syzkaller login: [ 32.502803] kauditd_printk_skb: 9 callbacks suppressed [ 32.502808] audit: type=1400 audit(1584804115.073:35): avc: denied { map } for pid=7010 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.884583] audit: type=1400 audit(1584804121.453:36): avc: denied { map } for pid=7021 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.493659] IPVS: ftp: loaded support on port[0] = 21 [ 39.876630] can: request_module (can-proto-0) failed. [ 40.949529] can: request_module (can-proto-0) failed. [ 40.958353] can: request_module (can-proto-0) failed. [ 41.110935] audit: type=1400 audit(1584804123.683:37): avc: denied { create } for pid=7021 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.135605] audit: type=1400 audit(1584804123.693:38): avc: denied { create } for pid=7021 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.159298] audit: type=1400 audit(1584804123.693:39): avc: denied { create } for pid=7021 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.1.19' (ECDSA) to the list of known hosts. 2020/03/21 15:22:10 parsed 1 programs 2020/03/21 15:22:10 executed programs: 0 [ 48.402587] IPVS: ftp: loaded support on port[0] = 21 [ 48.472986] IPVS: ftp: loaded support on port[0] = 21 [ 48.476224] IPVS: ftp: loaded support on port[0] = 21 [ 48.484299] IPVS: ftp: loaded support on port[0] = 21 [ 48.542281] IPVS: ftp: loaded support on port[0] = 21 [ 48.559582] chnl_net:caif_netlink_parms(): no params data found [ 48.579272] IPVS: ftp: loaded support on port[0] = 21 [ 48.648549] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.655639] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.663585] device bridge_slave_0 entered promiscuous mode [ 48.699719] chnl_net:caif_netlink_parms(): no params data found [ 48.720608] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.728340] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.735719] device bridge_slave_1 entered promiscuous mode [ 48.784367] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.790935] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.798795] device bridge_slave_0 entered promiscuous mode [ 48.806916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.834487] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.841954] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.849137] device bridge_slave_1 entered promiscuous mode [ 48.856272] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.873765] chnl_net:caif_netlink_parms(): no params data found [ 48.896052] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.903747] team0: Port device team_slave_0 added [ 48.912034] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.919475] team0: Port device team_slave_1 added [ 48.924530] chnl_net:caif_netlink_parms(): no params data found [ 48.943426] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.955487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.008948] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.015741] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.022742] device bridge_slave_0 entered promiscuous mode [ 49.030675] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.039304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.056891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.064379] team0: Port device team_slave_0 added [ 49.071512] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.078631] team0: Port device team_slave_1 added [ 49.083635] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.090429] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.097248] device bridge_slave_1 entered promiscuous mode [ 49.117524] chnl_net:caif_netlink_parms(): no params data found [ 49.132748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.179521] device hsr_slave_0 entered promiscuous mode [ 49.258184] device hsr_slave_1 entered promiscuous mode [ 49.339249] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.347037] chnl_net:caif_netlink_parms(): no params data found [ 49.367600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.375097] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.383305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.391093] audit: type=1400 audit(1584804131.963:40): avc: denied { write } for pid=7118 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 49.398359] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.418537] audit: type=1400 audit(1584804131.963:41): avc: denied { read } for pid=7118 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 49.446992] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.447342] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.461178] device bridge_slave_0 entered promiscuous mode [ 49.471672] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.478219] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.485846] device bridge_slave_1 entered promiscuous mode [ 49.492528] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.499182] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.506006] device bridge_slave_0 entered promiscuous mode [ 49.516205] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.522719] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.529772] device bridge_slave_1 entered promiscuous mode [ 49.547502] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.555605] team0: Port device team_slave_0 added [ 49.592310] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.599256] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.606079] device bridge_slave_0 entered promiscuous mode [ 49.612802] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.620802] team0: Port device team_slave_1 added [ 49.669431] device hsr_slave_0 entered promiscuous mode [ 49.729102] device hsr_slave_1 entered promiscuous mode [ 49.769079] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.776889] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.790741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.801887] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.808400] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.815326] device bridge_slave_1 entered promiscuous mode [ 49.821600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.829255] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.836224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.844723] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.857855] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.886287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.902025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.912300] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.960255] device hsr_slave_0 entered promiscuous mode [ 50.008961] device hsr_slave_1 entered promiscuous mode [ 50.048454] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.055891] team0: Port device team_slave_0 added [ 50.062263] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.069769] team0: Port device team_slave_1 added [ 50.075599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.088113] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.095419] team0: Port device team_slave_0 added [ 50.104120] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.111682] team0: Port device team_slave_1 added [ 50.116943] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.124355] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.132149] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.139472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.155540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.163222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.170454] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.179083] team0: Port device team_slave_0 added [ 50.184741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.192108] team0: Port device team_slave_1 added [ 50.260705] device hsr_slave_0 entered promiscuous mode [ 50.300508] device hsr_slave_1 entered promiscuous mode [ 50.338519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.345730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.357330] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.370838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.379082] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.440498] device hsr_slave_0 entered promiscuous mode [ 50.478300] device hsr_slave_1 entered promiscuous mode [ 50.528731] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.537622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.600000] device hsr_slave_0 entered promiscuous mode [ 50.648231] device hsr_slave_1 entered promiscuous mode [ 50.688442] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.695768] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.706559] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.723184] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.740368] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.751369] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.758609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.766439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.781782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.792398] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.798993] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.811820] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.825161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.844993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.851761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.860330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.867851] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.874898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.882399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.903858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.913484] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.924457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.936078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.950490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.961345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.968927] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.975250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.982582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.998784] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.011013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.019258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.034347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.040746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.051552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.058597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.068481] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.077257] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.083435] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.091302] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.097374] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.108311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.117773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.129402] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.135538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.142625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.150351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.158168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.165659] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.172045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.179120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.187032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.197192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.206691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.214556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.224947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.233319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.241545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.249340] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.255657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.262556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.270940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.279813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.288743] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.295450] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.303188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.311712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.318991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.326672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.334240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.342203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.349053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.355801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.363583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.371348] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.377766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.384862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.392833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.400868] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.408327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.417287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.426968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.434529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.442632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.450702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.458234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.465531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.474193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.482142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.490108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.498200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.505822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.513525] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.519896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.528508] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.534586] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.542545] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.549037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.557299] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.567417] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.574221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.585647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.592827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.602392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.609933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.617368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.627253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.635931] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.642291] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.651074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.660563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.669141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.676244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.684099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.691990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.700034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.707493] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.713904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.720950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.728794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.736396] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.743225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.749949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.760299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.770010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.777443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.787312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.795796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.801939] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.810614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.818618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.826115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.835890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.843703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.851836] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.858321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.865102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.873182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.880993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.888751] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.895078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.904674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.912932] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 