Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.228162] audit: type=1800 audit(1571058028.441:33): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 40.249607] audit: type=1800 audit(1571058028.451:34): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.353853] audit: type=1400 audit(1571058033.571:35): avc: denied { map } for pid=7565 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. 2019/10/14 13:00:40 fuzzer started [ 51.872809] audit: type=1400 audit(1571058040.091:36): avc: denied { map } for pid=7574 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/10/14 13:00:41 dialing manager at 10.128.0.105:39221 2019/10/14 13:00:42 syscalls: 2516 2019/10/14 13:00:42 code coverage: enabled 2019/10/14 13:00:42 comparison tracing: enabled 2019/10/14 13:00:42 extra coverage: extra coverage is not supported by the kernel 2019/10/14 13:00:42 setuid sandbox: enabled 2019/10/14 13:00:42 namespace sandbox: enabled 2019/10/14 13:00:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/14 13:00:42 fault injection: enabled 2019/10/14 13:00:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/14 13:00:42 net packet injection: enabled 2019/10/14 13:00:42 net device setup: enabled 2019/10/14 13:00:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 13:02:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='/\x02ro\x05\x00\x00\x00tap\x00\x89PY7/\x91\x99\xaaS\xf0\xbb\\\xf7\xb6L\xb73ke\x02d\xb1\xf1\xf8\x1d\xb6,\xc99\x96h\xf3\x01\xb3f\x8a\xd0+G\xddC\x9d\xcfE?\x1b\xce\xff;OZ\'E\xf5', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='(\xdbsystem<{self$&user\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x28, &(0x7f0000000040)}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 153.171180] audit: type=1400 audit(1571058141.381:37): avc: denied { map } for pid=7592 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=66 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 153.294823] IPVS: ftp: loaded support on port[0] = 21 13:02:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='(\xdbsystem<{self$&user\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x63, 0x400000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40010) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000600)) [ 153.418432] chnl_net:caif_netlink_parms(): no params data found [ 153.508257] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.515494] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.524259] device bridge_slave_0 entered promiscuous mode [ 153.538746] IPVS: ftp: loaded support on port[0] = 21 [ 153.546071] bridge0: port 2(bridge_slave_1) entered blocking state 13:02:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf01, 0x0, 0x0, {0x0, r1, {0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 153.556597] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.565249] device bridge_slave_1 entered promiscuous mode [ 153.645272] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.669052] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:02:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 153.759884] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.769125] team0: Port device team_slave_0 added [ 153.780864] IPVS: ftp: loaded support on port[0] = 21 [ 153.799799] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.811680] team0: Port device team_slave_1 added [ 153.825821] chnl_net:caif_netlink_parms(): no params data found [ 153.843960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.862958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 13:02:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000001e000507ed0080648c6394f21131d200100006402c00000001000080000000011400f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 153.984325] device hsr_slave_0 entered promiscuous mode [ 154.022389] device hsr_slave_1 entered promiscuous mode [ 154.082997] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.090038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.129892] IPVS: ftp: loaded support on port[0] = 21 [ 154.146629] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.158795] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.172993] device bridge_slave_0 entered promiscuous mode 13:02:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x0) [ 154.210640] IPVS: ftp: loaded support on port[0] = 21 [ 154.217528] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.225024] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.237413] device bridge_slave_1 entered promiscuous mode [ 154.299103] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.305638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.313476] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.319847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.349376] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.372136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.372410] IPVS: ftp: loaded support on port[0] = 21 [ 154.386142] chnl_net:caif_netlink_parms(): no params data found [ 154.447590] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.456028] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.488912] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.497005] team0: Port device team_slave_0 added [ 154.503072] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.510843] team0: Port device team_slave_1 added [ 154.518470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.526257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.592961] device hsr_slave_0 entered promiscuous mode [ 154.631693] device hsr_slave_1 entered promiscuous mode [ 154.710591] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.718438] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.728978] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.736012] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.743174] device bridge_slave_0 entered promiscuous mode [ 154.751819] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.758166] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.765226] device bridge_slave_1 entered promiscuous mode [ 154.788118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.797363] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.839589] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.858406] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.875538] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.893350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.901522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.924896] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 154.930982] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.937348] chnl_net:caif_netlink_parms(): no params data found [ 154.960694] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.983638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.990883] team0: Port device team_slave_0 added [ 155.005722] chnl_net:caif_netlink_parms(): no params data found [ 155.017464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.024750] chnl_net:caif_netlink_parms(): no params data found [ 155.037602] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.045371] team0: Port device team_slave_1 added [ 155.055967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.064525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.083360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.091463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.099227] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.105739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.117393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.148960] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.156084] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.163854] device bridge_slave_0 entered promiscuous mode [ 155.170173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.178361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.186151] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.192531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.208920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.229862] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.236760] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.243835] device bridge_slave_1 entered promiscuous mode [ 155.250179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.269355] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.275897] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.283687] device bridge_slave_0 entered promiscuous mode [ 155.290185] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.296748] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.306746] device bridge_slave_0 entered promiscuous mode [ 155.313653] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.319991] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.327219] device bridge_slave_1 entered promiscuous mode [ 155.373023] device hsr_slave_0 entered promiscuous mode [ 155.411486] device hsr_slave_1 entered promiscuous mode [ 155.480561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.490316] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.496865] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.504268] device bridge_slave_1 entered promiscuous mode [ 155.523344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.532062] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.540042] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.558019] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.567354] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.576237] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.584106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.595476] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.614488] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.623865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.635603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.643670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.659678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 155.690261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.697400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.705878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.714579] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.728857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 155.736202] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.744690] team0: Port device team_slave_0 added [ 155.749969] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.757711] team0: Port device team_slave_0 added [ 155.763105] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.770326] team0: Port device team_slave_0 added [ 155.777006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.785176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.798670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.806297] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.813766] team0: Port device team_slave_1 added [ 155.818979] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.826891] team0: Port device team_slave_1 added [ 155.832269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.839572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.847441] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.854744] team0: Port device team_slave_1 added [ 155.860680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.870505] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.877509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.894374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.902843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 155.921403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.938289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.947908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.957102] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.004248] device hsr_slave_0 entered promiscuous mode [ 156.041405] device hsr_slave_1 entered promiscuous mode [ 156.094939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.156760] device hsr_slave_0 entered promiscuous mode [ 156.201580] device hsr_slave_1 entered promiscuous mode [ 156.242007] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.249615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.256592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.265507] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.272046] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.283470] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.298237] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.304496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.311983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.364332] device