Warning: Permanently added '10.128.0.109' (ECDSA) to the list of known hosts. [ 46.394039] audit: type=1400 audit(1567812243.965:36): avc: denied { map } for pid=7531 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/06 23:24:04 parsed 1 programs [ 46.462286] audit: type=1400 audit(1567812244.035:37): avc: denied { map } for pid=7531 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=55 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/09/06 23:24:05 executed programs: 0 [ 48.019671] IPVS: ftp: loaded support on port[0] = 21 [ 48.077228] chnl_net:caif_netlink_parms(): no params data found [ 48.107346] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.113923] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.121289] device bridge_slave_0 entered promiscuous mode [ 48.128707] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.135489] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.142629] device bridge_slave_1 entered promiscuous mode [ 48.157876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.166853] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.183008] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.190653] team0: Port device team_slave_0 added [ 48.197559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.204700] team0: Port device team_slave_1 added [ 48.210023] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.217718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.278591] device hsr_slave_0 entered promiscuous mode [ 48.316767] device hsr_slave_1 entered promiscuous mode [ 48.357022] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.363923] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.377744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.384146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.391120] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.397522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.429294] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.435382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.443395] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.452468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.471524] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.478770] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.485766] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.496684] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.502750] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.512142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.520744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.527124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.547869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.555483] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.561882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.570312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.578805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.586294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.594186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.602072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.610926] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.616991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.630729] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.643029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.652880] audit: type=1400 audit(1567812246.225:38): avc: denied { associate } for pid=7549 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 49.142852] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 49.150854] PGD 926b9067 P4D 926b9067 PUD 81831067 PMD 0 [ 49.156394] Oops: 0010 [#1] PREEMPT SMP KASAN [ 49.160875] CPU: 0 PID: 7648 Comm: syz-executor.0 Not tainted 4.19.70 #0 [ 49.167695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.177034] RIP: 0010: (null) [ 49.180903] Code: Bad RIP value. [ 49.184244] RSP: 0018:ffff88809bf8f4d8 EFLAGS: 00010246 [ 49.189590] RAX: dffffc0000000000 RBX: ffffffff87e1f620 RCX: ffffffff857e5ec4 [ 49.196839] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888084801500 [ 49.204089] RBP: ffff88809bf8f5d0 R08: ffff88809ecb4400 R09: ffff88809bf8f658 [ 49.211349] R10: ffffed10137f1ed9 R11: ffff88809bf8f6cf R12: ffff88809bf8f5a8 [ 49.218613] R13: ffff888084801500 R14: 0000000000000001 R15: ffffffff87e1f620 [ 49.225877] FS: 00007f5ca312e700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 49.234083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.240035] CR2: ffffffffffffffd6 CR3: 0000000099e12000 CR4: 00000000001406f0 [ 49.247296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.254558] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.261832] Call Trace: [ 49.264409] tc_bind_tclass+0x13c/0x490 [ 49.268370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.273890] ? __qdisc_calculate_pkt_len+0x2e0/0x2e0 [ 49.278975] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 49.283984] ? validate_nla+0x32f/0x810 [ 49.287959] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 49.292973] ? qdisc_match_from_root+0x18a/0x280 [ 49.297712] tc_ctl_tclass+0xaa9/0xc60 [ 49.301595] ? qdisc_tree_reduce_backlog+0x570/0x570 [ 49.306683] ? find_held_lock+0x35/0x130 [ 49.310747] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 49.316268] ? qdisc_tree_reduce_backlog+0x570/0x570 [ 49.321354] rtnetlink_rcv_msg+0x463/0xb00 [ 49.325581] ? rtnetlink_put_metrics+0x560/0x560 [ 49.330320] ? netdev_pick_tx+0x300/0x300 [ 49.334473] ? netlink_deliver_tap+0x22d/0xc20 [ 49.339048] ? find_held_lock+0x35/0x130 [ 49.343092] netlink_rcv_skb+0x17d/0x460 [ 49.347144] ? rtnetlink_put_metrics+0x560/0x560 [ 49.351881] ? netlink_ack+0xb30/0xb30 [ 49.355760] ? kasan_check_read+0x11/0x20 [ 49.359947] ? netlink_deliver_tap+0x254/0xc20 [ 49.364515] rtnetlink_rcv+0x1d/0x30 [ 49.368214] netlink_unicast+0x537/0x720 [ 49.372277] ? netlink_attachskb+0x770/0x770 [ 49.376685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.382225] netlink_sendmsg+0x8ae/0xd70 [ 49.386285] ? netlink_unicast+0x720/0x720 [ 49.390503] ? selinux_socket_sendmsg+0x36/0x40 [ 49.395157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.400677] ? security_socket_sendmsg+0x8d/0xc0 [ 49.405416] ? netlink_unicast+0x720/0x720 [ 49.409772] sock_sendmsg+0xd7/0x130 [ 49.413466] ___sys_sendmsg+0x803/0x920 [ 49.417432] ? copy_msghdr_from_user+0x430/0x430 [ 49.422177] ? lock_downgrade+0x810/0x810 [ 49.426315] ? kasan_check_read+0x11/0x20 [ 49.430462] ? __fget+0x367/0x540 [ 49.433942] ? iterate_fd+0x360/0x360 [ 49.437725] ? lock_downgrade+0x810/0x810 [ 49.441851] ? __fget_light+0x1a9/0x230 [ 49.445820] ? __fdget+0x1b/0x20 [ 49.449169] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 49.454705] __sys_sendmsg+0x105/0x1d0 [ 49.458573] ? __ia32_sys_shutdown+0x80/0x80 [ 49.462975] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.467719] ? do_syscall_64+0x26/0x620 [ 49.471686] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.477034] ? do_syscall_64+0x26/0x620 [ 49.480992] __x64_sys_sendmsg+0x78/0xb0 [ 49.485044] do_syscall_64+0xfd/0x620 [ 49.488837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.494004] RIP: 0033:0x459879 [ 49.497197] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.516096] RSP: 002b:00007f5ca312dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.523790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 49.531067] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 49.538344] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 49.545604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ca312e6d4 [ 49.552863] R13: 00000000004c77c2 R14: 00000000004dd018 R15: 00000000ffffffff [ 49.560272] Modules linked in: [ 49.563467] CR2: 0000000000000000 [ 49.568288] ---[ end trace 287a1d55424066a5 ]--- [ 49.573068] RIP: 0010: (null) [ 49.577000] Code: Bad RIP value. [ 49.580357] RSP: 0018:ffff88809bf8f4d8 EFLAGS: 00010246 [ 49.585700] RAX: dffffc0000000000 RBX: ffffffff87e1f620 RCX: ffffffff857e5ec4 [ 49.592988] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888084801500 [ 49.600285] RBP: ffff88809bf8f5d0 R08: ffff88809ecb4400 R09: ffff88809bf8f658 [ 49.608099] R10: ffffed10137f1ed9 R11: ffff88809bf8f6cf R12: ffff88809bf8f5a8 [ 49.615366] R13: ffff888084801500 R14: 0000000000000001 R15: ffffffff87e1f620 [ 49.622708] FS: 00007f5ca312e700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 49.631147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.637059] CR2: ffffffffffffffd6 CR3: 0000000099e12000 CR4: 00000000001406f0 [ 49.644325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.651777] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.659073] Kernel panic - not syncing: Fatal exception [ 49.665743] Kernel Offset: disabled [ 49.669373] Rebooting in 86400 seconds..