: type=1400 audit(1579168645.493:45): avc: denied { write } for pid=9322 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.687259][ T38] audit: type=1400 audit(1579168645.493:46): avc: denied { read } for pid=9322 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.767889][ T9322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.825200][ T9322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.891584][ T9325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.980940][ T9322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.051595][ T9325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.143754][ T9325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.226288][ T9325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.332045][ T9323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.403879][ T9323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.473939][ T9323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.553677][ T9323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.647577][ T9327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.726099][ T9327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.793305][ T9327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.894980][ T9327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.052191][ T9322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.067096][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.096875][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.114873][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.142582][ T9322] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.161721][ T9335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.176973][ T9335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.205436][ T9325] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.214904][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.229596][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.244779][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.256822][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.284336][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.297201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.312439][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.326620][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.337924][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.349437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.383405][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.394088][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.404472][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.416067][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.424485][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.433701][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.445835][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.457413][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.467781][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.477974][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.488793][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.502398][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.514346][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.540763][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.559494][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.585116][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.617998][ T9325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.645047][ T9325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.694609][ T9323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.721108][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.752285][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.774569][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.799064][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.823362][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.840076][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.866852][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.909998][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.939734][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.960230][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.981698][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.995857][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.021010][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.040945][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.067405][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.103528][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.125502][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.152343][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.171141][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.184379][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.199563][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.222462][ T9327] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.250121][ T9323] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.273023][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.291986][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.311162][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.324374][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.338774][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.351076][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.364024][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.375280][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.390687][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.407690][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.421163][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.434474][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.446523][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.457724][ T9338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.470360][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.491126][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.504187][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.517329][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.526674][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.542702][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.556457][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.570619][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.585413][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.597120][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.632646][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.651737][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.666635][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.680954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.693143][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.704899][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.719954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.752825][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.774747][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.786707][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.800350][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.825796][ T9323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.843118][ T9323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.876254][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.896895][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.915406][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.926700][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.937399][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.948914][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.959920][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.971357][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.982376][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.993357][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.005370][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.015976][ T3338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.036895][ T9322] device veth0_vlan entered promiscuous mode [ 204.057340][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.075490][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.089286][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.104004][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.115105][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.125389][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.144844][ T9327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.159255][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.169328][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.187811][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.197612][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.206255][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.215666][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.225487][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.234523][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.251826][ T9325] device veth0_vlan entered promiscuous mode [ 204.265005][ T9323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.275489][ T9322] device veth1_vlan entered promiscuous mode [ 204.303955][ T9325] device veth1_vlan entered promiscuous mode [ 204.314024][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.326066][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.338875][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.357864][ T38] audit: type=1400 audit(1579168649.263:47): avc: denied { associate } for pid=9322 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 204.400185][ T9327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.434021][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.450470][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.465188][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.505341][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.535148][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.604308][ T9323] device veth0_vlan entered promiscuous mode [ 204.636288][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.657426][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.675924][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.694816][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 09:57:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r1, &(0x7f0000f13000), 0x1c) [ 204.716304][ T38] audit: type=1400 audit(1579168649.603:48): avc: denied { open } for pid=9345 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 204.721195][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.769618][ T38] audit: type=1400 audit(1579168649.623:49): avc: denied { kernel } for pid=9345 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 204.804476][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.827915][ T38] audit: type=1400 audit(1579168649.633:50): avc: denied { create } for pid=9345 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 204.851552][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.887024][ T38] audit: type=1400 audit(1579168649.683:51): avc: denied { ioctl } for pid=9345 comm="syz-executor.2" path="socket:[37823]" dev="sockfs" ino=37823 ioctlcmd=0x89a0 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 204.897719][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.964103][ T9327] device veth0_vlan entered promiscuous mode [ 204.981028][ T9327] device veth1_vlan entered promiscuous mode [ 205.002406][ T9323] device veth1_vlan entered promiscuous mode 09:57:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r1, &(0x7f0000f13000), 0x1c) 09:57:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x100000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000032, 0x0) [ 205.119023][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.133743][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 09:57:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x100000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000032, 0x0) [ 205.149355][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.162044][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 09:57:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='/'], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0) [ 406.495283][ T23] ------------[ cut here ]------------ [ 424.686771][ T23] Type was not set for devlink port. [ 424.688517][ T23] WARNING: CPU: 2 PID: 23 at net/core/devlink.c:6399 devlink_port_type_warn+0x15/0x20 [ 424.688517][ T23] Kernel panic - not syncing: panic_on_warn set ... [ 424.688517][ T23] CPU: 2 PID: 23 Comm: kworker/2:0 Not tainted 5.5.0-rc6-syzkaller #0 [ 424.688517][ T23] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 424.688517][ T23] Workqueue: events devlink_port_type_warn [ 424.688517][ T23] Call Trace: [ 424.688517][ T23] dump_stack+0x197/0x210 [ 424.688517][ T23] ? devlink_free+0x2d0/0x2f0 [ 424.688517][ T23] panic+0x2e3/0x75c [ 424.688517][ T23] ? add_taint.cold+0x16/0x16 [ 424.688517][ T23] ? __kasan_check_write+0x14/0x20 [ 424.688517][ T23] ? __warn.cold+0x14/0x3e [ 424.688517][ T23] ? __warn+0xd9/0x1cf [ 424.688517][ T23] ? devlink_port_type_warn+0x15/0x20 [ 424.688517][ T23] __warn.cold+0x2f/0x3e [ 424.688517][ T23] ? devlink_port_type_warn+0x15/0x20 [ 424.688517][ T23] report_bug+0x289/0x300 [ 424.688517][ T23] do_error_trap+0x11b/0x200 [ 424.688517][ T23] do_invalid_op+0x37/0x50 [ 424.688517][ T23] ? devlink_port_type_warn+0x15/0x20 [ 424.688517][ T23] invalid_op+0x23/0x30 [ 424.688517][ T23] RIP: 0010:devlink_port_type_warn+0x15/0x20 [ 424.688517][ T23] Code: 89 df e8 de fc 7d fb e9 d3 fe ff ff 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 57 3d 40 fb 48 c7 c7 e0 56 d8 88 e8 ea ec 10 fb <0f> 0b 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 55 49 89 f5 41 54 [ 424.688517][ T23] RSP: 0018:ffffc90000527d30 EFLAGS: 00010282 [ 424.688517][ T23] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 424.688517][ T23] RDX: 0000000000000000 RSI: ffffffff815e5396 RDI: fffff520000a4f98 [ 424.688517][ T23] RBP: ffffc90000527d30 R08: ffff88802c780700 R09: fffffbfff165e7b7 [ 424.688517][ T23] R10: fffffbfff165e7b6 R11: ffffffff8b2f3db7 R12: ffff8880215ef8c0 [ 424.688517][ T23] R13: 0000000000000100 R14: ffff88802c6d1000 R15: ffff88802d236b40 [ 424.688517][ T23] ? vprintk_func+0x86/0x189 [ 424.688517][ T23] process_one_work+0x9af/0x1740 [ 424.688517][ T23] ? pwq_dec_nr_in_flight+0x320/0x320 [ 424.688517][ T23] ? lock_acquire+0x190/0x410 [ 424.688517][ T23] worker_thread+0x98/0xe40 [ 424.688517][ T23] kthread+0x361/0x430 [ 424.688517][ T23] ? process_one_work+0x1740/0x1740 [ 424.688517][ T23] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 424.688517][ T23] ret_from_fork+0x24/0x30 [ 424.688517][ T23] Kernel Offset: disabled [ 424.688517][ T23] Rebooting in 86400 seconds..