[ 43.357490][ T26] audit: type=1800 audit(1552658588.207:29): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.379163][ T26] audit: type=1800 audit(1552658588.207:30): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. 2019/03/15 14:03:16 fuzzer started syzkaller login: [ 51.719265][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 51.719281][ T26] audit: type=1400 audit(1552658596.567:36): avc: denied { map } for pid=8149 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/03/15 14:03:19 dialing manager at 10.128.0.26:41521 2019/03/15 14:03:19 syscalls: 1 2019/03/15 14:03:19 code coverage: enabled 2019/03/15 14:03:19 comparison tracing: enabled 2019/03/15 14:03:19 extra coverage: extra coverage is not supported by the kernel 2019/03/15 14:03:19 setuid sandbox: enabled 2019/03/15 14:03:19 namespace sandbox: enabled 2019/03/15 14:03:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/15 14:03:19 fault injection: enabled 2019/03/15 14:03:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/15 14:03:19 net packet injection: enabled 2019/03/15 14:03:19 net device setup: enabled 14:05:55 executing program 0: [ 210.803792][ T26] audit: type=1400 audit(1552658755.657:37): avc: denied { map } for pid=8165 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15083 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 210.928800][ T8166] IPVS: ftp: loaded support on port[0] = 21 14:05:55 executing program 1: [ 211.044437][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 211.136974][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.145296][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.154668][ T8166] device bridge_slave_0 entered promiscuous mode [ 211.168306][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.176863][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.185015][ T8166] device bridge_slave_1 entered promiscuous mode [ 211.205066][ T8169] IPVS: ftp: loaded support on port[0] = 21 [ 211.215703][ T8166] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.226178][ T8166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.254840][ T8166] team0: Port device team_slave_0 added [ 211.264604][ T8166] team0: Port device team_slave_1 added 14:05:56 executing program 2: 14:05:56 executing program 3: [ 211.493569][ T8166] device hsr_slave_0 entered promiscuous mode [ 211.571765][ T8166] device hsr_slave_1 entered promiscuous mode 14:05:56 executing program 4: [ 211.695947][ T8171] IPVS: ftp: loaded support on port[0] = 21 [ 211.703003][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.710268][ T8166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.718362][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.718911][ T8173] IPVS: ftp: loaded support on port[0] = 21 [ 211.731091][ T8166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.904183][ T8175] IPVS: ftp: loaded support on port[0] = 21 [ 211.951351][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 211.982949][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 14:05:56 executing program 5: [ 212.039135][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.063331][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.074264][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 212.189727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.198492][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.210245][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.217633][ T8171] chnl_net:caif_netlink_parms(): no params data found [ 212.234568][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.242452][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.250107][ T8169] device bridge_slave_0 entered promiscuous mode [ 212.260097][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.268101][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.276690][ T8169] device bridge_slave_1 entered promiscuous mode [ 212.323643][ T8182] IPVS: ftp: loaded support on port[0] = 21 [ 212.340576][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.349262][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.357999][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.365098][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.372904][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.381613][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.389927][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.397044][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.404623][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.425007][ T8173] chnl_net:caif_netlink_parms(): no params data found [ 212.443937][ T8169] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.455009][ T8169] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.479064][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.515486][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 212.526222][ T8169] team0: Port device team_slave_0 added [ 212.534013][ T8169] team0: Port device team_slave_1 added [ 212.539858][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.547201][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.557563][ T8171] device bridge_slave_0 entered promiscuous mode [ 212.568041][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.575270][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.583449][ T8171] device bridge_slave_1 entered promiscuous mode [ 212.622480][ T8171] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.634645][ T8171] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.654386][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.664198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.673196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.682344][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.691095][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.783376][ T8169] device