Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts. 2019/05/26 17:06:03 fuzzer started [ 52.321110] audit: type=1400 audit(1558890363.219:36): avc: denied { map } for pid=7813 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/05/26 17:06:06 dialing manager at 10.128.0.105:44295 2019/05/26 17:06:06 syscalls: 2457 2019/05/26 17:06:06 code coverage: enabled 2019/05/26 17:06:06 comparison tracing: enabled 2019/05/26 17:06:06 extra coverage: extra coverage is not supported by the kernel 2019/05/26 17:06:06 setuid sandbox: enabled 2019/05/26 17:06:06 namespace sandbox: enabled 2019/05/26 17:06:06 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/26 17:06:06 fault injection: enabled 2019/05/26 17:06:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/26 17:06:06 net packet injection: enabled 2019/05/26 17:06:06 net device setup: enabled 17:06:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="02ff7f00bf0100000000000000000000ba010000086e00002123292fde042774602f36cddb4aa287b3b3312d"], 0x2c}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188d0c0430fc7f314c1ab5be2f9660f3a0fae5e090000ba44d8d1b63ac4817d73d74ec482310d46f449f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfd499768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5c") [ 70.189826] audit: type=1400 audit(1558890381.089:37): avc: denied { map } for pid=7830 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14986 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 70.308975] IPVS: ftp: loaded support on port[0] = 21 [ 70.319631] NET: Registered protocol family 30 [ 70.324272] Failed to register TIPC socket type 17:06:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)="649dedae939e9f8224cc276521", 0xd}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) write$FUSE_DIRENT(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="e5826d421d3b7014a2038b58a17f6de65d55d65063ef83613a57508b2529391dd3d49e"], 0x23) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) [ 70.563511] IPVS: ftp: loaded support on port[0] = 21 [ 70.580433] NET: Registered protocol family 30 [ 70.585083] Failed to register TIPC socket type 17:06:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x329}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188d0d4f814c1ab5be2f9660f3a0fae5e090000ba44d8d1c401f5ef1ac4817d73d74ec4a275bd153c78ab7749f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfdc402b504a60080000068d768f833c4a1cd61b3b23c0000ab26dbc1a1fe5ff6f6df0804f4c4efa59cc442abf58f104eb547288ba6452e000054c4431d3e660f6e7f3c") [ 70.843784] IPVS: ftp: loaded support on port[0] = 21 [ 70.860481] NET: Registered protocol family 30 [ 70.865123] Failed to register TIPC socket type 17:06:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x40}}, 0x0) syz_execute_func(&(0x7f0000000440)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 71.311735] IPVS: ftp: loaded support on port[0] = 21 [ 71.340804] NET: Registered protocol family 30 [ 71.345545] Failed to register TIPC socket type 17:06:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000200)="f2af91930f0124eda533fa20430fbafce842f66188d0d443d1df1491ab5b3427e2f9660f3a0fae5e090000baf01117b63a5c5e817d73d74ec482310d46f486f2cdd96467d8e1438036a9126ce00f955baaaa420f383c02c401405c6bfd49d768d768f833fefb3e0fdbca6464660f38ab323c8f8fdbc1a1fe5ff6f6df0804f4ebef26450f01dd770f01c4288ba6452e00b07148551c7180") [ 71.932485] IPVS: ftp: loaded support on port[0] = 21 [ 71.960698] NET: Registered protocol family 30 [ 71.965694] Failed to register TIPC socket type 17:06:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000001180), 0x4) sendto$inet(r0, &(0x7f00000001c0)=';', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140), 0x4) [ 72.592117] IPVS: ftp: loaded support on port[0] = 21 [ 72.631597] NET: Registered protocol family 30 [ 72.636245] Failed to register TIPC socket type [ 73.443712] chnl_net:caif_netlink_parms(): no params data found [ 73.803877] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.897007] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.007519] device bridge_slave_0 entered promiscuous mode [ 74.152255] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.265291] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.397435] device bridge_slave_1 entered promiscuous mode [ 74.850480] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 75.098636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.698227] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.837511] team0: Port device team_slave_0 added [ 76.119658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.218134] team0: Port device team_slave_1 added [ 76.392741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.599715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.983368] device hsr_slave_0 