Warning: Permanently added '[localhost]:44172' (ECDSA) to the list of known hosts. [ 77.154402][ T38] audit: type=1400 audit(1575024311.373:42): avc: denied { map } for pid=7849 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/29 10:45:11 fuzzer started 2019/11/29 10:45:12 dialing manager at 10.0.2.10:46599 2019/11/29 10:45:12 syscalls: 2543 2019/11/29 10:45:12 code coverage: enabled 2019/11/29 10:45:12 comparison tracing: enabled 2019/11/29 10:45:12 extra coverage: extra coverage is not supported by the kernel 2019/11/29 10:45:12 setuid sandbox: enabled 2019/11/29 10:45:12 namespace sandbox: enabled 2019/11/29 10:45:12 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 10:45:12 fault injection: enabled 2019/11/29 10:45:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 10:45:12 net packet injection: enabled 2019/11/29 10:45:12 net device setup: enabled 2019/11/29 10:45:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/29 10:45:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:45:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,iocharset=i1,iocharset=c']) [ 94.264906][ T38] audit: type=1400 audit(1575024328.483:43): avc: denied { map } for pid=7869 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=17721 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 10:45:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000000)=0x3, 0x4) [ 94.402529][ T7870] IPVS: ftp: loaded support on port[0] = 21 [ 94.470356][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 94.472943][ T7872] IPVS: ftp: loaded support on port[0] = 21 [ 94.520157][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.528101][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state 10:45:28 executing program 2: r0 = socket(0x10, 0x800000000080002, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000), 0x4) [ 94.537655][ T7870] device bridge_slave_0 entered promiscuous mode [ 94.545866][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.552992][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.562371][ T7870] device bridge_slave_1 entered promiscuous mode [ 94.589203][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.601101][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.620335][ T7876] IPVS: ftp: loaded support on port[0] = 21 [ 94.621928][ T7870] team0: Port device team_slave_0 added [ 94.635982][ T7870] team0: Port device team_slave_1 added 10:45:28 executing program 3: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0x5df211b9}], 0x23a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 94.749444][ T7870] device hsr_slave_0 entered promiscuous mode [ 94.826605][ T7870] device hsr_slave_1 entered promiscuous mode 10:45:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB='shortname=winnt,shortname=lower,iocharset=maccroatian,uni_xlate=0,nfs=nostale_ro']) [ 94.907118][ T7879] IPVS: ftp: loaded support on port[0] = 21 [ 94.922460][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 94.997150][ T7881] IPVS: ftp: loaded support on port[0] = 21 10:45:29 executing program 5: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) write$apparmor_exec(r2, &(0x7f0000000600)={'\x9bH\x1b]P\x0e\x06C\xc3MY\x1d\x9b9%\a\x16\xb1\x9b=cy\xeaU\x0e3\\C6\x9bmwH_\xcb\xaa\xc7\xa6\x10&\xb0A\tim\x9bL\xd21\xd2\xbe\xddEf \xa0\xa6v\xf7\xe7\x89\xec\xbf\xc8\x97\xb37\xf0\x10\xcd\xd9\xaf;\xec\xccT\x9e\xe0\xbaw3\xc4K\v\x0e\xca\xdb\xa5\xe6\x91\xdc\x8d3\xf8\xec/\xa4U\x87\x02g\x06k\x9fW[.c\xb1\xd4y\xd4\xca=\f\xd8Q[\xacb\xa3f4\x9el\x90\x878[\x00\xd9\x04\x1a\xa6\xa4\x17\xa6(\x05tl\x17\xef\x1bU\xfbD\xec\x88\xd4\xa0&\xdb\x95wp\xfb\x01[\x8c\xc4(\xbb)\xf3\xa9\x1b\tt\xd3W\x11t\x1f\xa4n\xfd:\x90${\xc5\x16\xa5\x96\x88\xc78\xc0g\xb9\xbe\xbd1\x11}\x8d\'\x15+\xfe\x91\xed\x1e\xeb]\xfa\x9dS\xe6\x12\x9f\r\xc8\x81\xca\xd9\f\xfd\xc8/\xb99\xaa\x1a\r\x92\xae\xb6\xd2\xb8\xb7\f[\xd8y\xc6O\xcfE\xb4\xe6\x16\x1fT\x1e\x9b\x9c\f\x8d\xed1\x96\"\x83\x98\xb1S`\xc7\'\xc2\xbf\xb7', 'fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x9b\x0fJ\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'}, 0x50f) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) [ 95.034730][ T38] audit: type=1400 audit(1575024329.253:44): avc: denied { create } for pid=7870 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 95.037177][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.074506][ T38] audit: type=1400 audit(1575024329.253:45): avc: denied { write } for pid=7870 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 95.079927][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.106397][ T38] audit: type=1400 audit(1575024329.273:46): avc: denied { read } for pid=7870 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 95.140548][ T7872] device bridge_slave_0 entered promiscuous mode [ 95.149418][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.156929][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.164259][ T7872] device bridge_slave_1 entered promiscuous mode [ 95.185178][ T7870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.238136][ T7870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.300074][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.313218][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.325207][ T7870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.418108][ T7870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.490408][ T7884] IPVS: ftp: loaded support on port[0] = 21 [ 95.509145][ T7876] chnl_net:caif_netlink_parms(): no