syzkaller login: [ 60.609253][ T38] audit: type=1400 audit(1575022829.715:41): avc: denied { map } for pid=7787 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:62398' (ECDSA) to the list of known hosts. 2019/11/29 10:20:40 fuzzer started [ 71.574433][ T38] audit: type=1400 audit(1575022840.675:42): avc: denied { map } for pid=7804 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/29 10:20:44 dialing manager at 10.0.2.10:46599 2019/11/29 10:20:44 syscalls: 2543 2019/11/29 10:20:44 code coverage: enabled 2019/11/29 10:20:44 comparison tracing: enabled 2019/11/29 10:20:44 extra coverage: extra coverage is not supported by the kernel 2019/11/29 10:20:44 setuid sandbox: enabled 2019/11/29 10:20:44 namespace sandbox: enabled 2019/11/29 10:20:44 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 10:20:44 fault injection: enabled 2019/11/29 10:20:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 10:20:44 net packet injection: enabled 2019/11/29 10:20:44 net device setup: enabled 2019/11/29 10:20:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/29 10:20:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:20:57 executing program 0: [ 88.120928][ T38] audit: type=1400 audit(1575022857.225:43): avc: denied { map } for pid=7825 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=17654 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 10:20:57 executing program 1: [ 88.252300][ T7826] IPVS: ftp: loaded support on port[0] = 21 [ 88.324705][ T7826] chnl_net:caif_netlink_parms(): no params data found [ 88.343800][ T7829] IPVS: ftp: loaded support on port[0] = 21 [ 88.364803][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state 10:20:57 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xd, @raw_data="a6ccd2ba38e01e5c17fcde4f27c65bc3340fab5dbb82e2bcfc8d06105d56f5771b31dab837287caf6311ddf1c035fd8579eff51c0d29439ae79573ae607143e005358291f8f4f0963d417b620c0cf6dfc02e74be854490d638a83ea60f20cf869fe6d05e0b2d07adff86b35a133ce91ca3623768e9d492cf8125f9f187245d53ecfc56072980fe31491b43de4b67f1a1f945ad0ddc1e006bfe206840c3a384f217de074089c4a22a808edd40d610a46a6cc4ad800078aff86b9b7256ce7b6eda9ad410fee49aa87f"}) [ 88.372283][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.381136][ T7826] device bridge_slave_0 entered promiscuous mode [ 88.391368][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.400632][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.409511][ T7826] device bridge_slave_1 entered promiscuous mode [ 88.436478][ T7826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.452604][ T7826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.479259][ T7826] team0: Port device team_slave_0 added [ 88.489432][ T7826] team0: Port device team_slave_1 added 10:20:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) request_key(0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xfffffffffffffff8) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000a, &(0x7f00000000c0)="038cf8c0", 0x4) [ 88.510072][ T7832] IPVS: ftp: loaded support on port[0] = 21 [ 88.558746][ T7826] device hsr_slave_0 entered promiscuous mode [ 88.646907][ T7826] device hsr_slave_1 entered promiscuous mode 10:20:57 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000001900)=0x3f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100091d3, 0x2, @perf_config_ext={0xa23e, 0x9}, 0x200020000, 0x2, 0x0, 0x0, 0xffffffffffffff95}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 88.744772][ T7836] IPVS: ftp: loaded support on port[0] = 21 [ 88.745415][ T7834] IPVS: ftp: loaded support on port[0] = 21 10:20:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/52, 0x34}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x186) [ 88.808980][ T38] audit: type=1400 audit(1575022857.915:44): avc: denied { create } for pid=7826 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 88.839350][ T38] audit: type=1400 audit(1575022857.935:45): avc: denied { write } for pid=7826 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 88.867779][ T38] audit: type=1400 audit(1575022857.935:46): avc: denied { read } for pid=7826 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 88.904562][ T7826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.967521][ T7826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.046240][ T7839] IPVS: ftp: loaded support on port[0] = 21 [ 89.068617][ T7826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.160475][ T7826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.290447][ T7829] chnl_net:caif_netlink_parms(): no params data found [ 89.332577][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.340482][ T7826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.348108][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.355315][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.370648][ T2781] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.379472][ T2781] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.394346][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.402529][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.410405][ T7829] device bridge_slave_0 entered promiscuous mode [ 89.419881][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.427551][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.435078][ T7829] device bridge_slave_1 entered promiscuous mode [ 89.447829][ T7832] chnl_net:caif_netlink_parms(): no params data found [ 89.462099][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.472778][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.500024][ T7829] team0: Port device team_slave_0 added [ 89.512018][ T7829] team0: Port device team_slave_1 added [ 89.627597][ T7829] device hsr_slave_0 entered promiscuous mode [ 89.706133][ T7829] device hsr_slave_1 entered promiscuous mode [ 89.756221][ T7829] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.791468][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.798954][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.806782][ T7832] device bridge_slave_0 entered promiscuous mode [ 89.815417][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.822279][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.829532][ T7832] device bridge_slave_1 entered promiscuous mode [ 89.852320][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 89.873247][ T7834] chnl_net:caif_netlink_parms(): no params data found [ 89.887518][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.902980][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.964791][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.972903][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.981406][ T7834] device bridge_slave_0 entered promiscuous mode [ 89.993645][ T7829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.057290][ T7829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.127225][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.135003][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.143393][ T7834] device bridge_slave_1 entered promiscuous mode [ 90.151629][ T7832] team0: Port device team_slave_0 added [ 90.159607][ T7832] team0: Port device team_slave_1 added [ 90.166316][ T7829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.217430][ T7829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.267148][ T7839] chnl_net:caif_netlink_parms(): no params data found [ 90.276422][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.283233][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.291048][ T7836] device bridge_slave_0 entered promiscuous mode [ 90.298505][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.305257][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.312592][ T7836] device bridge_slave_1 entered promiscuous mode [ 90.355050][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.480353][ T7832] device hsr_slave_0 entered promiscuous mode [ 90.536340][ T7832] device hsr_slave_1 entered promiscuous mode [ 90.606069][ T7832] debugfs: Directory 'hsr0' with parent '/' already present! [ 90.615729][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.626100][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.636585][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.659928][ T7839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.667567][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.675897][ T7839] device bridge_slave_0 entered promiscuous mode [ 90.710652][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.718040][ T7839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.725055][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.733034][ T7839] device bridge_slave_1 entered promiscuous mode [ 90.742268][ T7836] team0: Port device team_slave_0 added [ 90.749927][ T7834] team0: Port device team_slave_0 added [ 90.758173][ T7834] team0: Port device team_slave_1 added [ 90.773066][ T7836] team0: Port device team_slave_1 added [ 90.785895][ T7839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.847672][ T7836] device hsr_slave_0 entered promiscuous mode [ 90.886296][ T7836] device hsr_slave_1 entered promiscuous mode [ 90.956118][ T7836] debugfs: Directory 'hsr0' with parent '/' already present! [ 90.971726][ T7839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.047646][ T7834] device hsr_slave_0 entered promiscuous mode [ 91.097714][ T7834] device hsr_slave_1 entered promiscuous mode [ 91.156042][ T7834] debugfs: Directory 'hsr0' with parent '/' already present! [ 91.192209][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.203174][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.216286][ T7839] team0: Port device team_slave_0 added [ 91.224533][ T7839] team0: Port device team_slave_1 added [ 91.233770][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.247212][ T7832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.320341][ T7832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.388380][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.396656][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.404690][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.411466][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.425624][ T7836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.537904][ T7839] device hsr_slave_0 entered promiscuous mode [ 91.596177][ T7839] device hsr_slave_1 entered promiscuous mode [ 91.645941][ T7839] debugfs: Directory 'hsr0' with parent '/' already present! [ 91.658692][ T7834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.717644][ T7832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.777799][ T7832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.859359][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.867738][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.875812][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.882890][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.891716][ T7836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.960052][ T7836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.028883][ T7836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.088304][ T7834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.167837][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.176305][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.185303][ T7834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.233931][ T7839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.297749][ T7839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.339290][ T7834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.404813][ T7839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.477618][ T7839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.557819][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.568489][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.581420][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.602911][ T7826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.616629][ T7826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.637456][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.646637][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.654696][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.663663][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.672848][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.682501][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.691509][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.705617][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.731439][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.744190][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.753307][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.769931][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.785736][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.794480][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.802549][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.811424][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.820258][ T2781] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.828090][ T2781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.847194][ T38] audit: type=1400 audit(1575022861.955:47): avc: denied { associate } for pid=7826 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 92.871863][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.890752][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.900935][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.909346][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.916510][ T7845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.941663][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.967761][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.980884][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.990847][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.001149][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 10:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 93.017892][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.026895][ T38] audit: type=1400 audit(1575022862.125:48): avc: denied { open } for pid=7855 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 93.049821][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.058088][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.066518][ T38] audit: type=1400 audit(1575022862.135:49): avc: denied { kernel } for pid=7855 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 93.091421][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.103155][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.111440][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.132954][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.143869][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.151168][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.155827][ C0] hrtimer: interrupt took 32367 ns [ 