syzkaller login: [ 35.056657] kauditd_printk_skb: 9 callbacks suppressed [ 35.056663] audit: type=1400 audit(1578248083.390:35): avc: denied { map } for pid=6903 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.539599] audit: type=1400 audit(1578248089.870:36): avc: denied { map } for pid=6914 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 42.243296] IPVS: ftp: loaded support on port[0] = 21 [ 42.636124] can: request_module (can-proto-0) failed. [ 43.582934] can: request_module (can-proto-0) failed. [ 43.758179] audit: type=1400 audit(1578248092.090:37): avc: denied { create } for pid=6914 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.781778] audit: type=1400 audit(1578248092.090:38): avc: denied { create } for pid=6914 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.805783] audit: type=1400 audit(1578248092.090:39): avc: denied { create } for pid=6914 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. 2020/01/05 18:14:58 parsed 1 programs 2020/01/05 18:14:59 executed programs: 0 [ 51.071277] IPVS: ftp: loaded support on port[0] = 21 [ 51.072891] IPVS: ftp: loaded support on port[0] = 21 [ 51.082072] IPVS: ftp: loaded support on port[0] = 21 [ 51.087156] IPVS: ftp: loaded support on port[0] = 21 [ 51.091315] IPVS: ftp: loaded support on port[0] = 21 [ 51.135228] IPVS: ftp: loaded support on port[0] = 21 [ 51.311954] chnl_net:caif_netlink_parms(): no params data found [ 51.344058] chnl_net:caif_netlink_parms(): no params data found [ 51.368626] chnl_net:caif_netlink_parms(): no params data found [ 51.408554] chnl_net:caif_netlink_parms(): no params data found [ 51.510057] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.517211] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.524159] device bridge_slave_0 entered promiscuous mode [ 51.531890] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.538971] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.545959] device bridge_slave_1 entered promiscuous mode [ 51.563341] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.569975] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.576954] device bridge_slave_0 entered promiscuous mode [ 51.600745] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.608693] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.615050] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.622050] device bridge_slave_0 entered promiscuous mode [ 51.628483] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.634860] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.643079] device bridge_slave_1 entered promiscuous mode [ 51.657634] chnl_net:caif_netlink_parms(): no params data found [ 51.669313] chnl_net:caif_netlink_parms(): no params data found [ 51.678986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.694517] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.703645] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.710901] device bridge_slave_1 entered promiscuous mode [ 51.717743] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.724099] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.731313] device bridge_slave_0 entered promiscuous mode [ 51.740618] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.747088] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.754079] device bridge_slave_1 entered promiscuous mode [ 51.762020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.771702] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.783312] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.790863] team0: Port device team_slave_0 added [ 51.800173] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.808286] team0: Port device team_slave_1 added [ 51.816909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.827864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.851281] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.858834] team0: Port device team_slave_0 added [ 51.888263] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.896509] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.903792] team0: Port device team_slave_1 added [ 51.922033] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.934309] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.942511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.998679] device hsr_slave_0 entered promiscuous mode [ 52.046415] device hsr_slave_1 entered promiscuous mode [ 52.098970] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.105377] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.112414] device bridge_slave_0 entered promiscuous mode [ 52.120079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.138889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.149605] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.156646] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.163096] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.170595] device bridge_slave_1 entered promiscuous mode [ 52.177597] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.183951] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.192110] device bridge_slave_0 entered promiscuous mode [ 52.202071] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.208563] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.215402] device bridge_slave_1 entered promiscuous mode [ 52.229601] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.237059] team0: Port device team_slave_0 added [ 52.242234] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.254558] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.262008] team0: Port device team_slave_0 added [ 52.317869] device hsr_slave_0 entered promiscuous mode [ 52.366488] device hsr_slave_1 entered promiscuous mode [ 52.416538] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.423769] team0: Port device team_slave_1 added [ 52.434277] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.442462] team0: Port device team_slave_1 added [ 52.448441] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.456956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.468217] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.475158] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.484192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.494952] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.503474] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.511502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.529378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.540233] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.558739] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.565938] team0: Port device team_slave_0 added [ 52.575021] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.582349] team0: Port device team_slave_0 added [ 52.592989] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.601555] team0: Port device team_slave_1 added [ 52.607673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.614938] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.622255] team0: Port device team_slave_1 added [ 52.627686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.635925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.678740] device hsr_slave_0 entered promiscuous mode [ 