[ 103.051669][ T39] audit: type=1400 audit(1578119351.280:41): avc: denied { map } for pid=8812 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:40757' (ECDSA) to the list of known hosts. [ 106.399491][ T39] audit: type=1400 audit(1578119354.630:42): avc: denied { map } for pid=8824 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/01/04 06:29:14 fuzzer started 2020/01/04 06:29:17 dialing manager at 10.0.2.10:44929 2020/01/04 06:29:17 syscalls: 2816 2020/01/04 06:29:17 code coverage: enabled 2020/01/04 06:29:17 comparison tracing: enabled 2020/01/04 06:29:17 extra coverage: enabled 2020/01/04 06:29:17 setuid sandbox: enabled 2020/01/04 06:29:17 namespace sandbox: enabled 2020/01/04 06:29:17 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/04 06:29:17 fault injection: enabled 2020/01/04 06:29:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/04 06:29:17 net packet injection: enabled 2020/01/04 06:29:17 net device setup: enabled 2020/01/04 06:29:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/04 06:29:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:29:49 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 141.752376][ T39] audit: type=1400 audit(1578119389.980:43): avc: denied { map } for pid=8846 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=77 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 06:29:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0xe5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 142.587153][ T8849] IPVS: ftp: loaded support on port[0] = 21 [ 142.587160][ T8847] IPVS: ftp: loaded support on port[0] = 21 06:29:50 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) dup3(r0, r1, 0x0) [ 142.853281][ T8851] IPVS: ftp: loaded support on port[0] = 21 [ 142.977236][ T8847] chnl_net:caif_netlink_parms(): no params data found [ 143.044559][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 143.185044][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.208228][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.232076][ T8849] device bridge_slave_0 entered promiscuous mode [ 143.283123][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state 06:29:51 executing program 3: getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 143.344894][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.401284][ T8849] device bridge_slave_1 entered promiscuous mode [ 143.431847][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.450887][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.468920][ T8847] device bridge_slave_0 entered promiscuous mode [ 143.496523][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.513333][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.526446][ T8847] device bridge_slave_1 entered promiscuous mode [ 143.547451][ T8851] chnl_net:caif_netlink_parms(): no params data found [ 143.578493][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.633660][ T8858] IPVS: ftp: loaded support on port[0] = 21 [ 143.648649][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.671817][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.691115][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.716928][ T8849] team0: Port device team_slave_0 added [ 143.729212][ T8849] team0: Port device team_slave_1 added [ 143.755004][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.765822][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.777871][ T8851] device bridge_slave_0 entered promiscuous mode [ 143.806319][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.817046][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.829129][ T8851] device bridge_slave_1 entered promiscuous mode [ 143.846524][ T8847] team0: Port device team_slave_0 added [ 143.865486][ T8847] team0: Port device team_slave_1 added [ 143.959693][ T8849] device hsr_slave_0 entered promiscuous mode [ 144.036972][ T8849] device hsr_slave_1 entered promiscuous mode [ 144.131391][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.173082][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.236959][ T8851] team0: Port device team_slave_0 added [ 144.299388][ T8847] device hsr_slave_0 entered promiscuous mode [ 144.356021][ T8847] device hsr_slave_1 entered promiscuous mode [ 144.415990][ T8847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.436858][ T8847] Cannot create hsr debugfs directory [ 144.456814][ T8851] team0: Port device team_slave_1 added [ 144.628335][ T8851] device hsr_slave_0 entered promiscuous mode [ 144.696186][ T8851] device hsr_slave_1 entered promiscuous mode [ 144.756538][ T8851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.770409][ T8851] Cannot create hsr debugfs directory [ 144.820532][ T39] audit: type=1400 audit(1578119393.050:44): avc: denied { create } for pid=8849 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 144.859493][ T39] audit: type=1400 audit(1578119393.060:45): avc: denied { write } for pid=8849 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 144.859514][ T39] audit: type=1400 audit(1578119393.060:46): avc: denied { read } for pid=8849 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 145.038152][ T8849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.122422][ T8858] chnl_net:caif_netlink_parms(): no params data found [ 145.136498][ T8849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.210152][ T8849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.250285][ T8849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.430094][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.438928][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.448968][ T8858] device bridge_slave_0 entered promiscuous mode [ 145.459924][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.469178][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.479018][ T8858] device bridge_slave_1 entered promiscuous mode [ 145.497709][ T8851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.556781][ T8847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.641720][ T8847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.709198][ T8847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.778257][ T8847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.877461][ T8851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.928074][ T8851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.011244][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.064580][ T8851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.189504][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.237302][ T8858] team0: Port device team_slave_0 added [ 146.259737][ T8858] team0: Port device team_slave_1 added [ 146.367948][ T8858] device hsr_slave_0 entered promiscuous mode [ 146.446157][ T8858] device hsr_slave_1 entered promiscuous mode [ 146.516032][ T8858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.526453][ T8858] Cannot create hsr debugfs directory [ 146.633645][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.668389][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.683809][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.701253][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.739945][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.752151][ T8858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.822895][ T8858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.879566][ T8858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.957360][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.971198][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.991871][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.003835][ T8858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.137317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.170692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.195348][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.208098][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.237974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.255137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.279829][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.301608][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.334970][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.367351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.435184][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.464050][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.496514][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.526602][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.557254][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.576485][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.600772][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.620798][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.634799][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.651005][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.681151][ T8851] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.702276][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.721546][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.740929][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.767945][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.808675][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.828010][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.844026][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.866688][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.883272][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.899468][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.917013][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.941574][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.962108][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.990840][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.011210][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.031143][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.057188][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.070324][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.083956][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.096203][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.108045][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.117901][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.129145][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.140866][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.153112][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.176137][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.187489][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.198843][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.210875][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.224125][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.238887][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.267426][ T8849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.289009][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.306945][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.324664][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.349272][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.379171][ T8847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.414568][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.451008][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.478321][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.512937][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.540704][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.587171][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.612658][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.635236][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.660597][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.696467][ T8851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.732221][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.761407][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.788980][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.808551][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.830015][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.861394][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.879009][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.896820][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.910498][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.930522][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.952474][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.966269][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.981989][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.001314][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.024655][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.045362][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.063271][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.077313][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.105930][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.133360][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.180301][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.223613][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.249205][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.262922][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.273474][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.284670][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.304228][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.316423][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.331495][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.352513][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.372459][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.388732][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.404797][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.434176][ T8849] device veth0_vlan entered promiscuous mode [ 149.450825][ T8847] device veth0_vlan entered promiscuous mode [ 149.462847][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.478464][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.493182][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.508744][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.527641][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.540942][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.554644][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.568486][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.582558][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.596124][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.623638][ T8849] device