syzkaller login: [ 31.841410] kauditd_printk_skb: 9 callbacks suppressed [ 31.841416] audit: type=1400 audit(1579325971.756:35): avc: denied { map } for pid=7018 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.310792] audit: type=1400 audit(1579325978.226:36): avc: denied { map } for pid=7029 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.290418] IPVS: ftp: loaded support on port[0] = 21 [ 39.668971] can: request_module (can-proto-0) failed. [ 40.737804] can: request_module (can-proto-0) failed. [ 40.746628] can: request_module (can-proto-0) failed. [ 40.922563] audit: type=1400 audit(1579325980.836:37): avc: denied { create } for pid=7029 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 40.946761] audit: type=1400 audit(1579325980.836:38): avc: denied { create } for pid=7029 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.970669] audit: type=1400 audit(1579325980.836:39): avc: denied { create } for pid=7029 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. 2020/01/18 05:39:47 parsed 1 programs 2020/01/18 05:39:48 executed programs: 0 [ 48.242266] IPVS: ftp: loaded support on port[0] = 21 [ 48.253574] IPVS: ftp: loaded support on port[0] = 21 [ 48.296113] IPVS: ftp: loaded support on port[0] = 21 [ 48.299609] IPVS: ftp: loaded support on port[0] = 21 [ 48.346669] IPVS: ftp: loaded support on port[0] = 21 [ 48.347116] IPVS: ftp: loaded support on port[0] = 21 [ 48.401766] chnl_net:caif_netlink_parms(): no params data found [ 48.503736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.510138] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.517881] device bridge_slave_0 entered promiscuous mode [ 48.539163] chnl_net:caif_netlink_parms(): no params data found [ 48.559474] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.566385] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.573668] device bridge_slave_1 entered promiscuous mode [ 48.603359] chnl_net:caif_netlink_parms(): no params data found [ 48.622322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.647794] chnl_net:caif_netlink_parms(): no params data found [ 48.656658] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.685040] chnl_net:caif_netlink_parms(): no params data found [ 48.706051] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.712540] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.719430] device bridge_slave_0 entered promiscuous mode [ 48.731236] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.737630] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.744808] device bridge_slave_0 entered promiscuous mode [ 48.763512] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.769919] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.777325] device bridge_slave_1 entered promiscuous mode [ 48.794494] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.802286] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.808749] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.818421] device bridge_slave_1 entered promiscuous mode [ 48.837984] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.845576] team0: Port device team_slave_0 added [ 48.872984] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.896510] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.904234] team0: Port device team_slave_1 added [ 48.928142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.942588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.954546] chnl_net:caif_netlink_parms(): no params data found [ 48.962279] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.969667] team0: Port device team_slave_0 added [ 48.978490] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.985899] team0: Port device team_slave_1 added [ 48.991826] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.000090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.007470] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.014497] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.021527] device bridge_slave_0 entered promiscuous mode [ 49.030044] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.036962] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.044105] device bridge_slave_1 entered promiscuous mode [ 49.050585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.061513] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.067940] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.075071] device bridge_slave_0 entered promiscuous mode [ 49.085516] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.091988] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.099089] device bridge_slave_1 entered promiscuous mode [ 49.120009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.128226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.157052] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.174807] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.212898] device hsr_slave_0 entered promiscuous mode [ 49.250697] device hsr_slave_1 entered promiscuous mode [ 49.331982] device hsr_slave_0 entered promiscuous mode [ 49.380721] device hsr_slave_1 entered promiscuous mode [ 49.431120] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.438546] team0: Port device team_slave_0 added [ 49.444972] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.464789] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.472337] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.479340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.487580] team0: Port device team_slave_1 added [ 49.497983] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.504967] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.512198] device bridge_slave_0 entered promiscuous mode [ 49.526838] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.534207] team0: Port device team_slave_0 added [ 49.539330] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.547124] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.559577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.566688] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.573166] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.580094] device bridge_slave_1 entered promiscuous mode [ 49.586897] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.594436] team0: Port device team_slave_1 added [ 49.599716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.611911] team0: Port device team_slave_0 added [ 49.617627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.624885] team0: Port device team_slave_1 added [ 49.631092] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.642023] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.654137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.672784] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.684758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.693732] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.701301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.752773] device hsr_slave_0 entered promiscuous mode [ 49.820547] device hsr_slave_1 entered promiscuous mode [ 49.892151] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.915227] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.971874] device hsr_slave_0 entered promiscuous mode [ 50.030566] device hsr_slave_1 entered promiscuous mode [ 50.081041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.089177] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.142003] device hsr_slave_0 entered promiscuous mode [ 50.180829] device hsr_slave_1 entered promiscuous mode [ 50.223093] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.230720] team0: Port device team_slave_0 added [ 50.237214] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.244780] team0: Port device team_slave_1 added [ 50.250308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.258146] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.271116] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.283307] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.291129] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.298116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.311094] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.318638] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.362791] device hsr_slave_0 entered promiscuous mode [ 50.410714] device hsr_slave_1 entered promiscuous mode [ 