syzkaller login: [   35.923928] kauditd_printk_skb: 9 callbacks suppressed
[   35.923933] audit: type=1400 audit(1584540238.734:35): avc:  denied  { map } for  pid=7102 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[   42.301482] audit: type=1400 audit(1584540245.114:36): avc:  denied  { map } for  pid=7113 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   43.085795] IPVS: ftp: loaded support on port[0] = 21
[   43.513698] can: request_module (can-proto-0) failed.
[   44.532035] can: request_module (can-proto-0) failed.
[   44.540554] can: request_module (can-proto-0) failed.
[   44.697553] audit: type=1400 audit(1584540247.514:37): avc:  denied  { create } for  pid=7113 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1
[   44.721262] audit: type=1400 audit(1584540247.514:38): avc:  denied  { create } for  pid=7113 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[   44.744899] audit: type=1400 audit(1584540247.514:39): avc:  denied  { create } for  pid=7113 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts.
2020/03/18 14:04:14 parsed 1 programs
2020/03/18 14:04:14 executed programs: 0
[   52.104708] IPVS: ftp: loaded support on port[0] = 21
[   52.114482] IPVS: ftp: loaded support on port[0] = 21
[   52.119347] IPVS: ftp: loaded support on port[0] = 21
[   52.131224] IPVS: ftp: loaded support on port[0] = 21
[   52.145317] IPVS: ftp: loaded support on port[0] = 21
[   52.145346] IPVS: ftp: loaded support on port[0] = 21
[   52.341210] chnl_net:caif_netlink_parms(): no params data found
[   52.369051] chnl_net:caif_netlink_parms(): no params data found
[   52.380245] chnl_net:caif_netlink_parms(): no params data found
[   52.451344] chnl_net:caif_netlink_parms(): no params data found
[   52.459286] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.466062] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.473104] device bridge_slave_0 entered promiscuous mode
[   52.493331] chnl_net:caif_netlink_parms(): no params data found
[   52.503366] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.511367] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.518362] device bridge_slave_1 entered promiscuous mode
[   52.528593] chnl_net:caif_netlink_parms(): no params data found
[   52.542305] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.548743] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.555868] device bridge_slave_0 entered promiscuous mode
[   52.570607] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.577134] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.583912] device bridge_slave_0 entered promiscuous mode
[   52.592913] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.599298] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.606993] device bridge_slave_1 entered promiscuous mode
[   52.615845] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.622173] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.629450] device bridge_slave_1 entered promiscuous mode
[   52.653800] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   52.679694] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.686309] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.693080] device bridge_slave_0 entered promiscuous mode
[   52.702586] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   52.716593] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   52.724957] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   52.743740] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.750397] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.757817] device bridge_slave_1 entered promiscuous mode
[   52.764427] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   52.773056] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   52.799641] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   52.807222] team0: Port device team_slave_0 added
[   52.827060] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   52.834503] team0: Port device team_slave_0 added
[   52.842853] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.851607] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.858851] device bridge_slave_0 entered promiscuous mode
[   52.865251] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   52.873187] team0: Port device team_slave_1 added
[   52.881902] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   52.889655] team0: Port device team_slave_0 added
[   52.894838] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   52.902137] team0: Port device team_slave_1 added
[   52.907242] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.913566] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.920470] device bridge_slave_0 entered promiscuous mode
[   52.927102] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.933438] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.940890] device bridge_slave_1 entered promiscuous mode
[   52.947214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   52.955127] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   52.962998] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   52.970194] team0: Port device team_slave_1 added
[   52.975334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   52.984843] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.991335] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.998451] device bridge_slave_1 entered promiscuous mode
[   53.007569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   53.019883] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   53.028149] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   53.036449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   53.043544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   53.064549] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   53.128000] device hsr_slave_0 entered promiscuous mode
[   53.165734] device hsr_slave_1 entered promiscuous mode
[   53.229340] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   53.236967] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   53.244867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   53.252006] team0: Port device team_slave_0 added
[   53.260749] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   53.268478] team0: Port device team_slave_1 added
[   53.274346] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   53.317726] device hsr_slave_0 entered promiscuous mode
[   53.355786] device hsr_slave_1 entered promiscuous mode
[   53.395933] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   53.402840] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   53.413187] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   53.457782] device hsr_slave_0 entered promiscuous mode
[   53.515804] device hsr_slave_1 entered promiscuous mode
[   53.585795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   53.592950] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   53.603486] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   53.629351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   53.636884] team0: Port device team_slave_0 added
[   53.642364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   53.649868] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   53.661164] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   53.668955] team0: Port device team_slave_0 added
[   53.674553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   53.681987] team0: Port device team_slave_1 added
[   53.687766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   53.694960] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   53.702567] team0: Port device team_slave_1 added
[   53.712206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   53.727904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   53.738874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   53.749642] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   53.758467] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   53.796817] device hsr_slave_0 entered promiscuous mode
[   53.835647] device hsr_slave_1 entered promiscuous mode
[   53.916795] device hsr_slave_0 entered promiscuous mode
[   53.965748] device hsr_slave_1 entered promiscuous mode
[   54.006234] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   54.068002] device hsr_slave_0 entered promiscuous mode
[   54.135627] device hsr_slave_1 entered promiscuous mode
[   54.197983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   54.206056] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   54.213632] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   54.220698] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   54.237144] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   54.245029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   54.264391] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   54.279959] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   54.327377] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.337471] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.346619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   54.364595] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   54.376243] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   54.384358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   54.399665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.407530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.425842] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.432819] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   54.441765] 8021q: adding VLAN 0 to HW filter on device team0
