syzkaller login: [ 35.481790] kauditd_printk_skb: 9 callbacks suppressed [ 35.481796] audit: type=1400 audit(1580943798.863:35): avc: denied { map } for pid=7233 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.898140] audit: type=1400 audit(1580943805.273:36): avc: denied { map } for pid=7244 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 42.533380] IPVS: ftp: loaded support on port[0] = 21 [ 42.977207] can: request_module (can-proto-0) failed. [ 44.015739] can: request_module (can-proto-0) failed. [ 44.025109] can: request_module (can-proto-0) failed. [ 44.181029] audit: type=1400 audit(1580943807.563:37): avc: denied { create } for pid=7244 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 44.205015] audit: type=1400 audit(1580943807.563:38): avc: denied { create } for pid=7244 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 44.228766] audit: type=1400 audit(1580943807.563:39): avc: denied { create } for pid=7244 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.1.43' (ECDSA) to the list of known hosts. 2020/02/05 23:03:34 parsed 1 programs 2020/02/05 23:03:34 executed programs: 0 [ 51.398263] IPVS: ftp: loaded support on port[0] = 21 [ 51.462840] IPVS: ftp: loaded support on port[0] = 21 [ 51.470499] IPVS: ftp: loaded support on port[0] = 21 [ 51.471480] IPVS: ftp: loaded support on port[0] = 21 [ 51.486376] IPVS: ftp: loaded support on port[0] = 21 [ 51.513198] IPVS: ftp: loaded support on port[0] = 21 [ 51.560423] chnl_net:caif_netlink_parms(): no params data found [ 51.691872] chnl_net:caif_netlink_parms(): no params data found [ 51.700777] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.707164] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.714467] device bridge_slave_0 entered promiscuous mode [ 51.747414] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.754236] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.762022] device bridge_slave_1 entered promiscuous mode [ 51.783366] chnl_net:caif_netlink_parms(): no params data found [ 51.850014] chnl_net:caif_netlink_parms(): no params data found [ 51.859791] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.890976] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.902864] chnl_net:caif_netlink_parms(): no params data found [ 51.910903] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.917297] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.924233] device bridge_slave_0 entered promiscuous mode [ 51.934241] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.941125] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.947981] device bridge_slave_1 entered promiscuous mode [ 51.990711] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.998177] team0: Port device team_slave_0 added [ 52.004367] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.016523] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.031801] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.038218] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.045833] device bridge_slave_0 entered promiscuous mode [ 52.054171] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.060583] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.067352] device bridge_slave_1 entered promiscuous mode [ 52.073683] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.081852] team0: Port device team_slave_1 added [ 52.103109] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.109563] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.116614] device bridge_slave_0 entered promiscuous mode [ 52.126937] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.133556] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.141056] device bridge_slave_1 entered promiscuous mode [ 52.154268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.163846] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.171037] team0: Port device team_slave_0 added [ 52.184359] chnl_net:caif_netlink_parms(): no params data found [ 52.202082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.210852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.218554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.226646] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.234226] team0: Port device team_slave_1 added [ 52.239598] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.245940] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.253626] device bridge_slave_0 entered promiscuous mode [ 52.262634] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.269147] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.275971] device bridge_slave_1 entered promiscuous mode [ 52.283537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.305519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.315219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.326610] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.391255] device hsr_slave_0 entered promiscuous mode [ 52.429065] device hsr_slave_1 entered promiscuous mode [ 52.473516] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.484338] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.493511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.501463] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.509811] team0: Port device team_slave_0 added [ 52.515800] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.524524] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.532023] team0: Port device team_slave_0 added [ 52.541078] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.548380] team0: Port device team_slave_1 added [ 52.557604] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.565099] team0: Port device team_slave_1 added [ 52.570939] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.641220] device hsr_slave_0 entered promiscuous mode [ 52.679054] device hsr_slave_1 entered promiscuous mode [ 52.732866] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.740925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.750099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.767739] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.774361] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.783697] device bridge_slave_0 entered promiscuous mode [ 52.790605] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.797291] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.804109] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.811341] device bridge_slave_1 entered promiscuous mode [ 52.817865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.837374] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.845823] team0: Port device team_slave_0 added [ 52.851608] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.860256] team0: Port device team_slave_1 added [ 52.911105] device hsr_slave_0 entered promiscuous mode [ 52.948944] device hsr_slave_1 entered promiscuous mode [ 53.032592] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.042879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.050618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.066128] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.110204] device hsr_slave_0 entered promiscuous mode [ 53.161297] device hsr_slave_1 entered promiscuous mode [ 53.219922] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.226746] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.244646] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.253335] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.262797] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.320391] device hsr_slave_0 entered promiscuous mode [ 53.359005] device hsr_slave_1 entered promiscuous mode [ 53.403161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.423260] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.439287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.451232] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.460297] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.467517] team0: Port device team_slave_0 added [ 53.475487] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.487810] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.501553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.511707] team0: Port device team_slave_1 added [ 53.542310] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.550072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.611404] device hsr_slave_0 entered promiscuous mode [ 53.658998] device hsr_slave_1 entered promiscuous mode [ 53.701299] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.719352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.725966] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.740889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.749628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.761661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.773782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.785034] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.797924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.807106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.815440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.822365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.833355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.840784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.847869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.860215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.867156] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.873609] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.886684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.894795] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.905398] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.912687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.921210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.930763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.938546] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.946720] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.954310] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.960714] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.970609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.979274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.987040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.995309] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.001940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.009356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.016292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.023724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.033976] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.044633] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.050977] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.063990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.073340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.084497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.096039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.105260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.112977] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.119383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.126326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.134674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.142380] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.148830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.155616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.162672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.169631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.180748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.190095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.198604] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.205259] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.213987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.222256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.232071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.239541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.247277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.255356] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.261758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.268603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.276849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.284748] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.291190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.297938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.306037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.313683] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.320067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.327063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.335092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.343788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.354408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.364498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.373740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.383647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.391066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.398171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.405393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.413447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.421546] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.427890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.434971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.442804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.451244] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.457599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.464487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.472202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.480016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.487572] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.493998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.503224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.513447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.522030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.531865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.540948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.550371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.564122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.573394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.581365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.589066] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.595407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.602560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.610375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.618094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.628037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.637966] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.646253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.654451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.664530