Warning: Permanently added '[localhost]:13940' (ECDSA) to the list of known hosts. [ 137.006202][ T39] audit: type=1400 audit(1578706110.418:42): avc: denied { map } for pid=9193 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/11 01:28:30 fuzzer started 2020/01/11 01:28:33 dialing manager at 10.0.2.10:38859 2020/01/11 01:28:33 syscalls: 2840 2020/01/11 01:28:33 code coverage: enabled 2020/01/11 01:28:33 comparison tracing: enabled 2020/01/11 01:28:33 extra coverage: enabled 2020/01/11 01:28:33 setuid sandbox: enabled 2020/01/11 01:28:33 namespace sandbox: enabled 2020/01/11 01:28:33 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/11 01:28:33 fault injection: enabled 2020/01/11 01:28:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/11 01:28:33 net packet injection: enabled 2020/01/11 01:28:33 net device setup: enabled 2020/01/11 01:28:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/11 01:28:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:29:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x1) [ 180.550641][ T39] audit: type=1400 audit(1578706153.968:43): avc: denied { map } for pid=9214 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1103 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 01:29:14 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) 01:29:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x30f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r1, 0x200003) sendfile(r0, r1, 0x0, 0x80001d00c0d0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1f, 0x0) [ 181.003741][ T9217] IPVS: ftp: loaded support on port[0] = 21 [ 181.003747][ T9215] IPVS: ftp: loaded support on port[0] = 21 [ 181.074232][ T9219] IPVS: ftp: loaded support on port[0] = 21 01:29:14 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000040), 0x4) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) fstat(r0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 181.383042][ T9221] IPVS: ftp: loaded support on port[0] = 21 [ 181.454184][ T9217] chnl_net:caif_netlink_parms(): no params data found [ 181.484324][ T9215] chnl_net:caif_netlink_parms(): no params data found [ 181.495993][ T9219] chnl_net:caif_netlink_parms(): no params data found [ 181.577571][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.587416][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.600090][ T9217] device bridge_slave_0 entered promiscuous mode [ 181.621557][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.631802][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.642403][ T9217] device bridge_slave_1 entered promiscuous mode [ 181.665278][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.674908][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.686629][ T9215] device bridge_slave_0 entered promiscuous mode [ 181.699851][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.709993][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.719926][ T9215] device bridge_slave_1 entered promiscuous mode [ 181.729722][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.740011][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.749715][ T9219] device bridge_slave_0 entered promiscuous mode [ 181.778478][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.791930][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.801241][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.811097][ T9219] device bridge_slave_1 entered promiscuous mode [ 181.836891][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.849790][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.865138][ T9219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.884324][ T9219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.909138][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.949841][ T9219] team0: Port device team_slave_0 added [ 181.964466][ T9215] team0: Port device team_slave_0 added [ 181.974205][ T9217] team0: Port device team_slave_0 added [ 181.984743][ T9219] team0: Port device team_slave_1 added [ 181.994573][ T9215] team0: Port device team_slave_1 added [ 182.014281][ T9217] team0: Port device team_slave_1 added [ 182.149199][ T9219] device hsr_slave_0 entered promiscuous mode [ 182.196785][ T9219] device hsr_slave_1 entered promiscuous mode [ 182.328169][ T9217] device hsr_slave_0 entered promiscuous mode [ 182.387148][ T9217] device hsr_slave_1 entered promiscuous mode [ 182.466258][ T9217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.477385][ T9217] Cannot create hsr debugfs directory [ 182.563913][ T9215] device hsr_slave_0 entered promiscuous mode [ 182.616211][ T9215] device hsr_slave_1 entered promiscuous mode [ 182.675966][ T9215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.686972][ T9215] Cannot create hsr debugfs directory [ 182.696439][ T9221] chnl_net:caif_netlink_parms(): no params data found [ 182.850954][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.865287][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.881321][ T9221] device bridge_slave_0 entered promiscuous mode [ 182.895402][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.904345][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.913591][ T9221] device bridge_slave_1 entered promiscuous mode [ 182.959992][ T39] audit: type=1400 audit(1578706156.378:44): avc: denied { create } for pid=9215 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 182.992097][ T39] audit: type=1400 audit(1578706156.378:45): avc: denied { write } for pid=9215 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 183.021939][ T39] audit: type=1400 audit(1578706156.378:46): avc: denied { read } for pid=9215 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 183.062373][ T9215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.129101][ T9219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.195366][ T9219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.268953][ T9221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.280398][ T9215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.348819][ T9215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.441480][ T9215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.497229][ T9219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.560889][ T9221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.588451][ T9221] team0: Port device team_slave_0 added [ 183.598220][ T9219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.666305][ T9221] team0: Port device team_slave_1 added [ 183.705515][ T9217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.790589][ T9217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.898087][ T9221] device hsr_slave_0 entered promiscuous mode [ 183.956265][ T9221] device hsr_slave_1 entered promiscuous mode [ 184.006222][ T9221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.029866][ T9221] Cannot create hsr debugfs directory [ 184.056728][ T9217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.119769][ T9217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.357535][ T9221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.444495][ T9221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.536196][ T9221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.614414][ T9221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.694694][ T9219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.731329][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.745015][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.763456][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.777789][ T9219] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.800293][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.809378][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.823567][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.833634][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.843256][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.863597][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.886421][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.900346][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.912969][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.926458][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.940511][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.948523][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.962758][ T9215] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.975399][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.990551][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.007032][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.024062][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.040519][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.057096][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.074986][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.094532][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.114884][ T9217] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.135316][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.148632][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.164655][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.176239][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.185604][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.215184][ T9219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.230051][ T9219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.251682][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.262725][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.273856][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.286578][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.301046][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.318222][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.330532][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.341975][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.354182][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.364653][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.378137][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.391133][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.403675][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.420655][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.433831][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.447737][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.461843][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.478993][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.491118][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.502631][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.514114][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.537887][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.552215][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.568174][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.578845][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.600982][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.698418][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.724130][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.755604][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.779385][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.800505][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.817489][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.833296][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.852750][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.868283][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.915510][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.927480][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.946322][ T9215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.965500][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.977932][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.996361][ T9219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.014758][ T9221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.034553][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.046711][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.063724][ T9217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.079699][ T9217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.098025][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.109787][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.132982][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.143361][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.154057][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.164900][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.190644][ T9221] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.215127][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.226923][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.237976][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.247032][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.257458][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.271350][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.288013][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.305274][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.326108][ T9215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.355530][ T9230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.378404][ T9230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.396317][ T9230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.413506][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.433870][ T9230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.476666][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.501419][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.530251][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.551230][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.568189][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.582896][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.598657][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.613763][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.644177][ T9221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.660823][ T9221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.693610][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.715450][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.735547][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.747656][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.759686][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.772110][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.783465][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.794076][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.803752][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.814026][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.822658][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.833345][ T9219] device veth0_vlan entered promiscuous mode [ 186.866703][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.881680][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.894306][ T9219] device veth1_vlan entered promiscuous mode [ 186.914171][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.928538][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.943564][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.957153][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.968785][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.980609][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.990288][ T9215] device veth0_vlan entered promiscuous mode [ 187.028046][ T9221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.054279][ T9215] device veth1_vlan entered promiscuous mode [ 187.054795][ T39] audit: type=1400 audit(1578706160.468:47): avc: denied { associate } for pid=9219 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 187.088453][ T9217] device veth0_vlan entered promiscuous mode [ 187.138054][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.160267][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.183384][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.209136][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.238311][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.265665][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.336615][ T9217] device veth1_vlan entered promiscuous mode [ 187.367239][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.390964][ T39] audit: type=1400 audit(1578706160.808:48): avc: denied { open } for pid=9233 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 187.409971][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.434787][ T39] audit: type=1400 audit(1578706160.808:49): avc: denied { kernel } for pid=9233 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 187.448779][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.529542][ T9221] device veth0_vlan entered promiscuous mode [ 187.552197][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.575063][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 01:29:21 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000001001000001000000770000f200000000a6e217b91c3b0d873722b41afb8ed58f2109e448e6cc4bd0f11a26f4233e3ba1ff40e062a43f80b1bae2728316e63e58afdf284732bd1e1970881ddd3c9f310f827c195f3c5d57c67a08466517ba1300000000858003ffffffffffffffff3e26b5ca26bb434dbd0e4885c214e577bb081876e63e7c2834573925db8b54b33da7b9c7aefca1f9c49c6400000008000000000000000061e2448f23a7e49736a335440c5b7681c58dc647494f0dbc811becd7c487d283b2d0574510103af981adebcd7535c0b3a3df610d9975d1d957c3b410c2ab65977da598ffa069c01b3d386c15d34a5918d6909192ec97032c320044fa934bf944d6d5ce621d91c17f1c4377a54c7febb46f83a7842816023b60417388196a22091c9f82e8e0291f4082d92d0ae76b94a18647bb44cbe9366a08fb3f0000644307c51085f7215fd44635e5967f21e8f59bd021f309d910cb5d37cb16450244ef261a37255a06c97f19fa0e68836543174745684037cc7bba99aa1cbefcdd62f799a5fb35abc5af3ab43a5fc40eb352e6ff078fad68182845f1f6b7ff6c200c103b64608404b41fce73186e55193d3d96faab588048349b35e431914bfde3c07f1419dac11995aded30b44ead7142a7b397a913f6bac2eac41c32d10863c3e6dd9e88d44842951e15d6d631995f07143416b73746d0833ff3a766a4b094bc6d5c69bd6b19e0043ba97cab8506b298a96b4707000000b77270f84d17c3d89c98aec479773696f16e5b9cd5be452742ba37ca722200d5256a04cd2ff6008bd26f1fe85d60ce476bffc936ca19e9d003"], 