hsr_slave_0 entered promiscuous mode [ 212.821743][ T8169] device hsr_slave_1 entered promiscuous mode [ 212.898122][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.907803][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.916452][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.924810][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.935852][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.948619][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.956350][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.965816][ T8175] device bridge_slave_0 entered promiscuous mode [ 212.974302][ T8171] team0: Port device team_slave_0 added [ 212.980182][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.987883][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.995790][ T8175] device bridge_slave_1 entered promiscuous mode [ 213.008751][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.016004][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.023926][ T8173] device bridge_slave_0 entered promiscuous mode [ 213.034115][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.041373][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.048992][ T8173] device bridge_slave_1 entered promiscuous mode [ 213.070155][ T8171] team0: Port device team_slave_1 added [ 213.089022][ T8173] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.107000][ T8173] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.118383][ T8175] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.159631][ T8175] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.184295][ T8173] team0: Port device team_slave_0 added [ 213.233471][ T8171] device hsr_slave_0 entered promiscuous mode [ 213.280902][ T8171] device hsr_slave_1 entered promiscuous mode [ 213.339378][ T8173] team0: Port device team_slave_1 added [ 213.373636][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.389476][ T8175] team0: Port device team_slave_0 added [ 213.396722][ T26] audit: type=1400 audit(1552658758.247:38): avc: denied { associate } for pid=8166 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 213.452317][ T8173] device hsr_slave_0 entered promiscuous mode [ 213.491100][ T8173] device hsr_slave_1 entered promiscuous mode [ 213.555562][ T8175] team0: Port device team_slave_1 added [ 213.623338][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.641672][ T8182] chnl_net:caif_netlink_parms(): no params data found 14:05:58 executing program 0: 14:05:58 executing program 0: [ 213.714819][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.736601][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:05:58 executing program 0: [ 213.766527][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 14:05:58 executing program 0: 14:05:58 executing program 0: [ 213.824017][ T8175] device hsr_slave_0 entered promiscuous mode [ 213.851147][ T8175] device hsr_slave_1 entered promiscuous mode 14:05:58 executing program 0: [ 213.906857][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.918967][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.931682][ T8182] device bridge_slave_0 entered promiscuous mode [ 213.939697][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.948722][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state 14:05:58 executing program 0: [ 213.957997][ T8182] device bridge_slave_1 entered promiscuous mode [ 214.031770][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.053797][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.067142][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.076464][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.083594][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.084062][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.099916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.108604][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.115832][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.123736][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.132745][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.147334][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.177879][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.188819][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.198464][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.206926][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.217266][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.225223][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.234267][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.244584][ T8182] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.261693][ T8182] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.290078][ T8169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.301106][ T8169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.315320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.323584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.332615][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.341423][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.348569][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.356468][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.364979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.373753][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.382389][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.391157][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.398331][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.406266][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.416587][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.424934][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.434893][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.442890][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.467011][ T8182] team0: Port device team_slave_0 added [ 214.476299][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.495256][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.505406][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.514775][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.523378][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.532248][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.540703][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.548327][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.556227][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.568722][ T8182] team0: Port device team_slave_1 added [ 214.583723][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.595588][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.606537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.617670][ T8171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.629309][ T8171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.656566][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.666832][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.678058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.686737][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.695287][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.702661][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.710199][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.718966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.727459][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.734523][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.747130][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.772326][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.780367][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.789317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.801940][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.863334][ T8182] device hsr_slave_0 entered promiscuous mode [ 214.901382][ T8182] device hsr_slave_1 entered promiscuous mode [ 214.960040][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.972893][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.983462][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.992420][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.001426][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.009752][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.018355][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.026607][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.035004][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.043353][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 14:05:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="803f8e15d67d000019000300e60100006cff990800000080cefdb00001000000004000000040000080000000000000006d5ebe5a0000fffe53efad51ffffffffff808b4cd8fcc14fdfb3f4fb4f913c8acc249699b8339715bdafe936fc82f6200000000000000081", 0x68, 0x400}], 0x8000, 0x0) [ 215.075245][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.109831][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.141872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.150026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:06:00 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x0) [ 215.223904][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.253961][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.260862][ T8210] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (81000000) [ 215.274397][ T8210] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 215.278711][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.305129][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.312285][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.321263][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.338222][ T26] audit: type=1400 audit(1552658760.187:39): avc: denied { create } for pid=8214 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 215.372331][ C0] hrtimer: interrupt took 33093 ns [ 215.395283][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.407769][ T8210] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (81000000) [ 215.414604][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.423885][ T8210] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 215.450327][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.457511][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.472473][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.481164][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.524766][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.532611][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.551312][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.559738][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.568894][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.577767][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.586375][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.599185][ T8175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.611948][ T8175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 14:06:00 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) fremovexattr(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 215.625251][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.643385][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.659144][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.670693][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.679025][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.696672][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.704287][ T8227] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 