params data found [ 95.531449][ T7872] team0: Port device team_slave_0 added [ 95.540507][ T7872] team0: Port device team_slave_1 added [ 95.556792][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.563564][ T7870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.571029][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.578471][ T7870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.590195][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.598013][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.617274][ T7879] chnl_net:caif_netlink_parms(): no params data found [ 95.707179][ T7872] device hsr_slave_0 entered promiscuous mode [ 95.765657][ T7872] device hsr_slave_1 entered promiscuous mode [ 95.825254][ T7872] debugfs: Directory 'hsr0' with parent '/' already present! [ 95.845756][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.853081][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.861174][ T7876] device bridge_slave_0 entered promiscuous mode [ 95.872683][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.882149][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.890353][ T7876] device bridge_slave_1 entered promiscuous mode [ 95.909588][ T7876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.920148][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.927330][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.937567][ T7879] device bridge_slave_0 entered promiscuous mode [ 95.954321][ T7876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.964443][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.971457][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.979011][ T7879] device bridge_slave_1 entered promiscuous mode [ 96.011099][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.025176][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.081571][ T7876] team0: Port device team_slave_0 added [ 96.089042][ T7879] team0: Port device team_slave_0 added [ 96.097431][ T7876] team0: Port device team_slave_1 added [ 96.130040][ T7879] team0: Port device team_slave_1 added [ 96.139419][ T7872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.186741][ T7881] chnl_net:caif_netlink_parms(): no params data found [ 96.194968][ T7872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.247188][ T7872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.308070][ T7872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.477538][ T7876] device hsr_slave_0 entered promiscuous mode [ 96.538117][ T7876] device hsr_slave_1 entered promiscuous mode [ 96.605231][ T7876] debugfs: Directory 'hsr0' with parent '/' already present! [ 96.613074][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 96.697539][ T7879] device hsr_slave_0 entered promiscuous mode [ 96.755516][ T7879] device hsr_slave_1 entered promiscuous mode [ 96.825194][ T7879] debugfs: Directory 'hsr0' with parent '/' already present! [ 96.839089][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.846876][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.854614][ T7881] device bridge_slave_0 entered promiscuous mode [ 96.863789][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.871060][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.879001][ T7881] device bridge_slave_1 entered promiscuous mode [ 96.936736][ T7881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.946258][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.953465][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.961429][ T7884] device bridge_slave_0 entered promiscuous mode [ 96.971125][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.981252][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.988953][ T7884] device bridge_slave_1 entered promiscuous mode [ 97.000704][ T7876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.066868][ T7876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.117681][ T7881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.138273][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.152304][ T7876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.221524][ T7876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.324724][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.335822][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.346394][ T7881] team0: Port device team_slave_0 added [ 97.365937][ T7884] team0: Port device team_slave_0 added [ 97.376921][ T7881] team0: Port device team_slave_1 added [ 97.383926][ T7879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.457826][ T7879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.509234][ T7879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.578878][ T7884] team0: Port device team_slave_1 added [ 97.584264][ T7879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.660356][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.673880][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.681946][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.747282][ T7881] device hsr_slave_0 entered promiscuous mode [ 97.795395][ T7881] device hsr_slave_1 entered promiscuous mode [ 97.855275][ T7881] debugfs: Directory 'hsr0' with parent '/' already present! [ 97.937454][ T7884] device hsr_slave_0 entered promiscuous mode [ 98.005558][ T7884] device hsr_slave_1 entered promiscuous mode [ 98.055196][ T7884] debugfs: Directory 'hsr0' with parent '/' already present! [ 