52.717695] device hsr_slave_1 entered promiscuous mode [ 52.756754] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.763656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.818611] device hsr_slave_0 entered promiscuous mode [ 52.886407] device hsr_slave_1 entered promiscuous mode [ 52.930137] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.938270] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.945138] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.957800] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.027761] device hsr_slave_0 entered promiscuous mode [ 53.066355] device hsr_slave_1 entered promiscuous mode [ 53.106523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.113617] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.120852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.177756] device hsr_slave_0 entered promiscuous mode [ 53.216348] device hsr_slave_1 entered promiscuous mode [ 53.266839] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.273940] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.290252] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.307596] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.316840] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.338051] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.420438] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 53.426733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.435119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.443899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.452606] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.468048] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.476865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.486708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.495165] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.505776] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.513970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.524923] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.534208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.541615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.549364] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.556528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.562666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.572044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.582062] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.588369] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.597211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.605925] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.613268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.620706] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.627886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.635601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.643852] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.650526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.658735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.665563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.672778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.680069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.687287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.694103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.702490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.713151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.722058] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.731681] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.739064] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.745717] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.752229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.759955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.767991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.775524] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.781933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.791231] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.801224] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.810098] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.819044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.827936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.836403] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.842514] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.850633] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.859666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.867562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.875223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.883161] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.889680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.897778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.904807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.912285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.920864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.933379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.941373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.951155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.959265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.967070] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.973822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.981018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.988950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.996631] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.002970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.009832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.017560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.025043] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.031416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.038186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.045389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.053321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.061803] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.068692] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.076609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.085553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.094408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.103665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.114418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.123020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.131123] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.138379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.145142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.153451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.161060] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.167539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.174779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.182781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.190758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.198807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.206990