93.162682][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.175381][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.191361][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 10:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 93.201926][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.214020][ T7839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.224550][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.232988][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.243061][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.251189][ T7845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.262718][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.271038][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.279516][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.286438][ T7845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.293649][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.301437][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.312139][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.325723][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 10:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 93.367362][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.374985][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.384940][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.393310][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.403553][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.411754][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.420057][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.427129][ T7847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.434072][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.442605][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.450586][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.457569][ T7847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.464523][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.472859][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.485164][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.500310][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 10:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 93.509281][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.516892][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.546896][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.555126][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.563743][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.571469][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.580127][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.588206][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.595558][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.603319][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.613874][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 10:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) [ 93.630208][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.643508][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.661145][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.668901][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.676364][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.684778][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.692867][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.701020][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.709339][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 10:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) [ 93.717380][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.727206][ T7839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.737805][ T7834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.750861][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.761167][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.774920][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.783080][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.793005][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.801540][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.809911][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state 10:21:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 93.816969][ T7845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.825177][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.833795][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.841942][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.849881][ T7845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.857496][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.865219][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:21:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 93.900977][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.910373][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.919109][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.926351][ T7845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.934596][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.950595][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.967280][ T7834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.985732][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.996205][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.003482][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.015651][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.024495][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.035508][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.043289][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.055411][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.063943][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.075493][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.082672][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.093771][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.102238][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.114366][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.131559][ T7832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.142752][ T7832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.155125][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.166946][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.174611][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.186607][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.194748][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.203387][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.212310][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.220898][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.229052][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.237419][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.245660][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.252837][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.262931][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.280865][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.311706][ T7839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.327379][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.340498][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.349266][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.358137][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.366157][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.402779][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.418864][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.427519][ T744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.443107][ T7839] 8021q: adding VLAN 0 to HW filter on device batadv0 10:21:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xd, @raw_data="a6ccd2ba38e01e5c17fcde4f27c65bc3340fab5dbb82e2bcfc8d06105d56f5771b31dab837287caf6311ddf1c035fd8579eff51c0d29439ae79573ae607143e005358291f8f4f0963d417b620c0cf6dfc02e74be854490d638a83ea60f20cf869fe6d05e0b2d07adff86b35a133ce91ca3623768e9d492cf8125f9f187245d53ecfc56072980fe31491b43de4b67f1a1f945ad0ddc1e006bfe206840c3a384f217de074089c4a22a808edd40d610a46a6cc4ad800078aff86b9b7256ce7b6eda9ad410fee49aa87f"}) 10:21:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "6774ad993dd2002810834108a53fe5cac8098e7e65e964dfea96857f789ca2a323a4aed0fb5975"}, 0x2b) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 213.095846][ C3] rcu: INFO: rcu_preempt self-detected stall on CPU [ 213.099223][ C3] rcu: 3-....: (1 GPs behind) idle=bc2/1/0x4000000000000004 softirq=8431/8524 fqs=5191 [ 213.099223][ C3] (t=10500 jiffies g=5557 q=1084) [ 213.117507][ C3] NMI backtrace for cpu 3 [ 213.117507][ C3] CPU: 3 PID: 7909 Comm: syz-executor.4 Not tainted 5.4.0-syzkaller #0 [ 213.117507][ C3] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 213.117507][ C3] Call Trace: [ 213.117507][ C3] [ 213.117507][ C3] dump_stack+0x197/0x210 [ 213.117507][ C3] nmi_cpu_backtrace.cold+0x70/0xb2 [ 213.117507][ C3] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 213.117507][ C3] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 213.117507][ C3] arch_trigger_cpumask_backtrace+0x14/0x20 [ 213.117507][ C3] rcu_dump_cpu_stacks+0x183/0x1cf [ 213.117507][ C3] ? find_next_bit+0x107/0x130 [ 213.117507][ C3] rcu_sched_clock_irq.cold+0x509/0xc02 [ 213.117507][ C3] ? raise_softirq+0x138/0x340 [ 213.117507][ C3] update_process_times+0x2d/0x70 [ 213.117507][ C3] tick_sched_handle+0xa2/0x190 [ 213.117507][ C3] tick_sched_timer+0x53/0x140 [ 213.117507][ C3] __hrtimer_run_queues+0x364/0xe40 [ 213.117507][ C3] ? tick_sched_do_timer+0x1b0/0x1b0 [ 213.117507][ C3] ? hrtimer_init+0x330/0x330 [ 213.117507][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 213.117507][ C3] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 213.117507][ C3] hrtimer_interrupt+0x314/0x770 [ 213.117507][ C3] smp_apic_timer_interrupt+0x160/0x610 [ 213.117507][ C3] apic_timer_interrupt+0xf/0x20 [ 213.117507][ C3] RIP: 0010:rcu_is_watching+0x1a/0x30 [ 213.117507][ C3] Code: 3c a8 4f 00 48 8b 45 e8 eb 8e 66 0f 1f 44 00 00 55 48 89 e5 65 ff 05 ed ba 9f 7e e8 40 ff ff ff 83 f0 01 65 ff 0d de ba 9f 7e <74> 02 5d c3 e8 de 03 9e ff 5d c3 90 66 2e 0f 1f 84 00 00 00 00 00 [ 213.117507][ C3] RSP: 0018:ffff88807ed09a90 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 213.117507][ C3] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81626334 [ 213.117507][ C3] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807ed38220 [ 213.117507][ C3] RBP: ffff88807ed09a90 R08: 1ffff1100fda7044 R09: ffffed100fda7045 [ 213.117507][ C3] R10: ffffed100fda7044 R11: ffff88807ed38223 R12: ffff888014e48c28 [ 213.117507][ C3] R13: ffff888014cba0c0 R14: ffff888011ef8c28 R15: 0000000000000000 [ 213.117507][ C3] ? apic_timer_interrupt+0xa/0x20 [ 213.117507][ C3] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 213.117507][ C3] ndisc_send_skb+0xc4a/0x1490 [ 213.117507][ C3] ? nf_hook.constprop.0+0x560/0x560 [ 213.117507][ C3] ? memcpy+0x46/0x50 [ 213.117507][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.117507][ C3] ndisc_send_rs+0x134/0x720 [ 213.117507][ C3] addrconf_rs_timer+0x30f/0x6e0 [ 213.117507][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 213.117507][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 213.117507][ C3] call_timer_fn+0x1ac/0x780 [ 213.117507][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 213.117507][ C3] ? msleep_interruptible+0x150/0x150 [ 213.117507][ C3] ? run_timer_softirq+0x6b1/0x1790 [ 213.117507][ C3] ? trace_hardirqs_on+0x67/0x240 [ 213.117507][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 213.117507][ C3] ? ipv6_get_lladdr+0x490/0x490 [ 213.117507][ C3] run_timer_softirq+0x6c3/0x1790 [ 213.117507][ C3] ? add_timer+0x930/0x930 [ 213.117507][ C3] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 213.117507][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 213.117507][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 213.117507][ C3] __do_softirq+0x262/0x98c [ 213.117507][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 213.117507][ C3] irq_exit+0x19b/0x1e0 [ 213.117507][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 213.117507][ C3] apic_timer_interrupt+0xf/0x20 [ 213.117507][ C3] [ 213.117507][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 213.117507][ C3] Code: c0 68 34 13 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 6a 96 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 ab d3 f9 65 8b 05 18 54 85 78 85 c0 74 06 41 [ 213.117507][ C3] RSP: 0018:ffff888010e8fb10 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 213.117507][ C3] RAX: 1ffffffff122668d RBX: ffff888010e84040 RCX: 0000000000000006 [ 213.117507][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888010e848d4 [ 213.117507][ C3] RBP: ffff888010e8fb18 R08: 1ffffffff15377ba R09: fffffbfff15377bb [ 213.117507][ C3] R10: fffffbfff15377ba R11: ffffffff8a9bbdd7 R12: ffff88807ed37380 [ 213.117507][ C3] R13: ffff88807eaa8080 R14: ffff88807d38c500 R15: 0000000000000000 [ 213.117507][ C3] finish_task_switch+0x147/0x750 [ 213.117507][ C3] ? finish_task_switch+0x119/0x750 [ 213.117507][ C3] __schedule+0x8e9/0x1f30 [ 213.117507][ C3] ? __sched_text_start+0x8/0x8 [ 213.117507][ C3] ? preempt_schedule+0x4b/0x60 [ 213.117507][ C3] preempt_schedule_common+0x4f/0xe0 [ 213.117507][ C3] preempt_schedule+0x4b/0x60 [ 213.117507][ C3] ___preempt_schedule+0x16/0x18 [ 213.117507][ C3] _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 213.117507][ C3] perf_unpin_context+0x55/0x70 [ 213.117507][ C3] __do_sys_perf_event_open+0x1cc4/0x2c70 [ 213.117507][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 213.117507][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 213.117507][ C3] ? put_timespec64+0xda/0x140 [ 213.117507][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 213.117507][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 213.117507][ C3] ? do_syscall_64+0x26/0x790 [ 213.117507][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.117507][ C3] ? do_syscall_64+0x26/0x790 [ 213.117507][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 213.117507][ C3] do_syscall_64+0xfa/0x790 [ 213.117507][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.117507][ C3] RIP: 0033:0x45a759 [ 213.117507][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 213.117507][ C3] RSP: 002b:00007f5f8483cc88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 213.117507][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 213.117507][ C3] RDX: ffefffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 [ 213.117507][ C3] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 213.117507][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f5f8483d6d4 [ 213.117507][ C3] R13: 00000000004aec17 R14: 00000000006f1cb0 R15: 00000000ffffffff