syzkaller login: [ 36.396469] kauditd_printk_skb: 9 callbacks suppressed [ 36.396474] audit: type=1400 audit(1580505914.725:35): avc: denied { map } for pid=7132 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 42.866373] audit: type=1400 audit(1580505921.195:36): avc: denied { map } for pid=7143 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 43.664842] IPVS: ftp: loaded support on port[0] = 21 [ 44.120065] can: request_module (can-proto-0) failed. [ 45.130495] can: request_module (can-proto-0) failed. [ 45.139940] can: request_module (can-proto-0) failed. [ 45.320855] audit: type=1400 audit(1580505923.645:37): avc: denied { create } for pid=7143 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 45.344707] audit: type=1400 audit(1580505923.645:38): avc: denied { create } for pid=7143 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 45.368532] audit: type=1400 audit(1580505923.645:39): avc: denied { create } for pid=7143 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. 2020/01/31 21:25:30 parsed 1 programs 2020/01/31 21:25:30 executed programs: 0 [ 52.666429] IPVS: ftp: loaded support on port[0] = 21 [ 52.760153] IPVS: ftp: loaded support on port[0] = 21 [ 52.825125] IPVS: ftp: loaded support on port[0] = 21 [ 52.825787] IPVS: ftp: loaded support on port[0] = 21 [ 52.839160] IPVS: ftp: loaded support on port[0] = 21 [ 52.880520] chnl_net:caif_netlink_parms(): no params data found [ 52.936281] IPVS: ftp: loaded support on port[0] = 21 [ 52.945860] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.952878] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.959909] device bridge_slave_0 entered promiscuous mode [ 52.968610] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.975219] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.982261] device bridge_slave_1 entered promiscuous mode [ 53.042882] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.065306] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.134564] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.142695] team0: Port device team_slave_0 added [ 53.147832] chnl_net:caif_netlink_parms(): no params data found [ 53.174151] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.181766] team0: Port device team_slave_1 added [ 53.188386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.197648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.209789] chnl_net:caif_netlink_parms(): no params data found [ 53.253211] chnl_net:caif_netlink_parms(): no params data found [ 53.274526] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.281119] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.288371] device bridge_slave_0 entered promiscuous mode [ 53.297993] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.304628] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.311721] device bridge_slave_1 entered promiscuous mode [ 53.318129] chnl_net:caif_netlink_parms(): no params data found [ 53.384553] device hsr_slave_0 entered promiscuous mode [ 53.431585] device hsr_slave_1 entered promiscuous mode [ 53.498799] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.514515] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.526243] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.535723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.567280] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.574906] team0: Port device team_slave_0 added [ 53.590483] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.597033] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.604737] device bridge_slave_0 entered promiscuous mode [ 53.615955] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.624159] team0: Port device team_slave_1 added [ 53.644300] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.650684] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.658342] device bridge_slave_0 entered promiscuous mode [ 53.665750] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.673313] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.680202] device bridge_slave_1 entered promiscuous mode [ 53.686623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.695094] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.701723] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.708616] device bridge_slave_0 entered promiscuous mode [ 53.717022] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.723611] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.730601] device bridge_slave_1 entered promiscuous mode [ 53.742214] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.748714] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.756442] device bridge_slave_1 entered promiscuous mode [ 53.770676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.804374] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.820864] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.831524] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.842454] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.855810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.868870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.884928] chnl_net:caif_netlink_parms(): no params data found [ 53.921081] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.928424] team0: Port device team_slave_0 added [ 53.973252] device hsr_slave_0 entered promiscuous mode [ 54.021649] device hsr_slave_1 entered promiscuous mode [ 54.063308] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.069852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.076979] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.083421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.091427] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.098883] team0: Port device team_slave_0 added [ 54.110096] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.117548] team0: Port device team_slave_0 added [ 54.122961] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.130213] team0: Port device team_slave_1 added [ 54.136327] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.143660] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.156691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.164841] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.173610] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.180909] team0: Port device team_slave_1 added [ 54.188367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.195949] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.203408] team0: Port device team_slave_1 added [ 54.208886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.222318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.233600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.244183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.254811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.270398] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.276993] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.284150] device bridge_slave_0 entered promiscuous mode [ 54.343251] device hsr_slave_0 entered promiscuous mode [ 54.381746] device hsr_slave_1 entered promiscuous mode [ 54.421704] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.428105] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.435573] device bridge_slave_1 entered promiscuous mode [ 54.483866] device hsr_slave_0 entered promiscuous mode [ 54.521708] device hsr_slave_1 entered promiscuous mode [ 54.562380] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.569699] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.623757] device hsr_slave_0 entered promiscuous mode [ 54.671703] device hsr_slave_1 entered promiscuous mode [ 54.712129] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.720720] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.736974] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.745189] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.756181] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.764013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.772341] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.800491] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.819587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.829298] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.837817] team0: Port device team_slave_0 added [ 54.854848] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.874733] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.882141] team0: Port device team_slave_1 added [ 54.888583] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.900905] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.907767] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.924828] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.942128] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.952893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.960930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.979110] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.979133] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.982272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.986784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.014114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.022410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.030039] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.036590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.050217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.112905] device hsr_slave_0 entered promiscuous mode [ 55.141784] device hsr_slave_1 entered promiscuous mode [ 