syzkaller login: [ 32.666828] kauditd_printk_skb: 9 callbacks suppressed [ 32.666833] audit: type=1400 audit(1577637239.683:35): avc: denied { map } for pid=6793 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.040688] audit: type=1400 audit(1577637246.053:36): avc: denied { map } for pid=6804 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.859531] IPVS: ftp: loaded support on port[0] = 21 [ 41.252829] can: request_module (can-proto-0) failed. [ 42.366025] can: request_module (can-proto-0) failed. [ 42.537109] audit: type=1400 audit(1577637249.553:37): avc: denied { create } for pid=6804 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 42.560967] audit: type=1400 audit(1577637249.563:38): avc: denied { create } for pid=6804 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.584660] audit: type=1400 audit(1577637249.563:39): avc: denied { create } for pid=6804 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.1.35' (ECDSA) to the list of known hosts. 2019/12/29 16:34:16 parsed 1 programs 2019/12/29 16:34:17 executed programs: 0 [ 50.536322] IPVS: ftp: loaded support on port[0] = 21 [ 50.537817] IPVS: ftp: loaded support on port[0] = 21 [ 50.558662] IPVS: ftp: loaded support on port[0] = 21 [ 50.559447] IPVS: ftp: loaded support on port[0] = 21 [ 50.573678] IPVS: ftp: loaded support on port[0] = 21 [ 50.608168] IPVS: ftp: loaded support on port[0] = 21 [ 50.798669] chnl_net:caif_netlink_parms(): no params data found [ 50.821242] chnl_net:caif_netlink_parms(): no params data found [ 50.884996] chnl_net:caif_netlink_parms(): no params data found [ 50.916635] chnl_net:caif_netlink_parms(): no params data found [ 50.931658] chnl_net:caif_netlink_parms(): no params data found [ 50.968019] chnl_net:caif_netlink_parms(): no params data found [ 50.976044] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.982389] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.989558] device bridge_slave_0 entered promiscuous mode [ 50.996857] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.003185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.010092] device bridge_slave_1 entered promiscuous mode [ 51.016405] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.022733] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.032032] device bridge_slave_0 entered promiscuous mode [ 51.040929] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.047362] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.054103] device bridge_slave_1 entered promiscuous mode [ 51.095237] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.114516] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.130628] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.137399] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.144102] device bridge_slave_0 entered promiscuous mode [ 51.151577] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.171353] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.179105] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.185425] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.193007] device bridge_slave_0 entered promiscuous mode [ 51.199412] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.207599] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.214355] device bridge_slave_1 entered promiscuous mode [ 51.228037] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.235473] team0: Port device team_slave_0 added [ 51.244372] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.251592] team0: Port device team_slave_1 added [ 51.261214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.268390] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.274731] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.282196] device bridge_slave_1 entered promiscuous mode [ 51.301209] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.307935] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.314696] device bridge_slave_0 entered promiscuous mode [ 51.325915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.333141] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.340269] team0: Port device team_slave_0 added [ 51.348705] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.357029] team0: Port device team_slave_1 added [ 51.362009] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.368400] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.375135] device bridge_slave_0 entered promiscuous mode [ 51.382794] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.390708] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.397152] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.403971] device bridge_slave_1 entered promiscuous mode [ 51.421775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.429628] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.441577] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.448033] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.454749] device bridge_slave_1 entered promiscuous mode [ 51.475955] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.485789] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.493591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.547950] device hsr_slave_0 entered promiscuous mode [ 51.585794] device hsr_slave_1 entered promiscuous mode [ 51.626669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.634401] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.644180] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.652563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.663836] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.670938] team0: Port device team_slave_0 added [ 51.676739] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.684466] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.691588] team0: Port device team_slave_1 added [ 51.696723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.721829] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.729632] team0: Port device team_slave_0 added [ 51.734743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.743378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.797938] device hsr_slave_0 entered promiscuous mode [ 51.836011] device hsr_slave_1 entered promiscuous mode [ 51.876177] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.888313] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.895465] team0: Port device team_slave_1 added [ 51.907078] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.914170] team0: Port device team_slave_0 added [ 51.923992] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.931342] team0: Port device team_slave_0 added [ 51.936797] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.943602] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.950702] team0: Port device team_slave_1 added [ 51.960135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.967044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.978752] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.986085] team0: Port device team_slave_1 added [ 51.991389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.998838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.008752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.067840] device hsr_slave_0 entered promiscuous mode [ 52.115807] device hsr_slave_1 entered promiscuous mode [ 52.146196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.155435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.197819] device hsr_slave_0 entered promiscuous mode [ 52.235906] device hsr_slave_1 entered promiscuous mode [ 52.283098] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.290229] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.347689] device hsr_slave_0 entered promiscuous mode [ 52.385799] device hsr_slave_1 entered promiscuous mode [ 52.425974] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.432849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.467990] device hsr_slave_0 entered promiscuous mode [ 52.505886] device hsr_slave_1 entered promiscuous mode [ 