98.064555][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.073905][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.085158][ T2778] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.093313][ T2778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.103266][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.113301][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.122844][ T2778] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.130847][ T2778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.139664][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.161059][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.170518][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.180915][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.190714][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.224414][ T7881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.307906][ T7881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.357936][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.370216][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.379436][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.388492][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.410124][ T7881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.496886][ T7881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.543466][ T7884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.627293][ T7884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.677830][ T7884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.778100][ T7884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.885557][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.898852][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.920152][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.936333][ T7876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.977013][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.984326][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.991873][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.000552][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.012029][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.027503][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.044825][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.056854][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.071924][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.078609][ T38] audit: type=1400 audit(1575024333.293:47): avc: denied { associate } for pid=7870 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 99.102739][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.111336][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.119549][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.126447][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.134092][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.142071][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.150050][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.166895][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.176201][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.183904][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.192149][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.200796][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.209310][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.216304][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.234586][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.246567][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.256055][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.264360][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.271867][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.274914][ T7895] FAT-fs (loop0): bogus number of reserved sectors [ 99.279390][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.294519][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.295219][ T7895] FAT-fs (loop0): Can't find a valid FAT filesystem [ 99.302960][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.316263][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.337330][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.355285][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.363012][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.371744][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.380436][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.389752][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.398171][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.406762][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.414670][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.421612][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.429013][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.438205][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.446350][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.453833][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.462651][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.471385][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.482884][ T7881] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.496820][ T7895] FAT-fs (loop0): bogus number of reserved sectors [ 99.505975][ T7895] FAT-fs (loop0): Can't find a valid FAT filesystem [ 