Warning: Permanently added '[localhost]:47851' (ECDSA) to the list of known hosts. syzkaller login: [ 115.815036][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 115.815083][ T39] audit: type=1400 audit(1579841580.277:42): avc: denied { map } for pid=8638 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/24 04:53:00 fuzzer started 2020/01/24 04:53:02 dialing manager at 10.0.2.10:38055 2020/01/24 04:53:02 syscalls: 2888 2020/01/24 04:53:02 code coverage: enabled 2020/01/24 04:53:02 comparison tracing: enabled 2020/01/24 04:53:02 extra coverage: enabled 2020/01/24 04:53:02 setuid sandbox: enabled 2020/01/24 04:53:02 namespace sandbox: enabled 2020/01/24 04:53:02 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/24 04:53:02 fault injection: enabled 2020/01/24 04:53:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/24 04:53:02 net packet injection: enabled 2020/01/24 04:53:02 net device setup: enabled 2020/01/24 04:53:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/24 04:53:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:53:48 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffff6, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e558c5986f0000000000000087695931515781ae36a4d148f269399022f5ce7ec3b6d946be4fac9508cce4df4d7015f5590bbfb45e2584f446722053f1502598808b355f7b815bdb22ba86dddc0187f894de7e81145dd688759944bd09b0f55e7ca54b07bd9189de8defcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605fa26c0e48a80a6bd544fa300d066a4d162d7ef85002024faf0831fffbb5f1a12a6f5f158a752eaf25a859b40a57381147cdd7c9fd7ceae30304783fd7f2eec79c49b69a61287b591371f3f60b34470692217a8930a11f0e0c796c587da235e5ed34ce844827033a3bac99ab9498f944fec73001fd8be2b4b36b0b3c9672af727831275017a6d5aff50c09bfc22ebf548906138e7dae98da3b8a39bf88000000000000000000000000000000339b567e58689a4da64cf31b4ea5066103ba670c2772b548c8f138af7029f1226901c86f510b46e3a027d6135f99b585d0aa73b71cd8e7448f107336ed8a46a35936d5a24a92a4e2be4b78ca3d304e40f3931319f8b3e3f6feebfdcefa894f5b2537fa42349e6957c1b0965242194e87e3ca02"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xc048) [ 164.253984][ T39] audit: type=1400 audit(1579841628.707:43): avc: denied { map } for pid=8661 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=2060 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 04:53:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 04:53:49 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x10b080) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) [ 164.781263][ T8664] IPVS: ftp: loaded support on port[0] = 21 [ 164.782491][ T8662] IPVS: ftp: loaded support on port[0] = 21 [ 164.822506][ T8666] IPVS: ftp: loaded support on port[0] = 21 04:53:49 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) [ 165.076842][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 165.091631][ T8664] chnl_net:caif_netlink_parms(): no params data found [ 165.184808][ T8668] IPVS: ftp: loaded support on port[0] = 21 [ 165.257657][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.270525][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.293598][ T8664] device bridge_slave_0 entered promiscuous mode [ 165.330526][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.354143][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.384062][ T8664] device bridge_slave_1 entered promiscuous mode [ 165.405257][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.426698][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.443134][ T8662] device bridge_slave_0 entered promiscuous mode [ 165.454856][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.469370][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.481826][ T8662] device bridge_slave_1 entered promiscuous mode [ 165.524539][ T8666] chnl_net:caif_netlink_parms(): no params data found [ 165.540294][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.566050][ T8664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.583431][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.609785][ T8664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.645050][ T8662] team0: Port device team_slave_0 added [ 165.662881][ T8664] team0: Port device team_slave_0 added [ 165.679771][ T8662] team0: Port device team_slave_1 added [ 165.704293][ T8664] team0: Port device team_slave_1 added [ 165.743502][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.760359][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.798155][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.817575][ T8664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.827052][ T8664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.861916][ T8664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.883581][ T8664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.893178][ T8664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.936067][ T8664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.959757][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.970797][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.017267][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.037801][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.051164][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.062438][ T8666] device bridge_slave_0 entered promiscuous mode [ 166.087076][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.096857][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.107057][ T8666] device bridge_slave_1 entered promiscuous mode [ 166.195841][ T8664] device hsr_slave_0 entered promiscuous mode [ 166.273202][ T8664] device hsr_slave_1 entered promiscuous mode [ 166.360706][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.380980][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.483765][ T8662] device hsr_slave_0 entered promiscuous mode [ 166.541819][ T8662] device hsr_slave_1 entered promiscuous mode [ 166.611709][ T8662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.625010][ T8662] Cannot create hsr debugfs directory [ 166.704105][ T8666] team0: Port device team_slave_0 added [ 166.717738][ T8666] team0: Port device team_slave_1 added [ 166.755454][ T8668] chnl_net:caif_netlink_parms(): no params data found [ 166.801056][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.812987][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.851286][ T8666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.895626][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.906007][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.940102][ T8666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.956981][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.969256][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.982303][ T8668] device bridge_slave_0 entered promiscuous mode [ 167.011081][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.020263][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.034470][ T8668] device bridge_slave_1 entered promiscuous mode [ 167.134579][ T8666] device hsr_slave_0 entered promiscuous mode [ 167.201980][ T8666] device hsr_slave_1 entered promiscuous mode [ 167.271568][ T8666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.280449][ T8666] Cannot create hsr debugfs directory [ 167.295604][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.312873][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.372545][ T39] audit: type=1400 audit(1579841631.837:44): avc: denied { create } for pid=8664 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 167.376161][ T8668] team0: Port device team_slave_0 added [ 167.406209][ T39] audit: type=1400 audit(1579841631.867:45): avc: denied { write } for pid=8664 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 167.450075][ T39] audit: type=1400 audit(1579841631.867:46): avc: denied { read } for pid=8664 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 167.500545][ T8664] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.576055][ T8668] team0: Port device team_slave_1 added [ 167.604266][ T8664] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.710169][ T8664] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.828883][ T8664] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.914730][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.931636][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.981971][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.024006][ T8662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.127050][ T8662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.174172][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.189047][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.225581][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.255456][ T8662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.316346][ T8662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.395029][ T8666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.474028][ T8666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.557414][ T8666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.625103][ T8666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.794305][ T8668] device hsr_slave_0 entered promiscuous mode [ 168.861891][ T8668] device hsr_slave_1 entered promiscuous mode [ 168.931614][ T8668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.942187][ T8668] Cannot create hsr debugfs directory [ 169.099844][ T8668] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.181639][ T8668] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.223964][ T8668] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.315433][ T8668] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.423307][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.438093][ T8664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.470520][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.484311][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.494863][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.505118][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.524312][ T8664] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.541129][ T8666] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.558728][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.572243][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.585090][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.596635][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.615104][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.629410][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.649147][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.660471][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.683727][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.706286][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.720924][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.737086][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.749207][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.761632][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.775789][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.790802][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.805120][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.818948][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.831883][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.849775][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.868455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.879490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.890093][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.898623][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.908033][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.918384][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.937292][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.948492][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.960293][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.979577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.010848][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.030320][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.052240][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.070946][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.084912][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.112700][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.129458][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.142057][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.161915][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.180637][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.208331][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.239407][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.257657][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.286977][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.304503][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.317237][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.343309][ T8666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.375431][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.406717][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.429106][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.442683][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.459035][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.497711][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.518627][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.532917][ T3039] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.545405][ T3039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.556947][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.568739][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.589134][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.612211][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.626435][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.640566][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.656334][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.673738][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.694960][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.712086][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.735300][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.748668][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.764491][ T8664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.776966][ T8666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.785987][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.795786][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.808252][ T8668] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.829442][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.839172][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.850059][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.860738][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.870493][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.881594][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.892546][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.903868][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.914831][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.925300][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.935501][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.943909][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.953339][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.967807][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.986878][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.999455][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.031804][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.057190][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.087110][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.184822][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.216061][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.258319][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.294824][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.329361][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.364682][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.392735][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.419273][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.460534][ T8666] device veth0_vlan entered promiscuous mode [ 171.474849][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.496632][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.517056][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.540471][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.563996][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.585579][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.610769][ T8668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.637438][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.658470][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.675165][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.687652][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.719063][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.732019][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.744997][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.758561][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.778089][ T8666] device veth1_vlan entered promiscuous mode [ 171.797803][ T8664] device veth0_vlan entered promiscuous mode [ 171.817811][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.833131][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.847033][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.857580][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.882717][ T8664] device veth1_vlan entered promiscuous mode [ 171.892430][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.906825][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.931023][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.959577][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.972788][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.987119][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.009100][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.027992][ T8662] device veth0_vlan entered promiscuous mode [ 172.039245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.050950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.067339][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.078401][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.100174][ T8666] device veth0_macvtap entered promiscuous mode [ 172.121031][ T8666] device veth1_macvtap entered promiscuous mode [ 172.131575][ T8662] device veth1_vlan entered promiscuous mode [ 172.141120][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.153629][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.164139][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.174008][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.186008][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.200457][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.210727][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.223902][ T8664] device veth0_macvtap entered promiscuous mode [ 172.238325][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.248503][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.259577][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.268646][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.282772][ T8664] device veth1_macvtap entered promiscuous mode [ 172.292314][ T8668] device veth0_vlan entered promiscuous mode [ 172.311879][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.324259][ T8668] device veth1_vlan entered promiscuous mode [ 172.332437][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.342441][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.352342][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.364890][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.392375][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.411180][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.422974][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.433671][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.444254][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.456838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.475188][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.492013][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.512724][ T8664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.525422][ T8662] device veth0_macvtap entered promiscuous mode [ 172.537003][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.547381][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.558246][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.573380][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 172.588334][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.604514][ T8664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.620839][ T39] audit: type=1400 audit(1579841637.077:47): avc: denied { associate } for pid=8666 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 172.627113][ T8662] device veth1_macvtap entered promiscuous mode [ 172.672434][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.673050][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.697003][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.734685][ T8668] device veth0_macvtap entered promiscuous mode [ 172.752964][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.766698][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.784804][ T39] audit: type=1400 audit(1579841637.247:48): avc: denied { open } for pid=8680 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 172.818243][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.820058][ T39] audit: type=1400 audit(1579841637.247:49): avc: denied { kernel } for pid=8680 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 172.853919][ T8683] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 172.890100][ T8668] device veth1_macvtap entered promiscuous mode [ 172.914568][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.934883][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.948902][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.963170][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 172.979697][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.994421][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.007248][ T8683] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 