55.183555] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.190075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.198052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.206161] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.212590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.234073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.242264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.252691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.258992] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.268918] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.281799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.289012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.299220] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.307637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.317595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.326289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.335622] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.344484] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.352471] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.358568] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.364772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.372872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.380588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.389328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.400213] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.409485] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.420919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.428537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.435751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.445520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.452835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.459767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.467773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.477472] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.483946] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.492848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.504617] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.512521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.521731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.529521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.537668] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.544098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.554293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.562560] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.568645] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.577125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.585206] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.592652] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.601980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.609124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.617608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.625914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.634236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.642126] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.648574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.655495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.662533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.669812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.678833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.690832] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.697473] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.704878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.715714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.724285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.732218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.740152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.748038] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.754479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.761548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.769409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.777407] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.783787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.790639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.798867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.807042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.814858] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.821372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.828203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.839994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.851061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.860867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.868740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.877326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.884869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.893277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.902447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.912494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.920899] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.927415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.939421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.948748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.959078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.967475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.976612] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.983045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.989949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.997932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.005632] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.012124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.018923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.026997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.034629] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.040990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.047836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.055615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.068866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.084776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.096619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.104503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.112919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.119851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.128040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.136164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.144181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.154496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.166941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.174938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.182820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.192149] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.200193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.210024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.220014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.228455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.236056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.243832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.255883] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.263103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.270929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.280606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.290265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.303743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.310835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.317845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.324740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.332922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.340514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.348142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.356137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.363996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.372291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.379813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.390297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.399887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.409346] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.417088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.426177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.434481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.442472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.450098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.458117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.466305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.477256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.487568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.494724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.503538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.511089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.519230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.527358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.535160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.545337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.554572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