Warning: Permanently added '[localhost]:21060' (ECDSA) to the list of known hosts. [ 258.276706][ T40] audit: type=1400 audit(1594168566.997:42): avc: denied { map } for pid=15989 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/07/08 00:36:07 fuzzer started 2020/07/08 00:36:08 dialing manager at 10.0.2.10:42899 2020/07/08 00:36:09 syscalls: 3130 2020/07/08 00:36:09 code coverage: enabled 2020/07/08 00:36:09 comparison tracing: enabled 2020/07/08 00:36:09 extra coverage: enabled 2020/07/08 00:36:09 setuid sandbox: enabled 2020/07/08 00:36:09 namespace sandbox: enabled 2020/07/08 00:36:09 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/08 00:36:09 fault injection: enabled 2020/07/08 00:36:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/08 00:36:09 net packet injection: enabled 2020/07/08 00:36:09 net device setup: enabled 2020/07/08 00:36:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/08 00:36:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/08 00:36:09 USB emulation: enabled [ 260.446150][ T40] audit: type=1400 audit(1594168569.167:43): avc: denied { integrity } for pid=16005 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 Resetting rate control (69195 samples) Resetting rate control (2512201 samples) [ 339.922452][ T2601] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=57s [ 340.016083][ T2601] sd 0:0:0:0: [sda] tag#15 CDB: Write(10) 2a 00 00 14 7e c0 00 01 00 00 [ 340.115048][ T2601] blk_update_request: I/O error, dev sda, sector 1343168 op 0x1:(WRITE) flags 0x4000 phys_seg 4 prio class 0 [ 340.220478][ T2601] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=57s [ 340.287682][ T2601] sd 0:0:0:0: [sda] tag#14 CDB: Write(10) 2a 00 00 14 7d c0 00 01 00 00 [ 340.350184][ T2601] blk_update_request: I/O error, dev sda, sector 1342912 op 0x1:(WRITE) flags 0x4000 phys_seg 2 prio class 0 [ 340.437703][ T2601] sd 0:0:0:0: [sda] tag#13 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=57s [ 340.492145][ T2601] sd 0:0:0:0: [sda] tag#13 CDB: Write(10) 2a 00 00 14 7c c0 00 01 00 00 [ 340.550409][ T2601] blk_update_request: I/O error, dev sda, sector 1342656 op 0x1:(WRITE) flags 0x4000 phys_seg 2 prio class 0 [ 340.653798][ T2601] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=57s [ 340.704695][ T2601] sd 0:0:0:0: [sda] tag#12 CDB: Write(10) 2a 00 00 14 7b f8 00 00 c8 00 [ 340.742162][ T2601] blk_update_request: I/O error, dev sda, sector 1342456 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 0 [ 340.777032][ T2601] EXT4-fs warning (device sda1): ext4_end_bio:345: I/O error 10 writing to inode 16525 starting block 167832) [ 340.909421][ C2] EXT4-fs warning (device sda1): ext4_end_bio:345: I/O error 10 writing to inode 16525 starting block 168192) [ 340.987000][ T1810] Buffer I/O error on device sda1, logical block 167576 [ 341.064396][ T1810] Buffer I/O error on device sda1, logical block 167577 [ 341.114246][ T1810] Buffer I/O error on device sda1, logical block 167578 [ 341.264606][ T1810] Buffer I/O error on device sda1, logical block 167579 [ 341.315663][ T1810] Buffer I/O error on device sda1, logical block 167580 [ 341.363625][ T1810] Buffer I/O error on device sda1, logical block 167581 [ 341.413282][ T1810] Buffer I/O error on device sda1, logical block 167582 [ 341.464773][ T1810] Buffer I/O error on device sda1, logical block 167583 [ 341.508526][ T1810] Buffer I/O error on device sda1, logical block 167584 [ 341.553320][ T1810] Buffer I/O error on device sda1, logical block 167585 00:37:42 executing program 0: [ 354.298524][ T40] audit: type=1400 audit(1594168663.017:44): avc: denied { map } for pid=16008 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=74 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 00:37:43 executing program 1: 00:37:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000092c0)={0x0, 0x0, &(0x7f0000009280)={&(0x7f0000000180)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) [ 354.725616][T16011] IPVS: ftp: loaded support on port[0] = 21 [ 354.725623][T16009] IPVS: ftp: loaded support on port[0] = 21 00:37:43 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0xb, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={[], [], @dev}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 354.984079][T16013] IPVS: ftp: loaded support on port[0] = 21 [ 355.024603][T16009] chnl_net:caif_netlink_parms(): no params data found [ 355.073874][T16011] chnl_net:caif_netlink_parms(): no params data found [ 355.156972][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.165317][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.175871][T16009] device bridge_slave_0 entered promiscuous mode [ 355.190760][T16009] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.198517][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.207429][T16009] device bridge_slave_1 entered promiscuous mode [ 355.221727][T16017] IPVS: ftp: loaded support on port[0] = 21 [ 355.267254][T16009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.279848][T16009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.319596][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.327320][T16011] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.335229][T16011] device bridge_slave_0 entered promiscuous mode [ 355.345006][T16011] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.352633][T16011] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.360797][T16011] device bridge_slave_1 entered promiscuous mode [ 355.371736][T16013] chnl_net:caif_netlink_parms(): no params data found [ 355.401192][T16011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.415645][T16009] team0: Port device team_slave_0 added [ 355.429846][T16009] team0: Port device team_slave_1 added [ 355.439443][T16011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.478132][T16011] team0: Port device team_slave_0 added [ 355.487517][T16011] team0: Port device team_slave_1 added [ 355.493932][T16009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.501564][T16009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.528654][T16009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.543557][T16009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.552709][T16009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.581865][T16009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.635751][T16011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.643667][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.687488][T16011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.712582][T16013] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.721627][T16013] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.730987][T16013] device bridge_slave_0 entered promiscuous mode [ 355.818939][T16009] device hsr_slave_0 entered promiscuous mode [ 355.877271][T16009] device hsr_slave_1 entered promiscuous mode [ 355.917957][T16011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.926504][T16011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.957529][T16011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.969742][T16013] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.977533][T16013] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.985194][T16013] device