hsr_slave_0 entered promiscuous mode [ 156.391453] device hsr_slave_1 entered promiscuous mode [ 156.442090] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.449333] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.468521] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 156.480173] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.489714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.506573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.514878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.522613] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.528984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.536594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.547096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.562112] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.569844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.578388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.587225] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.593638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.603225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.614408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.623268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.632910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.645016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.653317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.670218] audit: type=1400 audit(1571058144.881:38): avc: denied { associate } for pid=7593 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 156.697458] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.710503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.720372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.731648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.739529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.755162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.765920] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.796653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.804289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.820290] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.826948] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.840215] hrtimer: interrupt took 36800 ns [ 156.840885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.878733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.892196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.909542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.918735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.926065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.934090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.959743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.969081] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 13:02:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='/\x02ro\x05\x00\x00\x00tap\x00\x89PY7/\x91\x99\xaaS\xf0\xbb\\\xf7\xb6L\xb73ke\x02d\xb1\xf1\xf8\x1d\xb6,\xc99\x96h\xf3\x01\xb3f\x8a\xd0+G\xddC\x9d\xcfE?\x1b\xce\xff;OZ\'E\xf5', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='(\xdbsystem<{self$&user\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x28, &(0x7f0000000040)}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 156.978872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.989555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.999663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.013413] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.019785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.035244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.051360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.063517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.084463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.101139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.111940] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.118581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.127037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.135506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.143866] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.150235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.160732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.172163] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.179052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 13:02:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='/\x02ro\x05\x00\x00\x00tap\x00\x89PY7/\x91\x99\xaaS\xf0\xbb\\\xf7\xb6L\xb73ke\x02d\xb1\xf1\xf8\x1d\xb6,\xc99\x96h\xf3\x01\xb3f\x8a\xd0+G\xddC\x9d\xcfE?\x1b\xce\xff;OZ\'E\xf5', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='(\xdbsystem<{self$&user\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x28, &(0x7f0000000040)}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 157.191605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.211897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.235300] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.253323] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.259429] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.277287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.285831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.293491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.300604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.308796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.326138] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.332982] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.340509] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 13:02:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x3, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 