syzkaller login: [ 31.565590] kauditd_printk_skb: 9 callbacks suppressed [ 31.565595] audit: type=1400 audit(1575043817.067:35): avc: denied { map } for pid=6872 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 37.924348] audit: type=1400 audit(1575043823.417:36): avc: denied { map } for pid=6883 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.730101] IPVS: ftp: loaded support on port[0] = 21 [ 40.132862] can: request_module (can-proto-0) failed. [ 41.101851] can: request_module (can-proto-0) failed. [ 41.257388] audit: type=1400 audit(1575043826.757:37): avc: denied { create } for pid=6883 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.281117] audit: type=1400 audit(1575043826.757:38): avc: denied { create } for pid=6883 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.305796] audit: type=1400 audit(1575043826.757:39): avc: denied { create } for pid=6883 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. 2019/11/29 16:10:34 parsed 1 programs 2019/11/29 16:10:34 executed programs: 0 [ 49.291705] IPVS: ftp: loaded support on port[0] = 21 [ 49.291707] IPVS: ftp: loaded support on port[0] = 21 [ 49.306849] IPVS: ftp: loaded support on port[0] = 21 [ 49.329289] IPVS: ftp: loaded support on port[0] = 21 [ 49.348974] IPVS: ftp: loaded support on port[0] = 21 [ 49.403327] IPVS: ftp: loaded support on port[0] = 21 [ 49.544486] chnl_net:caif_netlink_parms(): no params data found [ 49.578652] chnl_net:caif_netlink_parms(): no params data found [ 49.608096] chnl_net:caif_netlink_parms(): no params data found [ 49.650558] chnl_net:caif_netlink_parms(): no params data found [ 49.658310] chnl_net:caif_netlink_parms(): no params data found [ 49.709789] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.716664] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.723633] device bridge_slave_0 entered promiscuous mode [ 49.734146] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.741665] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.750493] device bridge_slave_1 entered promiscuous mode [ 49.771806] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.780205] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.787027] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.793868] device bridge_slave_0 entered promiscuous mode [ 49.803704] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.810196] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.817441] device bridge_slave_1 entered promiscuous mode [ 49.825468] chnl_net:caif_netlink_parms(): no params data found [ 49.844634] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.871280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.879721] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.886189] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.893102] device bridge_slave_0 entered promiscuous mode [ 49.902785] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.909658] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.916976] device bridge_slave_1 entered promiscuous mode [ 49.932865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.949504] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.956736] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.963574] device bridge_slave_0 entered promiscuous mode [ 49.973404] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.979876] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.987605] device bridge_slave_1 entered promiscuous mode [ 49.993766] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.000321] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.009610] device bridge_slave_0 entered promiscuous mode [ 50.029256] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.036711] team0: Port device team_slave_0 added [ 50.051629] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.059859] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.066518] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.073369] device bridge_slave_1 entered promiscuous mode [ 50.094125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.101979] team0: Port device team_slave_1 added [ 50.107291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.120573] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.131631] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.139688] team0: Port device team_slave_0 added [ 50.145810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.153612] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.160952] team0: Port device team_slave_1 added [ 50.166171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.173304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.181519] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.193395] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.201216] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.208163] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.215108] device bridge_slave_0 entered promiscuous mode [ 50.222200] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.250592] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.258118] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.264473] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.271553] device bridge_slave_1 entered promiscuous mode [ 50.286309] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.293712] team0: Port device team_slave_0 added [ 50.299594] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.307654] team0: Port device team_slave_1 added [ 50.312984] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.321014] team0: Port device team_slave_0 added [ 50.376551] device hsr_slave_0 entered promiscuous mode [ 50.415196] device hsr_slave_1 entered promiscuous mode [ 50.455462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.462666] team0: Port device team_slave_0 added [ 50.468709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.476142] team0: Port device team_slave_1 added [ 50.481421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.489795] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.497599] team0: Port device team_slave_1 added [ 50.511574] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.518571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.527312] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.534479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.541794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.587395] device hsr_slave_0 entered promiscuous mode [ 50.625209] device hsr_slave_1 entered promiscuous mode [ 50.706048] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.714002] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.721062] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.737361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.757876] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.766165] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.817495] device hsr_slave_0 entered promiscuous mode [ 50.856050] device hsr_slave_1 entered promiscuous mode [ 50.937491] device hsr_slave_0 entered promiscuous mode [ 50.975235] device hsr_slave_1 entered promiscuous mode [ 51.019718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.027529] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.039238] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.049397] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.060353] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.068522] team0: Port device team_slave_0 added [ 51.127785] device hsr_slave_0 entered promiscuous mode [ 51.175223] device hsr_slave_1 entered promiscuous mode [ 51.216216] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.230548] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.237890] team0: Port device team_slave_1 added [ 51.243348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.255512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.265200] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.276230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.283430] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.300344] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.316542] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.356407] device hsr_slave_0 entered promiscuous mode [ 51.395195] device hsr_slave_1 entered promiscuous mode [ 51.447876] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.456339] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.472283] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.516497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.545573] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.552590] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.562838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.579702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.587279] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.598457] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.606923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.614607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.623858] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.631797] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.641362] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.650088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.660068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.669229] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.677673] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.688764] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.696390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.703273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.710269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.717962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.726037] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.733215] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.740063] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.748961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.757506] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.763589] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.770703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.777929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.785002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.791950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.800297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.808315] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.814817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.822370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.837019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.844679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.856275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.863857] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.870377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.885822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.893880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.903122] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.909520] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.918434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.927226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.936021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.943735] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.950126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.957013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.964702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.972497] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.978883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.985942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.994630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.004226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.013378] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.021858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.031294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.039899] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.046277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.053257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.061781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.069511] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.075902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.082793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.090066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.097959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.106701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.116127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.124485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.133918] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.141752] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.147979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.156020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.163625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.171717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.179534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.187482] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.193812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.200680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.211177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.221326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.231126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.240246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.248159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.256207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.263870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.271694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.279880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.287832] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.294197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.301226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.309112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.318423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.326637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.337691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.346685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.356246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.366571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.376222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.383059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