syzkaller login: [ 34.710671] kauditd_printk_skb: 9 callbacks suppressed [ 34.710676] audit: type=1400 audit(1584973511.004:35): avc: denied { map } for pid=7000 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.126870] audit: type=1400 audit(1584973517.424:36): avc: denied { map } for pid=7011 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 41.816125] IPVS: ftp: loaded support on port[0] = 21 [ 42.221375] can: request_module (can-proto-0) failed. [ 43.281406] can: request_module (can-proto-0) failed. [ 43.289905] can: request_module (can-proto-0) failed. [ 43.435401] audit: type=1400 audit(1584973519.734:37): avc: denied { create } for pid=7011 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.459120] audit: type=1400 audit(1584973519.734:38): avc: denied { create } for pid=7011 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.483181] audit: type=1400 audit(1584973519.734:39): avc: denied { create } for pid=7011 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. 2020/03/23 14:25:26 parsed 1 programs 2020/03/23 14:25:27 executed programs: 0 [ 50.779457] IPVS: ftp: loaded support on port[0] = 21 [ 50.779460] IPVS: ftp: loaded support on port[0] = 21 [ 50.817346] IPVS: ftp: loaded support on port[0] = 21 [ 50.822837] IPVS: ftp: loaded support on port[0] = 21 [ 50.858214] IPVS: ftp: loaded support on port[0] = 21 [ 50.868357] IPVS: ftp: loaded support on port[0] = 21 [ 50.938797] chnl_net:caif_netlink_parms(): no params data found [ 50.970350] chnl_net:caif_netlink_parms(): no params data found [ 51.022062] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.028887] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.036270] device bridge_slave_0 entered promiscuous mode [ 51.044941] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.051305] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.058164] device bridge_slave_1 entered promiscuous mode [ 51.093470] chnl_net:caif_netlink_parms(): no params data found [ 51.116090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.125016] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.149756] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.157097] team0: Port device team_slave_0 added [ 51.165732] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.172273] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.179309] device bridge_slave_0 entered promiscuous mode [ 51.188933] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.195522] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.202264] device bridge_slave_1 entered promiscuous mode [ 51.220084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.227983] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.235411] team0: Port device team_slave_1 added [ 51.251625] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.260678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.269187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.276444] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.282822] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.289906] device bridge_slave_0 entered promiscuous mode [ 51.296977] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.303311] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.310309] device bridge_slave_1 entered promiscuous mode [ 51.349879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.359559] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.435853] device hsr_slave_0 entered promiscuous mode [ 51.503697] device hsr_slave_1 entered promiscuous mode [ 51.570554] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.578043] team0: Port device team_slave_0 added [ 51.583241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.590427] team0: Port device team_slave_0 added [ 51.596359] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.603682] team0: Port device team_slave_1 added [ 51.610401] chnl_net:caif_netlink_parms(): no params data found [ 51.618000] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.625327] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.632883] audit: type=1400 audit(1584973527.924:40): avc: denied { write } for pid=7108 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 51.642452] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.658812] audit: type=1400 audit(1584973527.924:41): avc: denied { read } for pid=7108 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 51.664372] team0: Port device team_slave_1 added [ 51.692425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.701306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.722388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.729540] chnl_net:caif_netlink_parms(): no params data found [ 51.747361] chnl_net:caif_netlink_parms(): no params data found [ 51.759383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.825332] device hsr_slave_0 entered promiscuous mode [ 51.863737] device hsr_slave_1 entered promiscuous mode [ 51.906369] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.944846] device hsr_slave_0 entered promiscuous mode [ 51.983862] device hsr_slave_1 entered promiscuous mode [ 52.036899] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.044444] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.050789] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.057770] device bridge_slave_0 entered promiscuous mode [ 52.070076] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.081422] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.091831] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.098357] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.105487] device bridge_slave_1 entered promiscuous mode [ 52.121305] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.133644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.141522] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.180830] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.188927] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.195811] device bridge_slave_0 entered promiscuous mode [ 52.203233] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.215308] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.222437] team0: Port device team_slave_0 added [ 52.227874] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.234947] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.241725] device bridge_slave_0 entered promiscuous mode [ 52.248141] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.254648] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.261615] device bridge_slave_1 entered promiscuous mode [ 52.271784] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.282786] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.290193] team0: Port device team_slave_1 added [ 52.295924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.303003] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.309507] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.318293] device bridge_slave_1 entered promiscuous mode [ 52.339675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.347877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.356305] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.365520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.385996] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.400642] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.408393] team0: Port device team_slave_0 added [ 52.417635] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.425022] team0: Port device team_slave_1 added [ 52.495455] device hsr_slave_0 entered promiscuous mode [ 52.534370] device hsr_slave_1 entered promiscuous mode [ 52.574315] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.581181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.589162] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.596621] team0: Port device team_slave_0 added [ 52.604567] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.611766] team0: Port device team_slave_1 added [ 52.621429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.628446] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.637548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.684921] device hsr_slave_0 entered promiscuous mode [ 52.743642] device hsr_slave_1 entered promiscuous mode [ 52.784186] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.791352] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.798899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.806437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.865937] device hsr_slave_0 entered promiscuous mode [ 52.933732] device hsr_slave_1 entered promiscuous mode [ 