99.516704][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.524226][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.531991][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.540433][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.548837][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.555914][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.566042][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.574581][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 10:45:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,iocharset=i1,iocharset=c']) [ 99.583013][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.590260][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.598764][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.607429][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.615547][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.623078][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.630660][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.630939][ T7904] FAT-fs (loop0): bogus number of reserved sectors [ 99.639263][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.645745][ T7904] FAT-fs (loop0): Can't find a valid FAT filesystem [ 99.653745][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.669054][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.677495][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.686606][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.694821][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.703227][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.711432][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.719740][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.727956][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.735742][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.743086][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.761707][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.771986][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.780137][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.788778][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.797320][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.804406][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state 10:45:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,iocharset=i1,iocharset=c']) [ 99.812660][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.821336][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.829593][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.836075][ T7911] FAT-fs (loop0): bogus number of reserved sectors [ 99.838200][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.844126][ T7911] FAT-fs (loop0): Can't find a valid FAT filesystem [ 99.852395][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.867461][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.876044][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.883785][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.902260][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 10:45:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,iocharset=i1,iocharset=c']) [ 99.925362][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.933994][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.942775][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.950988][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.959252][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.967857][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.969843][ T7917] FAT-fs (loop0): bogus number of reserved sectors [ 99.976116][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.982877][ T7917] FAT-fs (loop0): Can't find a valid FAT filesystem [ 99.989633][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.989938][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.012289][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.020635][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.028828][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.036954][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.045164][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.053333][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.061186][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.079490][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 10:45:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,iocharset=i1,iocharset=c']) [ 100.089763][ T7872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.110237][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.120226][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.128555][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.137703][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.146205][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.154421][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.161270][ T7891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.191573][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.200341][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.213239][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.221261][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.228567][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 10:45:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,iocharset=i1,iocharset=c']) [ 