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.672472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.681957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.689752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.696778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.706736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.714495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.722718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.730631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.738212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.746141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.754505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.763569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.771837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.781281] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.791342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.799531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.807653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.815832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.823985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.831538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.839788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.846623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.853655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.861597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.869277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.876776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.884532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.891487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.899954] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.906026] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.915450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.924308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.932415] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.938493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.947338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.957433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.966323] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.973685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.981757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.989442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.997320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.005184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.012908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.020520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.028209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.036004] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.042558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.049564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.057314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.066860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.076841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.086104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.094690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.102546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.110424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.117844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.125352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.133183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.140889] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.147245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.155653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.168318] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.176311] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.186081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.197803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.205713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.213782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.220820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.227480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.235303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.243155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.253551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.261582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.270126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.279575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.288384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.297140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.304940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.312903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.321073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.328559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.336253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.344068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.351802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.359610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.369114] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.375186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.386551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.395961] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.402559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.410530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.418515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.429234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.436711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.446521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.457331] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.463896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.472165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.484765] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.493538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.501421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.512245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.519726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.527253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.536890] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.543416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.557171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.564601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.571579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.579238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.587154] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.599141] audit: type=1400 audit(1580943818.973:40): avc: denied { associate } for pid=7338 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 55.602897] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.633633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.643464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.653265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.662131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.672179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.681596] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.688515] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.697460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.707223] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.714959] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.725766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.740911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.747658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.754933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.755035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.755095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.755437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.760242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.776004] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.823559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.826392] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.826428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.828164] ================================================================== [ 