syzkaller login: [ 33.821031] kauditd_printk_skb: 9 callbacks suppressed [ 33.821037] audit: type=1400 audit(1577023506.305:35): avc: denied { map } for pid=6885 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.281738] audit: type=1400 audit(1577023512.765:36): avc: denied { map } for pid=6896 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.877865] IPVS: ftp: loaded support on port[0] = 21 [ 41.303752] can: request_module (can-proto-0) failed. [ 42.421081] can: request_module (can-proto-0) failed. [ 42.429683] can: request_module (can-proto-0) failed. [ 42.576546] audit: type=1400 audit(1577023515.065:37): avc: denied { create } for pid=6896 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 42.600185] audit: type=1400 audit(1577023515.065:38): avc: denied { create } for pid=6896 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.623925] audit: type=1400 audit(1577023515.065:39): avc: denied { create } for pid=6896 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. 2019/12/22 14:05:21 parsed 1 programs 2019/12/22 14:05:22 executed programs: 0 [ 49.792228] IPVS: ftp: loaded support on port[0] = 21 [ 49.798765] IPVS: ftp: loaded support on port[0] = 21 [ 49.820864] IPVS: ftp: loaded support on port[0] = 21 [ 49.833374] IPVS: ftp: loaded support on port[0] = 21 [ 49.836775] IPVS: ftp: loaded support on port[0] = 21 [ 49.840597] IPVS: ftp: loaded support on port[0] = 21 [ 50.025657] chnl_net:caif_netlink_parms(): no params data found [ 50.116190] chnl_net:caif_netlink_parms(): no params data found [ 50.157719] chnl_net:caif_netlink_parms(): no params data found [ 50.184044] chnl_net:caif_netlink_parms(): no params data found [ 50.192802] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.199587] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.206556] device bridge_slave_0 entered promiscuous mode [ 50.214982] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.221319] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.228495] device bridge_slave_1 entered promiscuous mode [ 50.242630] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.251478] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.258770] device bridge_slave_0 entered promiscuous mode [ 50.269740] chnl_net:caif_netlink_parms(): no params data found [ 50.302524] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.309166] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.316104] device bridge_slave_1 entered promiscuous mode [ 50.366004] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.373671] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.380175] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.387831] device bridge_slave_0 entered promiscuous mode [ 50.397659] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.403995] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.411116] device bridge_slave_1 entered promiscuous mode [ 50.418433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.426306] chnl_net:caif_netlink_parms(): no params data found [ 50.438047] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.448979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.464096] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.471326] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.478314] device bridge_slave_0 entered promiscuous mode [ 50.515662] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.522915] team0: Port device team_slave_0 added [ 50.528192] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.534821] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.541566] device bridge_slave_1 entered promiscuous mode [ 50.559431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.567424] team0: Port device team_slave_0 added [ 50.573290] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.581707] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.588839] team0: Port device team_slave_1 added [ 50.596717] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.603045] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.609945] device bridge_slave_0 entered promiscuous mode [ 50.619948] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.626403] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.633157] device bridge_slave_1 entered promiscuous mode [ 50.639449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.647440] team0: Port device team_slave_1 added [ 50.653181] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.661188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.674221] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.680588] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.688261] device bridge_slave_0 entered promiscuous mode [ 50.698252] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.704689] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.711488] device bridge_slave_1 entered promiscuous mode [ 50.717794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.729789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.736979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.744836] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.758408] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.787856] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.802939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.855706] device hsr_slave_0 entered promiscuous mode [ 50.894547] device hsr_slave_1 entered promiscuous mode [ 50.934814] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.942013] team0: Port device team_slave_0 added [ 50.986814] device hsr_slave_0 entered promiscuous mode [ 51.064415] device hsr_slave_1 entered promiscuous mode [ 51.145184] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.152961] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.160787] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.173331] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.180561] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.188258] team0: Port device team_slave_1 added [ 51.194731] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.202687] team0: Port device team_slave_0 added [ 51.216782] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.230727] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.238177] team0: Port device team_slave_0 added [ 51.244248] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.250883] audit: type=1400 audit(1577023523.725:40): avc: denied { write } for pid=6996 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 51.274953] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.282280] audit: type=1400 audit(1577023523.735:41): avc: denied { read } for pid=6996 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 51.282493] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.314880] team0: Port device team_slave_1 added [ 51.320061] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.328460] team0: Port device team_slave_1 added [ 51.333626] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.340751] team0: Port device team_slave_0 added [ 51.346851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.360515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.367848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.375575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.383315] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.390731] team0: Port device team_slave_1 added [ 51.400053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.416818] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.466630] device hsr_slave_0 entered promiscuous mode [ 51.524420] device hsr_slave_1 entered promiscuous mode [ 51.595574] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.602106] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.666610] device hsr_slave_0 entered promiscuous mode [ 51.714541] device hsr_slave_1 entered promiscuous mode [ 51.754600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.761850] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.816617] device hsr_slave_0 entered promiscuous mode [ 51.865244] device hsr_slave_1 entered promiscuous mode [ 51.905059] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.912024] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.924455] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.930914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.938297] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.986882] device hsr_slave_0 entered promiscuous mode [ 52.024663] device hsr_slave_1 entered promiscuous mode [ 