100.238346][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.246889][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.254995][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.263914][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.276737][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.284852][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.296893][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.307940][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.325804][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.333694][ T7876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.349061][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.356573][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 10:45:34 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,iocharset=i1,iocharset=c']) [ 100.364694][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.374061][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.399556][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.409836][ T7884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.422341][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 10:45:34 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) dup(r0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='threaded\x00', 0x9) splice(0xffffffffffffffff, &(0x7f0000001280)=0x2, 0xffffffffffffffff, 0x0, 0x800000a, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) getpriority(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, &(0x7f0000001280), r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000a, 0x0) r3 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c", 0x5a, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) keyctl$chown(0x4, r3, 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/56, 0x38) openat$dsp(0xffffffffffffff9c, 0x0, 0x10901, 0x0) unshare(0x600) prctl$PR_GET_PDEATHSIG(0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) [ 100.449172][ T38] audit: type=1400 audit(1575024334.673:48): avc: denied { open } for pid=7944 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 100.467111][ T7881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.489485][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.505983][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.515450][ T38] audit: type=1400 audit(1575024334.713:49): avc: denied { kernel } for pid=7949 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 100.554258][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.565671][ C3] hrtimer: interrupt took 24187 ns 10:45:34 executing program 1: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0x5df211b9}], 0x23a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 10:45:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='utf8=1,iocharset=i1,iocharset=c']) 10:45:34 executing program 3: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0x5df211b9}], 0x23a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 109.323160][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.330610][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.325031][ C2] rcu: INFO: rcu_preempt self-detected stall on CPU [ 214.325849][ C2] rcu: 2-....: (1 GPs behind) idle=0ee/1/0x4000000000000004 softirq=7301/8175 fqs=1763 [ 214.335205][ C2] (t=10502 jiffies g=5673 q=2571) [ 214.345677][ C2] NMI backtrace for cpu 2 [ 214.345677][ C2] CPU: 2 PID: 7946 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 [ 214.356022][ C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 214.356022][ C2] Call Trace: [ 214.356022][ C2] [ 214.356022][ C2] dump_stack+0x197/0x210 [ 214.356022][ C2] nmi_cpu_backtrace.cold+0x70/0xb2 [ 214.356022][ C2] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 214.356022][ C2] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 214.356022][ C2] arch_trigger_cpumask_backtrace+0x14/0x20 [ 214.356022][ C2] rcu_dump_cpu_stacks+0x183/0x1cf [ 214.356022][ C2] ? find_next_bit+0x107/0x130 [ 214.356022][ C2] rcu_sched_clock_irq.cold+0x509/0xc02 [ 214.356022][ C2] ? raise_softirq+0x138/0x340 [ 214.356022][ C2] update_process_times+0x2d/0x70 [ 214.356022][ C2] tick_sched_handle+0xa2/0x190 [ 214.356022][ C2] tick_sched_timer+0x53/0x140 [ 214.356022][ C2] __hrtimer_run_queues+0x364/0xe40 [ 214.356022][ C2] ? tick_sched_do_timer+0x1b0/0x1b0 [ 214.356022][ C2] ? hrtimer_init+0x330/0x330 [ 214.356022][ C2] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 214.356022][ C2] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 214.356022][ C2] hrtimer_interrupt+0x314/0x770 [ 214.356022][ C2] smp_apic_timer_interrupt+0x160/0x610 [ 214.356022][ C2] apic_timer_interrupt+0xf/0x20 [ 214.356022][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 214.356022][ C2] Code: 89 25 a4 27 5e 09 41 bc f4 ff ff ff e8 9d 52 e9 ff 48 c7 05 8e 27 5e 09 00 00 00 00 e9 f2 e5 ff ff cc cc cc cc cc cc cc cc cc <55> 48 89 e5 65 48 8b 04 25 c0 1e 02 00 65 8b 15 54 40 8d 7e 81 e2 [ 214.356022][ C2] RSP: 0018:ffff88802d709908 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 214.356022][ C2] RAX: 0000000000000102 RBX: ffff88807e1f1600 RCX: ffffffff866fdea4 [ 214.356022][ C2] RDX: 0000000000000000 RSI: 00000000866f0000 RDI: 0000000000000003 [ 214.356022][ C2] RBP: ffff88802d709950 R08: ffff888068c4c0c0 R09: ffff888068c4c950 [ 214.356022][ C2] R10: fffffbfff13d4e58 R11: ffffffff89ea72c7 R12: ffff888023169e00 [ 214.356022][ C2] R13: 0000000000000000 R14: ffff88807e1f1600 R15: ffff888023169e58 [ 214.356022][ C2] ? apic_timer_interrupt+0xa/0x20 [ 214.356022][ C2] ? __ip6_finish_output+0x194/0xaa0 [ 