215.762420][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.769561][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.778611][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.787690][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.794915][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.802964][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.812195][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.820708][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.827764][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.835606][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.847020][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.855493][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.874071][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.888309][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.899468][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.911925][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.927284][ T8182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.939154][ T8182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 14:06:00 executing program 4: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000500)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000004c0)='net/softnet_stat\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000080)=0x8) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x10002, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r6, &(0x7f0000000600)=[{&(0x7f0000000540)="5bee71050ef0406624668f3bfc3417ffb41dd00e3114ea27db3911f0751af24aea316a5e210702e83a51d30aa8d7cf838492148719bd878a36386e3464a0dff8f74f6d432611f2660106f45585df69be8bcb453f9ecd9b8631", 0x59}], 0x1, 0x2) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000280)=0x40) clock_adjtime(0x0, &(0x7f0000000200)={0xffffffff, 0x5, 0x2, 0x3ff, 0x5, 0x9, 0x7, 0xace2, 0x0, 0x100000000, 0xfffffffffffffff9, 0x20, 0x2b5, 0x0, 0x9, 0xbe1, 0x8036, 0x401, 0x1, 0xfffffffffffff001, 0x4, 0x81, 0x9, 0x9, 0x3, 0x8}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x8000000000, 0x3, @ipv4}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) r8 = getgid() fchown(r4, r7, r8) clone(0x80000000, &(0x7f0000000740)="5c1051cce34a3b94381141d066795e72d523763046838f444aa9edb982fc27f4a13fa775d3896215faad1cdeb52455f4e3591c1148e98446699b3c8c5e466e79f2ae80f1d34d092e44e759", 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e1d, 0x0, @empty, 0x3}, 0xfffffffffffffeed) getpid() mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r2, 0x1) [ 215.969960][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.981543][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.000263][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.015134][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.026903][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.058997][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.066430][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 216.066534][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 216.087103][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.123080][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 216.129682][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:06:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000a00)=[@release], 0x0, 0xfdfdffff, 0x0}) 14:06:01 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000001c0)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f00000002c0)=""/246) 14:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001ac1414aa0000000001000000ac14140020be75efd2058a169ac1781de25b1c695a7cc98e815796afbb879f7c15"], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r2, r0) 14:06:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="803f8e15d67d000019000300e60100006cff990800000080cefdb00001000000004000000040000080000000000000006d5ebe5a0000fffe53efad51ffffffffff808b4cd8fcc14fdfb3f4fb4f913c8acc249699b8339715bdafe936fc82f6200000000000000081", 0x68, 0x400}], 0x8000, 0x0) 14:06:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 216.240547][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 216.246371][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 216.279290][ T8244] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (81000000) [ 216.330175][ T8245] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 216.360850][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 216.366771][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:06:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000300)={r3, r4/1000+10000}, 0x8) read(r2, &(0x7f0000000200)=""/13, 0xfffffffffffffdb4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) write$FUSE_INTERRUPT(r2, &(0x7f0000000140)={0x10}, 0xfffffd2a) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f00000001c0)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68) [ 216.376230][ T8244] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 216.460767][ T26] audit: type=1400 audit(1552658761.297:40): avc: denied { set_context_mgr } for pid=8259 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 216.490526][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 216.496450][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:06:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="803f8e15d67d000019000300e60100006cff990800000080cefdb00001000000004000000040000080000000000000006d5ebe5a0000fffe53efad51ffffffffff808b4cd8fcc14fdfb3f4fb4f913c8acc249699b8339715bdafe936fc82f6200000000000000081", 0x68, 0x400}], 0x8000, 0x0) 14:06:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000a00)=[@release], 0x0, 0xfdfdffff, 0x0}) 14:06:01 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f600000800000007000000402c01000000000009000007000000000000000000000000385a58000000000000000000000000000001000000000010"], 0x50) 14:06:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) [ 216.658009][ T8272] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (81000000) 