Warning: Permanently added '[localhost]:9786' (ECDSA) to the list of known hosts. [ 107.053255][ T40] audit: type=1400 audit(1580283162.420:42): avc: denied { map } for pid=9011 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/29 07:32:42 fuzzer started 2020/01/29 07:32:44 dialing manager at 10.0.2.10:44629 [ 109.360772][ T40] audit: type=1400 audit(1580283164.730:43): avc: denied { integrity } for pid=9031 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 2020/01/29 07:32:44 syscalls: 2935 2020/01/29 07:32:44 code coverage: enabled 2020/01/29 07:32:44 comparison tracing: enabled 2020/01/29 07:32:44 extra coverage: enabled 2020/01/29 07:32:44 setuid sandbox: enabled 2020/01/29 07:32:44 namespace sandbox: enabled 2020/01/29 07:32:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/29 07:32:44 fault injection: enabled 2020/01/29 07:32:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/29 07:32:44 net packet injection: enabled 2020/01/29 07:32:44 net device setup: enabled 2020/01/29 07:32:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/29 07:32:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:33:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x8005}}], 0x30}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 07:33:34 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x1, 0x3, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYBLOB="72a1c45ecb82e4ecd5326f703d5c131fe714d625f8e51bf7ed475c1e5203a47bc69442fff02bfab787ff39bf000d60e87f7708a365efe41f4e0fb3a92d73d5c9bb21ae9fb8bb07f6cac323e38bb53fc76eaf0562d47423e3e0fdfe5e749d916427d86210b6e7ddaa8d045af357637186c765215544baf133e9138efeff73b0d6a6b9a92ea9af3ed8b22c20c828a9d435dde6b945fa056f5fd1350b6ac578e23bc8ce7b0a1767fc3b99ae882f4ba6824fffbc5d3e84eec7fbf439a305aab54753b6e872caf24e7de7e2b0c3f3bd13001698e4afe837682e0000000000000000"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2) syz_open_dev$sg(0x0, 0x0, 0x5) [ 158.815759][ T40] audit: type=1400 audit(1580283214.180:44): avc: denied { map } for pid=9034 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23587 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 07:33:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="726177000000000000000000003f0000000000000000000000000000000000000200000003000000f8020000d0010000d0010000d001000000000000000000006002000060020000600200006002000060020000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007001d0010000000000000000000000000000000000000000c800636f6e6e747261636b000000000000000000000000000000000000000003ac141400000000000000000000000000000000000000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380074696d6500000000000000000000000000000000000fe231c8545ac9a300000000000000000000000000000000000000000000030000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000900000000000000000000000000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 159.655732][ T9035] IPVS: ftp: loaded support on port[0] = 21 [ 159.692208][ T9037] IPVS: ftp: loaded support on port[0] = 21 07:33:35 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) [ 159.716714][ T9039] IPVS: ftp: loaded support on port[0] = 21 [ 159.945076][ T9041] IPVS: ftp: loaded support on port[0] = 21 [ 160.051861][ T9035] chnl_net:caif_netlink_parms(): no params data found [ 160.078094][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 160.231858][ T9037] chnl_net:caif_netlink_parms(): no params data found [ 160.276165][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.291284][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.318195][ T9039] device bridge_slave_0 entered promiscuous mode [ 160.353826][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.362268][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.373582][ T9039] device bridge_slave_1 entered promiscuous mode [ 160.391841][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.402283][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.416791][ T9035] device bridge_slave_0 entered promiscuous mode [ 160.436155][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.447137][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.467599][ T9035] device bridge_slave_1 entered promiscuous mode [ 160.508059][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.564035][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.631341][ T9035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.674438][ T9035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.746276][ T9039] team0: Port device team_slave_0 added [ 160.781479][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.814098][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.850961][ T9037] device bridge_slave_0 entered promiscuous mode [ 160.898382][ T9039] team0: Port device team_slave_1 added [ 160.921392][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.939559][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.955078][ T9037] device bridge_slave_1 entered promiscuous mode [ 160.972051][ T9035] team0: Port device team_slave_0 added [ 161.000545][ T9035] team0: Port device team_slave_1 added [ 161.031626][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.044701][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.117517][ T9035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.166234][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 161.234706][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.256273][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.329038][ T9035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.359272][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.378498][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.462304][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.503753][ T9037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.537136][ T9037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.583855][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.610985][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.711331][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.884592][ T9035] device hsr_slave_0 entered promiscuous mode [ 161.937773][ T9035] device hsr_slave_1 entered promiscuous mode [ 162.048478][ T9037] team0: Port device team_slave_0 added [ 162.108102][ T9039] device hsr_slave_0 entered promiscuous mode [ 162.185848][ T9039] device hsr_slave_1 entered promiscuous mode [ 162.226136][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.238772][ T9039] Cannot create hsr debugfs directory [ 162.248895][ T9037] team0: Port device team_slave_1 added [ 162.266041][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.275786][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.285384][ T9041] device bridge_slave_0 entered promiscuous mode [ 162.303242][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.314044][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.355039][ T9037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.372621][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.381353][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.392421][ T9041] device bridge_slave_1 entered promiscuous mode [ 162.417554][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.426302][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.457531][ T9037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.492585][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.517410][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.577388][ T9041] team0: Port device team_slave_0 added [ 162.627506][ T9037] device