52.089010] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.101124] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.116241] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.128263] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.142053] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.174589] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.205576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.219947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.228718] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.243282] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.255565] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.267991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.276143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.295970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.303516] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.310216] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.319851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.327264] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.333326] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.340594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.347634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.359043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.368975] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.380189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.390747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.398604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.412413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.418669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.429229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.437085] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.443485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.450497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.458499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.466133] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.472586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.480503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.487685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.496541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.504142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.515346] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.522025] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.534576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.542606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.550634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.558412] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.564798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.571818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.579853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.587509] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.593846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.600641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.607815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.614862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.621664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.629867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.647398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.656472] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.662562] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.670664] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.680025] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.686218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.697755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.708228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.716833] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.723023] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.730613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.740619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.748550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.757004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.765174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.772562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.780455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.788027] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.794395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.801149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.808186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.818195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.827692] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.835983] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.843758] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.850423] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.860209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.868579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.877072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.883822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.890867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.898603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.905883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.913495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.921221] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.927583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.936259] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.942332] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.952206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.960483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.970512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.978472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.986939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.994362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.002261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.009729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.017515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.025554] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.031884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.038857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.047084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.054926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.062410] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.068801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.076512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.084087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.092506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.099575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.106677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.115959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.123693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.132027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.141314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.152050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.159965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.168011] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.174416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.181401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.189098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.196945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.204485] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.210811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.217605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.225472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.232933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.239295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.247913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.256708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.265590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.274111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.282548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.289838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.297490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.305465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.312927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.320810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.328357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.335759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.343394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.352377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.362451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.373325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.381354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.389802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.398826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.411067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.418655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.426153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.433846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.441804] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.448194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.455208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.462772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.470377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.477889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.485535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.493130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.502301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.512293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.520929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.530463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.539496] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.547626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.554609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.562142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.571264