entered promiscuous mode [ 77.130139] device hsr_slave_1 entered promiscuous mode [ 77.379085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 77.522783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 77.811526] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.600024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.763287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 78.957926] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 79.068105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.089600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.218907] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 79.307330] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.449650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.543420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.556949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.687877] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.696950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.863924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.928573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.936120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.044615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.139426] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.146079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.272345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.368529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.443887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.522137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.658488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.665766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.691583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.916523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.923775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.937512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.048387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.074682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 81.234275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.243015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.416361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 81.424793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.458759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.698057] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 81.704165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.164084] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 83.066643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.851768] audit: type=1400 audit(1558890394.749:38): avc: denied { associate } for pid=7831 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 17:06:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x58}}, 0x0) syz_execute_func(&(0x7f0000000440)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 86.832646] IPVS: ftp: loaded support on port[0] = 21 [ 86.951115] NET: Registered protocol family 30 [ 86.955780] Failed to register TIPC socket type [ 86.991213] IPVS: ftp: loaded support on port[0] = 21 [ 87.030227] NET: Registered protocol family 30 [ 87.038160] Failed to register TIPC socket type [ 87.213026] IPVS: ftp: loaded support on port[0] = 21 [ 87.241427] NET: Registered protocol family 30 [ 87.246086] Failed to register TIPC socket type [ 87.541502] IPVS: ftp: loaded support on port[0] = 21 [ 87.561307] NET: Registered protocol family 30 [ 87.565972] Failed to register TIPC socket type 17:06:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x58}}, 0x0) syz_execute_func(&(0x7f0000000440)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 88.632673] IPVS: ftp: loaded support on port[0] = 21 [ 88.681037] NET: Registered protocol family 30 [ 88.685676] Failed to register TIPC socket type 17:06:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x58}}, 0x0) syz_execute_func(&(0x7f0000000440)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") 17:06:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x58}}, 0x0) syz_execute_func(&(0x7f0000000440)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") 17:06:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) close(r1) [ 90.991391] hrtimer: interrupt took 27909 ns 17:06:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) close(r1) 17:06:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) close(r1) [ 91.667824] IPVS: ftp: loaded support on port[0] = 21 [ 91.679716] NET: Registered protocol family 30 [ 91.684360] Failed to register TIPC socket type [ 91.696374] cache_from_obj: Wrong slab cache. TIPC but object is from kmalloc-2048 [ 91.704509] WARNING: CPU: 1 PID: 8516 at mm/slab.h:380 kmem_cache_free.cold+0x1c/0x23 [ 91.712497] Kernel panic - not syncing: panic_on_warn set ... [ 91.712497] [ 91.719886] CPU: 1 PID: 8516 Comm: syz-executor.0 Not tainted 4.19.46 #18 [ 91.726827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.736215] Call Trace: [ 91.738817] [ 91.740986] dump_stack+0x172/0x1f0 [ 91.744642] panic+0x263/0x507 [ 91.747844] ? __warn_printk+0xf3/0xf3 [ 91.751754] ? kmem_cache_free.cold+0x1c/0x23 [ 91.756264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.761827] ? __warn.cold+0x5/0x4a [ 91.765471] ? __warn+0xe8/0x1d0 [ 91.768852] ? kmem_cache_free.cold+0x1c/0x23 [ 91.773378] __warn.cold+0x20/0x4a [ 91.776933] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 91.781566] ? kmem_cache_free.cold+0x1c/0x23 [ 91.786092] report_bug+0x263/0x2b0 [ 91.789743] do_error_trap+0x204/0x360 [ 91.793648] ? math_error+0x340/0x340 [ 91.797466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.803025] ? wake_up_klogd+0x99/0xd0 [ 91.806929] ? error_entry+0x76/0xd0 [ 91.810687] ? trace_hardirqs_off_caller+0x65/0x220 [ 91.815725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 91.821017] do_invalid_op+0x1b/0x20 [ 91.824743] invalid_op+0x14/0x20 [ 91.828209] RIP: 0010:kmem_cache_free.cold+0x1c/0x23 [ 91.833336] Code: e8 25 8d 47 05 44 8b 6d c4 e9 74 a5 ff ff 48 8b 48 58 48 c7 c6 40 45 54 87 48 c7 c7 18 64 38 88 49 8b 54 24 58 e8 34 43 b4 ff <0f> 0b e9 89 df ff ff 49 8b 4f 58 48 c7 c6 40 45 54 87 48 c7 c7 18 [ 91.852295] RSP: 0018:ffff8880ae907cf8 EFLAGS: 00010286 [ 91.857706] RAX: 0000000000000046 RBX: ffff8880a1e1ee00 RCX: 0000000000000000 [ 91.864990] RDX: 0000000000000000 RSI: ffffffff81559e76 RDI: ffffed1015d20f91 [ 91.872276] RBP: ffff8880ae907d18 R08: 0000000000000046 R09: ffffed1015d24fe9 [ 91.879559] R10: ffffed1015d24fe8 R11: ffff8880ae927f47 R12: ffff888096da6480 [ 91.886846] R13: 0000000000000000 R14: ffff888096da6480 R15: ffff8880a1e1f110 [ 91.894157] ? vprintk_func+0x86/0x189 [ 91.898088] ? kmem_cache_free.cold+0x1c/0x23 [ 91.902605] __sk_destruct+0x4b4/0x6d0 [ 91.906512] ? tipc_wait_for_connect.isra.0+0x4c0/0x4c0 [ 91.911894] sk_destruct+0x7b/0x90 [ 91.915451] __sk_free+0xce/0x300 [ 91.918920] sk_free+0x42/0x50 [ 91.922128] tipc_sk_callback+0x48/0x60 [ 91.926116] rcu_process_callbacks+0xba0/0x1a30 [ 91.930814] ? __rcu_read_unlock+0x170/0x170 [ 91.935241] ? __lock_is_held+0xb6/0x140 [ 91.939349] __do_softirq+0x25c/0x921 [ 91.943174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.948733] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 91.954311] irq_exit+0x180/0x1d0 [ 91.957828] smp_apic_timer_interrupt+0x13b/0x550 [ 91.962703] apic_timer_interrupt+0xf/0x20 [ 91.966946] [ 91.969208] RIP: 0010:ext4_add_entry+0x9b7/0xb70 [ 91.973986] Code: 75 6b e8 0c f3 7b ff 48 8d 73 90 4d 89 e1 4d 89 f0 48 8b 8d 28 ff ff ff 4c 89 ea 48 8b bd 20 ff ff ff e8 fc b2 ff ff 41 89 c7 e4 f2 7b ff 4d 85 e4 0f 84 d9 fd ff ff e8 d6 f2 7b ff 4c 89 e7 [ 91.992913] RSP: 0018:ffff8880a018fc40 EFLAGS: 00000213 ORIG_RAX: ffffffffffffff13 [ 92.000672] RAX: 0000000000000000 RBX: ffff8880a018fd28 RCX: ffffffff81ef08be [ 92.008500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 92.015802] RBP: ffff8880a018fd50 R08: ffff888086f56640 R09: ffffed1015d24733 [ 92.023193] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: ffff8880944311f8 [ 92.030495] R13: ffff8880835e4970 R14: 0000000000000001 R15: 0000000000000000 [ 92.037932] ? ext4_add_entry+0x5de/0xb70 [ 92.042121] ? make_indexed_dir+0x1310/0x1310 [ 92.046637] ? dquot_get_next_dqblk+0x180/0x180 [ 92.051330] ? selinux_dentry_init_security+0x2a0/0x2a0 [ 92.056749] ? selinux_capable+0x40/0x40 [ 92.060855] ext4_add_nondir+0x28/0x90 [ 92.065385] ext4_symlink+0x5e8/0xbe0 [ 92.069230] vfs_symlink+0x373/0x5c0 [ 92.073358] do_symlinkat+0x22b/0x290 [ 92.077226] ? __ia32_sys_unlink+0x50/0x50 [ 92.081498] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 92.086478] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.091905] ? do_syscall_64+0x26/0x620 [ 92.095909] ? lockdep_hardirqs_on+0x415/0x5d0 [ 92.100527] __x64_sys_symlink+0x59/0x80 [ 92.104617] do_syscall_64+0xfd/0x620 [ 92.108555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.114206] RIP: 0033:0x458fa7 [ 92.118350] Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 92.142408] RSP: 002b:00007ffd3dd66d28 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 92.151925] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458fa7 [ 92.159458] RDX: 00007ffd3dd66dc3 RSI: 00000000004bea59 RDI: 00007ffd3dd66db0 [ 92.167978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 92.181516] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000000 [ 92.210548] R13: 00007ffd3dd66d60 R14: 0000000000000000 R15: 00007ffd3dd66d70 [ 92.219863] Kernel Offset: disabled [ 92.224226] Rebooting in 86400 seconds..