syzkaller login: [ 36.382124] kauditd_printk_skb: 9 callbacks suppressed [ 36.382131] audit: type=1400 audit(1579617073.653:35): avc: denied { map } for pid=7096 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 42.923695] audit: type=1400 audit(1579617080.193:36): avc: denied { map } for pid=7107 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 43.566165] IPVS: ftp: loaded support on port[0] = 21 [ 43.963306] can: request_module (can-proto-0) failed. [ 45.003400] can: request_module (can-proto-0) failed. [ 45.012606] can: request_module (can-proto-0) failed. [ 45.178835] audit: type=1400 audit(1579617082.453:37): avc: denied { create } for pid=7107 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 45.203079] audit: type=1400 audit(1579617082.453:38): avc: denied { create } for pid=7107 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 45.226728] audit: type=1400 audit(1579617082.453:39): avc: denied { create } for pid=7107 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts. 2020/01/21 14:31:29 parsed 1 programs 2020/01/21 14:31:29 executed programs: 0 [ 52.621615] IPVS: ftp: loaded support on port[0] = 21 [ 52.626624] IPVS: ftp: loaded support on port[0] = 21 [ 52.645005] IPVS: ftp: loaded support on port[0] = 21 [ 52.658610] IPVS: ftp: loaded support on port[0] = 21 [ 52.682870] IPVS: ftp: loaded support on port[0] = 21 [ 52.687700] IPVS: ftp: loaded support on port[0] = 21 [ 52.848446] chnl_net:caif_netlink_parms(): no params data found [ 52.888364] chnl_net:caif_netlink_parms(): no params data found [ 52.915407] chnl_net:caif_netlink_parms(): no params data found [ 52.980571] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.987591] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.995396] device bridge_slave_0 entered promiscuous mode [ 53.009465] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.016260] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.023345] device bridge_slave_0 entered promiscuous mode [ 53.036660] chnl_net:caif_netlink_parms(): no params data found [ 53.044944] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.051336] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.059112] device bridge_slave_1 entered promiscuous mode [ 53.069262] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.077229] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.084653] device bridge_slave_1 entered promiscuous mode [ 53.111575] chnl_net:caif_netlink_parms(): no params data found [ 53.127703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.137662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.157254] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.193116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.215059] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.221530] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.229104] device bridge_slave_0 entered promiscuous mode [ 53.237482] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.243974] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.250916] device bridge_slave_1 entered promiscuous mode [ 53.277489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.285532] team0: Port device team_slave_0 added [ 53.293120] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.300732] team0: Port device team_slave_1 added [ 53.306155] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.313457] team0: Port device team_slave_0 added [ 53.322590] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.330195] team0: Port device team_slave_1 added [ 53.339748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.350383] chnl_net:caif_netlink_parms(): no params data found [ 53.359247] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.367066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.375326] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.388155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.395362] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.401730] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.408881] device bridge_slave_0 entered promiscuous mode [ 53.418268] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.424809] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.431870] device bridge_slave_1 entered promiscuous mode [ 53.446502] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.456701] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.463087] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.470264] device bridge_slave_0 entered promiscuous mode [ 53.526748] device hsr_slave_0 entered promiscuous mode [ 53.584456] device hsr_slave_1 entered promiscuous mode [ 53.658021] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.669480] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.676198] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.683489] device bridge_slave_1 entered promiscuous mode [ 53.701594] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.746462] device hsr_slave_0 entered promiscuous mode [ 53.774139] device hsr_slave_1 entered promiscuous mode [ 53.844510] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.851569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.856032] audit: type=1400 audit(1579617091.133:40): avc: denied { write } for pid=7205 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.863692] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.890186] team0: Port device team_slave_0 added [ 53.897231] audit: type=1400 audit(1579617091.163:41): avc: denied { read } for pid=7205 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.897751] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.933115] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.941530] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.958385] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.966008] team0: Port device team_slave_1 added [ 53.971877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.001790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.021932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.029510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.036911] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.044990] team0: Port device team_slave_0 added [ 54.050132] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.056737] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.063648] device bridge_slave_0 entered promiscuous mode [ 54.072116] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.078839] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.086446] team0: Port device team_slave_0 added [ 54.096602] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.105690] team0: Port device team_slave_1 added [ 54.111202] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.118820] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.127316] device bridge_slave_1 entered promiscuous mode [ 54.138127] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.147172] team0: Port device team_slave_1 added [ 54.156860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.173095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.182829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.215798] device hsr_slave_0 entered promiscuous mode [ 54.254216] device hsr_slave_1 entered promiscuous mode [ 54.294376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.301746] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.309464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.317086] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.330105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.415426] device hsr_slave_0 entered promiscuous mode [ 54.454220] device hsr_slave_1 entered promiscuous mode [ 54.535777] device hsr_slave_0 entered promiscuous mode [ 54.574158] device hsr_slave_1 entered promiscuous mode [ 54.614872] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.622174] team0: Port device team_slave_0 added [ 54.631212] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.647369] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.654408] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.661420] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.668956] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.676586] team0: Port device team_slave_1 added [ 54.683055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.704835] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.721418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.765553] device hsr_slave_0 entered promiscuous mode [ 54.804140] device hsr_slave_1 entered promiscuous mode [ 