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.214685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.221796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.230086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.238019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.248798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.256926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.265388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.276778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.284244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.293105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.301813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.310602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.320465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.328398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.335905] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.342292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.349887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.358268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.365889] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.372819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.380068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.389212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.396981] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.403474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.411733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.421906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.430674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.440393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.449466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.457108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.464761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.472587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.480672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.489098] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.495475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.502419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.511521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.521734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.531666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.539748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.551785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.559916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.568344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.575818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.586167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.594349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.606246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.614938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.623428] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.630284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.640763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.648641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.655464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.663571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.671986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.679689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.687717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.695395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.704627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.717026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.727627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.738570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.745840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.756561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.764356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.772411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.780788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.788650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.796650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.804441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.812457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.819467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.831183] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.838360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.849581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.858989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.869196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.883226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.891036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.899786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.907476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.915140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.922867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.930563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.938241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.945868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.954037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.961155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.970470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.978291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.988629] audit: type=1400 audit(1578248103.320:40): avc: denied { associate } for pid=7016 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 55.017906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.032609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.041373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.054433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.063594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.076503] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.082733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.091032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.099481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.101348] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 55.107169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.124896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.132951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.140618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.144707] FAULT_INJECTION: forcing a failure. [ 55.144707] name failslab, interval 1, probability 0, space 0, times 1 [ 55.148171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.162951] CPU: 0 PID: 7032 Comm: syz-executor.1 Not tainted 4.19.93-syzkaller #0 [ 55.166819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.173907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.181505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.190345] Call Trace: [ 55.190359] dump_stack+0x123/0x177 [ 55.190370] should_fail.cold.4+0x5/0x13 [ 55.190378] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 55.190384] ? lock_downgrade+0x860/0x860 [ 55.190397] __should_failslab+0xba/0xf0 [ 55.190403] should_failslab+0x9/0x14 [ 55.190407] __kmalloc+0x2dd/0x770 [ 