50.451113] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.475136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.492990] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.529494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.547745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.554855] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.569384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.579205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.592873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.601163] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.609511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.619644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.629131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.637188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.645511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.655433] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.667178] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.673798] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.682852] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.694824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.702058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.708957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.716041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.724708] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.732276] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.738355] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.746795] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.753580] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.760037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.767587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.782377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.792967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.804292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.815481] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.822185] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.828390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.836661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.844647] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.851294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.858340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.866489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.874287] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.880681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.887446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.896080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.903707] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.910818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.917951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.925222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.936348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.947627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.956740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.968214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.976384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.984446] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.990871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.997959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.005848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.013572] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.020150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.027307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.035721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.044200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.054238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.063604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.072142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.080147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.088332] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.094824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.101886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.109643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.117587] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.124047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.131744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.141638] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.149078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.158170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.167953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.176953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.188889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.196166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.206629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.216409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.224555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.232583] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.238981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.245795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.253704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.261518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.272719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.280784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.287651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.297434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.306035] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.313872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.322690] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.332777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.340858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.348866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.357352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.365085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.372201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.380056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.389318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.399360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.411775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.421388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.429584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.436794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.445370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.453150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.460982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.468597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.476916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.484545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.493198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.501153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.508855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.516785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.523879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.531016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.539759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.548381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.557685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.566188] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.575174] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.581512] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.587629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.595931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.603833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.611645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.619207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.626908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.634522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.641750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.655501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.665200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.675329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.684693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.693220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.701077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.708703] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.715118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.723198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.730031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.737422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.745325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.754175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.762606] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.768717] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.776490] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.783280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.791973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.800367] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.806450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.814702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.825549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.833499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.841369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.850609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.859215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.867837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.878041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.888631] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.897095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.905756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.913485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.921456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.928980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.936545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.944374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.952350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.960057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.968510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.980608] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 