syzkaller login: [ 51.374002][ T26] audit: type=1400 audit(1578950247.978:41): avc: denied { map } for pid=8041 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 57.853783][ T26] audit: type=1400 audit(1578950254.458:42): avc: denied { map } for pid=8050 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 58.685849][ T8069] IPVS: ftp: loaded support on port[0] = 21 [ 58.964747][ T2613] tipc: TX() has been purged, node left! [ 59.155239][ T8066] can: request_module (can-proto-0) failed. [ 61.917535][ T8066] can: request_module (can-proto-0) failed. [ 61.928525][ T8066] can: request_module (can-proto-0) failed. [ 62.126264][ T26] audit: type=1400 audit(1578950258.738:43): avc: denied { create } for pid=8050 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 62.151544][ T26] audit: type=1400 audit(1578950258.738:44): avc: denied { create } for pid=8050 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 62.175837][ T26] audit: type=1400 audit(1578950258.738:45): avc: denied { create } for pid=8050 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.25' (ECDSA) to the list of known hosts. 2020/01/13 21:17:45 parsed 1 programs 2020/01/13 21:17:45 executed programs: 0 [ 69.484301][ T8144] IPVS: ftp: loaded support on port[0] = 21 [ 69.487606][ T8153] IPVS: ftp: loaded support on port[0] = 21 [ 69.500940][ T8147] IPVS: ftp: loaded support on port[0] = 21 [ 69.501392][ T8151] IPVS: ftp: loaded support on port[0] = 21 [ 69.513691][ T8148] IPVS: ftp: loaded support on port[0] = 21 [ 69.525899][ T8154] IPVS: ftp: loaded support on port[0] = 21 [ 69.703502][ T8154] chnl_net:caif_netlink_parms(): no params data found [ 69.772123][ T8144] chnl_net:caif_netlink_parms(): no params data found [ 69.793506][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.802249][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.809896][ T8154] device bridge_slave_0 entered promiscuous mode [ 69.818119][ T8147] chnl_net:caif_netlink_parms(): no params data found [ 69.840402][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.847650][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.855834][ T8154] device bridge_slave_1 entered promiscuous mode [ 69.865713][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 69.888040][ T8154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.900851][ T8154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.924853][ T8154] team0: Port device team_slave_0 added [ 69.935034][ T8154] team0: Port device team_slave_1 added [ 70.010084][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.017460][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.025612][ T8153] device bridge_slave_0 entered promiscuous mode [ 70.032787][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.040728][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.048689][ T8147] device bridge_slave_0 entered promiscuous mode [ 70.057845][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.065030][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.073132][ T8147] device bridge_slave_1 entered promiscuous mode [ 70.087022][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 70.096628][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.103796][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.111564][ T8153] device bridge_slave_1 entered promiscuous mode [ 70.187498][ T8154] device hsr_slave_0 entered promiscuous mode [ 70.245100][ T8154] device hsr_slave_1 entered promiscuous mode [ 70.315026][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.322100][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.330317][ T8144] device bridge_slave_0 entered promiscuous mode [ 70.340422][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.347995][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.355741][ T8144] device bridge_slave_1 entered promiscuous mode [ 70.368138][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 70.405293][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.420473][ T8147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.435362][ T8147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.461919][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.471475][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.478800][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.486464][ T8148] device bridge_slave_0 entered promiscuous mode [ 70.507719][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.518960][ T8147] team0: Port device team_slave_0 added [ 70.528420][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.537089][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.544696][ T8148] device bridge_slave_1 entered promiscuous mode [ 70.565568][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.579059][ T8147] team0: Port device team_slave_1 added [ 70.604575][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.612024][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.620250][ T8151] device bridge_slave_0 entered promiscuous mode [ 70.631413][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.638740][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.647376][ T8151] device bridge_slave_1 entered promiscuous