Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 30.517735] kauditd_printk_skb: 9 callbacks suppressed [ 30.517748] audit: type=1800 audit(1540415791.851:33): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 30.544763] audit: type=1800 audit(1540415791.861:34): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.209750] audit: type=1400 audit(1540415806.551:35): avc: denied { map } for pid=5496 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts. 2018/10/24 21:16:53 fuzzer started [ 51.722736] audit: type=1400 audit(1540415813.061:36): avc: denied { map } for pid=5505 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 53.340758] as (5513) used greatest stack depth: 14960 bytes left 2018/10/24 21:16:55 dialing manager at 10.128.0.26:35615 2018/10/24 21:16:55 syscalls: 1 2018/10/24 21:16:55 code coverage: enabled 2018/10/24 21:16:55 comparison tracing: enabled 2018/10/24 21:16:55 setuid sandbox: enabled 2018/10/24 21:16:55 namespace sandbox: enabled 2018/10/24 21:16:55 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/24 21:16:55 fault injection: enabled 2018/10/24 21:16:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/24 21:16:55 net packed injection: enabled 2018/10/24 21:16:55 net device setup: enabled [ 60.074090] audit: type=1400 audit(1540415821.411:37): avc: denied { map } for pid=5521 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 21:19:56 executing program 0: [ 235.127333] audit: type=1400 audit(1540415996.461:38): avc: denied { map } for pid=5523 comm="syz-executor0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14754 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 235.212079] IPVS: ftp: loaded support on port[0] = 21 21:19:56 executing program 1: [ 235.509224] IPVS: ftp: loaded support on port[0] = 21 21:19:56 executing program 2: [ 235.598547] audit: type=1400 audit(1540415996.931:39): avc: denied { map } for pid=5505 comm="syz-fuzzer" path="/root/syzkaller-shm864194891" dev="sda1" ino=16501 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 235.727493] IPVS: ftp: loaded support on port[0] = 21 21:19:57 executing program 3: [ 236.208144] IPVS: ftp: loaded support on port[0] = 21 21:19:57 executing program 4: [ 236.803591] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.825174] IPVS: ftp: loaded support on port[0] = 21 [ 236.829923] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.838087] device bridge_slave_0 entered promiscuous mode [ 236.991052] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.997447] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.009866] device bridge_slave_1 entered promiscuous mode 21:19:58 executing program 5: [ 237.180774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.339739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.456293] IPVS: ftp: loaded support on port[0] = 21 [ 237.573159] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.584624] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.593234] device bridge_slave_0 entered promiscuous mode [ 237.678343] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.734416] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.769186] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.776574] device bridge_slave_1 entered promiscuous mode [ 237.852345] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.883310] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.893565] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.901871] device bridge_slave_0 entered promiscuous mode [ 237.920711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.037135] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.051304] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.058737] device bridge_slave_1 entered promiscuous mode [ 238.083112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.213873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.338093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.373898] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.380863] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.395592] device bridge_slave_0 entered promiscuous mode [ 238.502580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.513425] team0: Port device team_slave_0 added [ 238.521109] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.538030] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.545855] device bridge_slave_1 entered promiscuous mode [ 238.605264] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.648010] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.680089] team0: Port device team_slave_1 added [ 238.706944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.735409] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.773265] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.818714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.853955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.951586] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.981025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.073525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.111463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.139993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.174685] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.198893] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.206301] device bridge_slave_0 entered promiscuous mode [ 239.231352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.244453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.252920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.272495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 