.391554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.400285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.408192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.414634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.421655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.430292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.437937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.445734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.453298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.461110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.468644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.476159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.483734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.492469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.500935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.508170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.517714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.524773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.532383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.539613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.547418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.555649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.563105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.570795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.579302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.589129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.597437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.609233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.617147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.624061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.632680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.640532] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.646902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.653732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.661563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.669149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.676910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.684385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.692074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.699770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.708086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.718787] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.727270] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.733322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.741172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.750098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.759832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.767567] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.773783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.782176] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.789730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.800530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.807850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.816289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.823830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.831055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.838256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.846104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.853731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.863327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.875862] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.881951] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.891027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.901737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.909846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.917483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.927114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.937376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.947235] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.954805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.962143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.969990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.977541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.985098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.992486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.000400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.008721] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.017790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.026807] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.032856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.040989] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.048671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.058248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.066279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.074094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.082042] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.088451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.095569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.107236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.118589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.127663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.141776] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.148612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.156849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.164416] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.170919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.178378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.194755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.205371] audit: type=1400 audit(1575043838.707:40): avc: denied { associate } for pid=6981 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 53.230095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.243036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.253983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.265723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.273504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.291258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.303463] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.314493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.326284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.336207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.358285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.378359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.400801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.409235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.416983] ================================================================== [ 53.421449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.424491] BUG: KASAN: slab-out-of-bounds in bacpy+0xe/0x10 [ 53.424498] Read of size 6 at addr ffff8880828bd6fb by task kworker/u5:0/1167 [ 53.424500] [ 53.424507] CPU: 0 PID: 1167 Comm: kworker/u5:0 Not tainted 4.19.86-syzkaller #0 [ 