55.190412] ? lock_downgrade+0x860/0x860 [ 55.190421] ? tls_push_record+0xf3/0x1720 [ 55.190428] tls_push_record+0xf3/0x1720 [ 55.198256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.201073] ? _copy_from_iter+0x188/0xa00 [ 55.205041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.208732] ? kasan_check_write+0x14/0x20 [ 55.208752] tls_sw_sendmsg+0xb42/0x1020 [ 55.208768] ? tls_sw_push_pending_record+0x10/0x10 [ 55.208784] inet_sendmsg+0x108/0x440 [ 55.208791] ? security_socket_sendmsg+0x4a/0x90 [ 55.208796] ? ipip_gro_receive+0xf0/0xf0 [ 55.208802] sock_sendmsg+0xb5/0xf0 [ 55.208807] __sys_sendto+0x1f2/0x2e0 [ 55.208813] ? __ia32_sys_getpeername+0xb0/0xb0 [ 55.208820] ? __f_unlock_pos+0xd/0x10 [ 55.208827] ? lock_downgrade+0x860/0x860 [ 55.208836] ? kasan_check_write+0x14/0x20 [ 55.208842] ? __mutex_unlock_slowpath+0xe8/0x6a0 [ 55.208853] ? __sb_end_write+0xa4/0xd0 [ 55.214457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.218069] ? kasan_check_write+0x14/0x20 [ 55.218075] ? fput+0x18/0x120 [ 55.218080] ? ksys_write+0x1ce/0x260 [ 55.218083] ? do_sys_open+0x16e/0x350 [ 55.218091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.218096] ? do_syscall_64+0x21/0x4e0 [ 55.218106] __x64_sys_sendto+0xdc/0x1a0 [ 55.218113] do_syscall_64+0xd0/0x4e0 [ 55.218122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.218128] RIP: 0033:0x459f49 [ 55.218134] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.218137] RSP: 002b:00007fbaae7c3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 55.218142] RAX: ffffffffffffffda RBX: 00007fbaae7c3c90 RCX: 0000000000459f49 [ 55.218146] RDX: ffffffffffffffc1 RSI: 0000000020000080 RDI: 0000000000000003 [ 55.224375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.226000] RBP: 000000000075bf20 R08: 0000000000000000 R09: fffffffffffffe5b [ 55.226004] R10: 0000000000000040 R11: 0000000000000246 R12: 00007fbaae7c46d4 [ 55.226006] R13: 00000000004c83ce R14: 00000000004de710 R15: 0000000000000006 [ 55.340591] ================================================================== [ 55.443989] BUG: KASAN: use-after-free in tls_push_record+0x127a/0x1720 [ 55.450769] Write of size 1 at addr ffff88808d148000 by task syz-executor.1/7031 [ 55.458278] [ 55.459963] CPU: 0 PID: 7031 Comm: syz-executor.1 Not tainted 4.19.93-syzkaller #0 [ 55.467679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.477022] Call Trace: [ 55.479599] dump_stack+0x123/0x177 [ 55.483295] print_address_description.cold.8+0x9/0x1ff [ 55.488736] kasan_report.cold.9+0x242/0x309 [ 55.493132] ? tls_push_record+0x127a/0x1720 [ 55.497525] __asan_report_store1_noabort+0x17/0x20 [ 55.502580] tls_push_record+0x127a/0x1720 [ 55.506895] ? lockdep_hardirqs_on+0x421/0x5c0 [ 55.511476] ? __local_bh_enable_ip+0x160/0x260 [ 55.516148] tls_sw_push_pending_record+0xe/0x10 [ 55.520892] tls_sk_proto_close+0x5f6/0x8e0 [ 55.525192] ? mark_held_locks+0x130/0x130 [ 55.529424] ? tcp_check_oom+0x4b0/0x4b0 [ 55.533465] ? tls_write_space+0x2b0/0x2b0 [ 55.537695] inet_release+0xd9/0x1c0 [ 55.541397] inet6_release+0x46/0x60 [ 55.545086] __sock_release+0xc2/0x290 [ 55.548952] sock_close+0x10/0x20 [ 55.552384] __fput+0x249/0x7f0 [ 55.555651] ____fput+0x9/0x10 [ 55.558839] task_work_run+0x108/0x180 [ 55.562736] exit_to_usermode_loop+0x1a9/0x200 [ 55.567305] do_syscall_64+0x413/0x4e0 [ 55.571181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.576362] RIP: 0033:0x413ae1 [ 55.579542] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 55.598435] RSP: 002b:00007fff183be280 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 55.606132] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413ae1 [ 55.613412] RDX: 0000001b32020000 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.620668] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 55.627932] R10: 00007fff183be360 R11: 0000000000000293 R12: 000000000075c9a0 [ 55.635182] R13: 000000000075c9a0 R14: 00000000007612f0 R15: 000000000075bf2c [ 55.642445] [ 55.644050] The buggy address belongs to the page: [ 55.648956] page:ffffea0002345200 count:0 mapcount:-128 mapping:0000000000000000 index:0x0 [ 55.657420] flags: 0x1fffc0000000000() [ 55.661285] raw: 01fffc0000000000 ffffea0002369e08 ffff88812fffc878 0000000000000000 [ 55.669263] raw: 0000000000000000 0000000000000003 00000000ffffff7f 0000000000000000 [ 55.677126] page dumped because: kasan: bad access detected [ 55.682874] [ 55.684519] Memory state around the buggy address: [ 55.689464] ffff88808d147f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.696817] ffff88808d147f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.704301] >ffff88808d148000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.712141] ^ [ 55.715508] ffff88808d148080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.722847] ffff88808d148100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.730193] ================================================================== [ 55.737529] Disabling lock debugging due to kernel taint [ 55.745063] Kernel panic - not syncing: panic_on_warn set ... [ 55.745063] [ 55.745977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.752464] CPU: 1 PID: 7031 Comm: syz-executor.1 Tainted: G B 4.19.93-syzkaller #0 [ 55.752467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.752469] Call Trace: [ 55.752480] dump_stack+0x123/0x177 [ 55.752487] panic+0x1cd/0x375 [ 55.752492] ? __warn_printk+0xd6/0xd6 [ 55.752498] ? ___preempt_schedule+0x16/0x18 [ 55.752506] kasan_end_report+0x47/0x4f [ 55.752510] kasan_report.cold.9+0x76/0x309 [ 55.752517] ? tls_push_record+0x127a/0x1720 [ 55.752522] __asan_report_store1_noabort+0x17/0x20 [ 55.752526] tls_push_record+0x127a/0x1720 [ 55.752531] ? lockdep_hardirqs_on+0x421/0x5c0 [ 55.752536] ? __local_bh_enable_ip+0x160/0x260 [ 55.752544] tls_sw_push_pending_record+0xe/0x10 [ 55.752548] tls_sk_proto_close+0x5f6/0x8e0 [ 55.752551] ? mark_held_locks+0x130/0x130 [ 55.752559] ? tcp_check_oom+0x4b0/0x4b0 [ 55.760705] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.768464] ? tls_write_space+0x2b0/0x2b0 [ 55.768474] inet_release+0xd9/0x1c0 [ 55.768481] inet6_release+0x46/0x60 [ 55.768485] __sock_release+0xc2/0x290 [ 55.768489] sock_close+0x10/0x20 [ 55.768494] __fput+0x249/0x7f0 [ 55.768499] ____fput+0x9/0x10 [ 55.768504] task_work_run+0x108/0x180 [ 55.768513] exit_to_usermode_loop+0x1a9/0x200 [ 55.778542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.780442] do_syscall_64+0x413/0x4e0 [ 55.785686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.787238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.787243] RIP: 0033:0x413ae1 [ 55.787248] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 55.787250] RSP: 002b:00007fff183be280 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 55.787254] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413ae1 [ 55.787256] RDX: 0000001b32020000 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.787258] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 55.787260] R10: 00007fff183be360 R11: 0000000000000293 R12: 000000000075c9a0 [ 55.787262] R13: 000000000075c9a0 R14: 00000000007612f0 R15: 000000000075bf2c [ 55.792710] Kernel Offset: disabled [ 55.981715] Rebooting in 86400 seconds..