239.299230] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.309651] team0: Port device team_slave_0 added [ 239.316217] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.325605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.385772] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.400122] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.407510] device bridge_slave_1 entered promiscuous mode [ 239.442597] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.450816] team0: Port device team_slave_1 added [ 239.462129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.555066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.582296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.604990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 239.613870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.629534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.637550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.661373] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.668773] team0: Port device team_slave_0 added [ 239.689639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.709314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 239.734626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.752046] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.758476] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.780813] device bridge_slave_0 entered promiscuous mode [ 239.797806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.813242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.821614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.855438] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.865962] team0: Port device team_slave_1 added [ 239.884481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.899719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.907652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.942748] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.959071] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.966484] device bridge_slave_1 entered promiscuous mode [ 239.995390] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.031136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.048683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.082733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.115500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.162736] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.179745] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.187148] team0: Port device team_slave_0 added [ 240.216072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.272085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.285586] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.315518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.339257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.347310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.365666] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.374384] team0: Port device team_slave_1 added [ 240.403082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.426091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.479127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.486408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.499691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.541990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 240.559386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.575849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.599498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.609470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.666637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.693576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.709351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.721017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.782529] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.794939] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.820356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.839852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.898576] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.905142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.912200] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.918575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.951351] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.997818] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.039431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.058206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.084058] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.100415] team0: Port device team_slave_0 added [ 241.249600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.282497] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.299692] team0: Port device team_slave_1 added [ 241.379605] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.400360] team0: Port device team_slave_0 added [ 241.409514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 241.425591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.444642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.530301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.537250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.557848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.583635] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.591576] team0: Port device team_slave_1 added [ 