Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:7017' (ECDSA) to the list of known hosts. syzkaller login: [ 109.492543][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 109.492552][ T40] audit: type=1400 audit(1578778540.351:42): avc: denied { map } for pid=8585 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/11 21:35:40 fuzzer started 2020/01/11 21:35:42 dialing manager at 10.0.2.10:39907 2020/01/11 21:35:43 syscalls: 2839 2020/01/11 21:35:43 code coverage: enabled 2020/01/11 21:35:43 comparison tracing: enabled 2020/01/11 21:35:43 extra coverage: enabled 2020/01/11 21:35:43 setuid sandbox: enabled 2020/01/11 21:35:43 namespace sandbox: enabled 2020/01/11 21:35:43 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/11 21:35:43 fault injection: enabled 2020/01/11 21:35:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/11 21:35:43 net packet injection: enabled 2020/01/11 21:35:43 net device setup: enabled 2020/01/11 21:35:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/11 21:35:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:36:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000000c0)=0x54) [ 149.155957][ T40] audit: type=1400 audit(1578778580.001:43): avc: denied { map } for pid=8610 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 21:36:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x3, 0x0) 21:36:20 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e230000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) [ 149.772485][ T8612] IPVS: ftp: loaded support on port[0] = 21 [ 149.772776][ T8614] IPVS: ftp: loaded support on port[0] = 21 21:36:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x40, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x40}}, 0x0) [ 149.868770][ T8615] IPVS: ftp: loaded support on port[0] = 21 [ 150.106829][ T8614] chnl_net:caif_netlink_parms(): no params data found [ 150.153286][ T8612] chnl_net:caif_netlink_parms(): no params data found [ 150.161688][ T8617] IPVS: ftp: loaded support on port[0] = 21 [ 150.240890][ T8615] chnl_net:caif_netlink_parms(): no params data found [ 150.280038][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.289117][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.302684][ T8612] device bridge_slave_0 entered promiscuous mode [ 150.324249][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.333462][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.342947][ T8614] device bridge_slave_0 entered promiscuous mode [ 150.354289][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.363230][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.372817][ T8614] device bridge_slave_1 entered promiscuous mode [ 150.382132][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.390653][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.399314][ T8612] device bridge_slave_1 entered promiscuous mode [ 150.439303][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.452876][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.461917][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.473661][ T8615] device bridge_slave_0 entered promiscuous mode [ 150.493476][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.518497][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.528326][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.539274][ T8615] device bridge_slave_1 entered promiscuous mode [ 150.568680][ T8614] team0: Port device team_slave_0 added [ 150.577531][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.593080][ T8615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.607436][ T8615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.624123][ T8614] team0: Port device team_slave_1 added [ 150.634378][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.678259][ T8615] team0: Port device team_slave_0 added [ 150.691542][ T8612] team0: Port device team_slave_0 added [ 150.715719][ T8615] team0: Port device team_slave_1 added [ 150.732348][ T8612] team0: Port device team_slave_1 added [ 150.794050][ T8614] device hsr_slave_0 entered promiscuous mode [ 150.861319][ T8614] device hsr_slave_1 entered promiscuous mode [ 151.086140][ T8615] device hsr_slave_0 entered promiscuous mode [ 151.150499][ T8615] device hsr_slave_1 entered promiscuous mode [ 151.220082][ T8615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.232717][ T8615] Cannot create hsr debugfs directory [ 151.302713][ T8612] device hsr_slave_0 entered promiscuous mode [ 151.380256][ T8612] device hsr_slave_1 entered promiscuous mode [ 151.449966][ T8612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.459342][ T8612] Cannot create hsr debugfs directory [ 151.494942][ T8617] chnl_net:caif_netlink_parms(): no params data found [ 151.630488][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.642242][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.653616][ T8617] device bridge_slave_0 entered promiscuous mode [ 151.689311][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.703289][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.713147][ T8617] device bridge_slave_1 entered promiscuous mode [ 151.732523][ T40] audit: type=1400 audit(1578778582.591:44): avc: denied { create } for pid=8614 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 151.766538][ T8615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.778116][ T40] audit: type=1400 audit(1578778582.591:45): avc: denied { write } for pid=8614 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 151.824521][ T40] audit: type=1400 audit(1578778582.591:46): avc: denied { read } for pid=8614 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 151.934856][ T8614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.988664][ T8614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.094315][ T8614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.195000][ T8615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.292958][ T8615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.385708][ T8617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.400017][ T8614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.472606][ T8615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.571392][ T8617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.595066][ T8612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.675807][ T8612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.798320][ T8612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.866622][ T8617] team0: Port device team_slave_0 added [ 152.886807][ T8617] team0: Port device team_slave_1 added [ 152.906711][ T8612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.144786][ T8617] device hsr_slave_0 entered promiscuous mode [ 153.240493][ T8617] device hsr_slave_1 entered promiscuous mode [ 153.310290][ T8617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.339311][ T8617] Cannot create hsr debugfs directory [ 153.496567][ T8617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.565645][ T8617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.662297][ T8617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.743188][ T8617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.872555][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.892358][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.922052][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.938119][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.962997][ T8615] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.989479][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.005085][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.020802][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.043718][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.059132][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.081785][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.099894][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.115871][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.134565][ T8614] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.172914][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.193052][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.219327][ T2605] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.234820][ T2605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.257845][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.290185][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.306904][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.319440][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.334362][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.352234][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.364296][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.378503][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.393975][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.409907][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.423781][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.437743][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.451986][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.467821][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.483958][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.500095][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.516820][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.546752][ T8615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.570464][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.593829][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.609454][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.628470][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.645684][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.661782][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.677872][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.695327][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.711872][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.731004][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.745611][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.759455][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.775665][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.791340][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.805225][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.821568][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.839469][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.883564][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.896850][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.909291][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.924372][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.939191][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.954717][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.969617][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.996522][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.027475][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.053335][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.067760][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.083561][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.097646][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.117945][ T8617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.136668][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.150096][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.165400][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.179633][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.193954][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.212783][ T8614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.230770][ T8614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.247641][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.262287][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.275827][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.289420][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.311565][ T8612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.331162][ T8612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.350802][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.364988][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.386154][ T8617] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.406538][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.419211][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.432180][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.445494][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.459082][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.470457][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.486230][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.511056][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.523943][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.537522][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.551899][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.565869][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.578071][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.591150][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.605701][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.619225][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.644483][ T8612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.661092][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.673862][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.686410][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.713494][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.728890][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.742607][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.757074][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.768295][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.779245][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.791825][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.806350][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.818761][ T8615] device veth0_vlan entered promiscuous mode [ 155.837278][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.849331][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.871552][ T8615] device veth1_vlan entered promiscuous mode [ 155.882587][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.894335][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.922084][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.934061][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.945605][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.957040][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.978747][ T8612] device veth0_vlan entered promiscuous mode [ 155.992152][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.003543][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.015624][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.026600][ T3437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.041256][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.065562][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.072277][ T40] audit: type=1400 audit(1578778586.931:47): avc: denied { associate } for pid=8615 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 156.081854][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.154376][ T8617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.167567][ T8612] device veth1_vlan entered promiscuous mode [ 156.183460][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.196262][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.210410][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.247100][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.265379][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.289775][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.312840][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.333494][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 21:36:27 executing program 2: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x0, 0x10000000000, 0x4, 0x5, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x101483) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x6, 0x368, 0x4, 0x0, 0xd, "25514d680cc0ea76e4cbfe1d89fd3ae3119bf3"}) [ 156.358591][ T8614] device veth0_vlan entered promiscuous mode [ 156.397491][ T8614] device veth1_vlan entered promiscuous mode [ 156.421161][ T40] audit: type=1400 audit(1578778587.271:48): avc: denied { open } for pid=8632 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 156.468552][ T40] audit: type=1400 audit(1578778587.281:49): avc: denied { kernel } for pid=8632 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 156.496765][ T8617] device veth0_vlan entered promiscuous mode [ 156.532917][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 21:36:27 executing program 2: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x0, 0x10000000000, 0x4, 0x5, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x101483) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x6, 0x368, 0x4, 0x0, 0xd, "25514d680cc0ea76e4cbfe1d89fd3ae3119bf3"}) [ 156.563893][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.579044][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.579469][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 21:36:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) read(r0, &(0x7f0000002500)=""/243, 0xf3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 156.580293][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.624654][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.639412][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.652858][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.675266][ T8617] device veth1_vlan entered promiscuous mode [ 156.700573][ C3] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 21:36:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0x9, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x48, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) [ 156.816031][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.858198][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.872376][ T2605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 21:36:27 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, 0x0, 0xa198) 21:36:27 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40086607, &(0x7f0000000280)) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x5) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40086607, &(0x7f0000000280)) r3 = socket(0x1e, 0xa, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000480)={0x18, 0xd, 0x2, {{0x80, 0x1, 0x8}, 0x401}}, 0x18) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x153}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffead) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='team_slave_0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r5, r6, 0x0, 0x102000004) [ 156.898428][ T40] audit: type=1800 audit(1578778587.751:50): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16566 res=0 [ 156.906842][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:36:27 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40086607, &(0x7f0000000280)) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x5) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40086607, &(0x7f0000000280)) r3 = socket(0x1e, 0xa, 0x8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000480)={0x18, 0xd, 0x2, {{0x80, 0x1, 0x8}, 0x401}}, 0x18) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x153}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffead) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='team_slave_0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) sendfile(r5, r6, 0x0, 0x102000004) [ 156.997253][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.999313][ T40] audit: type=1800 audit(1578778587.851:51): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16573 res=0 [ 157.002848][ T8663] overlayfs: './file0' not a directory [ 157.032368][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:36:27 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, 0x0, 0xa198) 21:36:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xef) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700000000190a000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) 21:36:27 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, 0x0, 0xa198) 21:36:28 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, 0x0, 0xa198) 21:36:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg(r0, &(0x7f000000cd00)={0x0, 0x0, 0x0}, 0x0) 21:36:28 executing program 3: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) getpid() symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0) renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 21:36:28 executing program 2: prctl$PR_GET_SECUREBITS(0x1b) unshare(0x8020000) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x6) dup2(r0, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x8910, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) dup2(0xffffffffffffffff, r2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4a9101, 0x0) 21:36:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0xa198) 21:36:28 executing program 3: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) getpid() symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0) renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 21:36:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xbb8) 21:36:28 executing program 3: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x0) renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 21:36:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000000c0)) [ 158.010464][ C3] hrtimer: interrupt took 22034 ns [ 348.683490][ T8627] ------------[ cut here ]------------ [ 348.718493][ T8627] Type was not set for devlink port. [ 348.728185][ T8627] WARNING: CPU: 0 PID: 8627 at net/core/devlink.c:6399 devlink_port_type_warn+0x15/0x20 [ 348.728185][ T8627] Kernel panic - not syncing: panic_on_warn set ... [ 348.728185][ T8627] CPU: 0 PID: 8627 Comm: kworker/0:3 Not tainted 5.5.0-rc5-syzkaller #0 [ 348.728185][ T8627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 348.728185][ T8627] Workqueue: events devlink_port_type_warn [ 348.728185][ T8627] Call Trace: [ 348.728185][ T8627] dump_stack+0x197/0x210 [ 348.728185][ T8627] ? devlink_free+0x2d0/0x2f0 [ 348.728185][ T8627] panic+0x2e3/0x75c [ 348.728185][ T8627] ? add_taint.cold+0x16/0x16 [ 348.728185][ T8627] ? __kasan_check_write+0x14/0x20 [ 348.728185][ T8627] ? __warn.cold+0x14/0x3e [ 348.728185][ T8627] ? __warn+0xd9/0x1cf [ 348.728185][ T8627] ? devlink_port_type_warn+0x15/0x20 [ 349.090419][ T8627] __warn.cold+0x2f/0x3e [ 349.090419][ T8627] ? devlink_port_type_warn+0x15/0x20 [ 349.090419][ T8627] report_bug+0x289/0x300 [ 349.090419][ T8627] do_error_trap+0x11b/0x200 [ 349.090419][ T8627] do_invalid_op+0x37/0x50 [ 349.090419][ T8627] ? devlink_port_type_warn+0x15/0x20 [ 349.090419][ T8627] invalid_op+0x23/0x30 [ 349.090419][ T8627] RIP: 0010:devlink_port_type_warn+0x15/0x20 [ 349.090419][ T8627] Code: 89 df e8 fe cb 7d fb e9 d3 fe ff ff 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 67 0d 40 fb 48 c7 c7 e0 56 d8 88 e8 ea bc 10 fb <0f> 0b 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 55 49 89 f5 41 54 [ 349.090419][ T8627] RSP: 0018:ffffc90002857d30 EFLAGS: 00010282 [ 349.090419][ T8627] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 349.320000][ T8627] RDX: 0000000000000000 RSI: ffffffff815e53a6 RDI: fffff5200050af98 [ 349.320000][ T8627] RBP: ffffc90002857d30 R08: ffff888027fc19c0 R09: fffffbfff165e7bf [ 349.320000][ T8627] R10: fffffbfff165e7be R11: ffffffff8b2f3df7 R12: ffff8880107aa0c0 [ 349.320000][ T8627] R13: 0000000000000000 R14: ffff888028081400 R15: ffff88802d036b40 [ 349.320000][ T8627] ? vprintk_func+0x86/0x189 [ 349.320000][ T8627] process_one_work+0x9af/0x1740 [ 349.320000][ T8627] ? pwq_dec_nr_in_flight+0x320/0x320 [ 349.320000][ T8627] ? lock_acquire+0x190/0x410 [ 349.320000][ T8627] worker_thread+0x98/0xe40 [ 349.320000][ T8627] ? trace_hardirqs_on+0x67/0x240 [ 349.320000][ T8627] kthread+0x361/0x430 [ 349.320000][ T8627] ? process_one_work+0x1740/0x1740 [ 349.320000][ T8627] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 349.320000][ T8627] ret_from_fork+0x24/0x30 [ 349.320000][ T8627] Kernel Offset: disabled [ 349.320000][ T8627] Rebooting in 86400 seconds..