52.546346] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.553443] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.561406] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.568492] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.578898] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.607874] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.620935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.627989] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.645037] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.675744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.693036] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.724681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.736642] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.743921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.752218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.759994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.770112] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.778283] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.784339] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.792162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.808512] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.815225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.824095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.832133] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.842091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.849834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.856775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.864367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.871998] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.878510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.886807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.894415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.901938] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.908282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.914943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.921834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.931316] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.937511] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.945687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.953456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.963173] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.971619] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.977783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.984763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.992757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.000470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.008589] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.014925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.022930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.031232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.039502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.048947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.058440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.065409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.072423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.080120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.088076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.095966] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.102299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.109061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.116702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.124127] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.130478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.137518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.144997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.154277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.162907] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.173109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.180933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.189362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.197266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.204813] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.211187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.217980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.225467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.233193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.241805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.250303] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.258585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.265480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.273165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.281823] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.291964] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.299502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.306609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.314215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.323475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.330499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.337554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.344296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.351314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.359064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.367748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.376340] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.382435] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.391077] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.397372] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.404617] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.412552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.420504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.428625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.439558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.449811] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.456161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.463573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.471569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.478433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.485262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.493354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.500859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.508611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.517985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.526442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.534735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.544439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.552181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.559603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.566690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.574270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.582161] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.588522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.595170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.602921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.610617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.618420] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.624743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.631484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.639203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.647365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.654309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.664304] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.671286] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.680604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.690104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.699759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.707872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.717176] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.726436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.733276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.741226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.751308] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.757676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.764327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.772318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.779909] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.786246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.792864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.800942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.808369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.816168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.823620] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.829970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.836623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.844102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.851748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.861113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.869163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.877645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.886287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.893485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.903498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.910940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.918773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.926390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.935362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.944466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.953288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.961702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.970661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.981056] audit: type=1400 audit(1577637260.993:40): avc: denied { associate } for pid=6897 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 