241.639444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.646621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.660248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.728421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 241.754271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.776432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.788022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.801821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.817516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.842192] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.848579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.855296] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.861738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.874004] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.900588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.909429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.926291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.031263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.038409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.047432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.132525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.148484] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.154919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.161610] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.167988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.176470] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.182907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.193336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.259014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.269368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.460999] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.467398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.474121] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.480534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.521703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.236897] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.243364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.250099] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.256470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.276603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.308972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.316289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.607100] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.613574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.620298] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.626671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.642281] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.359634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.040490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.524275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.999418] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.005607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.013974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.094467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.378316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.558053] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.581360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.589433] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.880007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.043989] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.090230] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.096421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.110271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.398565] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.429699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.440266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.469888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.500177] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.506374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.520077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.611289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.636806] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.960180] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.972494] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.987232] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.025159] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.389731] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.396074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.404429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.519732] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.526045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.534168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.859940] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.039185] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.287022] audit: type=1400 audit(1540416011.621:40): avc: denied { associate } for pid=5524 comm="syz-executor0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 21:20:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0xad, {{0x2, 0x4e21}}}, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x143) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0xfffffffffffffce2, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1, 0x0, 0x16c}}], 0x1, 0x0, &(0x7f0000008bc0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)=r3, 0xfffffe8f) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x300000a, 0x8013, r0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000840)={0xc21, {{0x2, 0x4e24, @remote}}}, 0x88) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x1, 0x2, 0x2, 0xc, 0x7, 0xc8, 0x3}, 0x20) openat$cgroup_procs(r0, &(0x7f0000000d80)='cgroup.threads\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x397, 0x1}, &(0x7f0000000800)=0x90) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000062b612a87f"], &(0x7f0000000780)=0x1) r4 = socket$netlink(0x10, 0x3, 0x1001f) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000003c0)={0x987, 0x3, 0x8}) recvmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000a80)=""/153, 0x99}], 0x1, &(0x7f0000000b40)=""/83, 0x53, 0x9}, 0xff) syz_genetlink_get_family_id$team(&(0x7f0000000c00)='team\x00') accept4(r5, &(0x7f0000000c40)=@hci, &(0x7f0000000cc0)=0x80, 0x80000) getpeername$packet(r0, &(0x7f0000004940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004980)=0x14) clock_gettime(0x0, &(0x7f0000008000)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000007e80)=[{{&(0x7f00000049c0)=@ll, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004a40)=""/225, 0xe1}, {&(0x7f0000004b40)=""/4096, 0x1000}], 0x2, &(0x7f0000005c40)=""/193, 0xc1, 0x3f7a}, 0x4}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005dc0)=""/64, 0x40}, {&(0x7f0000005e00)=""/225, 0xe1}, {&(0x7f0000005f00)=""/128, 0x80}], 0x3, &(0x7f0000005fc0)=""/4096, 0x1000, 0xab3}, 0x5}, {{&(0x7f0000006fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f00000070c0)=[{&(0x7f0000007040)=""/61, 0x3d}, {&(0x7f0000007080)}], 0x2, 0x0, 0x0, 0xc26e}}, {{&(0x7f0000007100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000007180)=""/4, 0x4}, {&(0x7f00000071c0)=""/107, 0x6b}, {&(0x7f0000007240)=""/70, 0x46}, {&(0x7f00000072c0)=""/204, 0xcc}], 0x4, &(0x7f0000007400)=""/58, 0x3a, 0xffffffff}, 0x200000}, {{&(0x7f0000007440)=@ax25, 0x80, &(0x7f00000077c0)=[{&(0x7f00000074c0)=""/144, 0x90}, {&(0x7f0000007580)=""/133, 0x85}, {&(0x7f0000007640)=""/3, 0x3}, {&(0x7f0000007680)=""/163, 0xa3}, {&(0x7f0000007740)=""/4, 0x4}, {&(0x7f0000007780)=""/47, 0x2f}], 0x6, 0x0, 0x0, 0xfa}}, {{&(0x7f0000007840)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000007e00)=[{&(0x7f00000078c0)=""/120, 0x78}, {&(0x7f0000007940)=""/82, 0x52}, {&(0x7f00000079c0)=""/191, 0xbf}, {&(0x7f0000007a80)=""/209, 0xd1}, {&(0x7f0000007b80)=""/236, 0xec}, {&(0x7f0000007c80)=""/23, 0x17}, {&(0x7f0000007cc0)=""/86, 0x56}, {&(0x7f0000007d40)=""/162, 0xa2}], 0x8, 0x0, 0x0, 0x20}, 0x80000001}], 0x6, 0x10060, &(0x7f0000008040)={r7, r8+30000000}) accept$packet(r6, &(0x7f00000080c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008100)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000081c0)={@empty, @broadcast}, &(0x7f0000008200)=0xc) 21:20:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f00000031c0)=@pptp, 0x80, &(0x7f0000004480), 0x0, &(0x7f0000004500)=""/42, 0x2a, 0xfffffffffffffff8}}], 0x1, 0x0, &(0x7f0000006200)={0x77359400}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) [ 251.399440] kasan: CONFIG_KASAN_INLINE enabled [ 251.404175] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 251.411751] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 251.417991] CPU: 0 PID: 7002 Comm: syz-executor0 Not tainted 4.19.0+ #80 [ 251.424835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.434290] RIP: 0010:rb_erase+0x306/0x3710 [ 251.438613] Code: c7 81 28 01 00 00 f2 f2 f2 f2 c7 81 2c 01 00 00 00 f2 f2 f2 48 89 f9 65 48 8b 1c 25 28 00 00 00 48 89 5d d0 31 db 48 c1 e9 03 <42> 80 3c 01 00 0f 85 41 1c 00 00 4c 8d 48 10 4c 8b 78 08 48 b9 00 [ 251.457535] RSP: 0018:ffff880185de6918 EFLAGS: 00010202 [ 251.462906] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 251.470172] RDX: 1ffff10030bbcd2b RSI: ffffffff8af92020 RDI: 0000000000000008 [ 251.477437] RBP: ffff880185de7320 R08: dffffc0000000000 R09: ffffed0030bbce53 [ 251.484705] R10: ffffed0030bbce53 R11: 0000000000000003 R12: ffff8801bac3d7b0 [ 251.491967] R13: dffffc0000000000 R14: ffff880185de72f8 R15: ffff880185de7438 [ 251.499234] FS: 00007f0a951a0700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 251.507455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.513331] CR2: 0000001b2cf27000 CR3: 00000001c496c000 CR4: 00000000001406f0 [ 251.520610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.527890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.535157] Call Trace: [ 251.537758] ? rb_insert_color+0x1460/0x1460 [ 251.542222] ? noop_count+0x40/0x40 [ 251.545852] ? print_bfs_bug+0x80/0x80 [ 251.549750] ? mark_held_locks+0x130/0x130 [ 251.553976] ? zap_class+0x640/0x640 [ 251.557694] ? check_usage+0x1aa/0x790 [ 251.561580] ? noop_count+0x40/0x40 [ 251.565246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.570787] ? check_usage_forwards+0x3d0/0x3d0 [ 251.575461] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 251.580473] ? __bfs+0x321/0x780 [ 251.583871] ? modules_open+0xa0/0xa0 [ 251.587682] ? lockdep_on+0x50/0x50 [ 251.591308] ? print_bfs_bug+0x80/0x80 [ 251.595239] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 251.600193] ? kasan_check_read+0x11/0x20 [ 251.604341] ? graph_lock+0x9c/0x270 [ 251.608049] ? find_held_lock+0x36/0x1c0 [ 251.612106] ? trace_event_raw_event_lock_acquire+0x440/0x440 [ 251.617991] ? kasan_check_read+0x11/0x20 [ 251.622137] ? print_usage_bug+0xc0/0xc0 [ 251.626207] ? print_usage_bug+0xc0/0xc0 [ 251.630265] ? mark_held_locks+0x130/0x130 [ 251.634500] ? __lock_acquire+0x62f/0x4c20 [ 251.638736] ? kasan_check_read+0x11/0x20 [ 