14:06:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000a00)=[@release], 0x0, 0xfdfdffff, 0x0}) [ 216.757814][ T8281] kasan: CONFIG_KASAN_INLINE enabled [ 216.776547][ T8281] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 216.820404][ T8288] binder: BINDER_SET_CONTEXT_MGR already set [ 216.822636][ T8272] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 216.837883][ T8281] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 216.844849][ T8281] CPU: 0 PID: 8281 Comm: syz-executor.3 Not tainted 5.0.0+ #23 [ 216.852407][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.862533][ T8281] RIP: 0010:ebitmap_destroy+0x32/0xf0 [ 216.867925][ T8281] Code: 49 89 fd 41 54 53 e8 1d f4 7f fe 4d 85 ed 0f 84 99 00 00 00 e8 0f f4 7f fe 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 98 00 00 00 49 be 00 00 00 00 00 fc ff df 4d 8b [ 216.888829][ T8281] RSP: 0018:ffff8880585c78c8 EFLAGS: 00010202 [ 216.894924][ T8281] RAX: dffffc0000000000 RBX: ffff888085806b28 RCX: ffffc9000c492000 [ 216.902914][ T8281] RDX: 0000000000000002 RSI: ffffffff82f07021 RDI: 0000000000000010 [ 216.911114][ T8281] RBP: ffff8880585c78e8 R08: ffff8880585b8200 R09: ffff8880585b8af0 [ 216.919645][ T8281] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 216.927907][ T8281] R13: 0000000000000010 R14: ffffed1010b00d9a R15: 0000000000585a38 [ 216.936168][ T8281] FS: 00007f64ce83f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 216.946775][ T8281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.954751][ T8281] CR2: 00007fffbff830b0 CR3: 00000000aa357000 CR4: 00000000001406f0 [ 216.963464][ T8281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.973644][ T8281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.982328][ T8281] Call Trace: [ 216.985777][ T8281] policydb_destroy+0x62c/0x7f0 [ 216.990941][ T8281] policydb_read+0xe27/0x52c0 [ 216.995993][ T8281] ? cache_grow_end+0xa4/0x190 [ 217.000966][ T8281] ? cond_index_bool+0x1a0/0x1a0 [ 217.006644][ T8281] ? string_to_av_perm+0xa0/0xa0 [ 217.011704][ T8281] ? security_load_policy+0x185/0x1170 [ 217.017378][ T8281] ? rcu_read_lock_sched_held+0x110/0x130 [ 217.023400][ T8281] ? kmem_cache_alloc_trace+0x354/0x760 [ 217.024568][ T3874] kobject: 'loop4' (0000000074540001): kobject_uevent_env [ 217.029845][ T8281] ? find_first_zero_bit+0x9a/0xc0 [ 217.029866][ T8281] security_load_policy+0x36d/0x1170 [ 217.029885][ T8281] ? security_change_sid+0x150/0x150 [ 217.029907][ T8281] ? find_held_lock+0x35/0x130 [ 217.041342][ T3874] kobject: 'loop4' (0000000074540001): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 217.042334][ T8281] ? __might_fault+0x12b/0x1e0 [ 217.042365][ T8281] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 217.058446][ T8281] ? _copy_from_user+0xdd/0x150 [ 217.058472][ T8281] sel_write_load+0x25a/0x470 [ 217.069614][ T8288] binder: 8283:8288 ioctl 40046207 0 returned -16 [ 217.073612][ T8281] __vfs_write+0x8d/0x110 [ 217.073628][ T8281] ? sel_make_policy_nodes+0x1540/0x1540 [ 217.073641][ T8281] vfs_write+0x20c/0x580 [ 217.073655][ T8281] ksys_write+0xea/0x1f0 [ 217.073677][ T8281] ? __ia32_sys_read+0xb0/0xb0 14:06:01 executing program 4: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000500)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000004c0)='net/softnet_stat\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000080)=0x8) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x10002, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r6, &(0x7f0000000600)=[{&(0x7f0000000540)="5bee71050ef0406624668f3bfc3417ffb41dd00e3114ea27db3911f0751af24aea316a5e210702e83a51d30aa8d7cf838492148719bd878a36386e3464a0dff8f74f6d432611f2660106f45585df69be8bcb453f9ecd9b8631", 0x59}], 0x1, 0x2) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000280)=0x40) clock_adjtime(0x0, &(0x7f0000000200)={0xffffffff, 0x5, 0x2, 0x3ff, 0x5, 0x9, 0x7, 0xace2, 0x0, 0x100000000, 0xfffffffffffffff9, 0x20, 0x2b5, 0x0, 0x9, 0xbe1, 0x8036, 0x401, 0x1, 0xfffffffffffff001, 0x4, 0x81, 0x9, 0x9, 0x3, 0x8}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x8000000000, 0x3, @ipv4}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) r8 = getgid() fchown(r4, r7, r8) clone(0x80000000, &(0x7f0000000740)="5c1051cce34a3b94381141d066795e72d523763046838f444aa9edb982fc27f4a13fa775d3896215faad1cdeb52455f4e3591c1148e98446699b3c8c5e466e79f2ae80f1d34d092e44e759", 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e1d, 0x0, @empty, 0x3}, 0xfffffffffffffeed) getpid() mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r2, 0x1) 14:06:01 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x8) ftruncate(r0, 0x6) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x6000, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x0, &(0x7f0000000300)="f0545532cd026b298956fc58bf4eca58e15cef4f5696da412cc404cb40e77a723f8cb73e07b09184795cde000885df7b5a3f7f5ebb04cc314559a11336cdfc35d1e6a2ea4325e153ec8f", 0x4a) fchdir(r5) r6 = creat(&(0x7f0000000140)='./bus\x00', 0xfe) truncate(&(0x7f0000000240)='./bus\x00', 0x800) open(&(0x7f0000000400)='./bus\x00', 0x200000, 0xfffffbfffffffffd) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) fcntl$getownex(r5, 0x10, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f00000003c0)='net/rvw6\x00') creat(&(0x7f0000000480)='./bus\x00', 0x0) ftruncate(r3, 0x800002081fa) open(&(0x7f00000001c0)='./bus\x00', 0x12100, 0x80000001000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./bus\x00', 0x0, 0x10}, 0xc) fcntl$setstatus(r2, 0x4, 0x40400) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x9, 0x261c41e9}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x3, 0x1, 0x3}}, 0x30) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x800) 14:06:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000a00)=[@release], 0x0, 0xfdfdffff, 0x0}) [ 