bridge_slave_1 entered promiscuous mode [ 356.013616][T16013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.037158][T16013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.056202][T16017] chnl_net:caif_netlink_parms(): no params data found [ 356.208910][T16011] device hsr_slave_0 entered promiscuous mode [ 356.266755][T16011] device hsr_slave_1 entered promiscuous mode [ 356.326590][T16011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.334231][T16011] Cannot create hsr debugfs directory [ 356.343476][T16013] team0: Port device team_slave_0 added [ 356.372289][T16013] team0: Port device team_slave_1 added [ 356.422181][T16013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.429631][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.456792][T16013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.495396][T16013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.502750][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.529645][T16013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.561997][T16017] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.574061][T16017] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.587525][T16017] device bridge_slave_0 entered promiscuous mode [ 356.605963][T16017] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.614201][T16017] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.623343][T16017] device bridge_slave_1 entered promiscuous mode [ 356.722168][T16013] device hsr_slave_0 entered promiscuous mode [ 356.776745][T16013] device hsr_slave_1 entered promiscuous mode [ 356.846494][T16013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.854343][T16013] Cannot create hsr debugfs directory [ 356.875918][T16017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.903574][T16017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.972752][T16017] team0: Port device team_slave_0 added [ 356.991350][ T40] audit: type=1400 audit(1594168665.717:45): avc: denied { create } for pid=16009 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 356.992740][T16017] team0: Port device team_slave_1 added [ 357.021760][ T40] audit: type=1400 audit(1594168665.717:46): avc: denied { write } for pid=16009 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 357.050032][T16009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.057240][ T40] audit: type=1400 audit(1594168665.717:47): avc: denied { read } for pid=16009 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 357.185364][T16017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.195819][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.225040][T16017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.238898][T16017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.246563][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.273527][T16017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.289766][T16009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.381263][T16009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.489158][T16009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.642603][T16011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.724914][T16011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.801469][T16011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.859354][T16011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.999985][T16017] device hsr_slave_0 entered promiscuous mode [ 358.067761][T16017] device hsr_slave_1 entered promiscuous mode [ 358.146460][T16017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.154972][T16017] Cannot create hsr debugfs directory [ 358.250262][T16013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.338391][T16013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.390406][T16013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.451471][T16013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.609758][T16017] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.681493][T16017] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.740348][T16017] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.830211][T16017] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.981702][T16011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.994946][T16013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.015594][T16009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.042280][T16013] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.051372][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.061300][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.070074][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.078930][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.102201][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.110769][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.122272][T16011] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.133028][T16009] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.146169][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.155513][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.164661][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.172543][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.186511][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.203543][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.212911][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.223011][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.231876][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.241446][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.250890][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.261554][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.275320][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.304886][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.314587][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.324279][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.334182][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.341919][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.350712][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.359722][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.368896][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.377740][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.385430][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.393743][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.403538][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.412737][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.422037][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.431568][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.439253][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.447413][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.456597][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.466085][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.475589][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.