mode [ 70.655838][ T8153] team0: Port device team_slave_0 added [ 70.663450][ T8153] team0: Port device team_slave_1 added [ 70.670406][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.682077][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.692874][ T8144] team0: Port device team_slave_0 added [ 70.703856][ T8144] team0: Port device team_slave_1 added [ 70.758408][ T8148] team0: Port device team_slave_0 added [ 70.766552][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.816264][ T8144] device hsr_slave_0 entered promiscuous mode [ 70.865162][ T8144] device hsr_slave_1 entered promiscuous mode [ 70.904847][ T8144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.912667][ T8144] Cannot create hsr debugfs directory [ 70.956736][ T8147] device hsr_slave_0 entered promiscuous mode [ 71.005058][ T8147] device hsr_slave_1 entered promiscuous mode [ 71.044792][ T8147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.052434][ T8147] Cannot create hsr debugfs directory [ 71.059449][ T8148] team0: Port device team_slave_1 added [ 71.080806][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.136269][ T8153] device hsr_slave_0 entered promiscuous mode [ 71.174929][ T8153] device hsr_slave_1 entered promiscuous mode [ 71.214746][ T8153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.222316][ T8153] Cannot create hsr debugfs directory [ 71.279348][ T8148] device hsr_slave_0 entered promiscuous mode [ 71.344907][ T8148] device hsr_slave_1 entered promiscuous mode [ 71.394759][ T8148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.402489][ T8148] Cannot create hsr debugfs directory [ 71.437685][ T8151] team0: Port device team_slave_0 added [ 71.465784][ T8151] team0: Port device team_slave_1 added [ 71.586564][ T8151] device hsr_slave_0 entered promiscuous mode [ 71.635109][ T8151] device hsr_slave_1 entered promiscuous mode [ 71.674895][ T8151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.682500][ T8151] Cannot create hsr debugfs directory [ 71.726330][ T8154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.799226][ T8147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.810011][ T8154] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.828934][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.837295][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.852987][ T8147] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.870479][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.880132][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.888184][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.896414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.904948][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.913257][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.920421][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.930521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.940226][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.948535][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.955616][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.982172][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.992048][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.000970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.009133][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.019007][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.028269][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.037808][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.044926][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.052529][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.061134][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.069403][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.076478][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.083874][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.092724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.101314][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.109727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.118148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.126734][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.135468][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.143716][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.152212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.160387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.168247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.177103][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.184927][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.192559][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.214782][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.223214][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.235614][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.242800][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.250801][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.259902][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.268504][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.279837][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.287409][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.296081][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.304318][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.312724][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.321166][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.329445][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.343261][ T8154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.354015][ T8154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.374065][ T8147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.386085][ T8147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.408059][ T8153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.418687][ T8153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.434173][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.442981][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.451665][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.460390][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.468946][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.477377][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.485125][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.492637][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.501330][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.509695][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.518208][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.526594][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.535384][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.543504][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.552026][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.560316][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.569334][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.577577][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.585886][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.609762][ T8148] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.624562][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.632411][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.640209][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.648647][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.657198][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.666834][ T3113] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.673926][ T3113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.681807][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.690084][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.708021][ T8147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.720202][ T8144] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.735195][ T8154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.745480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.753380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.762030][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.770232][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.778265][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.786122][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.794687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.802938][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.810044][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.820136][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.842208][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.852190][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.861293][ T3113] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.868410][ T3113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.878634][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.887221][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.895652][ T3113] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.902676][ T3113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.910392][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.919154][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.940977][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.944810][ T26] audit: type=1400 audit(1578950269.548:46): avc: denied { associate } for pid=8147 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 72.973837][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.982799][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.992008][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.000668][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.009633][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.017920][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.025764][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.033327][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.042371][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.051058][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.058183][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.067355][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.075919][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.084201][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.091841][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.100354][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.108904][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.117257][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.125828][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.133986][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.142501][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.150762][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.159052][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.167655][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.175368][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.183028][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.198331][ T8151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.211816][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.240752][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.249563][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.274195][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.288126][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.296553][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.315803][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.324010][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.340492][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.355663][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.365820][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.377979][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.386589][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.399150][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.408283][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.417019][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.424409][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.438786][ T8144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.450536][ T8144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.475463][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.508434][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.519915][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.529170][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.541699][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.564197][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.573638][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.587032][ T3113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.604085][ T8144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.634216][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.646824][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.654295][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.669622][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.681852][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.042171][ T8269] ================================================================== [ 74.050432][ T8269] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x341/0x440 [ 74.057879][ T8269] Read of size 1 at addr 0000000000000000 by task syz-executor.3/8269 [ 74.066018][ T8269] [ 74.068229][ T8276] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 74.068336][ T8269] CPU: 0 PID: 8269 Comm: syz-executor.3 Not tainted 5.5.0-rc6-syzkaller #0 [ 74.076119][ T8276] #PF: supervisor read access in kernel mode [ 74.084674][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.084679][ T8269] Call Trace: [ 74.091068][ T8276] #PF: error_code(0x0000) - not-present page [ 74.101277][ T8269] dump_stack+0x12d/0x187 [ 74.104525][ T8276] PGD 89825067 P4D 89825067 PUD a4b82067 PMD 0 [ 74.110633][ T8269] ? llcp_sock_getname+0x341/0x440 [ 74.114934][ T8276] Oops: 0000 [#1] PREEMPT SMP KASAN [ 74.121276][ T8269] __kasan_report.cold.11+0x5/0x3a [ 74.127237][ T8276] CPU: 1 PID: 8276 Comm: syz-executor.4 Not tainted 5.5.0-rc6-syzkaller #0 [ 74.132427][ T8269] ? llcp_sock_getname+0x341/0x440 [ 74.137511][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.146069][ T8269] ? trace_hardirqs_on_caller+0x1a0/0x1a0 [ 74.151150][ T8276] RIP: 0010:memcpy_erms+0x6/0x10 [ 74.161175][ T8269] ? llcp_sock_getname+0x341/0x440 [ 74.166879][ T8276] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 74.171794][ T8269] kasan_report+0x12/0x20 [ 74.176872][ T8276] RSP: 0018:ffff8880876efcf0 EFLAGS: 00010246 [ 74.196470][ T8269] check_memory_region+0x153/0x1d0 [ 74.200778][ T8276] RAX: ffff8880876efe12 RBX: 0000000000000001 RCX: 0000000000000001 [ 74.206814][ T8269] memcpy+0x23/0x50 [ 74.211889][ T8276] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880876efe12 [ 74.219845][ T8269] llcp_sock_getname+0x341/0x440 [ 74.223617][ T8276] RBP: ffff8880876efd10 R08: ffffed1010eddfc3 R09: ffffed1010eddfc3 [ 74.231561][ T8269] ? security_socket_getpeername+0x3a/0x70 [ 74.236463][ T8276] R10: ffffed1010eddfc2 R11: ffff8880876efe12 R12: ffff8880876efe12 [ 74.244418][ T8269] __sys_getpeername+0x123/0x220 [ 74.250210][ T8276] R13: 0000000000000000 R14: ffff888099e96000 R15: 0000000000000000 [ 74.258157][ T8269] ? __ia32_sys_getsockname+0xb0/0xb0 [ 74.263077][ T8276] FS: 00007ff02a9e5700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 