[ 64.280557][ T27] audit: type=1400 audit(1581058672.462:42): avc: denied { map } for pid=8553 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 65.089881][ T27] audit: type=1400 audit(1581058673.262:43): avc: denied { integrity } for pid=8553 comm="syz-fuzzer" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 65.224458][ T8571] IPVS: ftp: loaded support on port[0] = 21 [ 65.529945][ T209] tipc: TX() has been purged, node left! [ 65.751669][ T8562] can: request_module (can-proto-0) failed. [ 68.552931][ T8562] can: request_module (can-proto-0) failed. [ 68.564652][ T8562] can: request_module (can-proto-0) failed. [ 68.782422][ T27] audit: type=1400 audit(1581058676.962:44): avc: denied { create } for pid=8553 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 68.806827][ T27] audit: type=1400 audit(1581058676.962:45): avc: denied { create } for pid=8553 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 68.831142][ T27] audit: type=1400 audit(1581058676.962:46): avc: denied { create } for pid=8553 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.56' (ECDSA) to the list of known hosts. 2020/02/07 06:58:03 parsed 1 programs 2020/02/07 06:58:04 executed programs: 0 [ 76.314555][ T8659] IPVS: ftp: loaded support on port[0] = 21 [ 76.322901][ T8655] IPVS: ftp: loaded support on port[0] = 21 [ 76.339073][ T8660] IPVS: ftp: loaded support on port[0] = 21 [ 76.339514][ T8652] IPVS: ftp: loaded support on port[0] = 21 [ 76.355771][ T8650] IPVS: ftp: loaded support on port[0] = 21 [ 76.363978][ T8656] IPVS: ftp: loaded support on port[0] = 21 [ 76.534857][ T8659] chnl_net:caif_netlink_parms(): no params data found [ 76.592604][ T8660] chnl_net:caif_netlink_parms(): no params data found [ 76.612139][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.620722][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.628589][ T8659] device bridge_slave_0 entered promiscuous mode [ 76.666072][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.673662][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.681905][ T8659] device bridge_slave_1 entered promiscuous mode [ 76.722900][ T8656] chnl_net:caif_netlink_parms(): no params data found [ 76.740494][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.752766][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.778434][ T8650] chnl_net:caif_netlink_parms(): no params data found [ 76.827605][ T8652] chnl_net:caif_netlink_parms(): no params data found [ 76.850504][ T8659] team0: Port device team_slave_0 added [ 76.868732][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.876097][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.884031][ T8660] device bridge_slave_0 entered promiscuous mode [ 76.891795][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 76.904069][ T8659] team0: Port device team_slave_1 added [ 76.928051][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.935420][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.943356][ T8660] device bridge_slave_1 entered promiscuous mode [ 76.968261][ T8660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.987874][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.995152][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.005783][ T8652] device bridge_slave_0 entered promiscuous mode [ 77.029362][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.036633][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.044529][ T8656] device bridge_slave_0 entered promiscuous mode [ 77.053979][ T8660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.073730][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.080908][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.088535][ T8652] device bridge_slave_1 entered promiscuous mode [ 77.095872][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.103195][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.113888][ T8650] device bridge_slave_0 entered promiscuous mode [ 77.126055][ T8650] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.133378][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.141123][ T8650] device bridge_slave_1 entered promiscuous mode [ 77.148246][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.156098][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.163995][ T8656] device bridge_slave_1 entered promiscuous mode [ 77.222778][ T8659] device hsr_slave_0 entered promiscuous mode [ 77.281092][ T8659] device hsr_slave_1 entered promiscuous mode [ 77.326689][ T8660] team0: Port device team_slave_0 added [ 77.344866][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.370405][ T8660] team0: Port device team_slave_1 added [ 77.381832][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.392730][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.412759][ T8650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.423191][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.431202][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.438789][ T8655] device bridge_slave_0 entered promiscuous mode [ 77.452105][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.470067][ T8650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.484454][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.493338][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.501264][ T8655] device bridge_slave_1 entered promiscuous mode [ 77.517476][ T8652] team0: Port device team_slave_0 added [ 77.525837][ T8656] team0: Port