veth1_vlan entered promiscuous mode [ 149.638754][ T8851] device veth0_vlan entered promiscuous mode [ 149.655517][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.668837][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.682825][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.697238][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.712140][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.727943][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.739591][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.756363][ T8847] device veth1_vlan entered promiscuous mode [ 149.771625][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.786404][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.809444][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.822852][ T8851] device veth1_vlan entered promiscuous mode [ 149.848970][ T39] audit: type=1400 audit(1578119398.080:47): avc: denied { associate } for pid=8849 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 149.915987][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.943959][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.961198][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.988552][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.008131][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.058774][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.081522][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.097944][ T8858] device veth0_vlan entered promiscuous mode [ 150.106836][ T39] audit: type=1400 audit(1578119398.340:48): avc: denied { prog_load } for pid=8866 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 150.133059][ T8858] device veth1_vlan entered promiscuous mode [ 150.169911][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.170515][ T39] audit: type=1400 audit(1578119398.390:49): avc: denied { open } for pid=8867 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 150.219890][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.391841][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.454563][ T39] audit: type=1400 audit(1578119398.390:50): avc: denied { kernel } for pid=8867 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 150.530871][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.552112][ T39] audit: type=1400 audit(1578119398.610:51): avc: denied { prog_run } for pid=8866 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 06:30:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000140)) 06:30:00 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) dup3(r0, r1, 0x0) 06:30:01 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd9b304c91d1a9bc4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc6, 0x0) 06:30:01 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) dup3(r0, r1, 0x0) 06:30:01 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:30:01 executing program 1: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 06:30:01 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 173.394185][ T8856] kasan: CONFIG_KASAN_INLINE enabled [ 173.413930][ T8856] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 173.499370][ T8856] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 173.505795][ T8856] CPU: 1 PID: 8856 Comm: kworker/1:2 Not tainted 5.5.0-rc4-syzkaller #0 [ 173.505795][ T8856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 173.505795][ T8856] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 173.505795][ T8856] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 173.505795][ T8856] Code: c3 e8 d2 83 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 d3 cb 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 173.505795][ T8856] RSP: 0018:ffffc900013379f0 EFLAGS: 00010206 [ 173.505795][ T8856] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399d015 [ 173.505795][ T8856] RDX: 0000000000000003 RSI: ffffffff8358615d RDI: 0000000000000018 [ 173.505795][ T8856] RBP: ffffc900013379f8 R08: ffff88801e2acb00 R09: fffffbfff165f1be [ 173.505795][ T8856] R10: fffffbfff165f1bd R11: ffffffff8b2f8def R12: dffffc0000000000 [ 173.505795][ T8856] R13: ffffc90001337b20 R14: ffffc90001337b20 R15: 000000000000001d [ 173.505795][ T8856] FS: 0000000000000000(0000) GS:ffff88802d100000(0000) knlGS:0000000000000000 [ 173.505795][ T8856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.505795][ T8856] CR2: 00007f1197cbd140 CR3: 000000002855c000 CR4: 0000000000340ee0 [ 173.505795][ T8856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.505795][ T8856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.505795][ T8856] Call Trace: [ 173.505795][ T8856] security_socket_sendmsg+0x77/0xc0 [ 173.505795][ T8856] sock_sendmsg+0x45/0x130 [ 173.505795][ T8856] kernel_sendmsg+0x44/0x50 [ 173.505795][ T8856] rxrpc_send_keepalive+0x1ff/0x940 [ 173.505795][ T8856] ? rxrpc_reject_packets+0xab0/0xab0 [ 173.505795][ T8856] ? _raw_spin_unlock_bh+0x2c/0x30 [ 173.505795][ T8856] ? __local_bh_enable_ip+0x15a/0x270 [ 173.505795][ T8856] ? lockdep_hardirqs_on+0x421/0x5e0 [ 173.505795][ T8856] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 173.505795][ T8856] ? __local_bh_enable_ip+0x15a/0x270 [ 173.505795][ T8856] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 173.505795][ T8856] ? rxrpc_peer_add_rtt+0x650/0x650 [ 173.505795][ T8856] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 173.505795][ T8856] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 173.505795][ T8856] ? trace_hardirqs_on+0x67/0x240 [ 173.505795][ T8856] process_one_work+0x9af/0x1740 [ 173.505795][ T8856] ? pwq_dec_nr_in_flight+0x320/0x320 [ 173.505795][ T8856] ? lock_acquire+0x190/0x410 [ 173.505795][ T8856] worker_thread+0x98/0xe40 [ 173.505795][ T8856] ? trace_hardirqs_on+0x67/0x240 [ 173.505795][ T8856] kthread+0x361/0x430 [ 173.505795][ T8856] ? process_one_work+0x1740/0x1740 [ 173.505795][ T8856] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 173.505795][ T8856] ret_from_fork+0x24/0x30 [ 173.505795][ T8856] Modules linked in: [ 174.066055][ T8856] ---[ end trace 8df7e49c0987377a ]--- [ 174.086185][ T8856] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 174.102917][ T8856] Code: c3 e8 d2 83 5a fe eb e8 55 48 89 e5 53 48 89 fb e8 d3 cb 1c fe 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 18 be 04 00 00 00 e8 fa fb ff ff 5b 5d [ 174.141927][ T8856] RSP: 0018:ffffc900013379f0 EFLAGS: 00010206 [ 174.152750][ T8856] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8399d015 [ 174.165272][ T8856] RDX: 0000000000000003 RSI: ffffffff8358615d RDI: 0000000000000018 [ 174.177942][ T8856] RBP: ffffc900013379f8 R08: ffff88801e2acb00 R09: fffffbfff165f1be [ 174.191150][ T8856] R10: fffffbfff165f1bd R11: ffffffff8b2f8def R12: dffffc0000000000 [ 174.204239][ T8856] R13: ffffc90001337b20 R14: ffffc90001337b20 R15: 000000000000001d [ 174.219229][ T8856] FS: 0000000000000000(0000) GS:ffff88802d100000(0000) knlGS:0000000000000000 [ 174.235734][ T8856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.249423][ T8856] CR2: 00007f1197cbd140 CR3: 000000002855c000 CR4: 0000000000340ee0 [ 174.262400][ T8856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.279375][ T8856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.295403][ T8856] Kernel panic - not syncing: Fatal exception [ 174.304922][ T8856] Kernel Offset: disabled [ 174.304922][ T8856] Rebooting in 86400 seconds..