74.271674][ T8269] ? __kasan_check_read+0x11/0x20 [ 74.277030][ T8276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.285947][ T8269] ? _copy_to_user+0xcb/0xf0 [ 74.290935][ T8276] CR2: 0000000000000000 CR3: 0000000089824000 CR4: 00000000001406e0 [ 74.297518][ T8269] ? put_timespec64+0xa9/0x100 [ 74.302092][ T8276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.310048][ T8269] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 74.314780][ T8276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.322733][ T8269] ? do_syscall_64+0x21/0x5f0 [ 74.328159][ T8276] Call Trace: [ 74.336118][ T8269] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.340763][ T8276] ? memcpy+0x45/0x50 [ 74.344029][ T8269] __x64_sys_getpeername+0x6e/0xb0 [ 74.350074][ T8276] llcp_sock_getname+0x341/0x440 [ 74.354039][ T8269] do_syscall_64+0xca/0x5f0 [ 74.359121][ T8276] ? security_socket_getpeername+0x3a/0x70 [ 74.364030][ T8269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.368515][ T8276] __sys_getpeername+0x123/0x220 [ 74.374289][ T8269] RIP: 0033:0x45a219 [ 74.380500][ T8276] ? __ia32_sys_getsockname+0xb0/0xb0 [ 74.386462][ T8269] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 74.390339][ T8276] ? __kasan_check_read+0x11/0x20 [ 74.395680][ T8269] RSP: 002b:00007f59ff720c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 74.415258][ T8276] ? _copy_to_user+0xcb/0xf0 [ 74.420246][ T8269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 74.420249][ T8269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 74.428636][ T8276] ? put_timespec64+0xa9/0x100 [ 74.433205][ T8269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 74.441163][ T8276] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 74.449118][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f59ff7216d4 [ 74.454052][ T8276] ? do_syscall_64+0x21/0x5f0 [ 74.462005][ T8269] R13: 00000000004c0f29 R14: 00000000004d3dd8 R15: 00000000ffffffff [ 74.462014][ T8269] ================================================================== [ 74.467438][ T8276] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.502613][ T8276] __x64_sys_getpeername+0x6e/0xb0 [ 74.507703][ T8276] do_syscall_64+0xca/0x5f0 [ 74.512334][ T8276] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.518228][ T8276] RIP: 0033:0x45a219 [ 74.522113][ T8276] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 74.541864][ T8276] RSP: 002b:00007ff02a9e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 74.550255][ T8276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 74.558193][ T8276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 74.566132][ T8276] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 74.574072][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff02a9e56d4 [ 74.582456][ T8276] R13: 00000000004c0f29 R14: 00000000004d3dd8 R15: 00000000ffffffff [ 74.590529][ T8276] Modules linked in: [ 74.594400][ T8276] CR2: 0000000000000000 [ 74.598562][ T8278] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 74.606362][ T8278] #PF: supervisor read access in kernel mode [ 74.612334][ T8278] #PF: error_code(0x0000) - not-present page [ 74.618305][ T8278] PGD 92579067 P4D 92579067 PUD 92578067 PMD 0 [ 74.624893][ T8278] Oops: 0000 [#2] PREEMPT SMP KASAN [ 74.630073][ T8278] CPU: 0 PID: 8278 Comm: syz-executor.1 Tainted: G B D 5.5.0-rc6-syzkaller #0 [ 74.640011][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.650043][ T8278] RIP: 0010:memcpy_erms+0x6/0x10 [ 74.654953][ T8278] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 74.674525][ T8278] RSP: 0018:ffff888087637cf0 EFLAGS: 00010246 [ 74.680563][ T8278] RAX: ffff888087637e12 RBX: 0000000000000001 RCX: 0000000000000001 [ 74.688514][ T8278] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888087637e12 [ 74.696453][ T8278] RBP: ffff888087637d10 R08: ffffed1010ec6fc3 R09: ffffed1010ec6fc3 [ 74.704396][ T8278] R10: ffffed1010ec6fc2 R11: ffff888087637e12 R12: ffff888087637e12 [ 74.712355][ T8278] R13: 0000000000000000 R14: ffff888091f17500 R15: 0000000000000000 [ 74.720362][ T8278] FS: 00007f0089805700(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 74.729313][ T8278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.736023][ T8278] CR2: 0000000000000000 CR3: 00000000a141a000 CR4: 00000000001406f0 [ 74.743968][ T8278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.751918][ T8278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.759883][ T8278] Call Trace: [ 74.763158][ T8278] ? memcpy+0x45/0x50 [ 74.767112][ T8278] llcp_sock_getname+0x341/0x440 [ 74.772016][ T8278] ? security_socket_getpeername+0x3a/0x70 [ 74.777803][ T8278] __sys_getpeername+0x123/0x220 [ 74.782713][ T8278] ? __ia32_sys_getsockname+0xb0/0xb0 [ 74.788050][ T8278] ? __kasan_check_read+0x11/0x20 [ 74.793039][ T8278] ? _copy_to_user+0xcb/0xf0 [ 74.797593][ T8278] ? put_timespec64+0xa9/0x100 [ 74.802349][ T8278] ? __x64_sys_clock_gettime+0x168/0x1d0 [ 74.807949][ T8278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.813555][ T8278] __x64_sys_getpeername+0x6e/0xb0 [ 74.818630][ T8278] do_syscall_64+0xca/0x5f0 [ 74.823097][ T8278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.828953][ T8278] RIP: 0033:0x45a219 [ 74.832831][ T8278] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 74.852401][ T8278] RSP: 002b:00007f0089804c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 74.860784][ T8278] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 74.868740][ T8278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 74.876678][ T8278] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 74.884665][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00898056d4 [ 74.892613][ T8278] R13: 00000000004c0f29 R14: 00000000004d3dd8 R15: 00000000ffffffff [ 74.900632][ T8278] Modules linked in: [ 74.904504][ T8278] CR2: 0000000000000000 [ 74.908676][ T8279] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 74.916488][ T8279] #PF: supervisor read access in kernel mode [ 74.922510][ T8279] #PF: error_code(0x0000) - not-present page [ 74.928461][ T8279] PGD 96fc7067 P4D 96fc7067 PUD a3b08067 PMD 0 [ 74.934862][ T8279] Oops: 0000 [#3] PREEMPT SMP KASAN [ 74.940046][ T8279] CPU: 1 PID: 8279 Comm: syz-executor.5 Tainted: G B D 5.5.0-rc6-syzkaller #0 [ 74.950424][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.960455][ T8279] RIP: 0010:memcpy_erms+0x6/0x10 [ 74.965367][ T8279] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 74.985027][ T8279] RSP: 0018:ffff8880877d7cf0 EFLAGS: 00010246 [ 74.991068][ T8279] RAX: ffff8880877d7e12 RBX: 0000000000000001 RCX: 0000000000000001 [ 74.999008][ T8279] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880877d7e12 [ 75.006948][ T8279] RBP: ffff8880877d7d10 R08: ffffed1010efafc3 R09: ffffed1010efafc3 [ 75.014891][ T8279] R10: ffffed1010efafc2 R11: ffff8880877d7e12 R12: ffff8880877d7e12 [ 75.022837][ T8279] R13: 0000000000000000 R14: ffff888099ea7a80 R15: 0000000000000000 [ 75.030794][ T8279] FS: 00007fa7509e7700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 75.039688][ T8279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.046240][ T8279] CR2: 0000000000000000 CR3: 0000000096e42000 CR4: 00000000001406e0 [ 75.054179][ T8279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.062128][ T8279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.070075][ T8279] Call Trace: [ 75.073333][ T8279] ? memcpy+0x45/0x50 [ 75.077288][ T8279] llcp_sock_getname+0x341/0x440 [ 75.082201][ T8279] ? security_socket_getpeername+0x3a/0x70 [ 75.087975][ T8279] __sys_getpeername+0x123/0x220 [ 75.092878][ T8279] ? __ia32_sys_getsockname+0xb0/0xb0 [ 75.098215][ T8279] ? __kasan_check_read+0x11/0x20 [ 75.103204][ T8279] ? _copy_to_user+0xcb/0xf0 [ 75.107758][ T8279] ? put_timespec64+0xa9/0x100 [ 75.112490][ T8279] ? __x64_sys_clock_gettime+0x168/0x1d0 [ 75.118087][ T8279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.123596][ T8279] __x64_sys_getpeername+0x6e/0xb0 [ 75.128709][ T8279] do_syscall_64+0xca/0x5f0 [ 75.133191][ T8279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.139055][ T8279] RIP: 0033:0x45a219 [ 75.142920][ T8279] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.162582][ T8279] RSP: 002b:00007fa7509e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 75.170966][ T8279] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 75.178915][ T8279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 75.186882][ T8279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 75.194847][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7509e76d4 [ 75.202812][ T8279] R13: 00000000004c0f29 R14: 00000000004d3dd8 R15: 00000000ffffffff [ 75.210757][ T8279] Modules linked in: [ 75.214629][ T8279] CR2: 0000000000000000 [ 75.219671][ T8274] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 75.227472][ T8274] #PF: supervisor read access in kernel mode [ 75.233698][ T8274] #PF: error_code(0x0000) - not-present page [ 75.239104][ T8276] ---[ end trace fe6538abd7345efb ]--- [ 75.239657][ T8274] PGD 965aa067 P4D 965aa067 PUD 992d1067 PMD 0 [ 75.245217][ T8276] RIP: 0010:memcpy_erms+0x6/0x10 [ 75.251321][ T8274] Oops: 0000 [#4] PREEMPT SMP KASAN [ 75.251328][ T8274] CPU: 0 PID: 8274 Comm: syz-executor.0 Tainted: G B D 5.5.0-rc6-syzkaller #0 [ 75.251332][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.251337][ T8274] RIP: 0010:memcpy_erms+0x6/0x10 [ 75.251342][ T8274] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 75.251345][ T8274] RSP: 0018:ffff888088897cf0 EFLAGS: 00010246 [ 75.251351][ T8274] RAX: ffff888088897e12 RBX: 0000000000000001 RCX: 0000000000000001 [ 75.256592][ T8276] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 75.261424][ T8274] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888088897e12 [ 75.261427][ T8274] RBP: ffff888088897d10 R08: ffffed1011112fc3 R09: ffffed1011112fc3 [ 75.261430][ T8274] R10: ffffed1011112fc2 R11: ffff888088897e12 R12: ffff888088897e12 [ 75.261432][ T8274] R13: 0000000000000000 R14: ffff888091f24000 R15: 0000000000000000 [ 75.261436][ T8274] FS: 00007f60df2fe700(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 75.261439][ T8274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.261442][ T8274] CR2: 0000000000000000 CR3: 00000000965ab000 CR4: 00000000001406f0 2020/01/13 21:17:52 executed programs: 27 [ 75.261448][ T8274] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.261451][ T8274] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.261453][ T8274] Call Trace: [ 75.261462][ T8274] ? memcpy+0x45/0x50 [ 75.261471][ T8274] llcp_sock_getname+0x341/0x440 [ 75.271774][ T8276] RSP: 0018:ffff8880876efcf0 EFLAGS: 00010246 [ 75.281554][ T8274] ? security_socket_getpeername+0x3a/0x70 [ 75.281562][ T8274] __sys_getpeername+0x123/0x220 [ 75.281567][ T8274] ? __ia32_sys_getsockname+0xb0/0xb0 [ 75.281576][ T8274] ? __kasan_check_read+0x11/0x20 [ 75.281581][ T8274] ? _copy_to_user+0xcb/0xf0 [ 75.281587][ T8274] ? put_timespec64+0xa9/0x100 [ 75.281597][ T8274] ? __x64_sys_clock_gettime+0x168/0x1d0 [ 75.281606][ T8274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.286812][ T8276] RAX: ffff8880876efe12 RBX: 0000000000000001 RCX: 0000000000000001 [ 75.306112][ T8274] __x64_sys_getpeername+0x6e/0xb0 [ 75.306119][ T8274] do_syscall_64+0xca/0x5f0 [ 75.306128][ T8274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.306133][ T8274] RIP: 0033:0x45a219 [ 75.306142][ T8274] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.306145][ T8274] RSP: 002b:00007f60df2fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 75.306149][ T8274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 75.306151][ T8274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 75.306154][ T8274] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 75.306156][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60df2fe6d4 [ 75.306158][ T8274] R13: 00000000004c0f29 R14: 00000000004d3dd8 R15: 00000000ffffffff [ 75.306165][ T8274] Modules linked in: [ 75.312477][ T8276] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880876efe12 [ 75.320161][ T8274] CR2: 0000000000000000 [ 75.322828][ T8274] ---[ end trace fe6538abd7345efc ]--- [ 75.343228][ T8281] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 75.348856][ T8278] ---[ end trace fe6538abd7345efd ]--- [ 75.356137][ T8281] #PF: supervisor read access in kernel mode [ 75.356141][ T8281] #PF: error_code(0x0000) - not-present page [ 75.356144][ T8281] PGD a9708067 P4D a9708067 PUD a9709067 PMD 0 [ 75.356153][ T8281] Oops: 0000 [#5] PREEMPT SMP KASAN [ 75.356158][ T8281] CPU: 1 PID: 8281 Comm: syz-executor.3 Tainted: G B D 5.5.0-rc6-syzkaller #0 [ 75.356161][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.356171][ T8281] RIP: 0010:memcpy_erms+0x6/0x10 [ 75.356176][ T8281] Code: cc cc cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 75.356178][ T8281] RSP: 0018:ffff888088917cf0 EFLAGS: 00010246 [ 75.356182][ T8281] RAX: ffff888088917e12 RBX: 0000000000000001 RCX: 0000000000000001 [ 75.356184][ T8281] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888088917e12 [ 75.356186][ T8281] RBP: ffff888088917d10 R08: ffffed1011122fc3 R09: ffffed1011122fc3 [ 75.356188][ T8281] R10: ffffed1011122fc2 R11: ffff888088917e12 R12: ffff888088917e12 [ 75.356190][ T8281] R13: 0000000000000000 R14: ffff888099eaaa00 R15: 0000000000000000 [ 75.356193][ T8281] FS: 00007f59ff6df700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 75.356196][ T8281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.356198][ T8281] CR2: 0000000000000000 CR3: 00000000a80f2000 CR4: 00000000001406e0 [ 75.356203][ T8281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.356205][ T8281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.356207][ T8281] Call Trace: [ 75.356214][ T8281] ? memcpy+0x45/0x50 [ 75.356223][ T8281] llcp_sock_getname+0x341/0x440 [ 75.356229][ T8281] ? security_socket_getpeername+0x3a/0x70 [ 75.356235][ T8281] __sys_getpeername+0x123/0x220 [ 75.356240][ T8281] ? __ia32_sys_getsockname+0xb0/0xb0 [ 75.356246][ T8281] ? __kasan_check_read+0x11/0x20 [ 75.356252][ T8281] ? _copy_to_user+0xcb/0xf0 [ 75.356257][ T8281] ? put_timespec64+0xa9/0x100 [ 75.356265][ T8281] ? __x64_sys_clock_gettime+0x168/0x1d0 [ 75.356272][ T8281] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.356276][ T8281] __x64_sys_getpeername+0x6e/0xb0 [ 75.356281][ T8281] do_syscall_64+0xca/0x5f0 [ 75.356287][ T8281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.356291][ T8281] RIP: 0033:0x45a219 [ 75.356295][ T8281] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.356298][ T8281] RSP: 002b:00007f59ff6dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 75.356302][ T8281] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 75.356304][ T8281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 75.356307][ T8281] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 75.356309][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f59ff6df6d4 [ 75.356311][ T8281] R13: 00000000004c0f29 R14: 00000000004d3dd8 R15: 00000000ffffffff [ 75.356317][ T8281] Modules linked in: [ 75.356322][ T8281] CR2: 0000000000000000 [ 75.366182][ T8279] ---[ end trace fe6538abd7345efe ]--- [ 75.379852][ T8274] RIP: 0010:memcpy_erms+0x6/0x10 [ 75.383158][ T4230] kobject: 'loop2' (00000000fe1b9398): kobject_uevent_env [ 75.391260][ T8269] Kernel panic - not syncing: panic_on_warn set ... [ 75.403678][ T8281] ---[ end trace fe6538abd7345eff ]--- [ 75.406434][ T8269] Kernel Offset: disabled [ 75.946586][ T8269] Rebooting in 86400 seconds..