hsr_slave_0 entered promiscuous mode [ 162.678152][ T9037] device hsr_slave_1 entered promiscuous mode [ 162.775736][ T9037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.786156][ T9037] Cannot create hsr debugfs directory [ 162.803517][ T9041] team0: Port device team_slave_1 added [ 162.850596][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.859400][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.890027][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.910355][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.918567][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.961634][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.171558][ T9041] device hsr_slave_0 entered promiscuous mode [ 163.286657][ T9041] device hsr_slave_1 entered promiscuous mode [ 163.346245][ T9041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.362633][ T9041] Cannot create hsr debugfs directory [ 163.445774][ T40] audit: type=1400 audit(1580283218.810:45): avc: denied { create } for pid=9039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 163.501214][ T9035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.513796][ T40] audit: type=1400 audit(1580283218.820:46): avc: denied { write } for pid=9039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 163.563055][ T40] audit: type=1400 audit(1580283218.830:47): avc: denied { read } for pid=9039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 163.653000][ T9035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.728121][ T9039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.832381][ T9039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.885167][ T9035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.961456][ T9035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.052164][ T9039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.153883][ T9039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.301259][ T9037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.402453][ T9037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.501356][ T9037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.592105][ T9037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.713099][ T9041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.778516][ T9041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.852301][ T9041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.922032][ T9041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.065214][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.103441][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.142607][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.170062][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.208880][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.238857][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.248366][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.261141][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.272936][ T3039] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.283506][ T3039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.321317][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.342971][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.368613][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.406455][ T9035] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.442478][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.471929][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.508943][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.536648][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.556717][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.588088][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.616483][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.635691][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.657518][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.699960][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.737770][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.762093][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.782487][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.793892][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.810797][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.820880][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.830361][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.852469][ T9037] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.871169][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.887814][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.899567][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.921794][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.931381][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.941168][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.951106][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.962506][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.974942][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.987731][ T3039] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.998585][ T3039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.009343][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.019766][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.030310][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.045881][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.059167][ T3039] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.070018][ T3039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.082272][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.103205][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.126499][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.151500][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.171082][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.181688][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.193954][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.205396][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.222303][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.238415][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.262582][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.276726][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.294192][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.311682][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.328878][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.342414][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.357248][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.379777][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.390111][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.402416][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.418939][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.436220][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.450657][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.471602][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.489413][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.504136][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.522316][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.539766][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.560762][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.591573][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.612941][ T9037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.635394][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.658008][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.683927][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.709156][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.727236][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.740865][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.757957][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.774959][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.821574][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.837641][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.853470][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.869258][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.891627][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.905291][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.915885][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.926902][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.941520][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.965251][ T9035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.981996][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.992300][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.001106][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.022296][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.037493][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.048956][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.059541][ T9037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.084314][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.104799][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.134072][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.148479][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.162673][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.181161][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.200168][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.214886][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.243355][ T9039] device veth0_vlan entered promiscuous mode [ 167.263404][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.294553][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.307626][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.319030][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.333675][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.369054][ T9039] device veth1_vlan entered promiscuous mode [ 167.378963][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.392765][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.404440][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.425302][ T9035] device veth0_vlan entered promiscuous mode [ 167.442870][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.455591][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.465727][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.475285][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.500042][ T9035] device veth1_vlan entered promiscuous mode [ 167.514360][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.525113][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.536504][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.546510][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.556592][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.566930][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.579189][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.588532][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.607995][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.616665][ T9037] device veth0_vlan entered promiscuous mode [ 167.642123][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.651648][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.663288][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.679698][ T9039] device veth0_macvtap entered promiscuous mode [ 167.691648][ T9039] device veth1_macvtap entered promiscuous mode [ 167.710585][ T9037] device veth1_vlan entered promiscuous mode [ 167.743143][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.753459][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.764377][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.776753][ T3404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.790487][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.803476][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.814474][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.827353][ T9035] device veth0_macvtap entered promiscuous mode [ 167.848798][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.863273][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.872864][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.882272][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.891753][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.901429][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.917336][ T9035] device veth1_macvtap entered promiscuous mode [ 167.938898][ T9037] device veth0_macvtap entered promiscuous mode [ 167.975959][ T9037] device veth1_macvtap entered promiscuous mode [ 167.978217][ T40] audit: type=1400 audit(1580283223.350:48): avc: denied { associate } for pid=9039 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 168.034450][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.066408][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.083115][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.097491][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.106887][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.118341][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.128441][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.155415][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.169151][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.179504][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.202771][ T9041] device veth0_vlan entered promiscuous mode [ 168.214178][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.231537][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.268995][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.288511][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.291517][ T9054] Cannot find add_set index 0 as target [ 168.307687][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.339119][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.362305][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.388759][ T9041] device veth1_vlan entered promiscuous mode [ 168.415346][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.446631][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 07:33:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) [ 168.469236][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.490278][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.507548][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.529235][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.553322][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.594610][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.619813][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.645235][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.671009][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 07:33:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) [ 168.687348][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.702204][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 