04:53:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) [ 173.037455][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.048313][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.063607][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.076710][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.093240][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.118671][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.138098][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 04:53:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400ffff0000"], 0x6) [ 173.156364][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.173194][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 04:53:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400ffff0000"], 0x6) [ 173.188001][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.203168][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.216005][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 04:53:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400ffff0000"], 0x6) [ 173.228958][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.244480][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.254315][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.265236][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.275974][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.286418][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.315954][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.329700][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.342525][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.355414][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.367231][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.380857][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.394176][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.418141][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.430653][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.465573][ T8710] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 173.486882][ C0] hrtimer: interrupt took 716796 ns 04:53:58 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffff6, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e558c5986f0000000000000087695931515781ae36a4d148f269399022f5ce7ec3b6d946be4fac9508cce4df4d7015f5590bbfb45e2584f446722053f1502598808b355f7b815bdb22ba86dddc0187f894de7e81145dd688759944bd09b0f55e7ca54b07bd9189de8defcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605fa26c0e48a80a6bd544fa300d066a4d162d7ef85002024faf0831fffbb5f1a12a6f5f158a752eaf25a859b40a57381147cdd7c9fd7ceae30304783fd7f2eec79c49b69a61287b591371f3f60b34470692217a8930a11f0e0c796c587da235e5ed34ce844827033a3bac99ab9498f944fec73001fd8be2b4b36b0b3c9672af727831275017a6d5aff50c09bfc22ebf548906138e7dae98da3b8a39bf88000000000000000000000000000000339b567e58689a4da64cf31b4ea5066103ba670c2772b548c8f138af7029f1226901c86f510b46e3a027d6135f99b585d0aa73b71cd8e7448f107336ed8a46a35936d5a24a92a4e2be4b78ca3d304e40f3931319f8b3e3f6feebfdcefa894f5b2537fa42349e6957c1b0965242194e87e3ca02"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xc048) 04:53:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400ffff0000"], 0x6) 04:53:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[]}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) read(r0, &(0x7f0000000040)=""/8, 0x8) [ 175.328452][ T0] NOHZ: local_softirq_pending 08 [ 194.212696][ T23] kasan: CONFIG_KASAN_INLINE enabled [ 194.226188][ T23] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 194.254874][ T23] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 194.261974][ T23] CPU: 2 PID: 23 Comm: kworker/2:0 Not tainted 5.5.0-rc7-syzkaller #0 [ 194.261974][ T23] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 194.261974][ T23] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 194.261974][ T23] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 194.261974][ T23] Code: c3 e8 92 b0 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 43 f0 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 194.261974][ T23] RSP: 0018:ffffc900005279f0 EFLAGS: 00010206 [ 194.261974][ T23] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff83998455 [ 194.261974][ T23] RDX: 0000000000000003 RSI: ffffffff835804dd RDI: 0000000000000018 [ 194.261974][ T23] RBP: ffffc900005279f8 R08: ffff88802c780700 R09: fffffbfff165e7ae [ 194.261974][ T23] R10: fffffbfff165e7ad R11: ffffffff8b2f3d6f R12: dffffc0000000000 [ 194.261974][ T23] R13: ffffc90000527b20 R14: ffffc90000527b20 R15: 000000000000001d [ 194.261974][ T23] FS: 0000000000000000(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 194.261974][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.261974][ T23] CR2: ffffffffff600400 CR3: 000000001fa53000 CR4: 0000000000340ee0 [ 194.261974][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.261974][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.261974][ T23] Call Trace: [ 194.261974][ T23] security_socket_sendmsg+0x77/0xc0 [ 194.261974][ T23] sock_sendmsg+0x45/0x130 [ 194.261974][ T23] kernel_sendmsg+0x44/0x50 [ 194.261974][ T23] rxrpc_send_keepalive+0x1ff/0x940 [ 194.261974][ T23] ? rxrpc_reject_packets+0xab0/0xab0 [ 194.261974][ T23] ? _raw_spin_unlock_bh+0x2c/0x30 [ 194.261974][ T23] ? __local_bh_enable_ip+0x15a/0x270 [ 194.261974][ T23] ? lockdep_hardirqs_on+0x421/0x5e0 [ 194.261974][ T23] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 194.261974][ T23] ? __local_bh_enable_ip+0x15a/0x270 [ 194.261974][ T23] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 194.261974][ T23] ? rxrpc_peer_add_rtt+0x650/0x650 [ 194.261974][ T23] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 194.261974][ T23] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 194.261974][ T23] ? trace_hardirqs_on+0x67/0x240 [ 194.261974][ T23] process_one_work+0x9af/0x1740 [ 194.261974][ T23] ? pwq_dec_nr_in_flight+0x320/0x320 [ 194.261974][ T23] ? lock_acquire+0x190/0x410 [ 194.261974][ T23] worker_thread+0x98/0xe40 [ 194.261974][ T23] kthread+0x361/0x430 [ 194.261974][ T23] ? process_one_work+0x1740/0x1740 [ 194.261974][ T23] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 194.261974][ T23] ret_from_fork+0x24/0x30 [ 194.261974][ T23] Modules linked in: [ 195.073475][ T23] ---[ end trace aea6f51b52d754c3 ]--- [ 195.082771][ T23] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 195.090086][ T23] Code: c3 e8 92 b0 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 43 f0 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 195.119753][ T23] RSP: 0018:ffffc900005279f0 EFLAGS: 00010206 [ 195.127342][ T23] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff83998455 [ 195.143941][ T23] RDX: 0000000000000003 RSI: ffffffff835804dd RDI: 0000000000000018 [ 195.155135][ T23] RBP: ffffc900005279f8 R08: ffff88802c780700 R09: fffffbfff165e7ae [ 195.168418][ T23] R10: fffffbfff165e7ad R11: ffffffff8b2f3d6f R12: dffffc0000000000 [ 195.180745][ T23] R13: ffffc90000527b20 R14: ffffc90000527b20 R15: 000000000000001d [ 195.196506][ T23] FS: 0000000000000000(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 195.220877][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.241986][ T23] CR2: ffffffffff600400 CR3: 000000001fa53000 CR4: 0000000000340ee0 [ 195.271799][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.305185][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.333433][ T23] Kernel panic - not syncing: Fatal exception [ 195.343344][ T23] Kernel Offset: disabled [ 195.343344][ T23] Rebooting in 86400 seconds..