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.579054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.586729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.594105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.602324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.616478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.623911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.634084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.644677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.652190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.660199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.668445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.676083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.685242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.693047] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.699882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.710842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.718119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.725938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.733335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.741121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.748657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.755746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.764101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.775125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.785404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.797546] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.805648] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.812905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.822986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.830730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.838497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.846165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.853782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.861305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.868272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.875705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.887340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.895758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.902965] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.909682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.917458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.925090] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.935570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.948389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.955885] audit: type=1400 audit(1577023526.445:42): avc: denied { associate } for pid=6996 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 53.956411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.986059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.993636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.005993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.013548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.023937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.032374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.041946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.051191] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.061499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.069875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.086565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.093874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.103167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.110033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.117552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.126808] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.132801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.145644] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.151654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.162374] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.170672] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.176932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.193274] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.203766] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.216926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.227077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.241474] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.249039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.258066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.266284] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.299711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.306273] ------------[ cut here ]------------ [ 54.318044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.323102] refcount_t: underflow; use-after-free. [ 54.336947] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.340476] WARNING: CPU: 1 PID: 7015 at lib/refcount.c:187 refcount_sub_and_test_checked+0x15a/0x180 [ 54.347399] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.352494] Kernel panic - not syncing: panic_on_warn set ... [ 54.352494] [ 54.352502] CPU: 1 PID: 7015 Comm: syz-executor.0 Not tainted 4.19.91-syzkaller #0 [ 54.352505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.352508] Call Trace: [ 54.352519] dump_stack+0x123/0x177 [ 54.352528] ? refcount_sub_and_test_checked+0x15a/0x180 [ 54.363426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.366293] panic+0x1cd/0x375 [ 54.366299] ? __warn_printk+0xd6/0xd6 [ 54.366308] ? __schedule+0x794/0x1c10 [ 54.366318] __warn.cold.8+0x1b/0x3e [ 54.366327] ? refcount_sub_and_test_checked+0x15a/0x180 [ 54.374136] kobject: 'vlan0' (0000000060f3e9ff): kobject_add_internal: parent: 'mesh', set: '' [ 54.383384] report_bug+0x1a4/0x200 [ 54.383395] do_error_trap+0x200/0x350 [ 54.383401] ? math_error+0x340/0x340 [ 54.383408] ? irq_work_queue+0x34/0x50 [ 54.383415] ? wake_up_klogd+0x71/0xa0 [ 54.383423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.383430] ? trace_hardirqs_off_caller+0x49/0x180 [ 54.383438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.383448] do_invalid_op+0x1b/0x20 [ 54.467924] invalid_op+0x14/0x20 [ 54.471357] RIP: 0010:refcount_sub_and_test_checked+0x15a/0x180 [ 54.477407] Code: c1 44 29 e0 85 c9 89 c3 74 88 80 3d c7 08 be 05 00 74 04 31 c0 eb a9 48 c7 c7 80 f8 fe 86 c6 05 b3 08 be 05 01 e8 09 67 49 fe <0f> 0b 31 c0 eb 90 4c 89 ff e8 88 2e a1 fe e9 2b ff ff ff e8 ce 60 [ 54.496311] RSP: 0018:ffff88807a9d76d8 EFLAGS: 00010286 [ 54.501659] RAX: 0000000000000000 RBX: 00000000ffffff01 RCX: 0000000000000000 [ 54.508924] RDX: 0000000000000004 RSI: ffffffff86ff1420 RDI: ffffffff89a7e6e0 [ 54.516243] RBP: ffff88807a9d7768 R08: ffffed1015d65079 R09: ffffed1015d65078 [ 54.523507] R10: ffffed1015d65078 R11: ffff8880aeb283c7 R12: 0000000000008100 [ 54.530759] R13: ffff88807a9d7740 R14: 1ffff1100f53aedc R15: ffff888096bc49bc [ 54.538054] ? refcount_sub_and_test_checked+0x15a/0x180 [ 54.543491] ? refcount_inc_checked+0x30/0x30 [ 54.547992] ? refcount_sub_and_test_checked+0xe0/0x180 [ 54.553335] ? refcount_inc_checked+0x30/0x30 [ 54.557813] sock_wfree+0x9b/0x130 [ 54.561346] sctp_wfree+0x345/0x910 [ 54.564952] skb_release_head_state+0xfc/0x200 [ 54.569527] skb_release_all+0xd/0x50 [ 54.573394] consume_skb+0x91/0x270 [ 54.577021] sctp_chunk_put+0x150/0x230 [ 54.580975] sctp_chunk_free+0x3f/0x50 [ 54.584845] __sctp_outq_teardown+0x1a2/0xc30 [ 54.589403] ? __sctp_outq_teardown+0xc30/0xc30 [ 54.594060] ? sock_def_wakeup+0xd7/0x1b0 [ 54.598195] sctp_outq_free+0x9/0x10 [ 54.601894] sctp_association_free+0x1d5/0x711 [ 54.606469] sctp_do_sm+0x153a/0x4b00 [ 54.610262] ? __lock_is_held+0xb5/0x140 [ 54.614318] ? sctp_do_8_2_transport_strike.isra.19+0x800/0x800 [ 54.620472] ? __kmalloc_node_track_caller+0x3c/0x70 [ 54.625559] ? rcu_read_lock_sched_held+0x108/0x120 [ 54.630559] ? kmem_cache_alloc_node_trace+0x348/0x730 [ 54.635819] ? __lock_is_held+0xb5/0x140 [ 54.639863] ? memcpy+0x45/0x50 [ 54.643125] ? sctp_addto_chunk+0xfa/0x2a0 [ 54.647358] ? sctp_addto_chunk+0xfa/0x2a0 [ 54.651573] sctp_primitive_ABORT+0x7c/0xc0 [ 54.655877] sctp_close+0x227/0x750 [ 54.660020] ? sctp_init_sock+0x1230/0x1230 [ 54.664323] ? lock_acquire+0x173/0x3d0 [ 54.668296] ? __sock_release+0x7d/0x290 [ 54.672339] inet_release+0xd9/0x1c0 [ 54.676031] __sock_release+0xc2/0x290 [ 54.679902] sock_close+0x10/0x20 [ 54.683333] __fput+0x249/0x7f0 [ 54.686592] ____fput+0x9/0x10 [ 54.689763] task_work_run+0x108/0x180 [ 54.693633] exit_to_usermode_loop+0x1a9/0x200 [ 54.698207] do_syscall_64+0x413/0x4e0 [ 54.702098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.707275] RIP: 0033:0x4141d1 [ 54.710452] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 54.729429] RSP: 002b:00007ffd99978530 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 54.740414] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004141d1 [ 54.747677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 54.754924] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 54.762186] R10: 00007ffd99978610 R11: 0000000000000293 R12: 000000000075bf20 [ 54.769447] R13: 000000000000d3fe R14: 0000000000761400 R15: 000000000075bf2c [ 54.778216] Kernel Offset: disabled [ 54.781888] Rebooting in 86400 seconds..