52.982042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.995434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.002775] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.009794] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.017793] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.025986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.033321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.042108] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.050622] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.057123] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.067079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.078633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.086027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.092902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.100970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.109099] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.115567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.123762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.131775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.140084] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.147081] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.162008] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.168199] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.176444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.185547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.192452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.199426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.206274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.213011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.220947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.228631] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.235014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.244286] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.250362] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.257964] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.266557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.276148] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.285311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.294979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.302641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.310530] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.317457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.324411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.332073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.339659] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.346001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.354205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.378556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.387273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.396265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.403271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.411262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.419488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.427552] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.433931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.441702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.451449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.460231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.468159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.475180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.482928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.490742] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.497135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.504685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.512225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.520014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.539322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.548388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.559902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.570620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.579442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.586927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.596033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.603532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.611081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.619802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.628683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.639570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.647919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.658034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.669217] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.677039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.684214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.691867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.699644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.707335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.715027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.722295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.730060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.737565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.744290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.753198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.766015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.775609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.784292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.791936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.800949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.808591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.816910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.824638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.832203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.848630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.855761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.868938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.878268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.886076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.893804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.901173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.909980] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.921389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.929830] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.940368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.948465] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.959122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.966845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.975223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.981974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.989793] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.996026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.003208] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.017716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.026128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.037488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.044700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.051458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.059602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.068718] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.077034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.083095] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.091355] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.099959] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.108166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.119129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.126300] audit: type=1400 audit(1584973530.424:42): avc: denied { associate } for pid=7108 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 54.151488] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.164655] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.171491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.180717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.191295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.198968] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.205335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.212432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.219931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.226831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.233611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.240297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.247934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.255272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.264669] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.270737] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.292798] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.294934] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 54.307063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.329890] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.336923] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.342881] audit: type=1400 audit(1584973530.634:43): avc: denied { prog_load } for pid=7126 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 54.369218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.376516] audit: type=1400 audit(1584973530.664:44): avc: denied { prog_run } for pid=7126 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 54.379066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.406669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.418078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.425698] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.432036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.438996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.446689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.454258] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.460589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.467380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.475145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.482599] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.488960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.495979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.502977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.515270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.522195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.531527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.539259] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.546931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.554732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.562363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.570962] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.577336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.584751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.591408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.605725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.614051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.624976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.631889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.646085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.657970] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 