syzkaller login: [ 36.537037] kauditd_printk_skb: 9 callbacks suppressed [ 36.537042] audit: type=1400 audit(1574592405.870:35): avc: denied { map } for pid=6924 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 42.908813] audit: type=1400 audit(1574592412.240:36): avc: denied { map } for pid=6935 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 43.599600] IPVS: ftp: loaded support on port[0] = 21 [ 43.962061] can: request_module (can-proto-0) failed. [ 45.040822] can: request_module (can-proto-0) failed. [ 45.049429] can: request_module (can-proto-0) failed. [ 45.218181] audit: type=1400 audit(1574592414.550:37): avc: denied { create } for pid=6935 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 45.241848] audit: type=1400 audit(1574592414.550:38): avc: denied { create } for pid=6935 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 45.265423] audit: type=1400 audit(1574592414.550:39): avc: denied { create } for pid=6935 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. 2019/11/24 10:47:01 parsed 1 programs 2019/11/24 10:47:02 executed programs: 0 [ 52.858850] IPVS: ftp: loaded support on port[0] = 21 [ 52.868932] IPVS: ftp: loaded support on port[0] = 21 [ 52.903340] IPVS: ftp: loaded support on port[0] = 21 [ 52.947641] IPVS: ftp: loaded support on port[0] = 21 [ 52.958279] IPVS: ftp: loaded support on port[0] = 21 [ 52.990180] IPVS: ftp: loaded support on port[0] = 21 [ 53.072644] chnl_net:caif_netlink_parms(): no params data found [ 53.107788] chnl_net:caif_netlink_parms(): no params data found [ 53.155978] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.162996] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.170666] device bridge_slave_0 entered promiscuous mode [ 53.195018] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.201411] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.208512] device bridge_slave_0 entered promiscuous mode [ 53.217000] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.223348] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.230412] device bridge_slave_1 entered promiscuous mode [ 53.237351] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.243690] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.250800] device bridge_slave_1 entered promiscuous mode [ 53.280370] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.303025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.311911] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.329739] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.337122] team0: Port device team_slave_0 added [ 53.355221] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.383452] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.391178] team0: Port device team_slave_1 added [ 53.397498] chnl_net:caif_netlink_parms(): no params data found [ 53.419801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.449132] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.457374] team0: Port device team_slave_0 added [ 53.467686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.493003] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.500456] team0: Port device team_slave_1 added [ 53.505602] chnl_net:caif_netlink_parms(): no params data found [ 53.513456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.586875] device hsr_slave_0 entered promiscuous mode [ 53.624537] device hsr_slave_1 entered promiscuous mode [ 53.676359] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.698052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.705208] chnl_net:caif_netlink_parms(): no params data found [ 53.712773] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.720923] audit: type=1400 audit(1574592423.050:40): avc: denied { write } for pid=7033 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.749448] audit: type=1400 audit(1574592423.080:41): avc: denied { read } for pid=7033 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.787256] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.793693] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.801327] device bridge_slave_0 entered promiscuous mode [ 53.810618] chnl_net:caif_netlink_parms(): no params data found [ 53.831640] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.838321] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.845594] device bridge_slave_1 entered promiscuous mode [ 53.915385] device hsr_slave_0 entered promiscuous mode [ 53.954180] device hsr_slave_1 entered promiscuous mode [ 54.051328] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.058621] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.065639] device bridge_slave_0 entered promiscuous mode [ 54.072044] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.079380] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.097127] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.103596] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.110685] device bridge_slave_0 entered promiscuous mode [ 54.118235] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.126273] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.132653] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.141851] device bridge_slave_1 entered promiscuous mode [ 54.153517] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.166704] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.173181] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.180446] device bridge_slave_1 entered promiscuous mode [ 54.187985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.205481] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.216527] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.223054] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.230342] device bridge_slave_0 entered promiscuous mode [ 54.240242] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.247318] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.254682] device bridge_slave_1 entered promiscuous mode [ 54.272386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.279522] team0: Port device team_slave_0 added [ 54.298823] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.307381] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.317126] team0: Port device team_slave_1 added [ 54.323041] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.332686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.350229] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.362238] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.378997] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.392221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.399426] team0: Port device team_slave_0 added [ 54.404683] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.411808] team0: Port device team_slave_0 added [ 54.421300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.428911] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.436427] team0: Port device team_slave_1 added [ 54.442069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.450269] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.458479] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.465759] team0: Port device team_slave_1 added [ 54.471347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.482995] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.501888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.519912] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.527467] team0: Port device team_slave_0 added [ 54.532629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.554230] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.562634] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.605422] device hsr_slave_0 entered promiscuous mode [ 54.654509] device hsr_slave_1 entered promiscuous mode [ 54.714451] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.721614] team0: Port device team_slave_1 added [ 54.727594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.738069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.749197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.757189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.805477] device