55.828190] BUG: KASAN: global-out-of-bounds in fb_pad_aligned_buffer+0xd3/0x130 [ 55.828195] Read of size 1 at addr ffffffff87692e76 by task syz-executor.2/7360 [ 55.828197] [ 55.828203] CPU: 1 PID: 7360 Comm: syz-executor.2 Not tainted 4.19.102-syzkaller #0 [ 55.828205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.828208] Call Trace: [ 55.828215] dump_stack+0x123/0x177 [ 55.828226] print_address_description.cold.8+0x58/0x1ff [ 55.828232] kasan_report.cold.9+0x242/0x309 [ 55.828236] ? fb_pad_aligned_buffer+0xd3/0x130 [ 55.828243] __asan_report_load1_noabort+0x14/0x20 [ 55.828247] fb_pad_aligned_buffer+0xd3/0x130 [ 55.828256] bit_putcs+0x81e/0xf00 [ 55.828267] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.828277] ? bit_cursor+0x22e0/0x22e0 [ 55.828281] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.828290] ? fb_get_color_depth+0x49/0x60 [ 55.828297] fbcon_putcs+0x2fb/0x5b0 [ 55.828302] ? bit_cursor+0x22e0/0x22e0 [ 55.828311] do_update_region+0x30c/0x640 [ 55.828315] ? fb_set_cmap+0x34e/0x550 [ 55.828322] ? con_get_trans_old+0x220/0x220 [ 55.828338] redraw_screen+0x515/0x820 [ 55.828342] ? bit_bmove+0x210/0x210 [ 55.828349] ? con_flush_chars+0x60/0x60 [ 55.828361] fbcon_do_set_font+0x656/0xa20 [ 55.828369] ? lock_acquire+0x173/0x3d0 [ 55.828379] fbcon_copy_font+0x116/0x1a0 [ 55.828386] con_font_op+0x228/0x11f0 [ 55.828396] ? con_write+0x80/0x80 [ 55.828400] ? lock_downgrade+0x860/0x860 [ 55.828414] ? kasan_check_write+0x14/0x20 [ 55.828423] vt_ioctl+0xa0f/0x2130 [ 55.828430] ? complete_change_console+0x300/0x300 [ 55.828437] ? find_held_lock+0x36/0x1d0 [ 55.828449] ? avc_has_extended_perms+0x4c5/0x1170 [ 55.828455] ? lock_downgrade+0x860/0x860 [ 55.828470] tty_ioctl+0x452/0x1290 [ 55.828477] ? tty_vhangup+0x20/0x20 [ 55.828482] ? avc_ss_reset+0x130/0x130 [ 55.828493] ? mark_held_locks+0x130/0x130 [ 55.828498] ? mark_held_locks+0x130/0x130 [ 55.828521] do_vfs_ioctl+0x196/0x10c0 [ 55.828529] ? ioctl_preallocate+0x1c0/0x1c0 [ 55.828538] ? selinux_file_mprotect+0x5f0/0x5f0 [ 55.828550] ? ksys_dup3+0x2e0/0x2e0 [ 55.828556] ? put_timespec64+0xa9/0x100 [ 55.828562] ? nsecs_to_jiffies+0x20/0x20 [ 55.828572] ? security_file_ioctl+0x4a/0x90 [ 55.828577] ? __fget_light+0x174/0x1e0 [ 55.828584] ksys_ioctl+0x62/0x90 [ 55.828589] ? lockdep_hardirqs_on+0x421/0x5c0 [ 55.828596] __x64_sys_ioctl+0x6e/0xb0 [ 55.828603] do_syscall_64+0xd0/0x4e0 [ 55.828613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.828619] RIP: 0033:0x45a6f9 [ 55.828630] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.828633] RSP: 002b:00007f447da1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.828638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 55.828641] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000004 [ 55.828644] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 55.828647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f447da1b6d4 [ 55.828649] R13: 00000000004c382b R14: 00000000004d8d78 R15: 00000000ffffffff [ 55.828662] [ 55.828664] The buggy address belongs to the variable: [ 55.828670] oid_index+0x76/0xa60 [ 55.828672] [ 55.828674] Memory state around the buggy address: [ 55.828678] ffffffff87692d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.828681] ffffffff87692d80: 00 00 00 00 00 00 00 00 00 00 00 05 fa fa fa fa [ 55.828685] >ffffffff87692e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 fa [ 55.828688] ^ [ 55.828691] ffffffff87692e80: fa fa fa fa 00 02 fa fa fa fa fa fa 00 01 fa fa [ 55.828694] ffffffff87692f00: fa fa fa fa 00 00 02 fa fa fa fa fa 00 03 fa fa [ 55.828696] ================================================================== [ 55.828699] Disabling lock debugging due to kernel taint [ 55.830531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.830574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.830610] Kernel panic - not syncing: panic_on_warn set ... [ 55.830610] [ 55.830616] CPU: 1 PID: 7360 Comm: syz-executor.2 Tainted: G B 4.19.102-syzkaller #0 [ 55.830618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.830620] Call Trace: [ 55.830628] dump_stack+0x123/0x177 [ 55.830634] panic+0x1cd/0x375 [ 55.830638] ? __warn_printk+0xd6/0xd6 [ 55.830643] ? ___preempt_schedule+0x16/0x18 [ 55.830651] kasan_end_report+0x47/0x4f [ 55.830656] kasan_report.cold.9+0x76/0x309 [ 55.830661] ? fb_pad_aligned_buffer+0xd3/0x130 [ 55.830667] __asan_report_load1_noabort+0x14/0x20 [ 55.830671] fb_pad_aligned_buffer+0xd3/0x130 [ 55.830677] bit_putcs+0x81e/0xf00 [ 55.830684] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.830691] ? bit_cursor+0x22e0/0x22e0 [ 55.830695] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.830708] ? fb_get_color_depth+0x49/0x60 [ 55.830714] fbcon_putcs+0x2fb/0x5b0 [ 55.830718] ? bit_cursor+0x22e0/0x22e0 [ 55.830724] do_update_region+0x30c/0x640 [ 55.830728] ? fb_set_cmap+0x34e/0x550 [ 55.830733] ? con_get_trans_old+0x220/0x220 [ 55.830742] redraw_screen+0x515/0x820 [ 55.830745] ? bit_bmove+0x210/0x210 [ 55.830749] ? con_flush_chars+0x60/0x60 [ 55.830756] fbcon_do_set_font+0x656/0xa20 [ 55.830761] ? lock_acquire+0x173/0x3d0 [ 55.830765] fbcon_copy_font+0x116/0x1a0 [ 55.830769] con_font_op+0x228/0x11f0 [ 55.830775] ? con_write+0x80/0x80 [ 55.830778] ? lock_downgrade+0x860/0x860 [ 55.830785] ? kasan_check_write+0x14/0x20 [ 55.830791] vt_ioctl+0xa0f/0x2130 [ 55.830796] ? complete_change_console+0x300/0x300 [ 55.830799] ? find_held_lock+0x36/0x1d0 [ 55.830806] ? avc_has_extended_perms+0x4c5/0x1170 [ 55.830809] ? lock_downgrade+0x860/0x860 [ 55.830817] tty_ioctl+0x452/0x1290 [ 55.830821] ? tty_vhangup+0x20/0x20 [ 55.830825] ? avc_ss_reset+0x130/0x130 [ 55.830831] ? mark_held_locks+0x130/0x130 [ 55.830835] ? mark_held_locks+0x130/0x130 [ 55.830848] do_vfs_ioctl+0x196/0x10c0 [ 55.830854] ? ioctl_preallocate+0x1c0/0x1c0 [ 55.830860] ? selinux_file_mprotect+0x5f0/0x5f0 [ 55.830867] ? ksys_dup3+0x2e0/0x2e0 [ 55.830872] ? put_timespec64+0xa9/0x100 [ 55.830876] ? nsecs_to_jiffies+0x20/0x20 [ 55.830883] ? security_file_ioctl+0x4a/0x90 [ 55.830887] ? __fget_light+0x174/0x1e0 [ 55.830892] ksys_ioctl+0x62/0x90 [ 55.830895] ? lockdep_hardirqs_on+0x421/0x5c0 [ 55.830900] __x64_sys_ioctl+0x6e/0xb0 [ 55.830905] do_syscall_64+0xd0/0x4e0 [ 55.830911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.830915] RIP: 0033:0x45a6f9 [ 55.830925] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.830928] RSP: 002b:00007f447da1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.830932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 55.830935] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000004 [ 55.830937] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 55.830939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f447da1b6d4 [ 55.830941] R13: 00000000004c382b R14: 00000000004d8d78 R15: 00000000ffffffff [ 55.832344] Kernel Offset: disabled [ 56.573924] Rebooting in 86400 seconds..