251.642894] ? mark_held_locks+0x130/0x130 [ 251.647124] ? print_usage_bug+0xc0/0xc0 [ 251.651191] ? mark_held_locks+0x130/0x130 [ 251.655425] ? zap_class+0x640/0x640 [ 251.659134] ? print_usage_bug+0xc0/0xc0 [ 251.663201] ? __lock_acquire+0x62f/0x4c20 [ 251.667439] ? mark_held_locks+0x130/0x130 [ 251.671670] ? lock_downgrade+0x900/0x900 [ 251.675894] ? ext4_es_scan+0x960/0x960 [ 251.679872] ? zap_class+0x640/0x640 [ 251.683588] ? kasan_check_read+0x11/0x20 [ 251.687746] ? do_raw_write_lock+0x14f/0x310 [ 251.692159] ? do_raw_write_trylock+0x270/0x270 [ 251.696832] ? lock_acquire+0x1ed/0x520 [ 251.700832] ? integrity_inode_free+0x77/0x320 [ 251.705435] ? kasan_check_read+0x11/0x20 [ 251.709582] ? do_raw_write_lock+0x14f/0x310 [ 251.713990] ? do_raw_read_unlock+0x70/0x70 [ 251.718313] ? kasan_check_read+0x11/0x20 [ 251.722462] integrity_inode_free+0x12f/0x320 [ 251.727005] security_inode_free+0x19/0x90 [ 251.731279] __destroy_inode+0x328/0x820 [ 251.735344] ? clear_nlink+0xe0/0xe0 [ 251.739057] ? evict+0x5d8/0x980 [ 251.742417] ? lock_downgrade+0x900/0x900 [ 251.746603] ? __inode_wait_for_writeback+0x2cf/0x380 [ 251.751803] destroy_inode+0xda/0x200 [ 251.755599] ? __destroy_inode+0x820/0x820 [ 251.759837] evict+0x5e0/0x980 [ 251.763051] ? destroy_inode+0x200/0x200 [ 251.767110] ? iput+0x671/0xa90 [ 251.770385] ? lock_downgrade+0x900/0x900 [ 251.774531] ? kasan_check_read+0x11/0x20 [ 251.778678] ? do_raw_spin_trylock+0x270/0x270 [ 251.783273] ? lock_downgrade+0x900/0x900 [ 251.787421] iput+0x679/0xa90 [ 251.790527] ? inode_add_lru+0x2a0/0x2a0 [ 251.794628] ? up_write+0x7b/0x220 [ 251.798171] ? down_write_nested+0x130/0x130 [ 251.802576] ? down_write_nested+0x130/0x130 [ 251.806979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.812539] ? check_preemption_disabled+0x48/0x280 [ 251.817576] ext4_ioctl+0x236f/0x4210 [ 251.821378] ? ext4_ioctl_group_add+0x560/0x560 [ 251.826046] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 251.830970] ? kasan_check_read+0x11/0x20 [ 251.835155] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 251.840429] ? rcu_softirq_qs+0x20/0x20 [ 251.844399] ? check_preemption_disabled+0x48/0x280 [ 251.849416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.854950] ? avc_has_extended_perms+0xab2/0x15a0 [ 251.859893] ? avc_ss_reset+0x190/0x190 [ 251.863894] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 251.868821] ? kasan_check_read+0x11/0x20 [ 251.872970] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 251.878242] ? rcu_softirq_qs+0x20/0x20 [ 251.882275] ? perf_trace_sched_process_exec+0x860/0x860 [ 251.887767] ? __might_fault+0x12b/0x1e0 [ 251.891828] ? lock_downgrade+0x900/0x900 [ 251.895983] ? ext4_ioctl_group_add+0x560/0x560 [ 251.900676] do_vfs_ioctl+0x1de/0x1720 [ 251.904573] ? ioctl_preallocate+0x300/0x300 [ 251.909009] ? selinux_file_mprotect+0x620/0x620 [ 251.913788] ? refcount_dec_not_one+0x2f1/0x320 [ 251.918461] ? __sanitizer_cov_trace_const_cmp2+0xb/0x20 [ 251.923938] ? put_timespec64+0x10f/0x1b0 [ 251.928086] ? nsecs_to_jiffies+0x30/0x30 [ 251.932270] ? do_syscall_64+0x9a/0x820 [ 251.936264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.941803] ? security_file_ioctl+0x94/0xc0 [ 251.946210] ksys_ioctl+0xa9/0xd0 [ 251.949668] __x64_sys_ioctl+0x73/0xb0 [ 251.953556] do_syscall_64+0x1b9/0x820 [ 251.957476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 251.962840] ? syscall_return_slowpath+0x5e0/0x5e0 [ 251.967766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.972618] ? trace_hardirqs_on_caller+0x310/0x310 [ 251.977634] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 251.982649] ? prepare_exit_to_usermode+0x291/0x3b0 [ 251.987666] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.992509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.997910] RIP: 0033:0x457569 [ 252.001114] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.020023] RSP: 002b:00007f0a9519fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.027726] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457569 [ 252.034993] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000003 [ 252.042256] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 252.049698] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a951a06d4 [ 252.056999] R13: 00000000004bf612 R14: 00000000004cf4c0 R15: 00000000ffffffff [ 252.064270] Modules linked in: [ 252.067546] ---[ end trace 4a988f18088f4c91 ]--- [ 252.072338] RIP: 0010:rb_erase+0x306/0x3710 [ 252.076665] Code: c7 81 28 01 00 00 f2 f2 f2 f2 c7 81 2c 01 00 00 00 f2 f2 f2 48 89 f9 65 48 8b 1c 25 28 00 00 00 48 89 5d d0 31 db 48 c1 e9 03 <42> 80 3c 01 00 0f 85 41 1c 00 00 4c 8d 48 10 4c 8b 78 08 48 b9 00 [ 252.095584] RSP: 0018:ffff880185de6918 EFLAGS: 00010202 [ 252.100965] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 252.108234] RDX: 1ffff10030bbcd2b RSI: ffffffff8af92020 RDI: 0000000000000008 [ 252.115523] RBP: ffff880185de7320 R08: dffffc0000000000 R09: ffffed0030bbce53 [ 252.122809] R10: ffffed0030bbce53 R11: 0000000000000003 R12: ffff8801bac3d7b0 [ 252.130118] R13: dffffc0000000000 R14: ffff880185de72f8 R15: ffff880185de7438 [ 252.137395] FS: 00007f0a951a0700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 252.145638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.151546] CR2: 0000001b2cf27000 CR3: 00000001c496c000 CR4: 00000000001406f0 [ 252.158836] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.166101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.173391] Kernel panic - not syncing: Fatal exception [ 252.179784] Kernel Offset: disabled [ 252.183429] Rebooting in 86400 seconds..