[   54.450475] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.460299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   54.471160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   54.481736] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   54.489067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.496363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.511311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   54.519795] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   54.526107] 8021q: adding VLAN 0 to HW filter on device team0
[   54.532963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   54.540589] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   54.552269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.560116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.567988] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.574411] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.581382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.589075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.596093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.603336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.610645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.619321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   54.630823] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.638946] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   54.645015] 8021q: adding VLAN 0 to HW filter on device team0
[   54.655298] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   54.661467] 8021q: adding VLAN 0 to HW filter on device team0
[   54.670226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.678410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.686310] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.692638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.699645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.708853] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   54.716543] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.723305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   54.732239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   54.743932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   54.753029] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   54.759831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.768435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.776071] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.782407] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.789312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.797647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.805140] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.811618] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.818546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.826813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.834281] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.840652] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.847566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.854386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.861674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.868965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.878744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   54.888039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   54.897788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   54.906334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   54.913917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.921755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.930233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.938098] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.944422] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.951591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.959638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.967231] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.973554] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.980400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.988686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.996241] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.002565] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.010073] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   55.018662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   55.028074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   55.039790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   55.047365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.054951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.062797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.072228] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   55.080382] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   55.086730] 8021q: adding VLAN 0 to HW filter on device team0
[   55.093432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   55.102895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   55.110320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.117788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.124561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.132459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.141351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   55.150161] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   55.157496] 8021q: adding VLAN 0 to HW filter on device team0
[   55.165440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   55.173467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   55.183480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.191782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.199360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.208940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.217058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.224753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.232210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.240481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   55.248358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   55.256816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   55.264471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   55.275944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   55.283390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   55.290600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.299211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.306997] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.313315] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.320151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.327741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.335335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.343048] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.349419] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.356693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.364297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.371878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.379574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.387178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.394685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.402464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.409536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.416655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.425165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   55.435995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   55.444906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   55.457298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   55.466698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   55.474348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   55.481923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.492801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.500371] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.506740] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.515257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.523240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.530836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.538416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.546299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.553733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.561085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.568831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.576569] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.582917] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.589721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.597676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.607155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   55.616442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   55.624487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   55.633336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   55.642620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   55.650009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.657795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.665312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.673576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.681044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.688583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.696120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.703392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.710991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.720520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   55.730020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   55.738582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.749472] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   55.755746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.764579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   55.771867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.779783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.787465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.794830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.802194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.809785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.818060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   55.824915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.832824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.841068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   55.848611] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   55.854595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.862662] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   55.869331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.882635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   55.889892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.897014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.904545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.912261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.922206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   55.931039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   55.943336] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   55.949448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.961992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.969863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.977572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.990370] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[   55.998044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   56.007135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   56.016387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   56.023615] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[   56.031789] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   56.038972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.049008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.056654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.064007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.071387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.079202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.086729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.093414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.100740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.108990] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[   56.117365] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   56.123904] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[   56.136255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.142910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.152520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   56.161229] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   56.172993] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   56.183437] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.191651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   56.200194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.210818] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   56.216894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.223642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.231892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.239449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.246131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.252749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.259449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.266288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.273884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.282653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   56.300169] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.310647] audit: type=1400 audit(1584540259.124:40): avc:  denied  { associate } for  pid=7215 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
[   56.336067] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.342635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.351975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.363987] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   56.373885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.389402] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[   56.403597] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[   56.425976] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   56.436411] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.446825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.460655] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   56.465465] hrtimer: interrupt took 24849 ns
[   56.469715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.484558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.492386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.499412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.512844] ==================================================================
[   56.520356] BUG: KASAN: use-after-free in eth_type_trans+0x5c1/0x6e0
[   56.526847] Read of size 8 at addr ffff888086ff0040 by task syz-executor.0/7229
[   56.534295] 
[   56.535914] CPU: 1 PID: 7229 Comm: syz-executor.0 Not tainted 4.19.111-syzkaller #0
[   56.543694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   56.553038] Call Trace:
[   56.555618]  dump_stack+0x123/0x177
[   56.559238]  print_address_description.cold.8+0x9/0x1ff
[   56.564595]  kasan_report.cold.9+0x242/0x309
[   56.569126]  ? eth_type_trans+0x5c1/0x6e0
[   56.573293]  __asan_report_load8_noabort+0x14/0x20
[   56.578218]  eth_type_trans+0x5c1/0x6e0
[   56.582275]  ? eth_gro_receive+0x960/0x960
[   56.586506]  napi_gro_frags+0x546/0x8e0
[   56.590483]  tun_get_user+0x25ec/0x47d0
[   56.594455]  ? firmware_map_remove+0x171/0x171
[   56.599032]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   56.603787]  ? tun_build_skb.isra.53+0x14c0/0x14c0
[   56.608710]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   56.613452]  ? lockdep_hardirqs_on+0x421/0x5c0
[   56.618021]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   56.622765]  ? trace_hardirqs_on_caller+0x28/0x180
[   56.627689]  ? find_held_lock+0x36/0x1d0
[   56.631751]  ? tun_get+0xf3/0x1d0
[   56.635457]  ? lock_downgrade+0x860/0x860
[   56.639611]  ? kasan_check_read+0x11/0x20
[   56.643761]  tun_chr_write_iter+0xaf/0x150
[   56.647993]  do_iter_readv_writev+0x4ae/0x960
[   56.652485]  ? vfs_dedupe_file_range+0x5a0/0x5a0
[   56.657235]  ? rw_verify_area+0xb8/0x2b0
[   56.661286]  do_iter_write+0x12a/0x510
[   56.665169]  vfs_writev+0x16f/0x2d0
[   56.668793]  ? __fget+0x278/0x400
[   56.672236]  ? vfs_iter_write+0xb0/0xb0
[   56.676204]  ? kasan_check_read+0x11/0x20
[   56.680340]  ? __fget+0x295/0x400
[   56.683783]  ? ksys_dup3+0x2e0/0x2e0
[   56.687490]  ? __fget_light+0x174/0x1e0
[   56.691461]  do_writev+0x110/0x330
[   56.694995]  ? vfs_writev+0x2d0/0x2d0
[   56.698791]  ? do_syscall_64+0x21/0x4e0
[   56.702753]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   56.708115]  __x64_sys_writev+0x70/0xb0
[   56.712193]  do_syscall_64+0xd0/0x4e0
[   56.715998]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   56.721183] RIP: 0033:0x45a7d1
[   56.724370] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01
[   56.743375] RSP: 002b:00007fb19bc63ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014
[   56.751079] RAX: ffffffffffffffda RBX: 0000000000207843 RCX: 000000000045a7d1
[   56.758347] RDX: 0000000000000001 RSI: 00007fb19bc63c00 RDI: 00000000000000f0
[   56.765615] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[   56.772886] R10: 0000000000000003 R11: 0000000000000293 R12: 00007fb19bc646d4
[   56.780150] R13: 00000000004cab1f R14: 00000000004e4040 R15: 00000000ffffffff
[   56.787419] 
[   56.789033] The buggy address belongs to the page:
[   56.793950] page:ffffea00021bfc00 count:0 mapcount:0 mapping:0000000000000000 index:0x1
[   56.802081] flags: 0xfffe0000000000()
[   56.805873] raw: 00fffe0000000000 dead000000000100 dead000000000200 0000000000000000
[   56.813750] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[   56.821620] page dumped because: kasan: bad access detected
[   56.827316] 
[   56.828929] Memory state around the buggy address:
[   56.833858]  ffff888086feff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   56.841207]  ffff888086feff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   56.848560] >ffff888086ff0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   56.855907]                                            ^
[   56.861348]  ffff888086ff0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   56.868826]  ffff888086ff0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   56.876190] ==================================================================
[   56.883646] Disabling lock debugging due to kernel taint
[   56.889163] Kernel panic - not syncing: panic_on_warn set ...
[   56.889163] 
[   56.896516] CPU: 1 PID: 7229 Comm: syz-executor.0 Tainted: G    B             4.19.111-syzkaller #0
[   56.905685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   56.915036] Call Trace:
[   56.917623]  dump_stack+0x123/0x177
[   56.921242]  panic+0x1cd/0x375
[   56.924439]  ? __warn_printk+0xd6/0xd6
[   56.928320]  ? do_raw_spin_unlock+0x54/0x260
[   56.932726]  kasan_end_report+0x47/0x4f
[   56.936691]  kasan_report.cold.9+0x76/0x309
[   56.941006]  ? eth_type_trans+0x5c1/0x6e0
[   56.945239]  __asan_report_load8_noabort+0x14/0x20
[   56.950152]  eth_type_trans+0x5c1/0x6e0
[   56.954104]  ? eth_gro_receive+0x960/0x960
[   56.958320]  napi_gro_frags+0x546/0x8e0
[   56.962280]  tun_get_user+0x25ec/0x47d0
[   56.966237]  ? firmware_map_remove+0x171/0x171
[   56.970800]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   56.975549]  ? tun_build_skb.isra.53+0x14c0/0x14c0
[   56.980460]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   56.985196]  ? lockdep_hardirqs_on+0x421/0x5c0
[   56.989753]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   56.994492]  ? trace_hardirqs_on_caller+0x28/0x180
[   56.999626]  ? find_held_lock+0x36/0x1d0
[   57.003666]  ? tun_get+0xf3/0x1d0
[   57.007099]  ? lock_downgrade+0x860/0x860
[   57.011229]  ? kasan_check_read+0x11/0x20
[   57.015364]  tun_chr_write_iter+0xaf/0x150
[   57.019591]  do_iter_readv_writev+0x4ae/0x960
[   57.024075]  ? vfs_dedupe_file_range+0x5a0/0x5a0
[   57.028814]  ? rw_verify_area+0xb8/0x2b0
[   57.032851]  do_iter_write+0x12a/0x510
[   57.036762]  vfs_writev+0x16f/0x2d0
[   57.040428]  ? __fget+0x278/0x400
[   57.043859]  ? vfs_iter_write+0xb0/0xb0
[   57.047818]  ? kasan_check_read+0x11/0x20
[   57.051947]  ? __fget+0x295/0x400
[   57.055389]  ? ksys_dup3+0x2e0/0x2e0
[   57.059083]  ? __fget_light+0x174/0x1e0
[   57.063041]  do_writev+0x110/0x330
[   57.066586]  ? vfs_writev+0x2d0/0x2d0
[   57.070366]  ? do_syscall_64+0x21/0x4e0
[   57.074320]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   57.079664]  __x64_sys_writev+0x70/0xb0
[   57.083670]  do_syscall_64+0xd0/0x4e0
[   57.087458]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   57.092622] RIP: 0033:0x45a7d1
[   57.095806] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01
[   57.114687] RSP: 002b:00007fb19bc63ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014
[   57.122408] RAX: ffffffffffffffda RBX: 0000000000207843 RCX: 000000000045a7d1
[   57.129663] RDX: 0000000000000001 RSI: 00007fb19bc63c00 RDI: 00000000000000f0
[   57.136917] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[   57.144213] R10: 0000000000000003 R11: 0000000000000293 R12: 00007fb19bc646d4
[   57.151464] R13: 00000000004cab1f R14: 00000000004e4040 R15: 00000000ffffffff
[   57.160257] Kernel Offset: disabled
[   57.163927] Rebooting in 86400 seconds..