217.095331][ T3874] kobject: 'loop0' (00000000a5a42b08): kobject_uevent_env [ 217.096946][ T8281] ? do_syscall_64+0x26/0x610 [ 217.102529][ T3874] kobject: 'loop0' (00000000a5a42b08): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 217.106918][ T8281] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.106934][ T8281] ? do_syscall_64+0x26/0x610 [ 217.106954][ T8281] __x64_sys_write+0x73/0xb0 [ 217.106976][ T8281] do_syscall_64+0x103/0x610 [ 217.162237][ T8281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.168149][ T8281] RIP: 0033:0x458079 [ 217.172050][ T8281] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.191663][ T8281] RSP: 002b:00007f64ce83ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.200090][ T8281] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 217.208069][ T8281] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 0000000000000003 [ 217.216050][ T8281] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 217.224135][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64ce83f6d4 [ 217.232474][ T8281] R13: 00000000004c7521 R14: 00000000004dd120 R15: 00000000ffffffff [ 217.240461][ T8281] Modules linked in: 14:06:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000a00)=[@release], 0x0, 0xfdfdffff, 0x0}) [ 217.264930][ T8272] kobject: 'loop1' (000000006c1e3e2d): kobject_uevent_env [ 217.268347][ T8281] ---[ end trace 2da6d8962caf8435 ]--- [ 217.278318][ T8281] RIP: 0010:ebitmap_destroy+0x32/0xf0 [ 217.286252][ T8281] Code: 49 89 fd 41 54 53 e8 1d f4 7f fe 4d 85 ed 0f 84 99 00 00 00 e8 0f f4 7f fe 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 98 00 00 00 49 be 00 00 00 00 00 fc ff df 4d 8b [ 217.288842][ T8272] kobject: 'loop1' (000000006c1e3e2d): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 217.369122][ T8281] RSP: 0018:ffff8880585c78c8 EFLAGS: 00010202 [ 217.387479][ T3874] kobject: 'loop5' (000000004a1717d8): kobject_uevent_env [ 217.410598][ T8281] RAX: dffffc0000000000 RBX: ffff888085806b28 RCX: ffffc9000c492000 14:06:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000300)={r3, r4/1000+10000}, 0x8) read(r2, &(0x7f0000000200)=""/13, 0xfffffffffffffdb4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) write$FUSE_INTERRUPT(r2, &(0x7f0000000140)={0x10}, 0xfffffd2a) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f00000001c0)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68) [ 217.419632][ T3874] kobject: 'loop5' (000000004a1717d8): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.440066][ T8281] RDX: 0000000000000002 RSI: ffffffff82f07021 RDI: 0000000000000010 14:06:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000a00)=[@release], 0x0, 0xfdfdffff, 0x0}) [ 217.448248][ T26] audit: type=1400 audit(1552658762.287:41): avc: denied { create } for pid=8292 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 217.468373][ T3874] kobject: 'loop2' (000000002e3baa82): kobject_uevent_env [ 217.485815][ T8281] RBP: ffff8880585c78e8 R08: ffff8880585b8200 R09: ffff8880585b8af0 [ 217.503580][ T3874] kobject: 'loop2' (000000002e3baa82): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:06:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="803f8e15d67d000019000300e60100006cff990800000080cefdb00001000000004000000040000080000000000000006d5ebe5a0000fffe53efad51ffffffffff808b4cd8fcc14fdfb3f4fb4f913c8acc249699b8339715bdafe936fc82f6200000000000000081", 0x68, 0x400}], 0x8000, 0x0) [ 217.510030][ T8281] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 217.528675][ T26] audit: type=1400 audit(1552658762.287:42): avc: denied { write } for pid=8292 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 217.556753][ T8281] R13: 0000000000000010 R14: ffffed1010b00d9a R15: 0000000000585a38 [ 217.566233][ T3874] kobject: 'loop1' (000000006c1e3e2d): kobject_uevent_env 14:06:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000a00)=[@release], 0x0, 0xfdfdffff, 0x0}) [ 217.597697][ T3874] kobject: 'loop1' (000000006c1e3e2d): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 217.613406][ T8281] FS: 00007f64ce83f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 217.626900][ T8317] kobject: 'loop1' (000000006c1e3e2d): kobject_uevent_env [ 217.646662][ T8281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.670854][ T8281] CR2: 0000001b32628000 CR3: 00000000aa357000 CR4: 00000000001406f0 [ 217.674352][ T8317] kobject: 'loop1' (000000006c1e3e2d): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 217.689604][ T8281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.694452][ T26] audit: type=1400 audit(1552658762.287:43): avc: denied { read } for pid=8292 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 217.709968][ T8281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 14:06:02 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000300)={r3, r4/1000+10000}, 0x8) read(r2, &(0x7f0000000200)=""/13, 0xfffffffffffffdb4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) write$FUSE_INTERRUPT(r2, &(0x7f0000000140)={0x10}, 0xfffffd2a) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f00000001c0)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68) [ 217.743286][ T3874] kobject: 'loop5' (000000004a1717d8): kobject_uevent_env [ 217.758815][ T8317] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (81000000) [ 217.777724][ T3874] kobject: 'loop5' (000000004a1717d8): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.823137][ T3874] kobject: 'loop5' (000000004a1717d8): kobject_uevent_env [ 217.840997][ T8317] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 217.857651][ T3874] kobject: 'loop5' (000000004a1717d8): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.868392][ T8281] Kernel panic - not syncing: Fatal exception [ 217.876342][ T8281] Kernel Offset: disabled [ 217.881639][ T8281] Rebooting in 86400 seconds..