[ 43.314723] audit: type=1800 audit(1558824940.354:29): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 43.363418] audit: type=1800 audit(1558824940.354:30): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. 2019/05/25 22:55:49 fuzzer started syzkaller login: [ 52.809950] kauditd_printk_skb: 5 callbacks suppressed [ 52.809967] audit: type=1400 audit(1558824949.844:36): avc: denied { map } for pid=8043 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/05/25 22:55:52 dialing manager at 10.128.0.105:44295 2019/05/25 22:55:52 syscalls: 2457 2019/05/25 22:55:52 code coverage: enabled 2019/05/25 22:55:52 comparison tracing: enabled 2019/05/25 22:55:52 extra coverage: extra coverage is not supported by the kernel 2019/05/25 22:55:52 setuid sandbox: enabled 2019/05/25 22:55:52 namespace sandbox: enabled 2019/05/25 22:55:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/25 22:55:52 fault injection: enabled 2019/05/25 22:55:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/25 22:55:52 net packet injection: enabled 2019/05/25 22:55:52 net device setup: enabled 22:55:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xa4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x4}]}, 0xa4}}, 0x0) syz_execute_func(&(0x7f0000000280)="f2af91930f0124eda133fa20430fbafce842f66188d027430fc7f31441ab5bf9e2f9660f3a0fae735e090000baba3c1fb6bac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa11420f383c020201405c6bfd49d768d768f833fefbab6464660f38323c8fc481e5eb85ee000000a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 60.006268] audit: type=1400 audit(1558824957.044:37): avc: denied { map } for pid=8060 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14987 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 60.128695] IPVS: ftp: loaded support on port[0] = 21 [ 60.138827] NET: Registered protocol family 30 [ 60.143955] Failed to register TIPC socket type 22:55:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x6c}}, 0x0) syz_execute_func(&(0x7f0000000280)="f2af91930f0124eda133fa20430fbafce842f66188d027430fc7f314c1ab5bf9e2f9660f3a0fae735e090000baba3c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa11420f383c020201405c6bfd49d768d768f833fefbab6464660f38323c8fc481e5eb85ee000000a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 60.398438] IPVS: ftp: loaded support on port[0] = 21 [ 60.417218] NET: Registered protocol family 30 [ 60.422213] Failed to register TIPC socket type 22:55:57 executing program 2: epoll_create1(0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) epoll_create1(0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) fstat(r0, 0x0) write(r0, &(0x7f0000000140)="a8", 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="16dc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="b13691cd80c4a2d1920cec38c4ab39fd5bf9e2f9e2c7c7e4c653fb0f014cb63a3af4a95ff9c44149f2168f4808eebce00000802000c421fc51c12aeac461a1f8a100000021c4e189d8a42973858e2c0f186746f3400faee47edcfd7cfd7c652642d1fb26400f0d18c401fe5ff6e7df646736676666430fefb3000000000804f4f30f1a12f2400f125200111d54111d00") sendfile(r0, r0, &(0x7f0000000040), 0xff8) [ 60.730285] IPVS: ftp: loaded support on port[0] = 21 [ 60.746828] NET: Registered protocol family 30 [ 60.751463] Failed to register TIPC socket type 22:55:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0xec, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xec}}, 0x0) syz_execute_func(&(0x7f0000000280)="f2af91930f0124eda133fa20430fbafce842f66188d027430fc7f314c1ab5bf9e2f9660f3a0fae735e090000baba3c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa11420f383c020201405c6bfd49d768d768f833fefbab6464660f38323c8fc481e5eb85ee000000a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 61.322313] IPVS: ftp: loaded support on port[0] = 21 [ 61.347013] NET: Registered protocol family 30 [ 61.351630] Failed to register TIPC socket type 22:55:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x116}}, 0x0) syz_execute_func(&(0x7f0000000100)="40ddb80000000091930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a900fbab7bab7baaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 61.915768] IPVS: ftp: loaded support on port[0] = 21 [ 61.946221] NET: Registered protocol family 30 [ 61.950867] Failed to register TIPC socket type 22:55:59 executing program 5: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000004000000000000000b0000004800010044000400200001000a00000000000000fe8000000000000000000000000000bb00000000202002000a00000000000000fe8000"/83], 0x1}}, 0x0) syz_execute_func(&(0x7f0000000440)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") syz_execute_func(&(0x7f0000000000)="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") [ 62.628313] IPVS: ftp: loaded support on port[0] = 21 [ 62.653711] NET: Registered protocol family 30 [ 62.659539] Failed to register TIPC socket type [ 62.980474] chnl_net:caif_netlink_parms(): no params data found [ 63.477908] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.672823] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.817304] device bridge_slave_0 entered promiscuous mode [ 63.916247] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.044695] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.143900] device bridge_slave_1 entered promiscuous mode [ 64.607658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 64.935233] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.577719] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.764750] team0: Port device team_slave_0 added [ 66.004994] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 66.147297] team0: Port device team_slave_1 added [ 66.386121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.710823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.580744] device hsr_slave_0 entered promiscuous mode [ 67.868655] device hsr_slave_1 entered promiscuous mode [ 68.172566] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 68.381462] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 68.842215] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 69.734843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.928899] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.140270] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 70.190440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.214361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.326520] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 70.423813] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.594318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.601430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.646963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.733330] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.739894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.908013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.003903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.011219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.106894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.184206] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.190599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.313402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.320926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.481260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.592864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.653443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 71.660954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.694936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.832786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.839827] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.864725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.933355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.025521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 72.037220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.054955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.194371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 72.245430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.265780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.337884] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 72.438344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.584903] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 72.756537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.948111] audit: type=1400 audit(1558824969.984:38): avc: denied { associate } for pid=8061 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 22:56:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xa4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x4}]}, 0xa4}}, 0x0) syz_execute_func(&(0x7f0000000280)="f2af91930f0124eda133fa20430fbafce842f66188d027430fc7f31441ab5bf9e2f9660f3a0fae735e090000baba3c1fb6bac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa11420f383c020201405c6bfd49d768d768f833fefbab6464660f38323c8fc481e5eb85ee000000a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") 22:56:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xa4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x4}]}, 0xa4}}, 0x0) syz_execute_func(&(0x7f0000000280)="f2af91930f0124eda133fa20430fbafce842f66188d027430fc7f31441ab5bf9e2f9660f3a0fae735e090000baba3c1fb6bac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa11420f383c020201405c6bfd49d768d768f833fefbab6464660f38323c8fc481e5eb85ee000000a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 76.398991] IPVS: ftp: loaded support on port[0] = 21 [ 76.408486] NET: Registered protocol family 30 [ 76.431318] IPVS: ftp: loaded support on port[0] = 21 [ 76.433731] Failed to register TIPC socket type [ 76.451048] NET: Registered protocol family 30 [ 76.461042] Failed to register TIPC socket type [ 76.537993] IPVS: ftp: loaded support on port[0] = 21 [ 76.581620] NET: Registered protocol family 30 [ 76.597480] Failed to register TIPC socket type [ 76.725886] IPVS: ftp: loaded support on port[0] = 21 [ 76.761224] NET: Registered protocol family 30 [ 76.774317] Failed to register TIPC socket type 22:56:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xa4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x4}]}, 0xa4}}, 0x0) syz_execute_func(&(0x7f0000000280)="f2af91930f0124eda133fa20430fbafce842f66188d027430fc7f31441ab5bf9e2f9660f3a0fae735e090000baba3c1fb6bac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa11420f383c020201405c6bfd49d768d768f833fefbab6464660f38323c8fc481e5eb85ee000000a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") [ 77.909381] IPVS: ftp: loaded support on port[0] = 21 [ 77.936898] NET: Registered protocol family 30 [ 77.941545] Failed to register TIPC socket type 22:56:15 executing program 0: lseek(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file1\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') sendfile(r0, r1, 