0x18}}], 0x1, 0x4048000) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) [ 187.623928][ T9221] device veth1_vlan entered promiscuous mode [ 187.670362][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.694180][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 01:29:21 executing program 2: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0xf656332e8f5c90a3}]}, 0x2c, 0x0) [ 187.725623][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.747585][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 01:29:21 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6fa, 0x2) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x0, 0x70, "56f80f8d7c9ad684157765ee68815e033b7b2972a2d067318db9ac518603e0dbae813e160bd3f15b30c226056579cf64ac2525dd44c15e56204f1e3f1b8c03b31f4281605682d4b39a61b89636b3a2a5ea0bd3f5e8bd40d8c0406969d18fed78e4f4108902b5959ec383c40036f5262e"}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r2, 0x0) unshare(0x40000000) r3 = accept(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x80, 0x401}, 0x10) write$binfmt_elf64(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xfff}], "", [[], []]}, 0x278) [ 187.882191][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.896132][ C0] hrtimer: interrupt took 25546 ns [ 187.981680][ T9248] IPVS: ftp: loaded support on port[0] = 21 [ 188.049476][ T39] audit: type=1400 audit(1578706161.468:50): avc: denied { write } for pid=9246 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 01:29:21 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) [ 188.673934][ T9258] IPVS: ftp: loaded support on port[0] = 21 [ 208.997540][ T76] kasan: CONFIG_KASAN_INLINE enabled 01:29:22 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote, @null]}, 0x48) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) [ 209.038315][ T76] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 209.119717][ T76] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 209.136179][ T76] CPU: 2 PID: 76 Comm: kworker/2:1 Not tainted 5.5.0-rc5-syzkaller #0 [ 209.136179][ T76] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 209.136179][ T76] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 209.136179][ T76] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 209.136179][ T76] Code: c3 e8 32 8d 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 a3 ce 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 209.236031][ T76] RSP: 0018:ffffc900007579f0 EFLAGS: 00010206 [ 209.236031][ T76] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399d955 [ 209.236031][ T76] RDX: 0000000000000003 RSI: ffffffff8358584d RDI: 0000000000000018 [ 209.236031][ T76] RBP: ffffc900007579f8 R08: ffff88802ad0d440 R09: fffffbfff165ebb6 [ 209.236031][ T76] R10: fffffbfff165ebb5 R11: ffffffff8b2f5daf R12: dffffc0000000000 [ 209.236031][ T76] R13: ffffc90000757b20 R14: ffffc90000757b20 R15: 000000000000001d [ 209.236031][ T76] FS: 0000000000000000(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 209.236031][ T76] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.236031][ T76] CR2: 000000c00037d1dc CR3: 000000001df3c000 CR4: 0000000000340ee0 [ 209.236031][ T76] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.236031][ T76] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.236031][ T76] Call Trace: [ 209.236031][ T76] security_socket_sendmsg+0x77/0xc0 [ 209.236031][ T76] sock_sendmsg+0x45/0x130 [ 209.236031][ T76] kernel_sendmsg+0x44/0x50 [ 209.236031][ T76] rxrpc_send_keepalive+0x1ff/0x940 [ 209.236031][ T76] ? rxrpc_reject_packets+0xab0/0xab0 [ 209.236031][ T76] ? _raw_spin_unlock_bh+0x2c/0x30 [ 209.456045][ T76] ? __local_bh_enable_ip+0x15a/0x270 [ 209.456045][ T76] ? lockdep_hardirqs_on+0x421/0x5e0 [ 209.456045][ T76] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 209.456045][ T76] ? __local_bh_enable_ip+0x15a/0x270 [ 209.456045][ T76] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 209.456045][ T76] ? rxrpc_peer_add_rtt+0x650/0x650 [ 209.456045][ T76] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 209.456045][ T76] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 209.456045][ T76] ? trace_hardirqs_on+0x67/0x240 [ 209.456045][ T76] process_one_work+0x9af/0x1740 [ 209.456045][ T76] ? pwq_dec_nr_in_flight+0x320/0x320 [ 209.456045][ T76] ? lock_acquire+0x190/0x410 [ 209.456045][ T76] worker_thread+0x98/0xe40 [ 209.456045][ T76] ? trace_hardirqs_on+0x67/0x240 [ 209.456045][ T76] kthread+0x361/0x430 [ 209.456045][ T76] ? process_one_work+0x1740/0x1740 [ 209.456045][ T76] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 209.456045][ T76] ret_from_fork+0x24/0x30 [ 209.456045][ T76] Modules linked in: [ 209.657354][ T76] ---[ end trace df0f8c295abc7cb3 ]--- [ 209.675215][ T76] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 209.678365][ T4315] kobject: 'loop3' (00000000141aa529): kobject_uevent_env [ 209.692878][ T76] Code: c3 e8 32 8d 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 a3 ce 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 209.764729][ T76] RSP: 0018:ffffc900007579f0 EFLAGS: 00010206 [ 209.789994][ T76] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399d955 [ 209.804511][ T9272] overlayfs: filesystem on './file0' not supported as upperdir [ 209.810505][ T76] RDX: 0000000000000003 RSI: ffffffff8358584d RDI: 0000000000000018 [ 209.832789][ T76] RBP: ffffc900007579f8 R08: ffff88802ad0d440 R09: fffffbfff165ebb6 [ 209.845678][ T76] R10: fffffbfff165ebb5 R11: ffffffff8b2f5daf R12: dffffc0000000000 [ 209.860605][ T76] R13: ffffc90000757b20 R14: ffffc90000757b20 R15: 000000000000001d [ 209.880604][ T76] FS: 0000000000000000(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 209.895656][ T76] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.932029][ T76] CR2: 00007ff06d854000 CR3: 0000000029804000 CR4: 0000000000340ee0 [ 209.947877][ T76] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.962492][ T76] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.974792][ T76] Kernel panic - not syncing: Fatal exception [ 209.982897][ T76] Kernel Offset: disabled [ 209.982897][ T76] Rebooting in 86400 seconds..