device team_slave_0 added [ 77.553248][ T27] audit: type=1400 audit(1581058685.732:47): avc: denied { write } for pid=8659 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 77.579003][ T8652] team0: Port device team_slave_1 added [ 77.584786][ T27] audit: type=1400 audit(1581058685.732:48): avc: denied { read } for pid=8659 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 77.641775][ T8652] device hsr_slave_0 entered promiscuous mode [ 77.680221][ T8652] device hsr_slave_1 entered promiscuous mode [ 77.730048][ T8652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.737782][ T8652] Cannot create hsr debugfs directory [ 77.756337][ T8656] team0: Port device team_slave_1 added [ 77.771522][ T8659] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.852997][ T8660] device hsr_slave_0 entered promiscuous mode [ 77.910298][ T8660] device hsr_slave_1 entered promiscuous mode [ 77.950019][ T8660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.957602][ T8660] Cannot create hsr debugfs directory [ 77.965129][ T8650] team0: Port device team_slave_0 added [ 77.972637][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.982380][ T8659] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.032625][ T8659] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.073926][ T8650] team0: Port device team_slave_1 added [ 78.095975][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.110722][ T8659] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.211643][ T8656] device hsr_slave_0 entered promiscuous mode [ 78.270102][ T8656] device hsr_slave_1 entered promiscuous mode [ 78.340044][ T8656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.347623][ T8656] Cannot create hsr debugfs directory [ 78.366043][ T8655] team0: Port device team_slave_0 added [ 78.375091][ T8655] team0: Port device team_slave_1 added [ 78.432637][ T8650] device hsr_slave_0 entered promiscuous mode [ 78.490104][ T8650] device hsr_slave_1 entered promiscuous mode [ 78.540217][ T8650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.547791][ T8650] Cannot create hsr debugfs directory [ 78.611593][ T8655] device hsr_slave_0 entered promiscuous mode [ 78.680345][ T8655] device hsr_slave_1 entered promiscuous mode [ 78.720025][ T8655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.727620][ T8655] Cannot create hsr debugfs directory [ 78.753191][ T8652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.825758][ T8652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.903824][ T8652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.964756][ T8652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.038565][ T8650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.076017][ T8650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.122079][ T8650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.176463][ T8650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.263554][ T8660] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.349370][ T8660] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.391782][ T8660] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.453085][ T8660] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.489914][ T8656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.523238][ T8656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.574141][ T8656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.638076][ T8656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.695536][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.706984][ T8655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.773927][ T8655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.832875][ T8655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.893473][ T8655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.988287][ T8659] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.001569][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.011344][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.035132][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.063421][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.076792][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.085394][ T2767] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.092616][ T2767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.101140][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.126201][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.144427][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.153039][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.162198][ T2766] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.169324][ T2766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.177121][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.185458][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.193183][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.220139][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.228625][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.242783][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.266042][ T8650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.275304][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.283920][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.293209][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.302713][ T2767] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.309808][ T2767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.317394][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.326644][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.335583][ T2767] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.342696][ T2767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.365619][ T8659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.376343][ T8659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.392808][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.401968][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.410856][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.419148][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.427720][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.436812][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.445313][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.453520][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.463227][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.473859][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.488305][ T8650] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.513812][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.523184][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.531351][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.542613][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.551563][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.563933][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.572591][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.581085][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.588247][ T2698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.597928][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.606457][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.632386][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.642557][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.652887][ T2767] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.660018][ T2767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.667444][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.676331][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.685010][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.692706][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.708519][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.727996][ T8652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.740256][ T8652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.754966][ T8660] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.785181][ T8650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.796287][ T8650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.808094][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.818045][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.826615][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.835734][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.844076][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.852654][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.861164][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.869567][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.878066][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.887133][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.895975][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.906617][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.914999][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.923316][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.940853][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.948481][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.957410][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.965266][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.974089][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.984847][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.993552][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.002208][ T2767] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.009371][ T2767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.035607][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.048550][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.076130][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.084710][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.094060][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.105612][ T2766] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.112738][ T2766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.120890][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.129447][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.137283][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.144812][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.152715][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.177742][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.192322][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.201209][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.218262][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.227389][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.236445][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.245291][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.253867][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.262760][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.271344][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.278836][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.287019][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.294932][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.303176][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.314387][ T8656] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.324422][ T8650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.344124][ T8660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.356189][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.374630][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.387187][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.396398][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.407191][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.416286][ T2684] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.423396][ T2684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.437859][ T27] audit: type=1400 audit(1581058689.612:49): avc: denied { associate } for pid=8650 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 81.440271][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.475999][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.485484][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.499235][ T2684] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.506411][ T2684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.514711][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.523562][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.532373][ T2684] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.539438][ T2684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.547087][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.557237][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.597528][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.624145][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.638034][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state 2020/02/07 06:58:09 executed programs: 6 [ 81.645182][ T2698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.658775][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.667958][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.680950][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.689473][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.707688][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.718502][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.744532][ T8660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.762579][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.771209][ T1599] ================================================================== [ 81.779530][ T1599] BUG: KASAN: slab-out-of-bounds in bacpy+0xe/0x10 [ 81.786119][ T1599] Read of size 6 at addr ffff888090532e08 by task kworker/u5:0/1599 [ 81.794192][ T1599] [ 81.796512][ T1599] CPU: 0 PID: 1599 Comm: kworker/u5:0 Not tainted 5.5.0-syzkaller #0 [ 81.804610][ T1599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.814663][ T1599] Workqueue: hci0 hci_rx_work [ 81.819383][ T1599] Call Trace: [ 81.822702][ T1599] dump_stack+0x12d/0x187 [ 81.827048][ T1599] print_address_description.constprop.8.cold.10+0x9/0x31d [ 81.834241][ T1599] ? bacpy+0xe/0x10 [ 81.838133][ T1599] __kasan_report.cold.11+0x1b/0x32 [ 81.843428][ T1599] ? bacpy+0xe/0x10 [ 81.847231][ T1599] ? bacpy+0xe/0x10 [ 81.851035][ T1599] kasan_report+0x12/0x20 [ 81.855359][ T1599] check_memory_region+0x153/0x1d0 [ 81.860462][ T1599] memcpy+0x23/0x50 [ 81.864257][ T1599] bacpy+0xe/0x10 [ 81.867923][ T1599] hci_event_packet+0x40ba/0x9868 [ 81.872969][ T1599] ? hci_cmd_complete_evt+0xb690/0xb690 [ 81.878517][ T1599] ? unwind_next_frame+0x3e/0x50 [ 81.883584][ T1599] ? profile_setup.cold.14+0xa0/0xa0 [ 81.888867][ T1599] ? arch_stack_walk+0x84/0xf0 [ 81.893631][ T1599] ? ret_from_fork+0x24/0x30 [ 81.898219][ T1599] ? stack_trace_save+0x82/0xb0 [ 81.903062][ T1599] ? stack_trace_consume_entry+0x170/0x170 [ 81.908854][ T1599] ? profile_setup.cold.14+0xa0/0xa0 [ 81.914250][ T1599] ? __kasan_check_write+0x14/0x20 [ 81.919362][ T1599] ? save_trace+0x45/0x940 [ 81.923833][ T1599] ? __lock_acquire+0x2cd5/0x4ef0 [ 81.928862][ T1599] ? __kasan_check_read+0x11/0x20 [ 81.933977][ T1599] ? mark_lock+0xc5/0x11d0 [ 81.938391][ T1599] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 81.944179][ T1599] ? skb_dequeue+0x11d/0x1b0 [ 81.948825][ T1599] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 81.954125][ T1599] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 81.959930][ T1599] ? trace_hardirqs_on+0x28/0x1a0 [ 81.964998][ T1599] hci_rx_work+0x18e/0x940 [ 81.969406][ T1599] ? hci_rx_work+0x18e/0x940 [ 81.973989][ T1599] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 81.980062][ T1599] ? trace_hardirqs_on+0x28/0x1a0 [ 81.985088][ T1599] process_one_work+0x88b/0x1680 [ 81.990041][ T1599] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 81.995478][ T1599] worker_thread+0x85/0xb60 [ 82.001354][ T1599] ? __kthread_parkme+0x47/0x1a0 [ 82.006284][ T1599] kthread+0x331/0x3f0 [ 82.010358][ T1599] ? process_one_work+0x1680/0x1680 [ 82.015545][ T1599] ? kthread_mod_delayed_work+0x190/0x190 [ 82.021360][ T1599] ret_from_fork+0x24/0x30 [ 82.025767][ T1599] [ 82.028076][ T1599] Allocated by task 8686: [ 82.032389][ T1599] save_stack+0x21/0x90 [ 82.036532][ T1599] __kasan_kmalloc.constprop.17+0xc7/0xd0 [ 82.042248][ T1599] kasan_kmalloc+0x9/0x10 [ 82.046633][ T1599] __kmalloc_node_track_caller+0x4d/0x70 [ 82.052259][ T1599] __kmalloc_reserve.isra.46+0x2c/0xc0 [ 82.057829][ T1599] __alloc_skb+0xd7/0x570 [ 82.062195][ T1599] vhci_write+0xa8/0x3e0 [ 82.066426][ T1599] new_sync_write+0x3fd/0x7e0 [ 82.071097][ T1599] __vfs_write+0x94/0x110 [ 82.075471][ T1599] vfs_write+0x18a/0x520 [ 82.079700][ T1599] ksys_write+0x105/0x220 [ 82.084124][ T1599] __x64_sys_write+0x6e/0xb0 [ 82.088730][ T1599] do_syscall_64+0xca/0x5f0 [ 82.093230][ T1599] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.099111][ T1599] [ 82.101423][ T1599] Freed by task 0: [ 82.105117][ T1599] (stack is not available) [ 82.109645][ T1599] [ 82.111956][ T1599] The buggy address belongs to the object at ffff888090532c00 [ 82.111956][ T1599] which belongs to the cache kmalloc-512 of size 512 [ 82.126132][ T1599] The buggy address is located 8 bytes to the right of [ 82.126132][ T1599] 512-byte region [ffff888090532c00, ffff888090532e00) [ 82.139781][ T1599] The buggy address belongs to the page: [ 82.145406][ T1599] page:ffffea0002414c80 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0x0 [ 82.155132][ T1599] flags: 0xfffe0000000200(slab) [ 82.159983][ T1599] raw: 00fffe0000000200 ffffea0002564a88 ffffea0002959d08 ffff8880aa400a80 [ 82.168597][ T1599] raw: 0000000000000000 ffff888090532000 0000000100000004 0000000000000000 [ 82.177164][ T1599] page dumped because: kasan: bad access detected [ 82.183642][ T1599] [ 82.185951][ T1599] Memory state around the buggy address: [ 82.191575][ T1599] ffff888090532d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.199669][ T1599] ffff888090532d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.207711][ T1599] >ffff888090532e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.215750][ T1599] ^ [ 82.220084][ T1599] ffff888090532e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.228189][ T1599] ffff888090532f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.236234][ T1599] ================================================================== [ 82.244376][ T1599] Disabling lock debugging due to kernel taint [ 82.250558][ T1599] Kernel panic - not syncing: panic_on_warn set ... [ 82.257145][ T1599] CPU: 1 PID: 1599 Comm: kworker/u5:0 Tainted: G B 5.5.0-syzkaller #0 [ 82.259143][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.266579][ T1599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.266591][ T1599] Workqueue: hci0 hci_rx_work [ 82.266595][ T1599] Call Trace: [ 82.266607][ T1599] dump_stack+0x12d/0x187 [ 82.266612][ T1599] ? test_and_clear_bit+0x10/0x30 [ 82.266619][ T1599] panic+0x22a/0x4e3 [ 82.266623][ T1599] ? add_taint.cold.7+0x11/0x11 [ 82.266631][ T1599] ? ___preempt_schedule+0x16/0x18 [ 82.266638][ T1599] ? bacpy+0xe/0x10 [ 82.266645][ T1599] end_report+0x47/0x4f [ 82.266650][ T1599] __kasan_report.cold.11+0xe/0x32 [ 82.266653][ T1599] ? bacpy+0xe/0x10 [ 82.266659][ T1599] ? bacpy+0xe/0x10 [ 82.266664][ T1599] kasan_report+0x12/0x20 [ 82.266668][ T1599] check_memory_region+0x153/0x1d0 [ 82.266673][ T1599] memcpy+0x23/0x50 [ 82.266678][ T1599] bacpy+0xe/0x10 [ 82.266683][ T1599] hci_event_packet+0x40ba/0x9868 [ 82.266695][ T1599] ? hci_cmd_complete_evt+0xb690/0xb690 [ 82.266705][ T1599] ? unwind_next_frame+0x3e/0x50 [ 82.266710][ T1599] ? profile_setup.cold.14+0xa0/0xa0 [ 82.266714][ T1599] ? arch_stack_walk+0x84/0xf0 [ 82.266722][ T1599] ? ret_from_fork+0x24/0x30 [ 82.266730][ T1599] ? stack_trace_save+0x82/0xb0 [ 82.275899][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.284611][ T1599] ? stack_trace_consume_entry+0x170/0x170 [ 82.284615][ T1599] ? profile_setup.cold.14+0xa0/0xa0 [ 82.284622][ T1599] ? __kasan_check_write+0x14/0x20 [ 82.284628][ T1599] ? save_trace+0x45/0x940 [ 82.284637][ T1599] ? __lock_acquire+0x2cd5/0x4ef0 [ 82.284648][ T1599] ? __kasan_check_read+0x11/0x20 [ 82.290380][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.292606][ T1599] ? mark_lock+0xc5/0x11d0 [ 82.297227][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.301923][ T1599] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 82.301931][ T1599] ? skb_dequeue+0x11d/0x1b0 [ 82.301937][ T1599] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 82.301944][ T1599] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 82.301958][ T1599] ? trace_hardirqs_on+0x28/0x1a0 [ 82.306529][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.310712][ T1599] hci_rx_work+0x18e/0x940 [ 82.310718][ T1599] ? hci_rx_work+0x18e/0x940 [ 82.310724][ T1599] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 82.310729][ T1599] ? trace_hardirqs_on+0x28/0x1a0 [ 82.310741][ T1599] process_one_work+0x88b/0x1680 [ 82.325118][ T8655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.329046][ T1599] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 82.334662][ T8655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.336627][ T1599] worker_thread+0x85/0xb60 [ 82.354029][ T8655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.358450][ T1599] ? __kthread_parkme+0x47/0x1a0 [ 82.552478][ T1599] kthread+0x331/0x3f0 [ 82.556529][ T1599] ? process_one_work+0x1680/0x1680 [ 82.561698][ T1599] ? kthread_mod_delayed_work+0x190/0x190 [ 82.567412][ T1599] ret_from_fork+0x24/0x30 [ 82.573474][ T1599] Kernel Offset: disabled [ 82.577854][ T1599] Rebooting in 86400 seconds..