484699][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.507985][T16017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.518201][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.527371][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.536161][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.547834][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.556820][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.565008][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.574574][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.583052][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.595520][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.605294][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.624279][T16009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.635674][T16009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.649332][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.659122][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.668253][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.677563][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.688009][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.698883][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.709419][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.728318][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.739919][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.752240][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.762339][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.781627][T16017] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.796851][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.806774][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.816911][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.828175][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.839116][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.848501][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.858135][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.873823][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.892130][T16011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.905229][T16013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.914134][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.923576][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.932453][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.940006][T16026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.948085][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.974764][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.984150][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.993073][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.003155][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.016080][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 360.025164][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 360.038547][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.048748][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.058354][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.067645][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.090635][T16009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.105697][T16017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.118472][T16017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.131739][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.140498][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.148833][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.156830][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.164636][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.173044][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.183217][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.192623][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.201523][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.210568][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.219539][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.229525][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.246113][T16011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.264505][T16013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.288167][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.296012][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.328377][T16017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.340575][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.354060][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.369148][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.378541][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.398109][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.407723][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.451914][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.461499][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.471945][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.482804][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.492734][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.502208][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.515649][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.524839][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.534794][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.543767][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.552414][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.560980][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.571678][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.581031][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.592514][T16013] device veth0_vlan entered promiscuous mode [ 360.601940][T16011] device veth0_vlan entered promiscuous mode [ 360.610043][T16009] device veth0_vlan entered promiscuous mode [ 360.629611][T16013] device veth1_vlan entered promiscuous mode [ 360.646965][T16009] device veth1_vlan entered promiscuous mode [ 360.662588][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.672070][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.688667][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.696686][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.705313][T16011] device veth1_vlan entered promiscuous mode [ 360.719506][T16017] device veth0_vlan entered promiscuous mode [ 360.746095][T16017] device veth1_vlan entered promiscuous mode [ 360.754710][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.764954][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.775252][T16026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.789106][T16013] device veth0_macvtap entered promiscuous mode [ 360.802392][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.811756][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.821514][T16035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.832588][T16013] device veth1_macvtap entered promiscuous mode [ 360.849204][T16009] device veth0_macvtap entered promiscuous mode [ 360.865074][T16009] device