54.845688] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.857794] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.870667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.903019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.912415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.925668] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.936115] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.942638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.949535] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.955981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.968782] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.977418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.995765] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.009630] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.019593] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.028613] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.037976] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.046792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.056210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.063311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.070323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.095029] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.101242] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.109507] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.122115] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.128456] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.137763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.149390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.160381] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.168719] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.178291] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.184634] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.191748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.200535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.208417] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.214946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.221982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.230082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.237546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.246488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.254281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.262151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.270399] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.276941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.288441] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.296812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.309361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.317446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.325058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.332076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.340881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.348949] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.355512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.363866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.373581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.384822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.392387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.399682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.408168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.416575] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.423089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.430407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.439454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.447573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.456470] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.462560] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.472346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.482240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.491433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.501808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.510457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.518758] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.525201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.532017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.540437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.548289] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.554683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.561666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.569552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.577481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.585190] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.593663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.602559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.613587] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.622635] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.629258] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.636473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.646319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.653601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.661605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.668765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.676204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.684188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.691902] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.698406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.706895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.714995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.725578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.734318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.742859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.753931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.761815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.770315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.778649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.786647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.794764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.802487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.809885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.819189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.831301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.839854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.850234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.859706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.868013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.875709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.883615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.891627] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.898303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.905686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.913709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.921855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.930559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.939576] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.948876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.958387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.965989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.972938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.981250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.988969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.997447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.005568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.013309] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.019807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.028949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.039896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.048343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.058051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.068016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.078270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.087448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.095352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.103110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.110826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.118542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.126667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.134905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.143696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.152190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.159983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.170030] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.176277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.185869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.194950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.205102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.215828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.223894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.231222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.239386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.247266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.255287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.262871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.271124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.279319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.287011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.295187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.302749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.309997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.318391] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.327501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.338950] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.345301] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.355774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.365706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.372876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