07:33:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x105084) [ 168.712956][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.726951][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.739588][ T40] audit: type=1400 audit(1580283224.110:49): avc: denied { open } for pid=9063 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 168.770525][ T40] audit: type=1400 audit(1580283224.110:50): avc: denied { kernel } for pid=9063 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 168.824448][ T40] audit: type=1400 audit(1580283224.110:51): avc: denied { confidentiality } for pid=9063 comm="syz-executor.2" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 168.836724][ T9067] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 168.836724][ T9067] program syz-executor.1 not setting count and/or reply_len properly [ 168.846088][ T9041] device veth0_macvtap entered promiscuous mode [ 168.849119][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.849514][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.849917][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.853682][ T9041] device veth1_macvtap entered promiscuous mode [ 168.873606][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.898769][ T9069] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 168.898769][ T9069] program syz-executor.1 not setting count and/or reply_len properly [ 168.966330][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.991004][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.004894][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.031026][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 07:33:44 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) [ 169.058139][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.081243][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.094443][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.109020][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.121445][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.135015][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.146918][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.158985][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.171743][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.405543][ C0] hrtimer: interrupt took 29628 ns [ 170.574160][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.609679][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.628482][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.646607][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 07:33:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) msgctl$IPC_SET(0x0, 0x2, 0x0) [ 170.663458][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:33:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x105084) 07:33:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) 07:33:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 07:33:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x8005}}], 0x30}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 07:33:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$alg(r0, &(0x7f00000000c0)=""/1, 0x1) 07:33:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x8005}}], 0x30}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 07:33:46 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) [ 174.381269][ T0] NOHZ: local_softirq_pending 08 [ 190.427881][ T23] kasan: CONFIG_KASAN_INLINE enabled [ 190.438869][ T23] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 190.472950][ T23] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 190.475724][ T23] CPU: 2 PID: 23 Comm: kworker/2:0 Not tainted 5.5.0-syzkaller #0 [ 190.475724][ T23] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 190.475724][ T23] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 190.475724][ T23] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 190.475724][ T23] Code: c3 e8 42 b1 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 43 eb 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 190.475724][ T23] RSP: 0018:ffffc900005279e0 EFLAGS: 00010206 [ 190.475724][ T23] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399df75 [ 190.475724][ T23] RDX: 0000000000000003 RSI: ffffffff835853bd RDI: 0000000000000018 [ 190.475724][ T23] RBP: ffffc900005279e8 R08: ffff88802c780700 R09: fffffbfff165a976 [ 190.475724][ T23] R10: fffffbfff165a975 R11: ffffffff8b2d4baf R12: dffffc0000000000 [ 190.475724][ T23] R13: ffffc90000527b10 R14: ffffc90000527b10 R15: 000000000000001d [ 190.475724][ T23] FS: 0000000000000000(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 190.475724][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.475724][ T23] CR2: ffffffffff600400 CR3: 000000001e5a7000 CR4: 0000000000340ee0 [ 190.475724][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.475724][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.475724][ T23] Call Trace: [ 190.475724][ T23] security_socket_sendmsg+0x77/0xc0 [ 190.475724][ T23] sock_sendmsg+0x45/0x130 [ 190.475724][ T23] kernel_sendmsg+0x44/0x50 [ 190.475724][ T23] rxrpc_send_keepalive+0x1ff/0x940 [ 190.475724][ T23] ? rxrpc_reject_packets+0xab0/0xab0 [ 190.475724][ T23] ? _raw_spin_unlock_bh+0x2c/0x30 [ 190.475724][ T23] ? __local_bh_enable_ip+0x15a/0x270 [ 190.475724][ T23] ? lockdep_hardirqs_on+0x421/0x5e0 [ 190.475724][ T23] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 190.475724][ T23] ? __local_bh_enable_ip+0x15a/0x270 [ 190.475724][ T23] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 190.475724][ T23] ? rxrpc_peer_add_rtt+0x650/0x650 [ 190.475724][ T23] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 190.475724][ T23] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 190.475724][ T23] ? trace_hardirqs_on+0x67/0x240 [ 190.475724][ T23] process_one_work+0xa05/0x17a0 [ 190.475724][ T23] ? mark_held_locks+0xf0/0xf0 [ 190.475724][ T23] ? pwq_dec_nr_in_flight+0x320/0x320 [ 190.475724][ T23] ? lock_acquire+0x190/0x410 [ 190.475724][ T23] worker_thread+0x98/0xe40 [ 190.475724][ T23] kthread+0x361/0x430 [ 190.475724][ T23] ? process_one_work+0x17a0/0x17a0 [ 190.475724][ T23] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 190.475724][ T23] ret_from_fork+0x24/0x30 [ 190.475724][ T23] Modules linked in: [ 190.894335][ T23] ---[ end trace 156c55f549f37ad2 ]--- [ 190.902339][ T23] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 190.912210][ T23] Code: c3 e8 42 b1 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 43 eb 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 190.942875][ T23] RSP: 0018:ffffc900005279e0 EFLAGS: 00010206 [ 190.952002][ T23] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399df75 [ 190.964170][ T23] RDX: 0000000000000003 RSI: ffffffff835853bd RDI: 0000000000000018 [ 190.980974][ T23] RBP: ffffc900005279e8 R08: ffff88802c780700 R09: fffffbfff165a976 [ 190.992292][ T23] R10: fffffbfff165a975 R11: ffffffff8b2d4baf R12: dffffc0000000000 [ 191.004854][ T23] R13: ffffc90000527b10 R14: ffffc90000527b10 R15: 000000000000001d [ 191.016717][ T23] FS: 0000000000000000(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 191.029505][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.040184][ T23] CR2: ffffffffff600400 CR3: 000000001e5a7000 CR4: 0000000000340ee0 [ 191.054411][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.076380][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.091209][ T23] Kernel panic - not syncing: Fatal exception [ 191.100737][ T23] Kernel Offset: disabled [ 191.100737][ T23] Rebooting in 86400 seconds..