veth1_macvtap entered promiscuous mode [ 360.880167][T16013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.890381][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.899802][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.909058][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.918941][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.928386][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.937949][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.948246][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 360.957984][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.970714][T16011] device veth0_macvtap entered promiscuous mode [ 360.990402][T16013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.000471][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.009572][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.019406][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.032489][T16011] device veth1_macvtap entered promiscuous mode [ 361.044208][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.053088][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.062590][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.087234][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 361.098488][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.110837][T16009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.120589][T16017] device veth0_macvtap entered promiscuous mode [ 361.138570][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 361.151067][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.163418][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 361.174632][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.187477][T16011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.195654][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.204717][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.215317][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.224856][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.234359][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.251901][T16009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 361.263458][T16009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.277312][T16009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.289145][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.297626][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.400489][T16017] device veth1_macvtap entered promiscuous mode [ 361.416009][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 361.427907][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.438838][T16011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 361.450433][T16011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.462855][T16011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.545137][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.554797][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.564115][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.653719][ T40] audit: type=1400 audit(1594168670.377:48): avc: denied { associate } for pid=16013 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 361.889467][T16017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 361.891517][T16013] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 361.901827][T16017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.901859][T16017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 361.901863][T16017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.901871][T16017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 361.901874][T16017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.903436][T16017] batman_adv: batadv0: Interface activated: batadv_slave_0 00:37:50 executing program 2: msgrcv(0x0, &(0x7f0000000100)={0x0, ""/207}, 0xd7, 0x9216e6198d37973f, 0x0) [ 361.979655][ T40] audit: type=1400 audit(1594168670.707:49): avc: denied { create } for pid=16039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 00:37:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0xe, 0x4, 0x4d8, 0xd0, 0x0, 0x310, 0x408, 0x0, 0x2e0, 0x408, 0x408, 0x408, 0x2e0, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @loopback}, @mcast1, [], [], 'wg0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0x200, 0x240, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x0, 0xcf, 0x0, 0x3, 0x0, 0x8000, 0x400}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb3000000000000000041901a8d235bd39675399e5719d27a532748"}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) [ 362.073714][ T40] audit: type=1400 audit(1594168670.707:50): avc: denied { write } for pid=16039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 362.095550][T16046] x_tables: duplicate underflow at hook 2 [ 362.116002][T16047] x_tables: duplicate underflow at hook 2 [ 362.130546][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 00:37:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x90, &(0x7f00000001c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca7712c225da4a455f4c9fd98a568097aa4acd6ecd74d473ff2bdb9693122311ae02ee3d3f8fbe0a10fff4bbaef7cd058ec3a54a90a11c890a73cef2d28533220798a410180000000000000c6fa36cea17bd8d700000000000000003f2623193c8ff31a4502a85559ca5fbc"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 362.144284][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.160229][T16017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.174735][T16017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.185438][T16017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.196977][T16017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.207736][T16017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.222615][T16017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.237341][T16017] batman_adv: batadv0: Interface activated: batadv_slave_1 00:37:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) [ 362.331383][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.342927][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:37:51 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mq_notify(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x0, 0x0}) socket$inet(0x2, 0xa, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 00:37:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) 00:37:51 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}}, 0xb8}}, 0x0) [ 362.499372][T16067] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 00:37:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:37:51 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0xb, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={[], [], @dev}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:37:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f613567b2bb59aa29580000001500ae47a825d86800278dcfd47d0100007a5acf99d907ae33a8e9", 0x3b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:37:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x68, 0x0, 0x1, 0xc05, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0) 00:37:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x80) 00:37:51 