.567654] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.575565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.584949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.594546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.602480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.610015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.620079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.628832] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.640464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.648152] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.654861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.664104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.678045] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.684269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.691148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.699589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.707238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.714193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.720978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.728618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.737858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.748462] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.754901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.780272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.795232] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.807915] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.822545] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.829974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.840615] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.849308] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.857379] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.864625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.873827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.880731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.888209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.895210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.902295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.910501] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.922755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.934089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.950605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.958285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.969136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.983420] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.989547] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.991469] audit: type=1400 audit(1580505935.315:40): avc: denied { associate } for pid=7243 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 57.029290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.048922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.062087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.069875] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.076291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.087058] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.103918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.128986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.153993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.168517] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.175293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.189400] ================================================================== [ 57.198134] BUG: KASAN: slab-out-of-bounds in bacpy+0xe/0x10 [ 57.203929] Read of size 6 at addr ffff8880858df788 by task kworker/u5:0/1205 [ 57.211319] [ 57.212957] CPU: 0 PID: 1205 Comm: kworker/u5:0 Not tainted 4.19.100-syzkaller #0 [ 57.215269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.220591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.236811] Workqueue: hci0 hci_rx_work [ 57.240788] Call Trace: [ 57.243393] dump_stack+0x123/0x177 [ 57.247017] print_address_description.cold.8+0x9/0x1ff [ 57.252395] kasan_report.cold.9+0x242/0x309 [ 57.256810] ? bacpy+0xe/0x10 [ 57.260007] check_memory_region+0x13e/0x1b0 [ 57.264424] memcpy+0x23/0x50 [ 57.267522] bacpy+0xe/0x10 [ 57.270457] hci_event_packet+0x38ce/0x9bfe [ 57.274782] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 57.279631] ? __save_stack_trace+0x30/0x100 [ 57.284120] ? ret_from_fork+0x24/0x30 [ 57.288040] ? add_lock_to_list.isra.26+0x193/0x340 [ 57.293057] ? save_trace+0xe0/0x290 [ 57.296763] ? __lock_acquire+0x26bc/0x4980 [ 57.301071] ? mark_held_locks+0x130/0x130 [ 57.305296] ? __lock_acquire+0x26bc/0x4980 [ 57.309624] ? debug_object_destroy+0x2b0/0x2b0 [ 57.314291] ? find_held_lock+0x36/0x1d0 [ 57.318337] ? mark_held_locks+0xc7/0x130 [ 57.322468] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 57.327591] ? skb_dequeue+0x11d/0x1b0 [ 57.331468] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 57.336570] ? trace_hardirqs_on+0x28/0x190 [ 57.340890] hci_rx_work+0x363/0x8f0 [ 57.344592] ? hci_rx_work+0x363/0x8f0 [ 57.348465] process_one_work+0x830/0x1670 [ 57.352703] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 57.357365] ? kasan_check_write+0x14/0x20 [ 57.361598] ? do_raw_spin_lock+0xd0/0x240 [ 57.365839] worker_thread+0x85/0xb60 [ 57.369628] ? __kthread_parkme+0x47/0x190 [ 57.373866] kthread+0x324/0x3e0 [ 57.377237] ? process_one_work+0x1670/0x1670 [ 57.381729] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 57.387261] ret_from_fork+0x24/0x30 [ 57.391048] [ 57.392678] Allocated by task 7298: [ 57.396310] save_stack+0x43/0xd0 [ 57.399746] kasan_kmalloc+0xc7/0xe0 [ 57.403443] __kmalloc_node_track_caller+0x50/0x70 [ 57.408378] __kmalloc_reserve.isra.41+0x2c/0xc0 [ 57.413134] __alloc_skb+0xd7/0x580 [ 57.416751] vhci_write+0xa8/0x3f0 [ 57.420278] __vfs_write+0x443/0x890 [ 57.423976] vfs_write+0x150/0x4d0 [ 57.427494] ksys_write+0x103/0x260 [ 57.431099] __x64_sys_write+0x6e/0xb0 [ 57.435131] do_syscall_64+0xd0/0x4e0 [ 57.438942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.444126] [ 57.445743] Freed by task 0: [ 57.448738] (stack is not available) [ 57.452431] [ 57.454041] The buggy address belongs to the object at ffff8880858df580 [ 57.454041] which belongs to the cache kmalloc-512 of size 512 [ 57.466691] The buggy address is located 8 bytes to the right of [ 57.466691] 512-byte region [ffff8880858df580, ffff8880858df780) [ 57.479002] The buggy address belongs to the page: [ 57.484038] page:ffffea00021637c0 count:1 mapcount:0 mapping:ffff88812c29c940 index:0x0 [ 57.492178] flags: 0xfffe0000000100(slab) [ 57.496347] raw: 00fffe0000000100 ffffea000217eac8 ffffea0002042b88 ffff88812c29c940 [ 57.504239] raw: 0000000000000000 ffff8880858df080 0000000100000006 0000000000000000 [ 57.512107] page dumped because: kasan: bad access detected [ 57.517935] [ 57.519561] Memory state around the buggy address: [ 57.524577] ffff8880858df680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.531956] ffff8880858df700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.539319] >ffff8880858df780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.546682] ^ [ 57.550305] ffff8880858df800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.557666] ffff8880858df880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.565125] ================================================================== [ 57.572480] Disabling lock debugging due to kernel taint [ 57.584202] Kernel panic - not syncing: panic_on_warn set ... [ 57.584202] [ 57.584211] CPU: 0 PID: 1205 Comm: kworker/u5:0 Tainted: G B 4.19.100-syzkaller #0 [ 57.584214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.584224] Workqueue: hci0 hci_rx_work [ 57.584227] Call Trace: [ 57.584236] dump_stack+0x123/0x177 [ 57.584242] panic+0x1cd/0x375 [ 57.584246] ? __warn_printk+0xd6/0xd6 [ 57.584258] ? ___preempt_schedule+0x16/0x18 [ 57.584268] kasan_end_report+0x47/0x4f [ 57.604259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.610094] kasan_report.cold.9+0x76/0x309 [ 57.647381] ? bacpy+0xe/0x10 [ 57.650490] check_memory_region+0x13e/0x1b0 [ 57.654906] memcpy+0x23/0x50 [ 57.658020] bacpy+0xe/0x10 [ 57.660960] hci_event_packet+0x38ce/0x9bfe [ 57.665288] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 57.670133] ? __save_stack_trace+0x30/0x100 [ 57.674535] ? ret_from_fork+0x24/0x30 [ 57.678451] ? add_lock_to_list.isra.26+0x193/0x340 [ 57.683465] ? save_trace+0xe0/0x290 [ 57.687276] ? __lock_acquire+0x26bc/0x4980 [ 57.691597] ? mark_held_locks+0x130/0x130 [ 57.695824] ? __lock_acquire+0x26bc/0x4980 [ 57.700342] ? debug_object_destroy+0x2b0/0x2b0 [ 57.705014] ? find_held_lock+0x36/0x1d0 [ 57.709065] ? mark_held_locks+0xc7/0x130 [ 57.713196] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 57.718277] ? skb_dequeue+0x11d/0x1b0 [ 57.722153] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 57.727252] ? trace_hardirqs_on+0x28/0x190 [ 57.731576] hci_rx_work+0x363/0x8f0 [ 57.735309] ? hci_rx_work+0x363/0x8f0 [ 57.739198] process_one_work+0x830/0x1670 [ 57.743447] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 57.748112] ? kasan_check_write+0x14/0x20 [ 57.752338] ? do_raw_spin_lock+0xd0/0x240 [ 57.756606] worker_thread+0x85/0xb60 [ 57.760398] ? __kthread_parkme+0x47/0x190 [ 57.764621] kthread+0x324/0x3e0 [ 57.768083] ? process_one_work+0x1670/0x1670 [ 57.772570] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 57.778105] ret_from_fork+0x24/0x30 [ 57.783119] Kernel Offset: disabled [ 57.786759] Rebooting in 86400 seconds..