51.988146] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.994461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.004329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.012298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.019986] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.026389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.033488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.041395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.049018] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.055454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.062785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.073525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.085447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.093502] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.102329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.111986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.119865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.130126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.137870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.144891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.152909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.161809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.173956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.183702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.191374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.199212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.206924] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.213341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.220571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.228305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.238659] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.246178] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.253624] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.261320] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.270409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.279222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.291619] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.298282] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.307632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.314528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.324526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.332386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.339878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.347724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.355241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.362091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.368954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.376166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.383925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.393315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.403747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.420514] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.426621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.436340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.448883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.462356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.471924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.481437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.482571] audit: type=1400 audit(1579325992.396:40): avc: denied { associate } for pid=7133 comm="syz-executor.5" name="syz5" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 52.522387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.542167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.551771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.558942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.571232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.584468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.593037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.601140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.608804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.617466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.630027] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.685814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.707278] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.718014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.729952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.738718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.748363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.757970] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.765617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.777746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.847411] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.869295] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.877163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.886820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.911008] 8021q: adding VLAN 0 to HW filter on device batadv0 2020/01/18 05:39:53 executed programs: 20 [ 53.367841] ================================================================== [ 53.375415] BUG: KASAN: stack-out-of-bounds in ax25_getname+0x4d/0x7b0 [ 53.382090] Write of size 72 at addr ffff88809104fc78 by task syz-executor.2/7326 [ 53.389712] [ 53.391346] CPU: 0 PID: 7326 Comm: syz-executor.2 Not tainted 4.19.97-syzkaller #0 [ 53.399184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.409040] Call Trace: [ 53.411684] dump_stack+0x123/0x177 [ 53.415315] print_address_description.cold.8+0x9/0x1ff [ 53.420800] kasan_report.cold.9+0x242/0x309 [ 53.425353] ? ax25_getname+0x4d/0x7b0 [ 53.429285] check_memory_region+0x13e/0x1b0 [ 53.433703] memset+0x23/0x40 [ 53.436819] ax25_getname+0x4d/0x7b0 [ 53.440539] vhost_net_ioctl+0xe41/0x1500 [ 53.444693] ? handle_tx_kick+0x40/0x40 [ 53.448726] do_vfs_ioctl+0x196/0x10c0 [ 53.452614] ? ioctl_preallocate+0x1c0/0x1c0 [ 53.457126] ? selinux_file_mprotect+0x5f0/0x5f0 [ 53.461881] ? ksys_dup3+0x2e0/0x2e0 [ 53.465608] ? put_timespec64+0xa9/0x100 [ 53.469678] ? nsecs_to_jiffies+0x20/0x20 [ 53.473984] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 53.479888] ? security_file_ioctl+0x4a/0x90 [ 53.484297] ? __fget_light+0x174/0x1e0 [ 53.488380] ksys_ioctl+0x62/0x90 [ 53.491839] ? lockdep_hardirqs_on+0x421/0x5c0 [ 53.496412] __x64_sys_ioctl+0x6e/0xb0 [ 53.500292] do_syscall_64+0xd0/0x4e0 [ 53.504089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.509278] RIP: 0033:0x45a219 [ 53.512500] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.531441] RSP: 002b:00007fa3f7be0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.539144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 53.546449] RDX: 0000000020d7c000 RSI: 000000004008af30 RDI: 0000000000000003 [ 53.553717] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 53.561047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa3f7be16d4 [ 53.568414] R13: 00000000004c56ed R14: 00000000004da738 R15: 00000000ffffffff [ 53.575828] [ 53.577439] The buggy address belongs to the page: [ 53.582352] page:ffffea00024413c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 53.590488] flags: 0x1fffc0000000000() [ 53.594370] raw: 01fffc0000000000 0000000000000000 ffffffff02440101 0000000000000000 [ 53.603720] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 53.611585] page dumped because: kasan: bad access detected [ 53.617275] [ 53.618896] Memory state around the buggy address: [ 53.623826] ffff88809104fb80: 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 04 [ 53.631179] ffff88809104fc00: f2 f2 f2 f2 f2 f2 f2 00 f2 f2 f2 f2 f2 f2 f2 00 [ 53.638544] >ffff88809104fc80: 00 00 00 00 00 04 f2 00 00 00 00 00 00 00 00 00 [ 53.645903] ^ [ 53.650578] ffff88809104fd00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 [ 53.657940] ffff88809104fd80: f2 f2 f2 f2 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 [ 53.665292] ================================================================== [ 53.672821] Disabling lock debugging due to kernel taint [ 53.689172] Kernel panic - not syncing: panic_on_warn set ... [ 53.689172] [ 53.696793] CPU: 0 PID: 7326 Comm: syz-executor.2 Tainted: G B 4.19.97-syzkaller #0 [ 53.705912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.715265] Call Trace: [ 53.717845] dump_stack+0x123/0x177 [ 53.721455] panic+0x1cd/0x375 [ 53.724649] ? __warn_printk+0xd6/0xd6 [ 53.728650] ? ___preempt_schedule+0x16/0x18 [ 53.733047] kasan_end_report+0x47/0x4f [ 53.737100] kasan_report.cold.9+0x76/0x309 [ 53.741534] ? ax25_getname+0x4d/0x7b0 [ 53.745418] check_memory_region+0x13e/0x1b0 [ 53.749820] memset+0x23/0x40 [ 53.752920] ax25_getname+0x4d/0x7b0 [ 53.756628] vhost_net_ioctl+0xe41/0x1500 [ 53.760809] ? handle_tx_kick+0x40/0x40 [ 53.764777] do_vfs_ioctl+0x196/0x10c0 [ 53.769208] ? ioctl_preallocate+0x1c0/0x1c0 [ 53.773612] ? selinux_file_mprotect+0x5f0/0x5f0 [ 53.778351] ? ksys_dup3+0x2e0/0x2e0 [ 53.782052] ? put_timespec64+0xa9/0x100 [ 53.786115] ? nsecs_to_jiffies+0x20/0x20 [ 53.790251] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 53.796133] ? security_file_ioctl+0x4a/0x90 [ 53.800532] ? __fget_light+0x174/0x1e0 [ 53.804500] ksys_ioctl+0x62/0x90 [ 53.807981] ? lockdep_hardirqs_on+0x421/0x5c0 [ 53.812545] __x64_sys_ioctl+0x6e/0xb0 [ 53.816424] do_syscall_64+0xd0/0x4e0 [ 53.820428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.825610] RIP: 0033:0x45a219 [ 53.828786] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.847727] RSP: 002b:00007fa3f7be0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.855471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 53.863828] RDX: 0000000020d7c000 RSI: 000000004008af30 RDI: 0000000000000003 [ 53.871088] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 53.878350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa3f7be16d4 [ 53.885668] R13: 00000000004c56ed R14: 00000000004da738 R15: 00000000ffffffff [ 53.894706] Kernel Offset: disabled [ 53.898339] Rebooting in 86400 seconds..