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0xb, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={[], [], @dev}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:37:51 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0xb, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={[], [], @dev}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:37:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x80) [ 362.869227][ T40] audit: type=1400 audit(1594168671.587:51): avc: denied { open } for pid=16075 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 362.910925][ T40] audit: type=1400 audit(1594168671.587:52): avc: denied { perfmon } for pid=16075 comm="syz-executor.2" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 362.943427][ T40] audit: type=1400 audit(1594168671.587:53): avc: denied { kernel } for pid=16075 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 362.971091][ T40] audit: type=1400 audit(1594168671.587:54): avc: denied { confidentiality } for pid=16075 comm="syz-executor.2" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 Resetting rate control (1774499 samples) 00:38:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f613567b2bb59aa29580000001500ae47a825d86800278dcfd47d0100007a5acf99d907ae33a8e9a579aed75d", 0x40}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 00:38:32 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 00:38:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x7, &(0x7f00000008c0)=[{&(0x7f00000003c0)="d9e9765196f17be3b646b0d80a26d1f6ba7b870ce6b858e7a4146a7d99e8c0332daa7cc1ab0731a05dff94a5fd84cd1a9994872423e8392c7a85beaf152f541d3cfabd8282a207809fcdd2e91397e50499f6d1c88c02e796a78db8", 0x5b, 0x1}, {&(0x7f0000000440)="982d1ef6bb739bf0dce6f601959a040687e7cdd1dbcd1ba85d01f8cb2aa313393002d61e5e22fa1fbecfd28f4b326860959b3647d0d5cdd121a9ca58131574d7ab4493f01860bfd420ad39f293e5894deecac3882027248da23c5ab41528f804383415c9722cc6831f9169b83fe25ceb89725f10be841f9c68c7a71b527345710c6bedce46049a5d567710db207c403ddc82e834db6c39c31323", 0x9a, 0x3}, {&(0x7f0000000500)="970a735bb16a5d71074af80c75978c8cbb845df70b3749fee8bb32a0c040e79edcc0b48fb5dd04cde38b2ba57e08ed6d7651a0e90047a9d2a53e67a5e623a7b59384499b2ee1da0dc77241527e8e6dac3afc012a5e2ce0fa4bb16a4f6e1f2b26c7de27d597b89f78813e76193865a3c833cb07bfc977420d8c25151a4b933e48ec14ff4508cf7cb03f00b4ece710f3f64f339389299de2eb46692a8bb44966624e69c5e0d019f3620410f04a7e2a3a3cbc971e2212a3fdd8ebdc2986d186714494b9e6adc12da84cc78f2555f458acf15f9e3dcf1f228c7c4e79", 0xda, 0x8}, {&(0x7f0000000600)="deb3e975a257ff89bc005c03d7039975cb0e6cda3523c28be2a7584df0461dcbf59b4ec9101c8f583ee766c48c9507caba20a951e279187bab3c7367fac5970303a1f709e0a08b808f15259dd92cb5b3a30f7b6a0e4d570b102eab50796e8b53ca1e68d2cc82bd1cdb", 0x69, 0xffff}, {&(0x7f0000000680)="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", 0xfa, 0x10000005}, {&(0x7f0000000780)="a295dfa5ecf334699f623e8feaa42cab4a7412184c8cd47d33b7f5c043a123831c2aa3c474371242a1f18883f8c110ecec7d7a06a93d107db1345158b71324feefc69bb12672b7d9545b95aee6b5707c0d9a9b569e06c1d360958f08717a1c994009f1bb7d6a2ebd4e", 0x69, 0x6}, {&(0x7f0000000840)="19caabf97fa2da5c23d9e15c0727fdac2a28c4796979204e41499e6a9080a2aba9c811ba2c4d400b173fdf4b88f612298742ad2604471452de73cac701d7ef1ca37ae90f6248", 0x46, 0x29}], 0x100874, &(0x7f0000000a00)=ANY=[@ANYBLOB='nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',tots,dots,check=relaxed,dots,nodots,audit,appraise_type=imasig,\x00']) 00:38:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x80) 00:38:32 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 00:38:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x80) [ 403.737895][T16115] 9pnet_virtio: no channels available for device 127.0.0.1 [ 403.786294][ C1] traps: PANIC: double fault, error_code: 0x0 [ 403.786294][ C1] double fault: 0000 [#1] PREEMPT SMP KASAN [ 403.786294][ C1] CPU: 1 PID: 16124 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 403.786294][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 403.786294][ C1] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 403.786294][ C1] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 403.786294][ C1] RSP: 0018:fffffe0000036fb8 EFLAGS: 00010086 [ 403.786294][ C1] RAX: fffffffffffffffe RBX: fffffe0000036fb8 RCX: ffffffff88000e87 [ 403.786294][ C1] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 403.786294][ C1] RBP: fffffe0000037120 R08: 0000000000000000 R09: 0000000000000000 [ 403.786294][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 403.786294][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.786294][ C1] FS: 00007f4896f12700(0000) GS:ffff88802cf00000(0000) knlGS:0000000000000000 [ 403.786294][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.786294][ C1] CR2: fffffe0000036fa8 CR3: 0000000078c5e000 CR4: 0000000000340ee0 [ 403.786294][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 403.786294][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 403.786294][ C1] Call Trace: [ 403.786294][ C1] [ 403.786294][ C1] error_entry+0xb8/0xc0 [ 403.786294][ C1] RIP: 0010:native_irq_return_iret+0x0/0x2 [ 403.786294][ C1] Code: 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 08 e9 10 00 00 00 90 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 f6 44 24 20 04 75 02 <48> cf 57 0f 01 f8 0f 1f 00 65 48 8b 3c 25 00 90 01 00 48 89 07 48 [ 403.786294][ C1] RSP: 0018:fffffe00000371d8 EFLAGS: 00010046 ORIG_RAX: 0000000000000000 [ 403.786294][ C1] RAX: fffffffffffffffe RBX: 0000000000000000 RCX: 0000000000000000 [ 403.786294][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 403.786294][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000400000003 [ 403.786294][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 403.786294][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.786294][ C1] ? asm_exc_general_protection+0x8/0x30 [ 403.786294][ C1] RIP: 0033:0x273c050000075366 [ 403.786294][ C1] Code: Bad RIP value. [ 403.786294][ C1] RSP: 002b:00007f4896f11c78 EFLAGS: 00000346 [ 403.786294][ C1] Modules linked in: [ 404.396440][ C1] ---[ end trace 8c25c968b98387a4 ]--- [ 404.396440][ C1] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 404.396440][ C1] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 404.396440][ C1] RSP: 0018:fffffe0000036fb8 EFLAGS: 00010086 [ 404.396440][ C1] RAX: fffffffffffffffe RBX: fffffe0000036fb8 RCX: ffffffff88000e87 [ 404.396440][ C1] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 404.396440][ C1] RBP: fffffe0000037120 R08: 0000000000000000 R09: 0000000000000000 [ 404.396440][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 404.396440][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 404.396440][ C1] FS: 00007f4896f12700(0000) GS:ffff88802cf00000(0000) knlGS:0000000000000000 [ 404.396440][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.396440][ C1] CR2: fffffe0000036fa8 CR3: 0000000078c5e000 CR4: 0000000000340ee0 [ 404.396440][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.396440][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.396440][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 404.396440][ C1] Kernel Offset: disabled