Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:3118' (ECDSA) to the list of known hosts. syzkaller login: [ 63.483354][ T38] audit: type=1400 audit(1575022229.494:42): avc: denied { map } for pid=7978 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/29 10:10:29 fuzzer started 2019/11/29 10:10:31 dialing manager at 10.0.2.10:46599 2019/11/29 10:10:31 syscalls: 2543 2019/11/29 10:10:31 code coverage: enabled 2019/11/29 10:10:31 comparison tracing: enabled 2019/11/29 10:10:31 extra coverage: extra coverage is not supported by the kernel 2019/11/29 10:10:31 setuid sandbox: enabled 2019/11/29 10:10:31 namespace sandbox: enabled 2019/11/29 10:10:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 10:10:31 fault injection: enabled 2019/11/29 10:10:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 10:10:31 net packet injection: enabled 2019/11/29 10:10:31 net device setup: enabled 2019/11/29 10:10:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/29 10:10:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:10:45 executing program 0: r0 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semop(r0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) [ 79.812782][ T38] audit: type=1400 audit(1575022245.824:43): avc: denied { map } for pid=8002 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=2052 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 10:10:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x0, 0x3, 0x5}}, 0x14) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000680)="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") creat(0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r1, 0x9) sendmsg$NET_DM_CMD_START(r0, 0x0, 0x20020086) [ 79.975712][ T8003] IPVS: ftp: loaded support on port[0] = 21 [ 79.983860][ T8005] IPVS: ftp: loaded support on port[0] = 21 10:10:46 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) [ 80.106942][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 80.140097][ T8005] chnl_net:caif_netlink_parms(): no params data found [ 80.140153][ T8009] IPVS: ftp: loaded support on port[0] = 21 10:10:46 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") accept4(r0, 0x0, 0x0, 0x0) [ 80.183549][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.191709][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.203022][ T8003] device bridge_slave_0 entered promiscuous mode [ 80.213351][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.221318][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.229403][ T8003] device bridge_slave_1 entered promiscuous mode [ 80.253679][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.262875][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.272751][ T8005] device bridge_slave_0 entered promiscuous mode [ 80.286280][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.295454][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.304176][ T8005] device bridge_slave_1 entered promiscuous mode 10:10:46 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) [ 80.336713][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.369932][ T8005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.379329][ T8011] IPVS: ftp: loaded support on port[0] = 21 [ 80.387762][ T8005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.408399][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.427122][ T8005] team0: Port device team_slave_0 added [ 80.435317][ T8005] team0: Port device team_slave_1 added 10:10:46 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000700)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) [ 80.523206][ T8005] device hsr_slave_0 entered promiscuous mode [ 80.580854][ T8005] device hsr_slave_1 entered promiscuous mode [ 80.686862][ T8014] IPVS: ftp: loaded support on port[0] = 21 [ 80.694410][ T8003] team0: Port device team_slave_0 added [ 80.703751][ T8017] IPVS: ftp: loaded support on port[0] = 21 [ 80.722859][ T8003] team0: Port device team_slave_1 added [ 80.812732][ T8003] device hsr_slave_0 entered promiscuous mode [ 80.851629][ T8003] device hsr_slave_1 entered promiscuous mode [ 80.890664][ T8003] debugfs: Directory 'hsr0' with parent '/' already present! [ 80.931609][ T8009] chnl_net:caif_netlink_parms(): no params data found [ 80.960313][ T38] audit: type=1400 audit(1575022246.964:44): avc: denied { create } for pid=8003 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 80.985307][ T38] audit: type=1400 audit(1575022246.964:45): avc: denied { write } for pid=8003 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 81.018122][ T8005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.026132][ T38] audit: type=1400 audit(1575022246.974:46): avc: denied { read } for pid=8003 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 81.124150][ T8005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.212760][ T8005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.252566][ T8003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.295667][ T8003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.408006][ T8005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.536591][ T8003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.636837][ T8003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.782570][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.790090][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.798228][ T8009] device bridge_slave_0 entered promiscuous mode [ 81.807493][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.815682][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.824549][ T8009] device bridge_slave_1 entered promiscuous mode [ 81.852449][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.866519][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 81.883561][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.916004][ T8009] team0: Port device team_slave_0 added [ 81.954890][ T8009] team0: Port device team_slave_1 added [ 81.984361][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.992527][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.001001][ T8011] device bridge_slave_0 entered promiscuous mode [ 82.009284][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.017301][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.025530][ T8011] device bridge_slave_1 entered promiscuous mode [ 82.036080][ T8017] chnl_net:caif_netlink_parms(): no params data found [ 82.085121][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.094283][ T8014] chnl_net:caif_netlink_parms(): no params data found [ 82.103408][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.162596][ T8009] device hsr_slave_0 entered promiscuous mode [ 82.230996][ T8009] device hsr_slave_1 entered promiscuous mode [ 82.290903][ T8009] debugfs: Directory 'hsr0' with parent '/' already present! [ 82.318178][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.325421][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.333771][ T8017] device bridge_slave_0 entered promiscuous mode [ 82.343317][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.350395][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.358230][ T8017] device bridge_slave_1 entered promiscuous mode [ 82.370233][ T8011] team0: Port device team_slave_0 added [ 82.377474][ T8011] team0: Port device team_slave_1 added [ 82.414462][ T8017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.426800][ T8017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.468373][ T8009] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.532501][ T8009] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.572161][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.579051][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.586497][ T8014] device bridge_slave_0 entered promiscuous mode [ 82.594568][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.601550][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.608707][ T8014] device bridge_slave_1 entered promiscuous mode [ 82.617028][ T8017] team0: Port device team_slave_0 added [ 82.682473][ T8011] device hsr_slave_0 entered promiscuous mode [ 82.790942][ T8011] device hsr_slave_1 entered promiscuous mode [ 82.840815][ T8011] debugfs: Directory 'hsr0' with parent '/' already present! [ 82.848833][ T8009] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.952522][ T8009] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.023796][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.035271][ T8017] team0: Port device team_slave_1 added [ 83.063943][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.102850][ T8017] device hsr_slave_0 entered promiscuous mode [ 83.162452][ T8017] device hsr_slave_1 entered promiscuous mode [ 83.210831][ T8017] debugfs: Directory 'hsr0' with parent '/' already present! [ 83.225125][ T8011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.283590][ T8011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.339312][ T8011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.428708][ T8014] team0: Port device team_slave_0 added [ 83.436512][ T8011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.505484][ T8014] team0: Port device team_slave_1 added [ 83.592313][ T8014] device hsr_slave_0 entered promiscuous mode [ 83.672472][ T8014] device hsr_slave_1 entered promiscuous mode [ 83.720741][ T8014] debugfs: Directory 'hsr0' with parent '/' already present! [ 83.733434][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.742187][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.767969][ T8017] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.833236][ T8017] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.889355][ T8017] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.973637][ T8017] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.082904][ T8005] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.089867][ T8014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.134634][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.142553][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.156386][ T8014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.228364][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.235593][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.243151][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.251602][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.259844][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.266895][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.274800][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.286797][ T8014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.332177][ T8014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.383767][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.407006][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.420316][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.431704][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.442739][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.451695][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.462047][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.473432][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.484076][ T2782] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.493231][ T2782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.503891][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.537627][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.547549][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.557021][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.564610][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.572566][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.581901][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.590780][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.599626][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.607532][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.623368][ T8009] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.634173][ T8016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.642902][ T8016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.652645][ T8016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.664967][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.673114][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.692343][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.701786][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.712067][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.719905][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.729080][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.738729][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.747855][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.758552][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.767871][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.775594][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.783487][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.795103][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.811191][ T8005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.822288][ T8005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.854191][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.864342][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.873025][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.882506][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.891810][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.900835][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.909601][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.918674][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.926881][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.935532][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.944287][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.952855][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.961582][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.970784][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.979511][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.987062][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.995164][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.003248][ T8027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.016550][ T8005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.034064][ T8009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.045155][ T8009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.056692][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.065619][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.074166][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.081892][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.089416][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.100168][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.108319][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.116848][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.131029][ T38] audit: type=1400 audit(1575022251.134:47): avc: denied { associate } for pid=8005 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 85.146777][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.164179][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.181394][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.189013][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.198240][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.206939][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.214165][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.222462][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.231375][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.239580][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.246548][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.254081][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.262525][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.270940][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.279199][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.287513][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.295296][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.316085][ T8003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.327277][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.342470][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.359866][ T38] audit: type=1400 audit(1575022251.364:48): avc: denied { open } for pid=8030 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 85.370771][ T8014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.399568][ T8014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.441758][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.450055][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.458535][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.466629][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.474478][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.483427][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.492250][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.499455][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.507500][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.516089][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.524738][ T2782] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.532312][ T2782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.540201][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.550063][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.559333][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.568217][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.577109][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.586137][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.590526][ C2] hrtimer: interrupt took 18826 ns [ 85.594425][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.607843][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.616640][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.625570][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.634275][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.642912][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.651497][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.663943][ T8017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.679462][ T8011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.691767][ T8011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.708077][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.130474][ C3] rcu: INFO: rcu_preempt self-detected stall on CPU [ 198.130725][ C3] rcu: 3-....: (1 GPs behind) idle=4ae/1/0x4000000000000004 softirq=7764/8138 fqs=5124 [ 198.130725][ C3] (t=10500 jiffies g=5505 q=1410) [ 198.130725][ C3] NMI backtrace for cpu 3 [ 198.130725][ C3] CPU: 3 PID: 8032 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 198.159976][ C3] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 