Warning: Permanently added '[localhost]:51123' (ECDSA) to the list of known hosts. [ 115.088589][ T39] audit: type=1400 audit(1578692057.663:42): avc: denied { map } for pid=9479 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/10 21:34:17 fuzzer started 2020/01/10 21:34:19 dialing manager at 10.0.2.10:38859 2020/01/10 21:34:19 syscalls: 2840 2020/01/10 21:34:19 code coverage: enabled 2020/01/10 21:34:19 comparison tracing: enabled 2020/01/10 21:34:19 extra coverage: enabled 2020/01/10 21:34:19 setuid sandbox: enabled 2020/01/10 21:34:19 namespace sandbox: enabled 2020/01/10 21:34:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/10 21:34:19 fault injection: enabled 2020/01/10 21:34:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/10 21:34:19 net packet injection: enabled 2020/01/10 21:34:19 net device setup: enabled 2020/01/10 21:34:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/10 21:34:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:35:01 executing program 0: r0 = semget$private(0x0, 0x7, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0x5}], 0x1) [ 159.059038][ T39] audit: type=1400 audit(1578692101.623:43): avc: denied { map } for pid=9502 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=2053 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 21:35:01 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="850000000800000035000000000000008500000007000000950000000000000042789130ff54c34cf4e04383fff8b66b4486d4b3c43cdaee1c0633ff7f0c438983b4cd"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 21:35:02 executing program 2: r0 = socket(0x1e, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mq_open(&(0x7f0000000000)='[\xe7\x01\x00\x00\x00\x00\x00\x00\x00t\x1f0\x02', 0x0, 0x0, 0x0) [ 159.601712][ T9505] IPVS: ftp: loaded support on port[0] = 21 [ 159.601731][ T9504] IPVS: ftp: loaded support on port[0] = 21 21:35:02 executing program 3: syz_open_dev$media(0x0, 0x0, 0x80180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000), 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00a0e5008500000026000000b70000000020002095000000000000001a3f1bd8c37784ae4eb241100a1304e81fc607228f252b47ce97d5aa6e18eecafbb2b6b59a20c125af2a2169710300e4d9960a71b3e54a3afef7d738f8928f2e4ef01890c04b3364d07e0d8f4e71cf53c9c00d9b966fdc101e7d5e086a1be6b9f8345f1755a1125895b13998079fee2b6395db8f35a0dc420c712c711658cefc59b2abdab838839f6b52423b155687afae2bfd7c3f91e2799fae7b79e73eff60de4ffaf9298d1da8ac4e786f703561d05c5c01da3a3f5c11302fdf8c9ec9ce1427c7688c8eabcfe7b642f43f1d5a0873b7d8cd7180451e21940000006c1b0b3a63e1a7c3b9e02305d8ff95b287ff39d343dc59348e993ce667570ffbb35956c4296f0178caef22ce048f9520181c565f49286ac5a182dae2c54ae18e064b5fd3a7971e9464465c756d75f457e2459e9355479742d2ad0f0900000000000000ebc979a0f77d9f95ac7f7ebcb5544da272bf81ef4240fb62bfa2871cf38965b6e2f047"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28}, 0x48) syz_open_dev$audion(0x0, 0x9, 0x80201) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="8c96fadfe67d576a000000e4ff00", 0x0, 0x404, 0x0, 0x0, 0xfffffffffffffec6}, 0x28) socket$nl_route(0x10, 0x3, 0x0) [ 159.741124][ T9507] IPVS: ftp: loaded support on port[0] = 21 [ 159.888878][ T9509] IPVS: ftp: loaded support on port[0] = 21 [ 160.060601][ T9507] chnl_net:caif_netlink_parms(): no params data found [ 160.076588][ T9505] chnl_net:caif_netlink_parms(): no params data found [ 160.107073][ T9504] chnl_net:caif_netlink_parms(): no params data found [ 160.235750][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.246715][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.262332][ T9507] device bridge_slave_0 entered promiscuous mode [ 160.281917][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.294761][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.309495][ T9505] device bridge_slave_0 entered promiscuous mode [ 160.341998][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.354482][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.367542][ T9507] device bridge_slave_1 entered promiscuous mode [ 160.380086][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.394119][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.407604][ T9505] device bridge_slave_1 entered promiscuous mode [ 160.419198][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 160.439447][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.455367][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.481709][ T9504] device bridge_slave_0 entered promiscuous mode [ 160.501614][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.518600][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.538282][ T9504] device bridge_slave_1 entered promiscuous mode [ 160.600374][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.628345][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.654321][ T9505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.672266][ T9505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.686968][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.707076][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.757827][ T9507] team0: Port device team_slave_0 added [ 160.771684][ T9504] team0: Port device team_slave_0 added [ 160.782184][ T9505] team0: Port device team_slave_0 added [ 160.792017][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.803093][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.813302][ T9509] device bridge_slave_0 entered promiscuous mode [ 160.825276][ T9507] team0: Port device team_slave_1 added [ 160.835694][ T9504] team0: Port device team_slave_1 added [ 160.844313][ T9505] team0: Port device team_slave_1 added [ 160.853336][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.864093][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.875808][ T9509] device bridge_slave_1 entered promiscuous mode [ 160.917775][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.988056][ T9507] device hsr_slave_0 entered promiscuous mode [ 161.035756][ T9507] device hsr_slave_1 entered promiscuous mode [ 161.180569][ T9504] device hsr_slave_0 entered promiscuous mode [ 161.245559][ T9504] device hsr_slave_1 entered promiscuous mode [ 161.335533][ T9504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.352701][ T9504] Cannot create hsr debugfs directory [ 161.368729][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.488468][ T9505] device hsr_slave_0 entered promiscuous mode [ 161.565634][ T9505] device hsr_slave_1 entered promiscuous mode [ 161.635349][ T9505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.651664][ T9505] Cannot create hsr debugfs directory [ 161.668613][ T9509] team0: Port device team_slave_0 added [ 161.697433][ T9509] team0: Port device team_slave_1 added [ 161.808450][ T9509] device hsr_slave_0 entered promiscuous mode [ 161.876103][ T9509] device hsr_slave_1 entered promiscuous mode [ 161.955793][ T9509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.977894][ T9509] Cannot create hsr debugfs directory [ 162.155805][ T39] audit: type=1400 audit(1578692104.723:44): avc: denied { create } for pid=9504 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 162.228788][ T39] audit: type=1400 audit(1578692104.733:45): avc: denied { write } for pid=9504 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 162.280471][ T39] audit: type=1400 audit(1578692104.733:46): avc: denied { read } for pid=9504 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 162.365722][ T9504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.420840][ T9504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.502710][ T9507] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.617257][ T9507] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.698334][ T9504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.770195][ T9504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.868293][ T9507] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.969023][ T9507] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.066945][ T9505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.168311][ T9509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.257838][ T9505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.337381][ T9505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.408356][ T9505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.503769][ T9509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.598707][ T9509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.688988][ T9509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.988486][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.033010][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.075356][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.118148][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.163620][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.209252][ T9505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.247216][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.289018][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.327728][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.364893][ T9517] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.398029][ T9517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.432225][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.466416][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.497525][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.543672][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.581449][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.617388][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.657419][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.697412][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.729062][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.758878][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.790543][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.821597][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.876901][ T9505] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.907524][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.936519][ T9507] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.969461][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.997096][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.027623][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.060523][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.101389][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.130872][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.159454][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.182904][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.208871][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.236300][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.261720][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.278166][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.298452][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.316359][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.333333][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.348688][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.366014][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.384881][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.402350][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.421824][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.440179][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.454352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.472927][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.492441][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.510299][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.538019][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.567454][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.591667][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.614215][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.634803][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.679564][ T9504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.714232][ T9504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.746322][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.775736][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.802064][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.825773][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.849404][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.873862][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.891693][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.913106][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.933296][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.947249][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.961178][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.979205][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.993049][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.006829][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.019678][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.047602][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.084925][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.112332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.154376][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.194018][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.239763][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.269413][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.300846][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.324786][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.341642][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.360727][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.399110][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.434727][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.460153][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.882681][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.939347][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.963448][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.987259][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.024810][ T9505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.060274][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.074749][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.091661][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.105330][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.119198][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.133068][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.167907][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.180224][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.196216][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.208682][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.224348][ T9509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.242623][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.261784][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.290343][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.303513][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.326259][ T9505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.350016][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.366531][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.380813][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.392521][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.413663][ T9507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.431213][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.471672][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.490275][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.514749][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.529332][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.564217][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.579083][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.597380][ T9504] device veth0_vlan entered promiscuous mode [ 167.618711][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.631110][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.644354][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.657824][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.680234][ T9505] device veth0_vlan entered promiscuous mode [ 167.693483][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.708620][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.721996][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.735891][ T3413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.756942][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.772576][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.793829][ T9504] device veth1_vlan entered promiscuous mode [ 167.817715][ T9505] device veth1_vlan entered promiscuous mode [ 167.837040][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.852274][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.867222][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.882714][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.897260][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.912996][ T9507] device veth0_vlan entered promiscuous mode [ 167.933596][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.946585][ T39] audit: type=1400 audit(1578692110.513:47): avc: denied { associate } for pid=9504 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 167.956758][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.028223][ T9507] device veth1_vlan entered promiscuous mode [ 168.053941][ T9509] device veth0_vlan entered promiscuous mode [ 168.071972][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.086149][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.099898][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.114774][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.150900][ T9509] device veth1_vlan entered promiscuous mode [ 168.373877][ T39] audit: type=1400 audit(1578692110.943:48): avc: denied { prog_load } for pid=9525 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 21:35:11 executing program 2: r0 = socket(0x1e, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mq_open(&(0x7f0000000000)='[\xe7\x01\x00\x00\x00\x00\x00\x00\x00t\x1f0\x02', 0x0, 0x0, 0x0) [ 168.711022][ T39] audit: type=1400 audit(1578692111.163:49): avc: denied { open } for pid=9532 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 21:35:11 executing program 0: r0 = semget$private(0x0, 0x7, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0x5}], 0x1) 21:35:11 executing program 1: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x2a1}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0)}, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) [ 168.850604][ T39] audit: type=1400 audit(1578692111.263:50): avc: denied { prog_run } for pid=9525 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 21:35:11 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000552000/0x1000)=nil, 0xe) [ 168.895332][ C0] hrtimer: interrupt took 30264 ns 21:35:11 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000e8908ef78dbb5b20b69d36bab11f832e61519051a2520b0f108ca733a103fbc558e41f8ef8a753a40bc7a84e197ec7c675b61acd56f2a626fdb05d8d50b8550f185c84f953a83aaee1c5250b7e0e95571c06a01d748ed49d8a7e09e7f17118393efb7ee43edb29181631b317d6743d208e3b2c7818ad445b1c0948dc5ddf8d365e638f83de5498dbacd77165cf8cda38d2f93801ce1eb9cc56b99d0e0d0b141318fd4e07e818dde9043721844fb003223de8b606bf9165defbea404a2313b862531669c942e6eabcef2fb2950a459a"], 0xe7, 0x8405}}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 21:35:11 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000552000/0x1000)=nil, 0xe) 21:35:11 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000552000/0x1000)=nil, 0xe) [ 175.970711][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.024392][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.297036][ T3043] kasan: CONFIG_KASAN_INLINE enabled [ 189.308673][ T3043] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 189.398904][ T3043] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 189.405440][ T3043] CPU: 3 PID: 3043 Comm: kworker/3:2 Not tainted 5.5.0-rc5-syzkaller #0 [ 189.426084][ T3043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 189.426084][ T3043] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 189.426084][ T3043] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 189.426084][ T3043] Code: c3 e8 32 8d 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 a3 ce 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 189.426084][ T3043] RSP: 0018:ffffc900031a79f0 EFLAGS: 00010206 [ 189.426084][ T3043] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399d955 [ 189.426084][ T3043] RDX: 0000000000000003 RSI: ffffffff8358584d RDI: 0000000000000018 [ 189.426084][ T3043] RBP: ffffc900031a79f8 R08: ffff8880272c0b40 R09: fffffbfff165ebb6 [ 189.426084][ T3043] R10: fffffbfff165ebb5 R11: ffffffff8b2f5daf R12: dffffc0000000000 [ 189.426084][ T3043] R13: ffffc900031a7b20 R14: ffffc900031a7b20 R15: 000000000000001d [ 189.426084][ T3043] FS: 0000000000000000(0000) GS:ffff88802d300000(0000) knlGS:0000000000000000 [ 189.426084][ T3043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.426084][ T3043] CR2: 000000c000439000 CR3: 000000002a083000 CR4: 0000000000340ee0 [ 189.426084][ T3043] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.426084][ T3043] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.426084][ T3043] Call Trace: [ 189.426084][ T3043] security_socket_sendmsg+0x77/0xc0 [ 189.426084][ T3043] sock_sendmsg+0x45/0x130 [ 189.426084][ T3043] kernel_sendmsg+0x44/0x50 [ 189.426084][ T3043] rxrpc_send_keepalive+0x1ff/0x940 [ 189.426084][ T3043] ? rxrpc_reject_packets+0xab0/0xab0 [ 189.426084][ T3043] ? _raw_spin_unlock_bh+0x2c/0x30 [ 189.426084][ T3043] ? __local_bh_enable_ip+0x15a/0x270 [ 189.426084][ T3043] ? lockdep_hardirqs_on+0x421/0x5e0 [ 189.426084][ T3043] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 189.426084][ T3043] ? __local_bh_enable_ip+0x15a/0x270 [ 189.426084][ T3043] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 189.426084][ T3043] ? rxrpc_peer_add_rtt+0x650/0x650 [ 189.426084][ T3043] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 189.426084][ T3043] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 189.426084][ T3043] ? trace_hardirqs_on+0x67/0x240 [ 189.426084][ T3043] process_one_work+0x9af/0x1740 [ 189.426084][ T3043] ? pwq_dec_nr_in_flight+0x320/0x320 [ 189.426084][ T3043] ? lock_acquire+0x190/0x410 [ 189.426084][ T3043] worker_thread+0x98/0xe40 [ 189.426084][ T3043] ? trace_hardirqs_on+0x67/0x240 [ 189.426084][ T3043] kthread+0x361/0x430 [ 189.426084][ T3043] ? process_one_work+0x1740/0x1740 [ 189.426084][ T3043] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 189.426084][ T3043] ret_from_fork+0x24/0x30 [ 189.426084][ T3043] Modules linked in: