syzkaller login: [ 32.317765] kauditd_printk_skb: 9 callbacks suppressed [ 32.317770] audit: type=1400 audit(1575457527.624:35): avc: denied { map } for pid=6898 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.589615] audit: type=1400 audit(1575457533.894:36): avc: denied { map } for pid=6909 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.493480] IPVS: ftp: loaded support on port[0] = 21 [ 40.874026] can: request_module (can-proto-0) failed. [ 41.962466] can: request_module (can-proto-0) failed. [ 42.108259] audit: type=1400 audit(1575457537.414:37): avc: denied { create } for pid=6909 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 42.131867] audit: type=1400 audit(1575457537.414:38): avc: denied { create } for pid=6909 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.155439] audit: type=1400 audit(1575457537.414:39): avc: denied { create } for pid=6909 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.1.53' (ECDSA) to the list of known hosts. 2019/12/04 11:05:44 parsed 1 programs 2019/12/04 11:05:45 executed programs: 0 [ 50.141893] IPVS: ftp: loaded support on port[0] = 21 [ 50.149912] IPVS: ftp: loaded support on port[0] = 21 [ 50.211564] IPVS: ftp: loaded support on port[0] = 21 [ 50.232532] IPVS: ftp: loaded support on port[0] = 21 [ 50.233091] IPVS: ftp: loaded support on port[0] = 21 [ 50.260845] IPVS: ftp: loaded support on port[0] = 21 [ 50.366959] chnl_net:caif_netlink_parms(): no params data found [ 50.445641] chnl_net:caif_netlink_parms(): no params data found [ 50.454979] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.461898] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.468910] device bridge_slave_0 entered promiscuous mode [ 50.482189] chnl_net:caif_netlink_parms(): no params data found [ 50.497825] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.504186] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.511765] device bridge_slave_1 entered promiscuous mode [ 50.558835] chnl_net:caif_netlink_parms(): no params data found [ 50.577058] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.583462] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.595819] device bridge_slave_0 entered promiscuous mode [ 50.603485] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.612520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.625866] chnl_net:caif_netlink_parms(): no params data found [ 50.640418] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.647720] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.654471] device bridge_slave_1 entered promiscuous mode [ 50.673691] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.689605] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.710139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.717773] team0: Port device team_slave_0 added [ 50.725311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.732417] team0: Port device team_slave_1 added [ 50.761813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.769927] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.776573] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.783355] device bridge_slave_0 entered promiscuous mode [ 50.791069] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.798557] team0: Port device team_slave_0 added [ 50.815554] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.822750] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.829256] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.836025] device bridge_slave_1 entered promiscuous mode [ 50.844320] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.851633] team0: Port device team_slave_1 added [ 50.857188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.864143] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.870691] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.878153] device bridge_slave_0 entered promiscuous mode [ 50.886079] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.892515] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.899374] device bridge_slave_1 entered promiscuous mode [ 50.920185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.987774] device hsr_slave_0 entered promiscuous mode [ 51.026508] device hsr_slave_1 entered promiscuous mode [ 51.066445] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.072815] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.080372] device bridge_slave_0 entered promiscuous mode [ 51.127627] device hsr_slave_0 entered promiscuous mode [ 51.166440] device hsr_slave_1 entered promiscuous mode [ 51.226609] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.233535] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.244156] chnl_net:caif_netlink_parms(): no params data found [ 51.257136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.264554] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.272228] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.278773] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.285698] device bridge_slave_1 entered promiscuous mode [ 51.293726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.305664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.317125] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.336844] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.345197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.362449] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.391386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.399014] team0: Port device team_slave_0 added [ 51.411033] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.418747] team0: Port device team_slave_0 added [ 51.424544] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.432065] team0: Port device team_slave_1 added [ 51.437277] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.444400] team0: Port device team_slave_0 added [ 51.450830] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.459937] team0: Port device team_slave_1 added [ 51.468544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.477465] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.484041] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.491684] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.498460] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.505509] team0: Port device team_slave_1 added [ 51.510849] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.528725] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.578532] device hsr_slave_0 entered promiscuous mode [ 51.626434] device hsr_slave_1 entered promiscuous mode [ 51.706753] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.713936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.721122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.728471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.735434] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.741942] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.749220] device bridge_slave_0 entered promiscuous mode [ 51.755834] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.762235] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.769109] device bridge_slave_1 entered promiscuous mode [ 51.838742] device hsr_slave_0 entered promiscuous mode [ 51.906472] device hsr_slave_1 entered promiscuous mode [ 51.966839] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.973835] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.038740] device hsr_slave_0 entered promiscuous mode [ 52.076445] device hsr_slave_1 entered promiscuous mode [ 52.116867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.124622] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.140852] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.148938] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.162367] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.173335] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.181481] team0: Port device team_slave_0 added [ 52.187471] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.201575] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.215014] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.222189] team0: Port device team_slave_1 added [ 52.230663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.243457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.252744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.263525] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.270526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.285835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.295758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.304009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.315789] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.322892] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.340564] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.387684] device hsr_slave_0 entered promiscuous mode [ 52.426504] device hsr_slave_1 entered promiscuous mode [ 52.482442] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.490405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.497992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.505700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.513099] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.524438] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.530955] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.537242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.544973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.553101] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.559698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.569446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.578187] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.596081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.603757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.611146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.619370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.627269] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.633587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.640947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.648649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.657657] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.664008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.672762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.688876] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.696083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.703593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.714809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.729532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.741793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.748781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.756071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.768320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.774994] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.782205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.790278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.798353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.805837] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.812220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.820935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.829635] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.838905] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.845695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.852667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.863147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.870343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.877445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.884994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.892643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.902696] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.910606] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.920179] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.926432] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.934336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.941798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.948834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.955626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.962714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.969613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.977246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.987158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.996101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.004111] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.010232] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.021232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.030204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.038127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.045848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.055837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.063851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.071645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.079144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.085581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.092383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.100119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.107686] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.114010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.121773] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.128824] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.135606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.144214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.155268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.162379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.169769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.176849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.184446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.192236] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.198592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.205337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.213090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.220578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.228304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.235801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.244295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.253766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.261496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.269683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.276785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.284485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.292299] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.298812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.305568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.313347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.320996] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.327373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.334063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.341527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.348836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.356409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.364055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.377069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.385445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.398306] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.404315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.413973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.421685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.431864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.439882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.448109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.455559] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.461929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.471483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.480406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.490350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.501008] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.507153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.515190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.524400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.531906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.542392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.554608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.562796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.571186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.580359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.588310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.595668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.603570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.612951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.621823] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.630634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.640548] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.650461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.657021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.664659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.672314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.679962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.687902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.696901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.704454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.713268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.722334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.730309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.738468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.746005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.753873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.761738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.769378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.777667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.785296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.794336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.803298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.813363] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.819996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.827802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.835087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.842772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.852011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.860829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.869878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.878580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.887457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.895211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.902902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.910613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.920283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.928697] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.935416] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.941781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.949520] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.955509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.964525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.971981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.979413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.986326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.995002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.006641] audit: type=1400 audit(1575457549.314:40): avc: denied { associate } for pid=7005 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 54.009691] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.042426] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.051622] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.062657] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.069848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.078241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.087782] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.093791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.108202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.117533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.128840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.146408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.154199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.170886] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.177284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.195916] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.207245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.216060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.232810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.248501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.273696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.294025] BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1333 [ 54.302621] in_atomic(): 0, irqs_disabled(): 1, pid: 7029, name: syz-executor.1 [ 54.310065] 4 locks held by syz-executor.1/7029: [ 54.314812] #0: 000000005bd9ac1b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x2d/0x40 [ 54.323043] #1: 00000000abb41780 (&tty->termios_rwsem){++++}, at: tty_unthrottle+0x1b/0xe0 [ 54.331536] #2: 0000000029d6911b (&tty->ldisc_sem){++++}, at: tty_ldisc_ref+0x1a/0x70 [ 54.339598] #3: 0000000086d7b249 (&mm->mmap_sem){++++}, at: __do_page_fault+0x295/0xb20 [ 54.347835] irq event stamp: 3352 [ 54.351284] hardirqs last enabled at (3351): [] do_syscall_64+0x21/0x4e0 [ 54.359771] hardirqs last disabled at (3352): [] queue_work_on+0x8c/0x180 [ 54.368257] softirqs last enabled at (3294): [] net_to_rxe+0xc8/0xf0 [ 54.376406] softirqs last disabled at (3292): [] net_to_rxe+0x1a/0xf0 [ 54.384543] CPU: 0 PID: 7029 Comm: syz-executor.1 Not tainted 4.19.87-syzkaller #0 [ 54.392242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.401592] Call Trace: [ 54.404180] dump_stack+0x123/0x177 [ 54.407804] ? __mutex_lock+0xd1/0x1210 [ 54.411784] ___might_sleep.cold.88+0x1bb/0x1f4 [ 54.416458] __might_sleep+0x95/0x190 [ 54.420253] ? down_read_trylock+0x5d/0xd0 [ 54.424485] __do_page_fault+0x2b2/0xb20 [ 54.428550] ? mm_fault_error+0x2a0/0x2a0 [ 54.432692] ? trace_hardirqs_off_caller+0x49/0x180 [ 54.437702] do_page_fault+0x64/0x3a7 [ 54.441485] page_fault+0x1e/0x30 [ 54.444924] RIP: 0010:queue_work_on+0x8c/0x180 [ 54.449592] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 eb 00 00 00 48 83 3d 36 7b b2 06 00 0f 84 cd 00 00 00 fa 66 0f 1f 44 00 00 e8 a4 b3 26 00 49 0f ba 2c 24 00 41 bf 00 00 00 00 0f 83 93 00 00 00 f6 c7 02 [ 54.468478] RSP: 0018:ffff88807878f9b8 EFLAGS: 00010092 [ 54.473819] RAX: 0000000000000007 RBX: 0000000000000286 RCX: 0000000000000000 [ 54.481068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88809a3e2884 [ 54.488323] RBP: ffff88807878f9e0 R08: ffff88809a3e2930 R09: 0000000000000002 [ 54.495574] R10: ffff88809a3e2910 R11: 0000000000000001 R12: 0000000000000050 [ 54.502837] R13: 0000000000000040 R14: ffff88812c3457c0 R15: ffff88809292b000 [ 54.510110] ? queue_work_on+0x8c/0x180 [ 54.514076] slcan_write_wakeup+0x64/0x90 [ 54.518206] tty_wakeup+0xaf/0xe0 [ 54.521639] pty_unthrottle+0x32/0x50 [ 54.525555] tty_unthrottle+0x79/0xe0 [ 54.529356] __tty_perform_flush+0x16a/0x1d0 [ 54.533768] n_tty_ioctl_helper+0xb9/0x320 [ 54.537987] n_tty_ioctl+0x2c/0x2d0 [ 54.541593] ? ldsem_down_read+0x2d/0x40 [ 54.545634] tty_ioctl+0x4d0/0x1290 [ 54.549243] ? tty_vhangup+0x20/0x20 [ 54.552942] ? avc_ss_reset+0x130/0x130 [ 54.556906] ? mark_held_locks+0x130/0x130 [ 54.561118] ? mark_held_locks+0x130/0x130 [ 54.565347] do_vfs_ioctl+0x196/0x10c0 [ 54.569220] ? ioctl_preallocate+0x1c0/0x1c0 [ 54.573610] ? selinux_file_mprotect+0x5f0/0x5f0 [ 54.578347] ? ksys_dup3+0x2e0/0x2e0 [ 54.582040] ? put_timespec64+0xa9/0x100 [ 54.586125] ? nsecs_to_jiffies+0x20/0x20 [ 54.590262] ? security_file_ioctl+0x4a/0x90 [ 54.594648] ? __fget_light+0x174/0x1e0 [ 54.598607] ksys_ioctl+0x62/0x90 [ 54.602050] ? lockdep_hardirqs_on+0x421/0x5c0 [ 54.606694] __x64_sys_ioctl+0x6e/0xb0 [ 54.610591] do_syscall_64+0xd0/0x4e0 [ 54.614406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.619592] RIP: 0033:0x459829 [ 54.622776] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.641671] RSP: 002b:00007f93e203bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.649363] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 54.656617] RDX: 0000000000000000 RSI: 000000000000540b RDI: 0000000000000003 [ 54.663873] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 54.671132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f93e203c6d4 [ 54.678387] R13: 00000000004c3e0b R14: 00000000004d7dd0 R15: 00000000ffffffff [ 54.685655] BUG: unable to handle kernel NULL pointer dereference at 0000000000000050 [ 54.693595] PGD 8db5f067 P4D 8db5f067 PUD 795d0067 PMD 0 [ 54.699112] Oops: 0002 [#1] PREEMPT SMP KASAN [ 54.703592] CPU: 0 PID: 7029 Comm: syz-executor.1 Tainted: G W 4.19.87-syzkaller #0 [ 54.712663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.721999] RIP: 0010:queue_work_on+0x8c/0x180 [ 54.726557] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 eb 00 00 00 48 83 3d 36 7b b2 06 00 0f 84 cd 00 00 00 fa 66 0f 1f 44 00 00 e8 a4 b3 26 00 49 0f ba 2c 24 00 41 bf 00 00 00 00 0f 83 93 00 00 00 f6 c7 02 [ 54.745442] RSP: 0018:ffff88807878f9b8 EFLAGS: 00010092 [ 54.750795] RAX: 0000000000000007 RBX: 0000000000000286 RCX: 0000000000000000 [ 54.758040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88809a3e2884 [ 54.765284] RBP: ffff88807878f9e0 R08: ffff88809a3e2930 R09: 0000000000000002 [ 54.772530] R10: ffff88809a3e2910 R11: 0000000000000001 R12: 0000000000000050 [ 54.779777] R13: 0000000000000040 R14: ffff88812c3457c0 R15: ffff88809292b000 [ 54.787029] FS: 00007f93e203c700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 54.795239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.801100] CR2: 0000000000000050 CR3: 000000007a36e000 CR4: 00000000001406f0 [ 54.808467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.815774] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.823029] Call Trace: [ 54.825606] slcan_write_wakeup+0x64/0x90 [ 54.829737] tty_wakeup+0xaf/0xe0 [ 54.833185] pty_unthrottle+0x32/0x50 [ 54.836961] tty_unthrottle+0x79/0xe0 [ 54.840756] __tty_perform_flush+0x16a/0x1d0 [ 54.845140] n_tty_ioctl_helper+0xb9/0x320 [ 54.849358] n_tty_ioctl+0x2c/0x2d0 [ 54.852965] ? ldsem_down_read+0x2d/0x40 [ 54.857002] tty_ioctl+0x4d0/0x1290 [ 54.860617] ? tty_vhangup+0x20/0x20 [ 54.864307] ? avc_ss_reset+0x130/0x130 [ 54.868277] ? mark_held_locks+0x130/0x130 [ 54.872485] ? mark_held_locks+0x130/0x130 [ 54.876699] do_vfs_ioctl+0x196/0x10c0 [ 54.880573] ? ioctl_preallocate+0x1c0/0x1c0 [ 54.884961] ? selinux_file_mprotect+0x5f0/0x5f0 [ 54.889725] ? ksys_dup3+0x2e0/0x2e0 [ 54.893494] ? put_timespec64+0xa9/0x100 [ 54.897546] ? nsecs_to_jiffies+0x20/0x20 [ 54.901672] ? security_file_ioctl+0x4a/0x90 [ 54.906057] ? __fget_light+0x174/0x1e0 [ 54.910014] ksys_ioctl+0x62/0x90 [ 54.913448] ? lockdep_hardirqs_on+0x421/0x5c0 [ 54.918016] __x64_sys_ioctl+0x6e/0xb0 [ 54.921887] do_syscall_64+0xd0/0x4e0 [ 54.925672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.930842] RIP: 0033:0x459829 [ 54.934025] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.952922] RSP: 002b:00007f93e203bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.960608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 54.967868] RDX: 0000000000000000 RSI: 000000000000540b RDI: 0000000000000003 [ 54.975121] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 54.982371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f93e203c6d4 [ 54.989635] R13: 00000000004c3e0b R14: 00000000004d7dd0 R15: 00000000ffffffff [ 54.996888] Modules linked in: [ 55.000073] CR2: 0000000000000050 [ 55.003507] ---[ end trace f1b14e930255f7dd ]--- [ 55.008242] RIP: 0010:queue_work_on+0x8c/0x180 [ 55.012822] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 eb 00 00 00 48 83 3d 36 7b b2 06 00 0f 84 cd 00 00 00 fa 66 0f 1f 44 00 00 e8 a4 b3 26 00 49 0f ba 2c 24 00 41 bf 00 00 00 00 0f 83 93 00 00 00 f6 c7 02 [ 55.031706] RSP: 0018:ffff88807878f9b8 EFLAGS: 00010092 [ 55.037046] RAX: 0000000000000007 RBX: 0000000000000286 RCX: 0000000000000000 [ 55.044300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88809a3e2884 [ 55.051550] RBP: ffff88807878f9e0 R08: ffff88809a3e2930 R09: 0000000000000002 [ 55.058798] R10: ffff88809a3e2910 R11: 0000000000000001 R12: 0000000000000050 [ 55.066092] R13: 0000000000000040 R14: ffff88812c3457c0 R15: ffff88809292b000 [ 55.073344] FS: 00007f93e203c700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 55.081564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.087425] CR2: 0000000000000050 CR3: 000000007a36e000 CR4: 00000000001406f0 [ 55.094673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.101924] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.109175] Kernel panic - not syncing: Fatal exception [ 55.115843] Kernel Offset: disabled [ 55.119470] Rebooting in 86400 seconds..