157.350230] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.365841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.375375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.393462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.402222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.409276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.417623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.425431] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.431930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.439237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.447508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.455329] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.461738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.469360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.476735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.487253] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.493875] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.502240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.510633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.522515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.529971] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.538931] kasan: CONFIG_KASAN_INLINE enabled [ 157.544447] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 157.553078] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 157.559413] CPU: 1 PID: 7628 Comm: syz-executor.0 Not tainted 4.19.79 #0 [ 157.566237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.575615] RIP: 0010:hrtimer_active+0x11e/0x230 [ 157.580361] Code: 48 39 c3 0f 84 d3 00 00 00 e8 ce 1f 0f 00 48 8b 45 c8 80 38 00 0f 85 06 01 00 00 49 8b 5d 30 4c 8d 63 10 4c 89 e0 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 157.599248] RSP: 0018:ffff88805e81f350 EFLAGS: 00010202 [ 157.604597] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc90005e77000 [ 157.612462] RDX: 0000000000010691 RSI: ffffffff815c5ab2 RDI: ffff8880935fd500 [ 157.619733] RBP: ffff88805e81f3a8 R08: ffff88805e8122c0 R09: 0000000000000000 [ 157.627004] R10: ffffed10126bfa54 R11: ffff8880935fd2a7 R12: 0000000000000010 [ 157.634261] R13: ffff8880935fd500 R14: ffff88808a2504c0 R15: dffffc0000000000 [ 157.641527] FS: 00007f0ec4563700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 157.649754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.655620] CR2: 00007fba30d76000 CR3: 0000000093444000 CR4: 00000000001406e0 [ 157.662904] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.670167] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.677508] Call Trace: [ 157.680089] hrtimer_try_to_cancel+0x74/0x5b0 [ 157.684575] ? hrtimer_run_softirq+0x270/0x270 [ 157.689159] ? __lock_is_held+0xb6/0x140 [ 157.693208] hrtimer_cancel+0x20/0x40 [ 157.697004] qdisc_watchdog_cancel+0x16/0x20 [ 157.701407] cbs_destroy+0x5e/0xd0 [ 157.704940] ? cbs_dequeue_soft+0x400/0x400 [ 157.709260] qdisc_create+0xaa6/0x1230 [ 157.713148] ? tc_get_qdisc+0xbb0/0xbb0 [ 157.717108] ? nla_parse+0x1fc/0x2f0 [ 157.720814] tc_modify_qdisc+0x51b/0x1bdc [ 157.724948] ? qdisc_create+0x1230/0x1230 [ 157.729086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.734606] ? qdisc_create+0x1230/0x1230 [ 157.738739] rtnetlink_rcv_msg+0x463/0xb00 [ 157.742961] ? rtnetlink_put_metrics+0x560/0x560 [ 157.747713] ? netdev_pick_tx+0x300/0x300 [ 157.751855] ? netlink_deliver_tap+0x22d/0xc20 [ 157.756443] ? find_held_lock+0x35/0x130 [ 157.760490] netlink_rcv_skb+0x17d/0x460 [ 157.764551] ? rtnetlink_put_metrics+0x560/0x560 [ 157.769289] ? netlink_ack+0xb30/0xb30 [ 157.773163] ? kasan_check_read+0x11/0x20 [ 157.777293] ? netlink_deliver_tap+0x254/0xc20 [ 157.781875] rtnetlink_rcv+0x1d/0x30 [ 157.785597] netlink_unicast+0x537/0x720 [ 157.789658] ? netlink_attachskb+0x770/0x770 [ 157.794064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.799585] netlink_sendmsg+0x8ae/0xd70 [ 157.803632] ? netlink_unicast+0x720/0x720 [ 157.807857] ? selinux_socket_sendmsg+0x36/0x40 [ 157.812523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.818069] ? security_socket_sendmsg+0x8d/0xc0 [ 157.822881] ? netlink_unicast+0x720/0x720 [ 157.827103] sock_sendmsg+0xd7/0x130 [ 157.830825] ___sys_sendmsg+0x803/0x920 [ 157.835585] ? copy_msghdr_from_user+0x430/0x430 [ 157.840336] ? lock_downgrade+0x880/0x880 [ 157.844474] ? kasan_check_read+0x11/0x20 [ 157.848607] ? __fget+0x367/0x540 [ 157.852481] ? iterate_fd+0x360/0x360 [ 157.856268] ? lock_downgrade+0x880/0x880 [ 157.860766] ? __fget_light+0x1a9/0x230 [ 157.864732] ? __fdget+0x1b/0x20 [ 157.868083] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.873613] __sys_sendmsg+0x105/0x1d0 [ 157.877506] ? __ia32_sys_shutdown+0x80/0x80 [ 157.881917] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 157.886671] ? do_syscall_64+0x26/0x620 [ 157.890630] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.896000] ? do_syscall_64+0x26/0x620 [ 157.899978] __x64_sys_sendmsg+0x78/0xb0 [ 157.904096] do_syscall_64+0xfd/0x620 [ 157.907921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.913104] RIP: 0033:0x459a59 [ 157.916292] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 157.935190] RSP: 002b:00007f0ec4562c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.942891] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 157.950153] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 157.958970] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 157.966233] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0ec45636d4 [ 157.973510] R13: 00000000004c7be8 R14: 00000000004dd980 R15: 00000000ffffffff [ 157.980768] Modules linked in: [ 157.985506] ---[ end trace 2cf43f787eb636f2 ]--- [ 157.990293] RIP: 0010:hrtimer_active+0x11e/0x230 [ 157.995139] Code: 48 39 c3 0f 84 d3 00 00 00 e8 ce 1f 0f 00 48 8b 45 c8 80 38 00 0f 85 06 01 00 00 49 8b 5d 30 4c 8d 63 10 4c 89 e0 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 158.014303] RSP: 0018:ffff88805e81f350 EFLAGS: 00010202 [ 158.019669] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc90005e77000 [ 158.027458] RDX: 0000000000010691 RSI: ffffffff815c5ab2 RDI: ffff8880935fd500 [ 158.034790] RBP: ffff88805e81f3a8 R08: ffff88805e8122c0 R09: 0000000000000000 [ 158.042117] R10: ffffed10126bfa54 R11: ffff8880935fd2a7 R12: 0000000000000010 [ 158.049388] R13: ffff8880935fd500 R14: ffff88808a2504c0 R15: dffffc0000000000 [ 158.056746] FS: 00007f0ec4563700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 158.065008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.071060] CR2: 00007fba30d76000 CR3: 0000000093444000 CR4: 00000000001406e0 [ 158.078332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.085907] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.093260] Kernel panic - not syncing: Fatal exception [ 158.100083] Kernel Offset: disabled [ 158.103730] Rebooting in 86400 seconds..