51.921429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.931964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.939157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.946370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.954137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.961609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.971627] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.977664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.985460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.996510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.004698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.012834] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.021203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.035192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.043159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.051316] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.057775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.065003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.072737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.080350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.088041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.095458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.102408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.109179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.116826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.124409] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.130758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.138631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.145465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.154946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.164459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.174330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.182643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.190698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.203497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.211318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.219475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.227006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.235844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.244438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.252016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.259810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.270226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.279835] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.287457] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.296533] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.303224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.311766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.321080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.330035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.336689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.339013] audit: type=1400 audit(1584804134.903:42): avc: denied { associate } for pid=7118 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 52.346856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.374201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.382227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.400287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.413127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.422888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.434296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.448506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.456255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.465422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.473464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.482533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.490030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.498645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.508881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.521385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.531769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.539814] ------------[ cut here ]------------ [ 52.545370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.552668] refcount_t: underflow; use-after-free. [ 52.557823] WARNING: CPU: 0 PID: 7140 at lib/refcount.c:187 refcount_sub_and_test_checked+0x15a/0x180 [ 52.567175] Kernel panic - not syncing: panic_on_warn set ... [ 52.567175] [ 52.574518] CPU: 0 PID: 7140 Comm: syz-executor.2 Not tainted 4.19.112-syzkaller #0 [ 52.582289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.591622] Call Trace: [ 52.594191] dump_stack+0x123/0x177 [ 52.597807] ? refcount_sub_and_test_checked+0x15a/0x180 [ 52.603249] panic+0x1cd/0x375 [ 52.606430] ? __warn_printk+0xd6/0xd6 [ 52.610299] __warn.cold.8+0x1b/0x3e [ 52.613994] ? refcount_sub_and_test_checked+0x15a/0x180 [ 52.619430] report_bug+0x1a4/0x200 [ 52.623046] do_error_trap+0x200/0x350 [ 52.626929] ? math_error+0x340/0x340 [ 52.630711] ? irq_work_queue+0xd/0x50 [ 52.634584] ? wake_up_klogd+0x71/0xa0 [ 52.638460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.643330] ? trace_hardirqs_off_caller+0x49/0x180 [ 52.648332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.653420] do_invalid_op+0x1b/0x20 [ 52.657120] invalid_op+0x14/0x20 [ 52.660569] RIP: 0010:refcount_sub_and_test_checked+0x15a/0x180 [ 52.666605] Code: c1 44 29 e0 85 c9 89 c3 74 88 80 3d 43 b8 bd 05 00 74 04 31 c0 eb a9 48 c7 c7 80 02 ff 86 c6 05 2f b8 bd 05 01 e8 19 18 49 fe <0f> 0b 31 c0 eb 90 4c 89 ff e8 08 fa a0 fe e9 2b ff ff ff e8 de 11 [ 52.685525] RSP: 0018:ffff8880a82376d0 EFLAGS: 00010282 [ 52.690890] RAX: 0000000000000000 RBX: 00000000ffffff01 RCX: 0000000000000000 [ 52.698140] RDX: 0000000000000004 RSI: 0000000000000008 RDI: ffffffff89a816e0 [ 52.705400] RBP: ffff8880a8237760 R08: ffffed1015d43ee3 R09: ffffed1015d43ee2 [ 52.712649] R10: ffffed1015d43ee2 R11: ffff8880aea1f717 R12: 0000000000008100 [ 52.719918] R13: ffff8880a8237738 R14: 1ffff11015046edb R15: ffff8880a879b27c [ 52.727212] ? refcount_inc_checked+0x30/0x30 [ 52.731686] ? refcount_sub_and_test_checked+0xe0/0x180 [ 52.737203] ? refcount_inc_checked+0x30/0x30 [ 52.741690] sock_wfree+0x9b/0x130 [ 52.745209] sctp_wfree+0x345/0x910 [ 52.748815] skb_release_head_state+0xfc/0x200 [ 52.753373] skb_release_all+0xd/0x50 [ 52.757148] consume_skb+0x91/0x270 [ 52.760758] sctp_chunk_put+0x150/0x230 [ 52.764718] sctp_chunk_free+0x3f/0x50 [ 52.768592] __sctp_outq_teardown+0x1a2/0xc30 [ 52.773071] ? __sctp_outq_teardown+0xc30/0xc30 [ 52.777727] ? sock_def_wakeup+0xd7/0x1b0 [ 52.781871] sctp_outq_free+0x9/0x10 [ 52.785575] sctp_association_free+0x1d5/0x711 [ 52.790139] sctp_do_sm+0x1605/0x5020 [ 52.793925] ? sctp_do_8_2_transport_strike.isra.19+0x800/0x800 [ 52.799976] ? __kmalloc_node_track_caller+0x3c/0x70 [ 52.805091] ? rcu_read_lock_sched_held+0x108/0x120 [ 52.810090] ? kmem_cache_alloc_node_trace+0x348/0x730 [ 52.815351] ? __lock_is_held+0xb5/0x140 [ 52.819392] ? memcpy+0x45/0x50 [ 52.822651] ? sctp_addto_chunk+0xfa/0x2a0 [ 52.826867] ? sctp_addto_chunk+0xfa/0x2a0 [ 52.831082] sctp_primitive_ABORT+0x7c/0xc0 [ 52.835383] sctp_close+0x227/0x750 [ 52.838986] ? sctp_init_sock+0x1230/0x1230 [ 52.843283] ? lock_acquire+0x173/0x3d0 [ 52.847236] ? __sock_release+0x7d/0x290 [ 52.851284] inet_release+0xb4/0x1b0 [ 52.854976] __sock_release+0xc2/0x290 [ 52.858840] sock_close+0x10/0x20 [ 52.862270] __fput+0x249/0x7f0 [ 52.865526] ____fput+0x9/0x10 [ 52.868696] task_work_run+0x108/0x180 [ 52.872565] exit_to_usermode_loop+0x1a9/0x200 [ 52.877126] do_syscall_64+0x413/0x4e0 [ 52.881092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.886270] RIP: 0033:0x4141d1 [ 52.889446] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 52.908353] RSP: 002b:00007ffdd9d6e2d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 52.916039] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004141d1 [ 52.923289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 52.930571] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 52.937949] R10: 00007ffdd9d6e3b0 R11: 0000000000000293 R12: 000000000075bf20 [ 52.945203] R13: 000000000000cd22 R14: 0000000000761400 R15: 000000000075bf2c [ 52.954141] Kernel Offset: disabled [ 52.957820] Rebooting in 86400 seconds..