0x0, 0x8000) umount2(0x0, 0x0) [ 78.464167] hrtimer: interrupt took 28607 ns [ 78.559572] kasan: CONFIG_KASAN_INLINE enabled [ 78.573227] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 78.593443] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 78.599753] CPU: 1 PID: 8721 Comm: syz-executor.0 Not tainted 4.19.46 #18 [ 78.606688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.616168] RIP: 0010:proto_seq_show+0x52/0x8e0 [ 78.620854] Code: 00 00 e8 a1 56 0c fc 48 8d bb 50 ff ff ff 48 8d 83 70 fe ff ff 48 89 fa 48 89 45 c8 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 d2 07 00 00 48 83 bb 50 ff ff ff 01 19 c0 83 e0 [ 78.639770] RSP: 0018:ffff8880777c73d0 EFLAGS: 00010a06 [ 78.645152] RAX: dffffc0000000000 RBX: dead000000000100 RCX: ffffc90005e6f000 [ 78.652434] RDX: 1bd5a0000000000a RSI: ffffffff855ea8df RDI: dead000000000050 [ 78.659716] RBP: ffff8880777c7460 R08: ffff888094134300 R09: ffffed1014ad38cb [ 78.667004] R10: ffffed1014ad38ca R11: ffff8880a569c653 R12: 00000000000002d4 [ 78.674431] R13: dead000000000100 R14: ffffffff87dc6ae0 R15: 0000000000001000 [ 78.681715] FS: 00007fd053f15700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 78.690048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.695948] CR2: 000000000075c000 CR3: 0000000077474000 CR4: 00000000001406e0 [ 78.703314] Call Trace: [ 78.705927] ? seq_list_next+0x5e/0x80 [ 78.709832] seq_read+0xaae/0x1110 [ 78.713395] ? seq_dentry+0x2d0/0x2d0 [ 78.717403] proc_reg_read+0x1f8/0x2b0 [ 78.721308] ? proc_reg_unlocked_ioctl+0x2a0/0x2a0 [ 78.726257] do_iter_read+0x490/0x640 [ 78.730170] ? dup_iter+0x280/0x280 [ 78.733901] vfs_readv+0xf0/0x160 [ 78.737460] ? retint_kernel+0x2d/0x2d [ 78.741363] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 78.746757] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 78.751544] ? lockdep_hardirqs_on+0x415/0x5d0 [ 78.756144] ? retint_kernel+0x2d/0x2d [ 78.760051] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 78.764834] default_file_splice_read+0x478/0x890 [ 78.769872] ? save_stack+0x45/0xd0 [ 78.773512] ? kasan_kmalloc+0xce/0xf0 [ 78.777408] ? __kmalloc+0x15d/0x750 [ 78.781138] ? iter_file_splice_write+0xbd0/0xbd0 [ 78.785996] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 78.790772] ? lockdep_hardirqs_on+0x415/0x5d0 [ 78.795365] ? retint_kernel+0x2d/0x2d [ 78.799274] ? trace_hardirqs_on_caller+0x6a/0x220 [ 78.804220] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 78.809128] ? lockdep_hardirqs_on+0x415/0x5d0 [ 78.813755] ? retint_kernel+0x2d/0x2d [ 78.817668] ? security_file_permission+0x89/0x230 [ 78.822608] ? rw_verify_area+0x110/0x360 [ 78.826777] ? iter_file_splice_write+0xbd0/0xbd0 [ 78.831640] do_splice_to+0x127/0x180 [ 78.835462] splice_direct_to_actor+0x256/0x890 [ 78.840148] ? generic_pipe_buf_nosteal+0x10/0x10 [ 78.845097] ? do_splice_to+0x180/0x180 [ 78.849090] ? security_file_permission+0x89/0x230 [ 78.854040] ? rw_verify_area+0x118/0x360 [ 78.858206] do_splice_direct+0x1da/0x2a0 [ 78.864745] ? splice_direct_to_actor+0x890/0x890 [ 78.869610] ? security_file_permission+0x89/0x230 [ 78.874814] ? rw_verify_area+0x118/0x360 [ 78.879080] do_sendfile+0x597/0xce0 [ 78.882810] ? do_compat_pwritev64+0x1c0/0x1c0 [ 78.887408] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 78.892959] ? put_timespec64+0xda/0x140 [ 78.897037] __x64_sys_sendfile64+0x1dd/0x220 [ 78.901547] ? __ia32_sys_sendfile+0x230/0x230 [ 78.906143] ? do_syscall_64+0x26/0x620 [ 78.910129] ? lockdep_hardirqs_on+0x415/0x5d0 [ 78.914732] ? trace_hardirqs_on+0x67/0x220 [ 78.919074] do_syscall_64+0xfd/0x620 [ 78.922889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 78.928085] RIP: 0033:0x459279 [ 78.931381] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 78.950293] RSP: 002b:00007fd053f14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 78.958023] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459279 [ 78.965309] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 78.972587] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 78.979888] R10: 0000000000008000 R11: 0000000000000246 R12: 00007fd053f156d4 [ 78.987172] R13: 00000000004c65f3 R14: 00000000004db268 R15: 00000000ffffffff [ 78.994463] Modules linked in: [ 79.000347] ---[ end trace a6c630a5d39a79f2 ]--- [ 79.006222] RIP: 0010:proto_seq_show+0x52/0x8e0 [ 79.011146] Code: 00 00 e8 a1 56 0c fc 48 8d bb 50 ff ff ff 48 8d 83 70 fe ff ff 48 89 fa 48 89 45 c8 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 d2 07 00 00 48 83 bb 50 ff ff ff 01 19 c0 83 e0 [ 79.030875] RSP: 0018:ffff8880777c73d0 EFLAGS: 00010a06 [ 79.037245] RAX: dffffc0000000000 RBX: dead000000000100 RCX: ffffc90005e6f000 [ 79.045068] RDX: 1bd5a0000000000a RSI: ffffffff855ea8df RDI: dead000000000050 [ 79.052645] RBP: ffff8880777c7460 R08: ffff888094134300 R09: ffffed1014ad38cb [ 79.060744] R10: ffffed1014ad38ca R11: ffff8880a569c653 R12: 00000000000002d4 [ 79.068631] R13: dead000000000100 R14: ffffffff87dc6ae0 R15: 0000000000001000 [ 79.076395] FS: 00007fd053f15700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 79.085313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.091425] CR2: 000000000075c000 CR3: 0000000077474000 CR4: 00000000001406e0 [ 79.099286] Kernel panic - not syncing: Fatal exception [ 79.105760] Kernel Offset: disabled [ 79.109391] Rebooting in 86400 seconds..