.380187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.388795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.396582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.404870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.412596] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.419623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.426997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.435164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.444681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.453721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.462603] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.469972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.481069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.490051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.500051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.510977] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.517622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.525545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.533609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.541646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.549491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.557703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.565547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.573185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.581165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.588982] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.595389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.602254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.609996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.619723] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.626560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.642528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.651728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.662121] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.671382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.679397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.687806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.698996] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.709360] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.717378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.728368] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.737193] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.744997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.752887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.761534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.768758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.776197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.783076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.791413] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.799498] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.806127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.814756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.825004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.835578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.847823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.855137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.861908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.868976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.877153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.885183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.892950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.901181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.909039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.922244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.932648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.941971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.956707] audit: type=1400 audit(1579617094.233:42): avc: denied { associate } for pid=7209 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 56.957159] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.987282] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 57.004894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.020744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.033613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.044637] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.055579] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.063495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.071435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.079459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.086457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.093348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.100520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.117049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.149888] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 57.180810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.229299] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.278152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.290524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.341036] ------------[ cut here ]------------ [ 57.353290] refcount_t: underflow; use-after-free. [ 57.373221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.400721] WARNING: CPU: 1 PID: 7227 at lib/refcount.c:187 refcount_sub_and_test_checked+0x15a/0x180 [ 57.410166] Kernel panic - not syncing: panic_on_warn set ... [ 57.410166] [ 57.418633] CPU: 1 PID: 7227 Comm: syz-executor.2 Not tainted 4.19.97-syzkaller #0 [ 57.426351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.435716] Call Trace: [ 57.438315] dump_stack+0x123/0x177 [ 57.441959] ? refcount_sub_and_test_checked+0x15a/0x180 [ 57.447433] panic+0x1cd/0x375 [ 57.450830] ? __warn_printk+0xd6/0xd6 [ 57.454737] __warn.cold.8+0x1b/0x3e [ 57.458468] ? refcount_sub_and_test_checked+0x15a/0x180 [ 57.464032] report_bug+0x1a4/0x200 [ 57.467677] do_error_trap+0x200/0x350 [ 57.471742] ? math_error+0x340/0x340 [ 57.475814] ? irq_work_queue+0xd/0x50 [ 57.479708] ? wake_up_klogd+0x71/0xa0 [ 57.483619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.488473] ? trace_hardirqs_off_caller+0x49/0x180 [ 57.493513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.498996] do_invalid_op+0x1b/0x20 [ 57.502881] invalid_op+0x14/0x20 [ 57.506351] RIP: 0010:refcount_sub_and_test_checked+0x15a/0x180 [ 57.512514] Code: c1 44 29 e0 85 c9 89 c3 74 88 80 3d e8 f1 bd 05 00 74 04 31 c0 eb a9 48 c7 c7 00 fb fe 86 c6 05 d4 f1 bd 05 01 e8 69 4d 49 fe <0f> 0b 31 c0 eb 90 4c 89 ff e8 78 19 a1 fe e9 2b ff ff ff e8 2e 47 [ 57.531428] RSP: 0018:ffff88809f67f6d0 EFLAGS: 00010282 [ 57.536805] RAX: 0000000000000000 RBX: 00000000ffffff01 RCX: 0000000000000000 [ 57.544088] RDX: 0000000000000004 RSI: 0000000000000008 RDI: ffffffff89a7e6e0 [ 57.551374] RBP: ffff88809f67f760 R08: ffffed1015d63ee3 R09: ffffed1015d63ee2 [ 57.558662] R10: ffffed1015d63ee2 R11: ffff8880aeb1f717 R12: 0000000000008100 [ 57.567069] R13: ffff88809f67f738 R14: 1ffff11013ecfedb R15: ffff8880931389fc [ 57.574377] ? refcount_inc_checked+0x30/0x30 [ 57.578889] ? refcount_sub_and_test_checked+0xe0/0x180 [ 57.584275] ? refcount_inc_checked+0x30/0x30 [ 57.588821] sock_wfree+0x9b/0x130 [ 57.592383] sctp_wfree+0x345/0x910 [ 57.596030] skb_release_head_state+0xfc/0x200 2020/01/21 14:31:34 executed programs: 8 [ 57.600629] skb_release_all+0xd/0x50 [ 57.604444] consume_skb+0x91/0x270 [ 57.608097] sctp_chunk_put+0x150/0x230 [ 57.612097] sctp_chunk_free+0x3f/0x50 [ 57.615996] __sctp_outq_teardown+0x1a2/0xc30 [ 57.620499] ? __sctp_outq_teardown+0xc30/0xc30 [ 57.625319] ? sock_def_wakeup+0xd7/0x1b0 [ 57.629653] sctp_outq_free+0x9/0x10 [ 57.633399] sctp_association_free+0x1d5/0x711 [ 57.638175] sctp_do_sm+0x1605/0x5020 [ 57.642032] ? sctp_do_8_2_transport_strike.isra.19+0x800/0x800 [ 57.648136] ? __kmalloc_node_track_caller+0x3c/0x70 [ 57.653289] ? rcu_read_lock_sched_held+0x108/0x120 [ 57.658430] ? kmem_cache_alloc_node_trace+0x348/0x730 [ 57.663741] ? __lock_is_held+0xb5/0x140 [ 57.667923] ? memcpy+0x45/0x50 [ 57.671214] ? sctp_addto_chunk+0xfa/0x2a0 [ 57.675724] ? sctp_addto_chunk+0xfa/0x2a0 [ 57.679976] sctp_primitive_ABORT+0x7c/0xc0 [ 57.684313] sctp_close+0x227/0x750 [ 57.687956] ? sctp_init_sock+0x1230/0x1230 [ 57.692297] ? lock_acquire+0x173/0x3d0 [ 57.696291] ? __sock_release+0x7d/0x290 [ 57.700386] inet_release+0xd9/0x1c0 [ 57.704111] __sock_release+0xc2/0x290 [ 57.708006] sock_close+0x10/0x20 [ 57.711472] __fput+0x249/0x7f0 [ 57.714891] ____fput+0x9/0x10 [ 57.718110] task_work_run+0x108/0x180 [ 57.722013] exit_to_usermode_loop+0x1a9/0x200 [ 57.726612] do_syscall_64+0x413/0x4e0 [ 57.730527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.735727] RIP: 0033:0x4141d1 [ 57.738922] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 57.758040] RSP: 002b:00007ffd88ada6b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 57.765751] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004141d1 [ 57.773039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 57.780320] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 57.787931] R10: 00007ffd88ada790 R11: 0000000000000293 R12: 000000000075bf20 [ 57.795310] R13: 000000000000dfe8 R14: 0000000000761400 R15: 000000000075bf2c [ 57.804690] Kernel Offset: disabled [ 57.808534] Rebooting in 86400 seconds..