54.658096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.683612] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.689957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.696891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.706323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.715069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.722746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.731636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.741483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.755008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.763382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.771246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.778709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.786890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.794809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.802411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.815998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.823581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.831169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.839859] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.852142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.860060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.868950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.877710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.888146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.896119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.903851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.911399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.921204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.929842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.940173] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.946770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.956420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.965291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.976229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.990624] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 54.991966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.023096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.030820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.038322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.046625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.059954] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.069727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.076808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.083790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.091235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.102653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.117041] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.128129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.138481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.149359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.156165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.165827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.180581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.188100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.198865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.208791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.218592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.226719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.238954] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.245705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.253111] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.285630] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.300993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 55.308348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.328954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.336423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.348973] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.360601] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.372901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.380767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.399097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.432097] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 55.456781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 2020/03/23 14:25:32 executed programs: 8 [ 56.177154] kasan: CONFIG_KASAN_INLINE enabled [ 56.181897] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 56.189244] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 56.195505] CPU: 1 PID: 7178 Comm: syz-executor.1 Not tainted 4.19.112-syzkaller #0 [ 56.203276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.212619] RIP: 0010:skb_unlink+0xbb/0x160 [ 56.216933] Code: 00 00 49 8d 7d 08 4c 8b 63 08 48 ba 00 00 00 00 00 fc ff df 48 c7 43 08 00 00 00 00 48 89 f9 48 c7 03 00 00 00 00 48 c1 e9 03 <80> 3c 11 00 75 5b 4c 89 e1 4d 89 65 08 48 ba 00 00 00 00 00 fc ff [ 56.235822] RSP: 0018:ffff88807eacf840 EFLAGS: 00010002 [ 56.241186] RAX: 0000000000000282 RBX: ffff8880a139f140 RCX: 0000000000000001 [ 56.248449] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: 0000000000000008 [ 56.255695] RBP: ffff88807eacf868 R08: ffffed10140d5a7d R09: ffffed10140d5a7c [ 56.262943] R10: ffffed10140d5a7c R11: ffff8880a06ad3e3 R12: 0000000000000000 [ 56.270200] R13: 0000000000000000 R14: ffff8880a06ad3e0 R15: 0000000000000000 [ 56.277449] FS: 00007f51dce6e700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 56.285650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.291507] CR2: 000000000075c000 CR3: 000000009c1cd000 CR4: 00000000001406e0 [ 56.298756] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.306010] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.313274] Call Trace: [ 56.315844] kcm_recvmsg+0x3a5/0x5a0 [ 56.319535] ? kcm_splice_read+0x3c0/0x3c0 [ 56.323749] ? kcm_splice_read+0x3c0/0x3c0 [ 56.327961] sock_recvmsg_nosec+0x7b/0xd0 [ 56.332088] ___sys_recvmsg+0x219/0x500 [ 56.336038] ? ___sys_sendmsg+0x950/0x950 [ 56.340177] ? mark_held_locks+0x130/0x130 [ 56.344391] ? kasan_check_read+0x11/0x20 [ 56.348526] ? find_held_lock+0x36/0x1d0 [ 56.352572] ? __might_fault+0xf1/0x1b0 [ 56.356546] __sys_recvmmsg+0x21d/0x650 [ 56.360507] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 56.364811] ? find_held_lock+0x36/0x1d0 [ 56.368857] ? __might_fault+0xf1/0x1b0 [ 56.372816] ? lock_downgrade+0x860/0x860 [ 56.376949] ? put_timespec64+0xa9/0x100 [ 56.380991] do_sys_recvmmsg+0x111/0x130 [ 56.385047] ? __sys_recvmmsg+0x650/0x650 [ 56.389174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.393911] ? do_syscall_64+0x21/0x4e0 [ 56.397864] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.403206] __x64_sys_recvmmsg+0xb9/0x150 [ 56.407432] do_syscall_64+0xd0/0x4e0 [ 56.411210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.416549] RIP: 0033:0x45a639 [ 56.419724] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.438619] RSP: 002b:00007f51dce6dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 56.446306] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a639 [ 56.453557] RDX: 0400000000000310 RSI: 0000000020003540 RDI: 0000000000000005 [ 56.460806] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 56.468070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51dce6e6d4 [ 56.475316] R13: 00000000004c82f0 R14: 00000000004de6e0 R15: 00000000ffffffff [ 56.482572] Modules linked in: [ 56.485751] ---[ end trace 7bc61b1864588cbd ]--- [ 56.490488] RIP: 0010:skb_unlink+0xbb/0x160 [ 56.494786] Code: 00 00 49 8d 7d 08 4c 8b 63 08 48 ba 00 00 00 00 00 fc ff df 48 c7 43 08 00 00 00 00 48 89 f9 48 c7 03 00 00 00 00 48 c1 e9 03 <80> 3c 11 00 75 5b 4c 89 e1 4d 89 65 08 48 ba 00 00 00 00 00 fc ff [ 56.513666] RSP: 0018:ffff88807eacf840 EFLAGS: 00010002 [ 56.519005] RAX: 0000000000000282 RBX: ffff8880a139f140 RCX: 0000000000000001 [ 56.526253] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: 0000000000000008 [ 56.533517] RBP: ffff88807eacf868 R08: ffffed10140d5a7d R09: ffffed10140d5a7c [ 56.541025] R10: ffffed10140d5a7c R11: ffff8880a06ad3e3 R12: 0000000000000000 [ 56.548273] R13: 0000000000000000 R14: ffff8880a06ad3e0 R15: 0000000000000000 [ 56.555522] FS: 00007f51dce6e700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 56.563729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.569599] CR2: 000000000075c000 CR3: 000000009c1cd000 CR4: 00000000001406e0 [ 56.576851] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.584099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.591347] Kernel panic - not syncing: Fatal exception [ 56.598051] Kernel Offset: disabled [ 56.601669] Rebooting in 86400 seconds..