53.424510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.424516] Workqueue: hci0 hci_rx_work [ 53.424523] Call Trace: [ 53.432457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.437403] dump_stack+0x123/0x177 [ 53.437414] print_address_description.cold.8+0x9/0x1ff [ 53.437420] kasan_report.cold.9+0x242/0x309 [ 53.437425] ? bacpy+0xe/0x10 [ 53.437435] check_memory_region+0x13e/0x1b0 [ 53.437441] memcpy+0x23/0x50 [ 53.437453] bacpy+0xe/0x10 [ 53.445377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.446342] hci_event_packet+0x1cf6/0x9e18 [ 53.446355] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 53.446361] ? __save_stack_trace+0x50/0x100 [ 53.446372] ? ret_from_fork+0x3a/0x50 [ 53.455032] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.463266] ? add_lock_to_list.isra.26+0x193/0x340 [ 53.469813] ? save_trace+0xe0/0x290 [ 53.469821] ? __lock_acquire+0x26bc/0x4980 [ 53.469838] ? mark_held_locks+0x130/0x130 [ 53.469842] ? __lock_acquire+0x26bc/0x4980 [ 53.469849] ? debug_object_destroy+0x2b0/0x2b0 [ 53.469860] ? find_held_lock+0x36/0x1d0 [ 53.469867] ? mark_held_locks+0xc7/0x130 [ 53.477261] kobject: 'hci1' (00000000b1e5213e): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 53.480766] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 53.480772] ? skb_dequeue+0x11d/0x1b0 [ 53.480778] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 53.480784] ? trace_hardirqs_on+0x28/0x190 [ 53.480797] hci_rx_work+0x34f/0x8a0 [ 53.486397] kobject: 'rfkill7' (00000000236606fc): kobject_add_internal: parent: 'hci1', set: 'devices' [ 53.490793] ? hci_rx_work+0x34f/0x8a0 [ 53.490805] process_one_work+0x835/0x1670 [ 53.490817] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 53.490827] ? kasan_check_write+0x14/0x20 [ 53.490832] ? do_raw_spin_lock+0xc1/0x230 [ 53.490839] worker_thread+0x85/0xb60 [ 53.490844] ? __kthread_parkme+0x47/0x190 [ 53.490855] kthread+0x327/0x3f0 [ 53.494268] kobject: 'rfkill7' (00000000236606fc): kobject_uevent_env [ 53.498400] ? process_one_work+0x1670/0x1670 [ 53.498405] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 53.498412] ret_from_fork+0x3a/0x50 [ 53.498425] [ 53.498428] Allocated by task 7002: [ 53.498436] save_stack+0x43/0xd0 [ 53.498441] kasan_kmalloc+0xc7/0xe0 [ 53.501581] kobject: 'rfkill7' (00000000236606fc): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill7' [ 53.504436] __kmalloc_node_track_caller+0x50/0x70 [ 53.504442] __kmalloc_reserve.isra.39+0x2c/0xc0 [ 53.504446] __alloc_skb+0xd7/0x580 [ 53.504450] vhci_write+0xa8/0x3f0 [ 53.504454] __vfs_write+0x44b/0x890 [ 53.504458] vfs_write+0x150/0x4d0 [ 53.512089] kobject: 'rfkill7' (00000000236606fc): kobject_uevent_env [ 53.515832] ksys_write+0x103/0x260 [ 53.515836] __x64_sys_write+0x6e/0xb0 [ 53.515842] do_syscall_64+0xd6/0x4e0 [ 53.515848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.515850] [ 53.515853] Freed by task 0: [ 53.515855] (stack is not available) [ 53.515857] [ 53.515861] The buggy address belongs to the object at ffff8880828bd500 [ 53.515861] which belongs to the cache kmalloc-512 of size 512 [ 53.515865] The buggy address is located 507 bytes inside of [ 53.515865] 512-byte region [ffff8880828bd500, ffff8880828bd700) [ 53.520763] kobject: 'rfkill7' (00000000236606fc): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill7' [ 53.525078] The buggy address belongs to the page: [ 53.525083] page:ffffea00020a2f40 count:1 mapcount:0 mapping:ffff88812c35e940 index:0x0 [ 53.525089] flags: 0x1fffc0000000100(slab) [ 53.525095] raw: 01fffc0000000100 ffffea000211a9c8 ffffea00027a0c88 ffff88812c35e940 [ 53.525099] raw: 0000000000000000 ffff8880828bd000 0000000100000006 0000000000000000 [ 53.525101] page dumped because: kasan: bad access detected [ 53.525103] [ 53.525105] Memory state around the buggy address: [ 53.525109] ffff8880828bd600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.525112] ffff8880828bd680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.525116] >ffff8880828bd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.529148] kobject: 'rfkill7' (00000000236606fc): kobject_cleanup, parent (null) [ 53.535452] ^ [ 53.535456] ffff8880828bd780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.535459] ffff8880828bd800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.535462] ================================================================== [ 53.535464] Disabling lock debugging due to kernel taint [ 53.541671] Kernel panic - not syncing: panic_on_warn set ... [ 53.541671] [ 53.546308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.548544] CPU: 0 PID: 1167 Comm: kworker/u5:0 Tainted: G B 4.19.86-syzkaller #0 [ 53.553626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.557059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.557068] Workqueue: hci0 hci_rx_work [ 53.557071] Call Trace: [ 53.557080] dump_stack+0x123/0x177 [ 53.557086] panic+0x1cd/0x387 [ 53.557090] ? __warn_printk+0xd6/0xd6 [ 53.557096] ? ___preempt_schedule+0x16/0x18 [ 53.557104] kasan_end_report+0x47/0x4f [ 53.569653] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.569977] kasan_report.cold.9+0x76/0x309 [ 53.579848] kobject: 'rfkill7' (00000000236606fc): calling ktype release [ 53.584692] ? bacpy+0xe/0x10 [ 53.584701] check_memory_region+0x13e/0x1b0 [ 53.584706] memcpy+0x23/0x50 [ 53.584711] bacpy+0xe/0x10 [ 53.588894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.593673] hci_event_packet+0x1cf6/0x9e18 [ 53.593681] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 53.593688] ? __save_stack_trace+0x50/0x100 [ 53.598201] kobject: 'rfkill7': free name [ 53.601690] ? ret_from_fork+0x3a/0x50 [ 53.601699] ? add_lock_to_list.isra.26+0x193/0x340 [ 53.601702] ? save_trace+0xe0/0x290 [ 53.601707] ? __lock_acquire+0x26bc/0x4980 [ 53.613218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.615102] ? mark_held_locks+0x130/0x130 [ 53.615106] ? __lock_acquire+0x26bc/0x4980 [ 53.615113] ? debug_object_destroy+0x2b0/0x2b0 [ 53.615122] ? find_held_lock+0x36/0x1d0 [ 53.630736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.632579] ? mark_held_locks+0xc7/0x130 [ 53.640528] kobject: 'loop1' (00000000bee879f9): kobject_uevent_env [ 53.640579] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 53.644003] kobject: 'loop1' (00000000bee879f9): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 53.650498] ? skb_dequeue+0x11d/0x1b0 [ 53.650504] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 53.650509] ? trace_hardirqs_on+0x28/0x190 [ 53.650518] hci_rx_work+0x34f/0x8a0 [ 53.650523] ? hci_rx_work+0x34f/0x8a0 [ 53.659751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.660541] process_one_work+0x835/0x1670 [ 53.660548] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 53.667937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.669507] ? kasan_check_write+0x14/0x20 [ 53.669515] ? do_raw_spin_lock+0xc1/0x230 [ 53.677705] kobject: 'hci2' (0000000002f3868b): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 53.687386] worker_thread+0x85/0xb60 [ 53.687393] ? __kthread_parkme+0x47/0x190 [ 53.687400] kthread+0x327/0x3f0 [ 53.687404] ? process_one_work+0x1670/0x1670 [ 53.687407] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 53.687414] ret_from_fork+0x3a/0x50 [ 53.688985] Kernel Offset: disabled [ 54.179058] Rebooting in 86400 seconds..