198.159976][ C3] Call Trace: [ 198.159976][ C3] [ 198.159976][ C3] dump_stack+0x197/0x210 [ 198.159976][ C3] nmi_cpu_backtrace.cold+0x70/0xb2 [ 198.159976][ C3] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 198.159976][ C3] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 198.159976][ C3] arch_trigger_cpumask_backtrace+0x14/0x20 [ 198.159976][ C3] rcu_dump_cpu_stacks+0x183/0x1cf [ 198.159976][ C3] ? find_next_bit+0x107/0x130 [ 198.159976][ C3] rcu_sched_clock_irq.cold+0x509/0xc02 [ 198.159976][ C3] ? raise_softirq+0x138/0x340 [ 198.159976][ C3] update_process_times+0x2d/0x70 [ 198.159976][ C3] tick_sched_handle+0xa2/0x190 [ 198.159976][ C3] tick_sched_timer+0x53/0x140 [ 198.159976][ C3] __hrtimer_run_queues+0x364/0xe40 [ 198.159976][ C3] ? tick_sched_do_timer+0x1b0/0x1b0 [ 198.159976][ C3] ? hrtimer_init+0x330/0x330 [ 198.159976][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 198.159976][ C3] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 198.159976][ C3] hrtimer_interrupt+0x314/0x770 [ 198.159976][ C3] smp_apic_timer_interrupt+0x160/0x610 [ 198.159976][ C3] apic_timer_interrupt+0xf/0x20 [ 198.159976][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 198.159976][ C3] Code: c0 68 34 13 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 6a 96 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 ab d3 f9 65 8b 05 18 54 85 78 85 c0 74 06 41 [ 198.159976][ C3] RSP: 0018:ffff88807ed09dd0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 198.159976][ C3] RAX: 1ffffffff122668d RBX: ffffffff86729420 RCX: 0000000000000002 [ 198.159976][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff88806950ca14 [ 198.159976][ C3] RBP: ffff88807ed09dd8 R08: 1ffffffff15377bb R09: fffffbfff15377bc [ 198.159976][ C3] R10: fffffbfff15377bb R11: ffffffff8a9bbddf R12: ffff88807ed27240 [ 198.159976][ C3] R13: ffff88802b39c2f0 R14: ffff88807ed27240 R15: dffffc0000000000 [ 198.159976][ C3] ? apic_timer_interrupt+0xa/0x20 [ 198.159976][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 198.159976][ C3] run_timer_softirq+0x6b1/0x1790 [ 198.159976][ C3] ? add_timer+0x930/0x930 [ 198.159976][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 198.159976][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 198.159976][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 198.159976][ C3] __do_softirq+0x262/0x98c [ 198.159976][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 198.159976][ C3] irq_exit+0x19b/0x1e0 [ 198.159976][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 198.159976][ C3] apic_timer_interrupt+0xf/0x20 [ 198.159976][ C3] [ 198.159976][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 198.159976][ C3] Code: c0 68 34 13 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 6a 96 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 ab d3 f9 65 8b 05 18 54 85 78 85 c0 74 06 41 [ 198.159976][ C3] RSP: 0018:ffff8880629878d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 198.159976][ C3] RAX: 1ffffffff122668d RBX: ffff88806950c180 RCX: 0000000000000006 [ 198.159976][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff88806950ca14 [ 198.159976][ C3] RBP: ffff8880629878e0 R08: 1ffffffff15377bb R09: fffffbfff15377bc [ 198.159976][ C3] R10: fffffbfff15377bb R11: ffffffff8a9bbddf R12: ffff88807ed37380 [ 198.159976][ C3] R13: ffff88802c8402c0 R14: ffff888079bbd3c0 R15: 0000000000000402 [ 198.159976][ C3] ? _raw_spin_unlock_irq+0x23/0x80 [ 198.159976][ C3] finish_task_switch+0x147/0x750 [ 198.159976][ C3] ? finish_task_switch+0x119/0x750 [ 198.159976][ C3] __schedule+0x8e9/0x1f30 [ 198.159976][ C3] ? __sched_text_start+0x8/0x8 [ 198.159976][ C3] ? __this_cpu_preempt_check+0x35/0x190 [ 198.159976][ C3] ? retint_kernel+0x2b/0x2b [ 198.159976][ C3] ? perf_duration_warn+0x40/0x40 [ 198.159976][ C3] ? preempt_schedule+0x4b/0x60 [ 198.159976][ C3] preempt_schedule_common+0x4f/0xe0 [ 198.159976][ C3] ? __perf_event_enable+0x930/0x930 [ 198.159976][ C3] preempt_schedule+0x4b/0x60 [ 198.159976][ C3] ___preempt_schedule+0x16/0x18 [ 198.159976][ C3] ? smp_call_function_single+0x40b/0x480 [ 198.159976][ C3] smp_call_function_single+0x410/0x480 [ 198.159976][ C3] ? perf_duration_warn+0x40/0x40 [ 198.159976][ C3] ? generic_exec_single+0x4c0/0x4c0 [ 198.159976][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 198.159976][ C3] ? __perf_event_enable+0x930/0x930 [ 198.159976][ C3] task_function_call+0xe9/0x180 [ 198.159976][ C3] ? perf_event_addr_filters_exec+0x310/0x310 [ 198.159976][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 198.159976][ C3] ? __perf_event_enable+0x930/0x930 [ 198.159976][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.159976][ C3] ? exclusive_event_installable+0x257/0x320 [ 198.159976][ C3] perf_install_in_context+0x308/0x5a0 [ 198.159976][ C3] ? list_add_event+0xed0/0xed0 [ 198.159976][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 198.159976][ C3] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 198.159976][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 198.159976][ C3] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 198.159976][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 198.159976][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 198.159976][ C3] ? put_timespec64+0xda/0x140 [ 198.159976][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 198.159976][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 198.159976][ C3] ? do_syscall_64+0x26/0x790 [ 198.159976][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 198.159976][ C3] ? do_syscall_64+0x26/0x790 [ 198.159976][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 198.159976][ C3] do_syscall_64+0xfa/0x790 [ 198.159976][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 198.159976][ C3] RIP: 0033:0x45a759 [ 198.159976][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.159976][ C3] RSP: 002b:00007fe11ecb4c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 198.159976][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 198.159976][ C3] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 [ 198.159976][ C3] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 198.159976][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fe11ecb56d4 [ 198.159976][ C3] R13: 00000000004aec17 R14: 00000000006f1cb0 R15: 00000000ffffffff