hsr_slave_0 entered promiscuous mode [ 54.844283] device hsr_slave_1 entered promiscuous mode [ 54.887149] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.893269] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.900375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.935833] device hsr_slave_0 entered promiscuous mode [ 54.974300] device hsr_slave_1 entered promiscuous mode [ 55.059276] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.067039] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.074573] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.086393] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.097933] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.108130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.136675] device hsr_slave_0 entered promiscuous mode [ 55.174236] device hsr_slave_1 entered promiscuous mode [ 55.214867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.222990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.231696] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.241361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.249415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.257549] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.264053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.271299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.283452] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.299985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.307960] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.319186] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.327715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.336079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.343674] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.350110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.359296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.372181] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.379777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.387995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.395309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.404565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.423286] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.429703] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.435990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.446352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.464657] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.478039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.486515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.495769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.503503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.513145] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.521908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.529452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.540133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.547921] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.554272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.561144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.569205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.578552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.587122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.601734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.611404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.619023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.626845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.635391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.642960] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.649536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.656746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.664366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.677028] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.687894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.697861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.706309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.716406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.730285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.737674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.745784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.755133] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.762836] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.772069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.783379] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.791138] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.797926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.815091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.821189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.828771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.835926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.843724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.851804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.858746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.866853] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.873107] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.882288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.892592] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.901089] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.911708] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.920930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.928654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.936886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.946697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.955079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.962231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.970494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.978288] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.984699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.991802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.999746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.008848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.018718] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.029917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.039204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.046944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.055168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.062709] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.069103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.076423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.083279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.090647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.098313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.109314] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.117363] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.126731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.136720] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.142786] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.150309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.161646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.172352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.179548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.186453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.193120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.201205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.209091] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.215490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.222252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.230562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.238194] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.244570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.251563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.263022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.276294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.290258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.298620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.306789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.315031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.322515] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.328994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.336819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.347101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.364094] audit: type=1400 audit(1574592425.690:42): avc: denied { associate } for pid=7033 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 56.393213] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.402704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.412300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.422642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.433132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.441486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.450120] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.456581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.464184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.475985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.489391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.497222] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.506432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.515075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.524000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.534001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.541919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.550431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.557571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.565238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.572914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.580748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.588974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.597240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.605590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.612548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.623429] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.633602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.642426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.656838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.670304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.677670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.686735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.700897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.708781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.717543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.737881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.751325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.761547] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.774896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.782619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.791018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.799225] ------------[ cut here ]------------ [ 56.801215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.810553] refcount_t: underflow; use-after-free. [ 56.813218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.817708] WARNING: CPU: 0 PID: 7058 at lib/refcount.c:187 refcount_sub_and_test_checked+0x15a/0x180 [ 56.817713] Kernel panic - not syncing: panic_on_warn set ... [ 56.817713] [ 56.817719] CPU: 0 PID: 7058 Comm: syz-executor.3 Not tainted 4.19.19-syzkaller #0 [ 56.817723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.817726] Call Trace: [ 56.817734] dump_stack+0x109/0x157 [ 56.817741] ? refcount_sub_and_test_checked+0x15a/0x180 [ 56.817747] panic+0x1c6/0x36e [ 56.817752] ? __warn_printk+0xd6/0xd6 [ 56.817766] __warn.cold.8+0x1b/0x45 [ 56.817772] ? refcount_sub_and_test_checked+0x15a/0x180 [ 56.817780] report_bug+0x1a4/0x200 [ 56.817788] do_error_trap+0x200/0x350 [ 56.817794] ? math_error+0x340/0x340 [ 56.817800] ? ___preempt_schedule+0x16/0x18 [ 56.817808] ? preempt_count_add+0xbc/0x1b0 [ 56.817816] ? wake_up_klogd+0x71/0xa0 [ 56.827155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.833660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.833669] ? trace_hardirqs_off_caller+0x49/0x180 [ 56.833676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.833685] do_invalid_op+0x1b/0x20 [ 56.843633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.848744] invalid_op+0x14/0x20 [ 56.848753] RIP: 0010:refcount_sub_and_test_checked+0x15a/0x180 [ 56.848758] Code: c1 44 29 e0 85 c9 89 c3 74 88 80 3d 11 26 bf 05 00 74 04 31 c0 eb a9 48 c7 c7 60 3a fe 86 c6 05 fd 25 bf 05 01 e8 b9 c3 4b fe <0f> 0b 31 c0 eb 90 4c 89 ff e8 88 d6 a2 fe e9 2b ff ff ff e8 ae bd [ 56.848761] RSP: 0018:ffff88807600f6d8 EFLAGS: 00010286 [ 56.848766] RAX: 0000000000000000 RBX: 00000000ffffff01 RCX: 0000000000000000 [ 56.848769] RDX: 0000000000000004 RSI: ffff88808c854968 RDI: ffffffff89a5d660 [ 56.848772] RBP: ffff88807600f768 R08: ffff88808c854988 R09: 0000000000000000 [ 56.848775] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008100 [ 56.848777] R13: ffff88807600f740 R14: 1ffff1100ec01edc R15: ffff8880a44c09bc [ 56.848790] ? refcount_sub_and_test_checked+0x15a/0x180 [ 56.848801] ? refcount_inc_checked+0x30/0x30 [ 56.848805] ? refcount_sub_and_test_checked+0xe0/0x180 [ 56.848809] ? refcount_inc_checked+0x30/0x30 [ 56.848820] sock_wfree+0x9b/0x120 [ 56.848828] sctp_wfree+0x345/0x910 [ 56.848837] skb_release_head_state+0xfc/0x200 [ 56.848843] skb_release_all+0xd/0x50 [ 56.848848] consume_skb+0x91/0x270 [ 56.848857] sctp_chunk_put+0x150/0x230 [ 56.848864] sctp_chunk_free+0x3f/0x50 [ 56.848870] __sctp_outq_teardown+0x1a2/0xc30 [ 56.848874] ? __sctp_outq_teardown+0xc30/0xc30 [ 56.848877] ? sock_def_wakeup+0xd7/0x1b0 [ 56.848883] sctp_outq_free+0x9/0x10 [ 56.848892] sctp_association_free+0x1d5/0x711 [ 56.848899] sctp_do_sm+0x1b23/0x4ca0 [ 56.848906] ? __lock_is_held+0xb5/0x140 [ 56.848913] ? sctp_do_8_2_transport_strike.isra.16+0x810/0x810 [ 56.848919] ? __kmalloc_node_track_caller+0x3c/0x70 [ 56.848926] ? rcu_read_lock_sched_held+0x108/0x120 [ 56.848931] ? kmem_cache_alloc_node_trace+0x348/0x730 [ 56.848940] ? __lock_is_held+0xb5/0x140 [ 56.848954] ? memcpy+0x45/0x50 [ 56.848960] ? sctp_addto_chunk+0xfa/0x2a0 [ 56.848973] ? sctp_addto_chunk+0xfa/0x2a0 [ 56.848981] sctp_primitive_ABORT+0x7c/0xc0 [ 56.848989] sctp_close+0x227/0x750 [ 56.849000] ? sctp_init_sock+0x1230/0x1230 [ 56.849007] ? lock_acquire+0x173/0x3d0 [ 56.849013] ? __sock_release+0x7d/0x230 [ 56.849024] inet_release+0xd9/0x1c0 [ 56.849031] __sock_release+0xc2/0x230 [ 56.849039] sock_close+0x10/0x20 [ 56.849046] __fput+0x249/0x7f0 [ 56.849055] ____fput+0x9/0x10 [ 56.849062] task_work_run+0x108/0x180 [ 56.862647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.864604] exit_to_usermode_loop+0x1a9/0x200 [ 56.864612] do_syscall_64+0x407/0x4d0 [ 56.864620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.864627] RIP: 0033:0x4141d1 [ 56.864633] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 56.864636] RSP: 002b:00007ffdde9c3fa0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 56.864642] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004141d1 [ 56.864644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 56.864647] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 56.864650] R10: 00007ffdde9c4080 R11: 0000000000000293 R12: 000000000075bf20 [ 56.864653] R13: 000000000000ddbf R14: 0000000000761400 R15: 000000000075bf2c [ 56.871717] Kernel Offset: disabled [ 57.257561] Rebooting in 86400 seconds..