53.989106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.025748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.033258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.040933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.048989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.057743] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.064096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.071081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.078834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.086422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.093783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.101143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.108571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.117367] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.123359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.133907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.142414] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.151287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.159155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.171117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.190511] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.203502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.217161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.225174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.238924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.250018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.261111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.274795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.284091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.292229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.299327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.306275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.313757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.321216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.328903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.338322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.347476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.357541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.366677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.374678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.385335] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.393160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.400622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.408439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.415921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.423172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.430939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.438825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.451587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.462205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.469735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.479231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.486721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.494245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.512011] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.520560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.537466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.548870] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.556637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.561519] ================================================================== [ 54.564545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.570754] BUG: KASAN: slab-out-of-bounds in bacpy+0xe/0x10 [ 54.570759] Read of size 6 at addr ffff8880950674fb by task kworker/u5:2/6925 [ 54.570761] [ 54.570768] CPU: 0 PID: 6925 Comm: kworker/u5:2 Not tainted 4.19.91-syzkaller #0 [ 54.570771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.570776] Workqueue: hci1 hci_rx_work [ 54.570781] Call Trace: [ 54.570789] dump_stack+0x123/0x177 [ 54.570800] print_address_description.cold.8+0x9/0x1ff [ 54.570807] kasan_report.cold.9+0x242/0x309 [ 54.570812] ? bacpy+0xe/0x10 [ 54.570821] check_memory_region+0x13e/0x1b0 [ 54.570827] memcpy+0x23/0x50 [ 54.570833] bacpy+0xe/0x10 [ 54.570838] hci_event_packet+0x1cf6/0x9e18 [ 54.570852] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 54.570859] ? __save_stack_trace+0x60/0x100 [ 54.570869] ? ret_from_fork+0x3a/0x50 [ 54.570880] ? add_lock_to_list.isra.26+0x193/0x340 [ 54.570884] ? save_trace+0xe0/0x290 [ 54.570891] ? __lock_acquire+0x26bc/0x4980 [ 54.570906] ? mark_held_locks+0x130/0x130 [ 54.570911] ? __lock_acquire+0x26bc/0x4980 [ 54.570917] ? debug_object_destroy+0x2b0/0x2b0 [ 54.570930] ? find_held_lock+0x36/0x1d0 [ 54.570939] ? mark_held_locks+0xc7/0x130 [ 54.570945] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 54.570951] ? skb_dequeue+0x11d/0x1b0 [ 54.570957] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 54.570963] ? trace_hardirqs_on+0x28/0x190 [ 54.570975] hci_rx_work+0x34f/0x8a0 [ 54.570979] ? hci_rx_work+0x34f/0x8a0 [ 54.570990] process_one_work+0x835/0x1670 [ 54.571001] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 54.571009] ? kasan_check_write+0x14/0x20 [ 54.571013] ? do_raw_spin_lock+0xc1/0x230 [ 54.571022] worker_thread+0x85/0xb60 [ 54.571028] ? __kthread_parkme+0x47/0x190 [ 54.571040] kthread+0x327/0x3f0 [ 54.571045] ? process_one_work+0x1670/0x1670 [ 54.571050] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 54.571056] ret_from_fork+0x3a/0x50 [ 54.571070] [ 54.571073] Allocated by task 6927: [ 54.571079] save_stack+0x43/0xd0 [ 54.571083] kasan_kmalloc+0xc7/0xe0 [ 54.571087] __kmalloc_node_track_caller+0x50/0x70 [ 54.571092] __kmalloc_reserve.isra.39+0x2c/0xc0 [ 54.571096] __alloc_skb+0xd7/0x580 [ 54.571101] vhci_write+0xa8/0x3f0 [ 54.571106] __vfs_write+0x44b/0x890 [ 54.571110] vfs_write+0x150/0x4d0 [ 54.571114] ksys_write+0x103/0x260 [ 54.571118] __x64_sys_write+0x6e/0xb0 [ 54.571124] do_syscall_64+0xd6/0x4e0 [ 54.571129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.571131] [ 54.571133] Freed by task 0: [ 54.571136] (stack is not available) [ 54.571138] [ 54.571142] The buggy address belongs to the object at ffff888095067300 [ 54.571142] which belongs to the cache kmalloc-512 of size 512 [ 54.571146] The buggy address is located 507 bytes inside of [ 54.571146] 512-byte region [ffff888095067300, ffff888095067500) [ 54.571149] The buggy address belongs to the page: [ 54.571153] page:ffffea00025419c0 count:1 mapcount:0 mapping:ffff88812c35e940 index:0x0 [ 54.571158] flags: 0x1fffc0000000100(slab) [ 54.571165] raw: 01fffc0000000100 ffffea00026614c8 ffffea0002539c48 ffff88812c35e940 [ 54.571170] raw: 0000000000000000 ffff888095067080 0000000100000006 0000000000000000 [ 54.571173] page dumped because: kasan: bad access detected [ 54.571175] [ 54.571177] Memory state around the buggy address: [ 54.571181] ffff888095067400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.571185] ffff888095067480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.571189] >ffff888095067500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 54.571191] ^ [ 54.571195] ffff888095067580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.571198] ffff888095067600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 54.571201] ================================================================== [ 54.571203] Disabling lock debugging due to kernel taint [ 54.575951] Kernel panic - not syncing: panic_on_warn set ... [ 54.575951] [ 54.582942] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.586717] CPU: 0 PID: 6925 Comm: kworker/u5:2 Tainted: G B 4.19.91-syzkaller #0 [ 54.586720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.586727] Workqueue: hci1 hci_rx_work [ 54.586729] Call Trace: [ 54.586736] dump_stack+0x123/0x177 [ 54.586743] panic+0x1cd/0x387 [ 54.586747] ? __warn_printk+0xd6/0xd6 [ 54.586754] ? ___preempt_schedule+0x16/0x18 [ 54.586762] kasan_end_report+0x47/0x4f [ 54.586765] kasan_report.cold.9+0x76/0x309 [ 54.586769] ? bacpy+0xe/0x10 [ 54.586775] check_memory_region+0x13e/0x1b0 [ 54.586779] memcpy+0x23/0x50 [ 54.586784] bacpy+0xe/0x10 [ 54.586787] hci_event_packet+0x1cf6/0x9e18 [ 54.586794] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 54.586798] ? __save_stack_trace+0x60/0x100 [ 54.586804] ? ret_from_fork+0x3a/0x50 [ 54.586811] ? add_lock_to_list.isra.26+0x193/0x340 [ 54.586814] ? save_trace+0xe0/0x290 [ 54.586821] ? __lock_acquire+0x26bc/0x4980 [ 54.594175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.595709] ? mark_held_locks+0x130/0x130 [ 54.595714] ? __lock_acquire+0x26bc/0x4980 [ 54.595719] ? debug_object_destroy+0x2b0/0x2b0 [ 54.595726] ? find_held_lock+0x36/0x1d0 [ 54.595732] ? mark_held_locks+0xc7/0x130 [ 54.595739] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 54.595745] ? skb_dequeue+0x11d/0x1b0 [ 54.595750] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 54.595754] ? trace_hardirqs_on+0x28/0x190 [ 54.595762] hci_rx_work+0x34f/0x8a0 [ 54.595766] ? hci_rx_work+0x34f/0x8a0 [ 54.595773] process_one_work+0x835/0x1670 [ 54.595780] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 54.595786] ? kasan_check_write+0x14/0x20 [ 54.595790] ? do_raw_spin_lock+0xc1/0x230 [ 54.595794] worker_thread+0x85/0xb60 [ 54.595812] ? __kthread_parkme+0x47/0x190 [ 54.595818] kthread+0x327/0x3f0 [ 54.595821] ? process_one_work+0x1670/0x1670 [ 54.595824] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 54.595829] ret_from_fork+0x3a/0x50 [ 54.597296] Kernel Offset: disabled [ 55.156508] Rebooting in 86400 seconds..