214.356022][ C2] ? __ip6_finish_output+0x584/0xaa0 [ 214.356022][ C2] ip6_finish_output+0x38/0x1f0 [ 214.356022][ C2] ip6_output+0x25e/0x880 [ 214.356022][ C2] ? ip6_finish_output+0x1f0/0x1f0 [ 214.356022][ C2] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 214.356022][ C2] ? __ip6_finish_output+0xaa0/0xaa0 [ 214.356022][ C2] ? rcu_read_lock_held_common+0x130/0x130 [ 214.356022][ C2] ndisc_send_skb+0xf1f/0x1490 [ 214.356022][ C2] ? nf_hook.constprop.0+0x560/0x560 [ 214.356022][ C2] ? memcpy+0x46/0x50 [ 214.356022][ C2] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.356022][ C2] ndisc_send_rs+0x134/0x720 [ 214.356022][ C2] addrconf_rs_timer+0x30f/0x6e0 [ 214.356022][ C2] ? ipv6_get_lladdr+0x490/0x490 [ 214.356022][ C2] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 214.356022][ C2] call_timer_fn+0x1ac/0x780 [ 214.356022][ C2] ? ipv6_get_lladdr+0x490/0x490 [ 214.356022][ C2] ? msleep_interruptible+0x150/0x150 [ 214.356022][ C2] ? run_timer_softirq+0x6b1/0x1790 [ 214.356022][ C2] ? trace_hardirqs_on+0x67/0x240 [ 214.356022][ C2] ? ipv6_get_lladdr+0x490/0x490 [ 214.356022][ C2] ? ipv6_get_lladdr+0x490/0x490 [ 214.356022][ C2] run_timer_softirq+0x6c3/0x1790 [ 214.356022][ C2] ? add_timer+0x930/0x930 [ 214.356022][ C2] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 214.356022][ C2] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 214.356022][ C2] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 214.356022][ C2] __do_softirq+0x262/0x98c [ 214.356022][ C2] ? sched_clock_cpu+0x14e/0x1b0 [ 214.356022][ C2] irq_exit+0x19b/0x1e0 [ 214.356022][ C2] smp_apic_timer_interrupt+0x1a3/0x610 [ 214.356022][ C2] apic_timer_interrupt+0xf/0x20 [ 214.356022][ C2] [ 214.356022][ C2] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 214.356022][ C2] Code: c0 68 34 13 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 6a 96 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 ab d3 f9 65 8b 05 18 54 85 78 85 c0 74 06 41 [ 214.356022][ C2] RSP: 0018:ffff888068c578d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 214.356022][ C2] RAX: 1ffffffff122668d RBX: ffff888068c4c0c0 RCX: 0000000000000006 [ 214.356022][ C2] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888068c4c954 [ 214.356022][ C2] RBP: ffff888068c578e0 R08: 1ffffffff15377bb R09: fffffbfff15377bc [ 214.356022][ C2] R10: fffffbfff15377bb R11: ffffffff8a9bbddf R12: ffff88802d737380 [ 214.356022][ C2] R13: ffff88802c868380 R14: ffff88807929b5c0 R15: 0000000000000000 [ 214.356022][ C2] ? _raw_spin_unlock_irq+0x23/0x80 [ 214.356022][ C2] finish_task_switch+0x147/0x750 [ 214.356022][ C2] ? finish_task_switch+0x119/0x750 [ 214.356022][ C2] __schedule+0x8e9/0x1f30 [ 214.356022][ C2] ? __sched_text_start+0x8/0x8 [ 214.356022][ C2] ? __this_cpu_preempt_check+0x35/0x190 [ 214.356022][ C2] ? retint_kernel+0x2b/0x2b [ 214.356022][ C2] ? perf_duration_warn+0x40/0x40 [ 214.356022][ C2] ? preempt_schedule+0x4b/0x60 [ 214.356022][ C2] preempt_schedule_common+0x4f/0xe0 [ 214.356022][ C2] ? __perf_event_enable+0x930/0x930 [ 214.356022][ C2] preempt_schedule+0x4b/0x60 [ 214.356022][ C2] ___preempt_schedule+0x16/0x18 [ 214.356022][ C2] ? smp_call_function_single+0x40b/0x480 [ 214.356022][ C2] smp_call_function_single+0x410/0x480 [ 214.356022][ C2] ? perf_duration_warn+0x40/0x40 [ 214.356022][ C2] ? generic_exec_single+0x4c0/0x4c0 [ 214.356022][ C2] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 214.356022][ C2] ? __perf_event_enable+0x930/0x930 [ 214.356022][ C2] task_function_call+0xe9/0x180 [ 214.356022][ C2] ? perf_event_addr_filters_exec+0x310/0x310 [ 214.356022][ C2] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 214.356022][ C2] ? __perf_event_enable+0x930/0x930 [ 214.356022][ C2] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.356022][ C2] ? exclusive_event_installable+0x257/0x320 [ 214.356022][ C2] perf_install_in_context+0x308/0x5a0 [ 214.356022][ C2] ? list_add_event+0xed0/0xed0 [ 214.356022][ C2] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.356022][ C2] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 214.356022][ C2] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.356022][ C2] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 214.356022][ C2] ? perf_event_set_output+0x4e0/0x4e0 [ 214.356022][ C2] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.356022][ C2] ? put_timespec64+0xda/0x140 [ 214.356022][ C2] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 214.356022][ C2] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 214.356022][ C2] ? do_syscall_64+0x26/0x790 [ 214.356022][ C2] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.356022][ C2] ? do_syscall_64+0x26/0x790 [ 214.356022][ C2] __x64_sys_perf_event_open+0xbe/0x150 [ 214.356022][ C2] do_syscall_64+0xfa/0x790 [ 214.356022][ C2] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.356022][ C2] RIP: 0033:0x45a759 [ 214.356022][ C2] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 214.356022][ C2] RSP: 002b:00007f1f13041c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 214.356022][ C2] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 214.356022][ C2] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 [ 214.356022][ C2] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 214.356022][ C2] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f1f130426d4 [ 214.356022][ C2] R13: 00000000004aec17 R14: 00000000006f1cb0 R15: 00000000ffffffff