Warning: Permanently added '[localhost]:63845' (ECDSA) to the list of known hosts. syzkaller login: [ 144.123102][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 144.123133][ T39] audit: type=1400 audit(1578330919.335:42): avc: denied { map } for pid=9028 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/06 17:15:19 fuzzer started 2020/01/06 17:15:22 dialing manager at 10.0.2.10:46087 2020/01/06 17:15:22 syscalls: 2817 2020/01/06 17:15:22 code coverage: enabled 2020/01/06 17:15:22 comparison tracing: enabled 2020/01/06 17:15:22 extra coverage: enabled 2020/01/06 17:15:22 setuid sandbox: enabled 2020/01/06 17:15:22 namespace sandbox: enabled 2020/01/06 17:15:22 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/06 17:15:22 fault injection: enabled 2020/01/06 17:15:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/06 17:15:22 net packet injection: enabled 2020/01/06 17:15:22 net device setup: enabled 2020/01/06 17:15:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/06 17:15:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 17:16:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x3f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 197.197865][ T39] audit: type=1400 audit(1578330972.405:43): avc: denied { map } for pid=9051 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=52 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 17:16:12 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r0, 0x0, r0, 0x0, 0x1, 0x0) 17:16:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000140)=0x8, 0x4) [ 197.773679][ T9053] IPVS: ftp: loaded support on port[0] = 21 [ 197.773686][ T9054] IPVS: ftp: loaded support on port[0] = 21 17:16:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 197.933053][ T9056] IPVS: ftp: loaded support on port[0] = 21 [ 198.070192][ T9058] IPVS: ftp: loaded support on port[0] = 21 [ 198.398660][ T9053] chnl_net:caif_netlink_parms(): no params data found [ 198.459683][ T9054] chnl_net:caif_netlink_parms(): no params data found [ 198.498629][ T9056] chnl_net:caif_netlink_parms(): no params data found [ 198.653458][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.680360][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.707942][ T9053] device bridge_slave_0 entered promiscuous mode [ 198.757458][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.779928][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.806476][ T9056] device bridge_slave_0 entered promiscuous mode [ 198.834206][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.859714][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.882032][ T9056] device bridge_slave_1 entered promiscuous mode [ 198.906084][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.925743][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.952894][ T9053] device bridge_slave_1 entered promiscuous mode [ 198.994205][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.022977][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.041057][ T9054] device bridge_slave_0 entered promiscuous mode [ 199.068112][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.088798][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.104959][ T9054] device bridge_slave_1 entered promiscuous mode [ 199.158886][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.188538][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.221443][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.244613][ T9058] chnl_net:caif_netlink_parms(): no params data found [ 199.266437][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.293195][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.323741][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.367422][ T9054] team0: Port device team_slave_0 added [ 199.387331][ T9056] team0: Port device team_slave_0 added [ 199.404516][ T9054] team0: Port device team_slave_1 added [ 199.428570][ T9053] team0: Port device team_slave_0 added [ 199.442773][ T9056] team0: Port device team_slave_1 added [ 199.465185][ T9053] team0: Port device team_slave_1 added [ 199.566522][ T9056] device hsr_slave_0 entered promiscuous mode [ 199.641690][ T9056] device hsr_slave_1 entered promiscuous mode [ 199.711725][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.734754][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.761080][ T9058] device bridge_slave_0 entered promiscuous mode [ 199.865954][ T9054] device hsr_slave_0 entered promiscuous mode [ 199.919788][ T9054] device hsr_slave_1 entered promiscuous mode [ 199.969427][ T9054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.984636][ T9054] Cannot create hsr debugfs directory [ 200.001112][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.013577][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.027179][ T9058] device bridge_slave_1 entered promiscuous mode [ 200.101781][ T9053] device hsr_slave_0 entered promiscuous mode [ 200.149548][ T9053] device hsr_slave_1 entered promiscuous mode [ 200.219355][ T9053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.232221][ T9053] Cannot create hsr debugfs directory [ 200.272808][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.304376][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.378883][ T9058] team0: Port device team_slave_0 added [ 200.403364][ T9058] team0: Port device team_slave_1 added [ 200.552987][ T39] audit: type=1400 audit(1578330975.765:44): avc: denied { create } for pid=9056 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.606225][ T39] audit: type=1400 audit(1578330975.765:45): avc: denied { write } for pid=9056 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.657663][ T39] audit: type=1400 audit(1578330975.765:46): avc: denied { read } for pid=9056 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.712473][ T9058] device hsr_slave_0 entered promiscuous mode [ 200.769799][ T9058] device hsr_slave_1 entered promiscuous mode [ 200.859831][ T9058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.879450][ T9058] Cannot create hsr debugfs directory [ 200.901108][ T9056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.956752][ T9056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.051863][ T9056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.114846][ T9056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.214297][ T9053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.276857][ T9053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.388784][ T9053] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.472663][ T9054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.551363][ T9054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.635172][ T9054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.743888][ T9053] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.825051][ T9054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.971734][ T9058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.063852][ T9058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.127284][ T9058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.191513][ T9058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.321054][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.375900][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.394602][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.415300][ T9056] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.451546][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.471945][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.492548][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.506857][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.519794][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.552516][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.578079][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.600247][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.617645][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.650230][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.667980][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.691454][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.712498][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.729716][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.753646][ T9058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.773849][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.806552][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.823928][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.837785][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.848998][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.860819][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.873783][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.888731][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.903798][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.915850][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.930806][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.947653][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.961246][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.983902][ T9054] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.001525][ T9058] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.014964][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.030978][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.045038][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.058812][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.074766][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.088974][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.105577][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.121007][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.137676][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.156487][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.174232][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.188197][ T3417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.205348][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.235988][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.253080][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.268220][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.286799][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.301830][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.321264][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.340001][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.356080][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.375717][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.394896][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.407698][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.425368][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.439463][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.465171][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.480845][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.497771][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.515273][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.582193][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.604676][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.627196][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.641989][ T9067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.697093][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.755850][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.795137][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.848677][ T9053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.896885][ T9053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.972872][ T9054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.017962][ T9054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.070010][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.099975][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.130586][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.166817][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.199604][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.232326][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.273162][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.300716][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.331439][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.367133][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.402798][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.434019][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.467260][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.497743][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.530389][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.568390][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.613710][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.681787][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.714578][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.751232][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.785491][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.820230][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.860213][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.898631][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.927046][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.957126][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.992863][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.027003][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.060155][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.106409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.134143][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.170834][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.207435][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.231907][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.267344][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.317977][ T9054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.354805][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.386154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.426855][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.444477][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.474657][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.486611][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.507703][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.524771][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.537456][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.551212][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.568983][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.592258][ T9053] device veth0_vlan entered promiscuous mode [ 205.606332][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.620266][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.634081][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.651129][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.666585][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.681711][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.701420][ T9056] device veth0_vlan entered promiscuous mode [ 205.732406][ T9053] device veth1_vlan entered promiscuous mode [ 205.753150][ T9056] device veth1_vlan entered promiscuous mode [ 205.774622][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.787063][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.799827][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.814396][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.827925][ T3417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.853761][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.867483][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.879982][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.893542][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.905505][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.922846][ T39] audit: type=1400 audit(1578330981.135:47): avc: denied { associate } for pid=9056 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 205.928437][ T9058] device veth0_vlan entered promiscuous mode [ 205.983410][ T9054] device veth0_vlan entered promiscuous mode [ 206.001492][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.015117][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.037614][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.049949][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.066703][ T9058] device veth1_vlan entered promiscuous mode [ 206.081691][ T9054] device veth1_vlan entered promiscuous mode [ 206.117089][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.131399][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.143521][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.157982][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.273637][ T39] audit: type=1400 audit(1578330981.475:48): avc: denied { create } for pid=9071 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 17:16:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) 17:16:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc) [ 206.331131][ T39] audit: type=1400 audit(1578330981.475:49): avc: denied { setopt } for pid=9071 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 17:16:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) [ 206.386322][ T39] audit: type=1400 audit(1578330981.515:50): avc: denied { open } for pid=9072 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 206.446670][ T39] audit: type=1400 audit(1578330981.515:51): avc: denied { kernel } for pid=9072 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 206.477259][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 17:16:21 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000937feecb07ab37918264a4d93e8d35b474759f7ed7bfa4efc7d97eea5b75d724ffff00000000000043e25d60825c9f14fbbc2e39b1484d4f1501b113d7d6030680a7fdea6f07ecd48502d57dda0132b56308a41dbb0600000000000000b6464a6f0a25c2d2ad823114b062750a4e96fa8be9ac82b2e4c391b88414287109fb11aa71f2de1c73b24c9a28e628ad33cf7539e584cdabb9ce25829bdddf82f014316983eb7a4807d6370fdad41bc4e87aeff2f9af579d6d2bd6fe1c2ea627df"], 0x18}}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x400000000000162, 0x0) [ 206.774370][ C0] hrtimer: interrupt took 27717 ns 17:16:23 executing program 0: symlink(&(0x7f0000000180)='..', &(0x7f0000000080)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 17:16:23 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000003c0)=0x8, 0x4) 17:16:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="fe", 0x1, 0x0, 0x0, 0x0) 17:16:23 executing program 0: r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)) [ 227.941598][ T28] kasan: CONFIG_KASAN_INLINE enabled [ 227.956712][ T28] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 227.977631][ T28] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 227.983800][ T28] CPU: 3 PID: 28 Comm: kworker/3:0 Not tainted 5.5.0-rc5-syzkaller #0 [ 227.983800][ T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 227.983800][ T28] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 227.983800][ T28] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 228.090884][ T28] Code: c3 e8 32 8d 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 f3 d3 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 228.090884][ T28] RSP: 0018:ffffc9000057f9f0 EFLAGS: 00010206 [ 228.090884][ T28] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399da35 [ 228.090884][ T28] RDX: 0000000000000003 RSI: ffffffff8358593d RDI: 0000000000000018 [ 228.090884][ T28] RBP: ffffc9000057f9f8 R08: ffff88802c054840 R09: fffffbfff165f1be [ 228.090884][ T28] R10: fffffbfff165f1bd R11: ffffffff8b2f8def R12: dffffc0000000000 [ 228.090884][ T28] R13: ffffc9000057fb20 R14: ffffc9000057fb20 R15: 000000000000001d [ 228.090884][ T28] FS: 0000000000000000(0000) GS:ffff88802d300000(0000) knlGS:0000000000000000 [ 228.090884][ T28] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.090884][ T28] CR2: 0000000000f05d30 CR3: 0000000022e68000 CR4: 0000000000340ee0 [ 228.090884][ T28] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.090884][ T28] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.339556][ T28] Call Trace: [ 228.339556][ T28] security_socket_sendmsg+0x77/0xc0 [ 228.339556][ T28] sock_sendmsg+0x45/0x130 [ 228.339556][ T28] kernel_sendmsg+0x44/0x50 [ 228.339556][ T28] rxrpc_send_keepalive+0x1ff/0x940 [ 228.339556][ T28] ? rxrpc_reject_packets+0xab0/0xab0 [ 228.339556][ T28] ? _raw_spin_unlock_bh+0x2c/0x30 [ 228.339556][ T28] ? __local_bh_enable_ip+0x15a/0x270 [ 228.339556][ T28] ? lockdep_hardirqs_on+0x421/0x5e0 [ 228.339556][ T28] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 228.339556][ T28] ? __local_bh_enable_ip+0x15a/0x270 [ 228.339556][ T28] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 228.339556][ T28] ? rxrpc_peer_add_rtt+0x650/0x650 [ 228.339556][ T28] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 228.339556][ T28] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 228.339556][ T28] ? trace_hardirqs_on+0x67/0x240 [ 228.339556][ T28] process_one_work+0x9af/0x1740 [ 228.339556][ T28] ? pwq_dec_nr_in_flight+0x320/0x320 [ 228.339556][ T28] ? lock_acquire+0x190/0x410 [ 228.339556][ T28] worker_thread+0x98/0xe40 [ 228.339556][ T28] kthread+0x361/0x430 [ 228.339556][ T28] ? process_one_work+0x1740/0x1740 [ 228.339556][ T28] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 228.339556][ T28] ret_from_fork+0x24/0x30 [ 228.339556][ T28] Modules linked in: [ 228.623033][ T28] ---[ end trace def158e619baae6d ]--- [ 228.633011][ T28] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 228.645510][ T28] Code: c3 e8 32 8d 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 f3 d3 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 228.693619][ T28] RSP: 0018:ffffc9000057f9f0 EFLAGS: 00010206 [ 228.706150][ T28] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399da35 [ 228.722424][ T28] RDX: 0000000000000003 RSI: ffffffff8358593d RDI: 0000000000000018 [ 228.737071][ T28] RBP: ffffc9000057f9f8 R08: ffff88802c054840 R09: fffffbfff165f1be [ 228.752984][ T28] R10: fffffbfff165f1bd R11: ffffffff8b2f8def R12: dffffc0000000000 [ 228.769035][ T28] R13: ffffc9000057fb20 R14: ffffc9000057fb20 R15: 000000000000001d [ 228.785795][ T28] FS: 0000000000000000(0000) GS:ffff88802d300000(0000) knlGS:0000000000000000 [ 228.802275][ T28] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.816616][ T28] CR2: 0000000000f05d30 CR3: 0000000022e68000 CR4: 0000000000340ee0 [ 228.832569][ T28] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.847518][ T28] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.861828][ T28] Kernel panic - not syncing: Fatal exception [ 228.871745][ T28] Kernel Offset: disabled [ 228.871745][ T28] Rebooting in 86400 seconds..