Warning: Permanently added '10.128.0.48' (ECDSA) to the list of known hosts. syzkaller login: [ 701.261244][ T27] audit: type=1400 audit(1575574177.154:42): avc: denied { map } for pid=9829 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/12/05 19:29:37 parsed 1 programs [ 703.133474][ T27] audit: type=1400 audit(1575574179.024:43): avc: denied { map } for pid=9829 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=19144 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/12/05 19:29:39 executed programs: 0 [ 704.028081][ T9851] IPVS: ftp: loaded support on port[0] = 21 [ 704.028090][ T9856] IPVS: ftp: loaded support on port[0] = 21 [ 704.052128][ T9860] IPVS: ftp: loaded support on port[0] = 21 [ 704.053543][ T9858] IPVS: ftp: loaded support on port[0] = 21 [ 704.067938][ T9854] IPVS: ftp: loaded support on port[0] = 21 [ 704.068714][ T9859] IPVS: ftp: loaded support on port[0] = 21 [ 704.351524][ T9859] chnl_net:caif_netlink_parms(): no params data found [ 704.361084][ T9854] chnl_net:caif_netlink_parms(): no params data found [ 704.445097][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 704.482010][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.490027][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.498307][ T9854] device bridge_slave_0 entered promiscuous mode [ 704.535809][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.543062][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.551596][ T9854] device bridge_slave_1 entered promiscuous mode [ 704.610012][ T9856] chnl_net:caif_netlink_parms(): no params data found [ 704.650007][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.657414][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.665651][ T9859] device bridge_slave_0 entered promiscuous mode [ 704.683570][ T9854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.704615][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.712676][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.720590][ T9859] device bridge_slave_1 entered promiscuous mode [ 704.728010][ T9860] chnl_net:caif_netlink_parms(): no params data found [ 704.745365][ T9858] chnl_net:caif_netlink_parms(): no params data found [ 704.759246][ T9854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.768979][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.779304][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.787511][ T9851] device bridge_slave_0 entered promiscuous mode [ 704.800956][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.808264][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.816301][ T9851] device bridge_slave_1 entered promiscuous mode [ 704.874823][ T9856] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.882186][ T9856] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.891623][ T9856] device bridge_slave_0 entered promiscuous mode [ 704.913512][ T9859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.936857][ T9856] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.943939][ T9856] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.952343][ T9856] device bridge_slave_1 entered promiscuous mode [ 704.972908][ T9854] team0: Port device team_slave_0 added [ 704.981615][ T9859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.992389][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.022243][ T9854] team0: Port device team_slave_1 added [ 705.034764][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.044456][ T9860] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.052655][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.061024][ T9860] device bridge_slave_0 entered promiscuous mode [ 705.069701][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.077227][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.085091][ T9858] device bridge_slave_0 entered promiscuous mode [ 705.094565][ T9856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.124448][ T9860] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.133344][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.143029][ T9860] device bridge_slave_1 entered promiscuous mode [ 705.150989][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.158396][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.166399][ T9858] device bridge_slave_1 entered promiscuous mode [ 705.174944][ T9856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.199863][ T9859] team0: Port device team_slave_0 added [ 705.213999][ T9859] team0: Port device team_slave_1 added [ 705.270197][ T9854] device hsr_slave_0 entered promiscuous mode [ 705.326579][ T9854] device hsr_slave_1 entered promiscuous mode [ 705.404086][ T9851] team0: Port device team_slave_0 added [ 705.435436][ T9860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.448895][ T9856] team0: Port device team_slave_0 added [ 705.456918][ T9860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.482916][ T9851] team0: Port device team_slave_1 added [ 705.549638][ T9859] device hsr_slave_0 entered promiscuous mode [ 705.586443][ T9859] device hsr_slave_1 entered promiscuous mode [ 705.626133][ T9859] debugfs: Directory 'hsr0' with parent '/' already present! [ 705.636008][ T9858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.646993][ T9856] team0: Port device team_slave_1 added [ 705.654079][ T9858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.729808][ T9851] device hsr_slave_0 entered promiscuous mode [ 705.786435][ T9851] device hsr_slave_1 entered promiscuous mode [ 705.826024][ T9851] debugfs: Directory 'hsr0' with parent '/' already present! [ 705.850144][ T9860] team0: Port device team_slave_0 added [ 705.861135][ T9858] team0: Port device team_slave_0 added [ 705.874795][ T9860] team0: Port device team_slave_1 added [ 705.891130][ T9858] team0: Port device team_slave_1 added [ 705.942980][ T27] audit: type=1400 audit(1575574181.834:44): avc: denied { create } for pid=9851 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 705.982008][ T27] audit: type=1400 audit(1575574181.834:45): avc: denied { write } for pid=9851 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 706.006757][ T27] audit: type=1400 audit(1575574181.834:46): avc: denied { read } for pid=9851 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 706.039446][ T9856] device hsr_slave_0 entered promiscuous mode [ 706.096558][ T9856] device hsr_slave_1 entered promiscuous mode [ 706.136387][ T9856] debugfs: Directory 'hsr0' with parent '/' already present! [ 706.159047][ T9851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 706.234643][ T9851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 706.292696][ T9851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 706.389534][ T9860] device hsr_slave_0 entered promiscuous mode [ 706.436379][ T9860] device hsr_slave_1 entered promiscuous mode [ 706.476011][ T9860] debugfs: Directory 'hsr0' with parent '/' already present! [ 706.538682][ T9858] device hsr_slave_0 entered promiscuous mode [ 706.566565][ T9858] device hsr_slave_1 entered promiscuous mode [ 706.626184][ T9858] debugfs: Directory 'hsr0' with parent '/' already present! [ 706.638217][ T9851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 706.689228][ T9854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 706.744536][ T9854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 706.786248][ T9859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 706.839440][ T9859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 706.911517][ T9859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 706.968742][ T9859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 707.013277][ T9854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 707.100021][ T9854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 707.179575][ T9856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 707.212634][ T9856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 707.279305][ T9856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 707.340040][ T9856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 707.418743][ T9860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 707.478649][ T9860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 707.545595][ T9860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 707.609806][ T9858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 707.641986][ T9860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 707.716643][ T9858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 707.748727][ T9858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 707.803429][ T9858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 707.936371][ T9856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.011237][ T9859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.022795][ T9858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.034217][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.064740][ T9859] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.072830][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.083078][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.091193][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.099167][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.114164][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.125547][ T9856] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.135442][ T9860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.151702][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.171537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.182850][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.191721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.201515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.209428][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.218899][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.227842][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.235003][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.243303][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.253228][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.261744][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.268838][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.277301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.288628][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.298950][ T9858] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.323549][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.332574][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.340632][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.349440][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.360572][ T9861] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.367712][ T9861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.375434][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.385040][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.393924][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.402397][ T9861] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.409474][ T9861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.417536][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.426337][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.434881][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.444106][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.452850][ T9861] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.459977][ T9861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.468280][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.476429][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.484687][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.504459][ T9860] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.521096][ T9854] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.528085][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.537772][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 708.547656][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.556456][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.564775][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.571914][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.579827][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.588614][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.597550][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.606302][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.614645][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.621784][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.630438][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.661304][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 708.671015][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 708.680204][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.691809][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.700882][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.708020][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.715819][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 708.724865][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 708.733480][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.742429][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.751652][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.758923][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.768673][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.777740][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.786348][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.793402][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.801085][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.810568][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.819458][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.828798][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.865181][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.877742][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.890791][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.900990][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.911240][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.920625][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.929200][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.938735][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.947717][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.957628][ T9872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.965541][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.974875][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.983360][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.990437][ T9872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.999183][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 709.008413][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.017525][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.026913][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 709.034770][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 709.043431][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 709.052705][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 709.085515][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 709.096963][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.105536][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 709.114735][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 709.123475][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 709.132473][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 709.141450][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.150518][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.159960][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 709.169796][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.182606][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.191323][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.200350][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 709.208567][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 709.246471][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 709.261150][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 709.271256][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 709.280060][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.289011][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.298224][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.307309][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 709.317922][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.327185][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 709.336694][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.345431][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 709.354107][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 709.362625][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 709.372217][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 709.381419][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 709.390181][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.399167][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 709.409899][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 709.424413][ T9856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 709.437605][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 709.448484][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 709.467370][ T9860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 709.479539][ T9860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 709.490709][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 709.499986][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.508878][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.516821][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.524309][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 709.533146][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.542223][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 709.551111][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.599369][ T9859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.612442][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 709.621399][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 709.633278][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 709.641927][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.650871][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.659194][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.679262][ T9854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.689639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.701192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.709485][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.720741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.737014][ T9860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.746969][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.754980][ T9858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 709.777057][ T27] audit: type=1400 audit(1575574185.674:47): avc: denied { associate } for pid=9859 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 709.777264][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.828246][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.835775][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.933798][ T27] audit: type=1400 audit(1575574185.824:48): avc: denied { open } for pid=9882 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 709.936059][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.972530][ T9874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 710.014706][ T9858] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/05 19:29:46 executed programs: 6 2019/12/05 19:29:52 executed programs: 42 2019/12/05 19:29:57 executed programs: 74 2019/12/05 19:30:02 executed programs: 109 2019/12/05 19:30:07 executed programs: 143 2019/12/05 19:30:12 executed programs: 177 2019/12/05 19:30:17 executed programs: 210 2019/12/05 19:30:22 executed programs: 244 [ 748.306357][T11627] ================================================================== [ 748.314802][T11627] BUG: KASAN: slab-out-of-bounds in pipe_write+0xe30/0x1000 [ 748.322179][T11627] Write of size 8 at addr ffff88808b94f4a8 by task syz-executor.5/11627 [ 748.330682][T11627] [ 748.333036][T11627] CPU: 0 PID: 11627 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 748.341363][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.351857][T11627] Call Trace: [ 748.355258][T11627] dump_stack+0x197/0x210 [ 748.359618][T11627] ? pipe_write+0xe30/0x1000 [ 748.364367][T11627] print_address_description.constprop.0.cold+0xd4/0x30b [ 748.371399][T11627] ? pipe_write+0xe30/0x1000 [ 748.376438][T11627] ? pipe_write+0xe30/0x1000 [ 748.381171][T11627] __kasan_report.cold+0x1b/0x41 [ 748.386117][T11627] ? pipe_write+0xe30/0x1000 [ 748.390720][T11627] kasan_report+0x12/0x20 [ 748.395114][T11627] __asan_report_store8_noabort+0x17/0x20 [ 748.400855][T11627] pipe_write+0xe30/0x1000 [ 748.405266][T11627] new_sync_write+0x4d3/0x770 [ 748.409941][T11627] ? new_sync_read+0x800/0x800 [ 748.414852][T11627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 748.421154][T11627] ? security_file_permission+0x8f/0x380 [ 748.426818][T11627] __vfs_write+0xe1/0x110 [ 748.432116][T11627] vfs_write+0x268/0x5d0 [ 748.436355][T11627] ksys_write+0x220/0x290 [ 748.440703][T11627] ? __ia32_sys_read+0xb0/0xb0 [ 748.445487][T11627] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 748.451002][T11627] ? do_syscall_64+0x26/0x790 [ 748.455883][T11627] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 748.462177][T11627] ? do_syscall_64+0x26/0x790 [ 748.466862][T11627] __x64_sys_write+0x73/0xb0 [ 748.471459][T11627] do_syscall_64+0xfa/0x790 [ 748.475966][T11627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 748.481856][T11627] RIP: 0033:0x45a679 [ 748.485905][T11627] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 748.505624][T11627] RSP: 002b:00007fcf688c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 748.514154][T11627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 748.522738][T11627] RDX: 00000001000000f4 RSI: 0000000020000000 RDI: 0000000000000004 [ 748.530723][T11627] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 748.538705][T11627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf688c76d4 [ 748.546684][T11627] R13: 00000000004cba8e R14: 00000000004e56a0 R15: 00000000ffffffff [ 748.554685][T11627] [ 748.557005][T11627] Allocated by task 11626: [ 748.561427][T11627] save_stack+0x23/0x90 [ 748.565564][T11627] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 748.571196][T11627] kasan_kmalloc+0x9/0x10 [ 748.575604][T11627] __kmalloc+0x163/0x770 [ 748.579832][T11627] pipe_fcntl+0x3f7/0x8e0 [ 748.584154][T11627] do_fcntl+0x255/0x1030 [ 748.588399][T11627] __x64_sys_fcntl+0x16d/0x1e0 [ 748.593780][T11627] do_syscall_64+0xfa/0x790 [ 748.598297][T11627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 748.604175][T11627] [ 748.606502][T11627] Freed by task 10889: [ 748.610574][T11627] save_stack+0x23/0x90 [ 748.614821][T11627] __kasan_slab_free+0x102/0x150 [ 748.619789][T11627] kasan_slab_free+0xe/0x10 [ 748.624470][T11627] kfree+0x10a/0x2c0 [ 748.628359][T11627] free_pipe_info+0x26c/0x320 [ 748.633029][T11627] put_pipe_info+0xc7/0xf0 [ 748.637432][T11627] pipe_release+0x17d/0x220 [ 748.642213][T11627] __fput+0x2ff/0x890 [ 748.646275][T11627] ____fput+0x16/0x20 [ 748.650391][T11627] task_work_run+0x145/0x1c0 [ 748.655203][T11627] get_signal+0x206e/0x24f0 [ 748.659753][T11627] do_signal+0x87/0x1700 [ 748.663999][T11627] exit_to_usermode_loop+0x286/0x380 [ 748.669321][T11627] do_syscall_64+0x676/0x790 [ 748.673924][T11627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 748.679800][T11627] [ 748.682118][T11627] The buggy address belongs to the object at ffff88808b94f480 [ 748.682118][T11627] which belongs to the cache kmalloc-64(81:syz5) of size 64 [ 748.696863][T11627] The buggy address is located 40 bytes inside of [ 748.696863][T11627] 64-byte region [ffff88808b94f480, ffff88808b94f4c0) [ 748.710132][T11627] The buggy address belongs to the page: [ 748.715754][T11627] page:ffffea00022e53c0 refcount:1 mapcount:0 mapping:ffff8880a881d8c0 index:0x0 [ 748.724872][T11627] raw: 00fffe0000000200 ffffea00024948c8 ffffea0002520048 ffff8880a881d8c0 [ 748.733461][T11627] raw: 0000000000000000 ffff88808b94f000 0000000100000020 0000000000000000 [ 748.742057][T11627] page dumped because: kasan: bad access detected [ 748.748468][T11627] [ 748.750787][T11627] Memory state around the buggy address: [ 748.756414][T11627] ffff88808b94f380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 748.764481][T11627] ffff88808b94f400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 748.772623][T11627] >ffff88808b94f480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 748.780686][T11627] ^ [ 748.786067][T11627] ffff88808b94f500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 748.794141][T11627] ffff88808b94f580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 748.802284][T11627] ================================================================== [ 748.810436][T11627] Disabling lock debugging due to kernel taint [ 748.819262][T11627] Kernel panic - not syncing: panic_on_warn set ... [ 748.825872][T11627] CPU: 1 PID: 11627 Comm: syz-executor.5 Tainted: G B 5.4.0-syzkaller #0 [ 748.835758][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.845842][T11627] Call Trace: [ 748.849148][T11627] dump_stack+0x197/0x210 [ 748.853669][T11627] panic+0x2e3/0x75c [ 748.857556][T11627] ? add_taint.cold+0x16/0x16 [ 748.862220][T11627] ? pipe_write+0xe30/0x1000 [ 748.866827][T11627] ? preempt_schedule+0x4b/0x60 [ 748.871696][T11627] ? ___preempt_schedule+0x16/0x18 [ 748.876903][T11627] ? trace_hardirqs_on+0x5e/0x240 [ 748.881923][T11627] ? pipe_write+0xe30/0x1000 [ 748.886568][T11627] end_report+0x47/0x4f [ 748.890835][T11627] ? pipe_write+0xe30/0x1000 [ 748.895427][T11627] __kasan_report.cold+0xe/0x41 [ 748.900392][T11627] ? pipe_write+0xe30/0x1000 [ 748.905076][T11627] kasan_report+0x12/0x20 [ 748.909838][T11627] __asan_report_store8_noabort+0x17/0x20 [ 748.915564][T11627] pipe_write+0xe30/0x1000 [ 748.920032][T11627] new_sync_write+0x4d3/0x770 [ 748.924716][T11627] ? new_sync_read+0x800/0x800 [ 748.928359][ T4086] kobject: 'loop4' (00000000a9c73e47): kobject_uevent_env [ 748.929628][T11627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 748.940322][ T4086] kobject: 'loop4' (00000000a9c73e47): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 748.943394][T11627] ? security_file_permission+0x8f/0x380 [ 748.943408][T11627] __vfs_write+0xe1/0x110 [ 748.943427][T11627] vfs_write+0x268/0x5d0 [ 748.968146][T11627] ksys_write+0x220/0x290 [ 748.972476][T11627] ? __ia32_sys_read+0xb0/0xb0 [ 748.978976][T11627] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 748.984437][T11627] ? do_syscall_64+0x26/0x790 [ 748.989101][T11627] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 748.995159][T11627] ? do_syscall_64+0x26/0x790 [ 748.999841][T11627] __x64_sys_write+0x73/0xb0 [ 749.004550][T11627] do_syscall_64+0xfa/0x790 [ 749.009059][T11627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 749.014932][T11627] RIP: 0033:0x45a679 [ 749.018822][T11627] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 749.038427][T11627] RSP: 002b:00007fcf688c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 749.047273][T11627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 749.055240][T11627] RDX: 00000001000000f4 RSI: 0000000020000000 RDI: 0000000000000004 [ 749.063293][T11627] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 749.071596][T11627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf688c76d4 [ 749.079576][T11627] R13: 00000000004cba8e R14: 00000000004e56a0 R15: 00000000ffffffff [ 749.093669][T11627] Kernel Offset: disabled [ 749.098109][T11627] Rebooting in 86400 seconds..