syzkaller login: [ 35.169397] kauditd_printk_skb: 9 callbacks suppressed [ 35.169403] audit: type=1400 audit(1578595278.431:35): avc: denied { map } for pid=7048 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.581656] audit: type=1400 audit(1578595284.841:36): avc: denied { map } for pid=7059 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 42.230676] IPVS: ftp: loaded support on port[0] = 21 [ 42.642486] can: request_module (can-proto-0) failed. [ 43.671680] can: request_module (can-proto-0) failed. [ 43.680900] can: request_module (can-proto-0) failed. [ 43.856151] audit: type=1400 audit(1578595287.121:37): avc: denied { create } for pid=7059 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.879733] audit: type=1400 audit(1578595287.121:38): avc: denied { create } for pid=7059 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.903438] audit: type=1400 audit(1578595287.121:39): avc: denied { create } for pid=7059 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.231' (ECDSA) to the list of known hosts. 2020/01/09 18:41:33 parsed 1 programs 2020/01/09 18:41:34 executed programs: 0 [ 51.168666] IPVS: ftp: loaded support on port[0] = 21 [ 51.209204] IPVS: ftp: loaded support on port[0] = 21 [ 51.226279] IPVS: ftp: loaded support on port[0] = 21 [ 51.226784] IPVS: ftp: loaded support on port[0] = 21 [ 51.247891] IPVS: ftp: loaded support on port[0] = 21 [ 51.262051] IPVS: ftp: loaded support on port[0] = 21 [ 51.377237] chnl_net:caif_netlink_parms(): no params data found [ 51.496936] chnl_net:caif_netlink_parms(): no params data found [ 51.541685] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.548750] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.555864] device bridge_slave_0 entered promiscuous mode [ 51.579469] chnl_net:caif_netlink_parms(): no params data found [ 51.590295] chnl_net:caif_netlink_parms(): no params data found [ 51.598980] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.605547] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.612314] device bridge_slave_1 entered promiscuous mode [ 51.623715] chnl_net:caif_netlink_parms(): no params data found [ 51.693456] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.700264] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.707373] device bridge_slave_0 entered promiscuous mode [ 51.719277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.731472] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.742986] chnl_net:caif_netlink_parms(): no params data found [ 51.752358] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.758883] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.765946] device bridge_slave_1 entered promiscuous mode [ 51.776093] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.782430] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.789236] device bridge_slave_0 entered promiscuous mode [ 51.799438] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.805871] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.812678] device bridge_slave_1 entered promiscuous mode [ 51.853375] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.873863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.882536] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.890284] team0: Port device team_slave_0 added [ 51.910004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.917703] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.924046] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.933689] device bridge_slave_0 entered promiscuous mode [ 51.941178] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.954485] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.961620] team0: Port device team_slave_1 added [ 51.969170] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.975917] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.982872] device bridge_slave_0 entered promiscuous mode [ 51.992978] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.999385] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.006516] device bridge_slave_1 entered promiscuous mode [ 52.023479] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.033275] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.040555] device bridge_slave_1 entered promiscuous mode [ 52.055816] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.064607] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.071750] team0: Port device team_slave_0 added [ 52.080593] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.087988] team0: Port device team_slave_1 added [ 52.097332] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.106781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.121419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.131969] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.138597] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.145961] device bridge_slave_0 entered promiscuous mode [ 52.152406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.159703] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.167841] team0: Port device team_slave_0 added [ 52.178323] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.190587] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.198950] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.206699] device bridge_slave_1 entered promiscuous mode [ 52.213238] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.222481] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.229678] team0: Port device team_slave_1 added [ 52.235296] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.242583] team0: Port device team_slave_0 added [ 52.248819] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.306624] device hsr_slave_0 entered promiscuous mode [ 52.344709] device hsr_slave_1 entered promiscuous mode [ 52.388424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.396568] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.403653] team0: Port device team_slave_1 added [ 52.409540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.423761] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.431991] team0: Port device team_slave_0 added [ 52.442839] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.453464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.460941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.470492] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.480068] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.488050] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.495437] team0: Port device team_slave_1 added [ 52.500583] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.557346] device hsr_slave_0 entered promiscuous mode [ 52.614536] device hsr_slave_1 entered promiscuous mode [ 52.658263] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.670265] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.681237] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.703229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.736085] device hsr_slave_0 entered promiscuous mode [ 52.774644] device hsr_slave_1 entered promiscuous mode [ 52.855928] device hsr_slave_0 entered promiscuous mode [ 52.894646] device hsr_slave_1 entered promiscuous mode [ 52.936097] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.942978] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.951031] team0: Port device team_slave_0 added [ 52.960246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.971898] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.978834] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.989720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.997821] team0: Port device team_slave_1 added [ 53.004095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.017633] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.066695] device hsr_slave_0 entered promiscuous mode [ 53.114522] device hsr_slave_1 entered promiscuous mode [ 53.157130] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.165723] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.172500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.182346] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.189972] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.255771] device hsr_slave_0 entered promiscuous mode [ 53.334461] device hsr_slave_1 entered promiscuous mode [ 53.375011] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.382405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.396438] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.416793] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.426711] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.475724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.492118] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.522122] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.535960] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.542052] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.555926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.563426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.575869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.591305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.599730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.608920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.618152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.626509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.634047] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.640529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.653137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.663084] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.675379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.682816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.691034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.698818] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.705191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.714598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.723257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.737191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.744852] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.755624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.761895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.770203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.778056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.785408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.793288] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.800726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.809405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.817193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.825749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.834650] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.840723] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.847865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.855354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.862121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.870087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.878391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.886997] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.893228] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.902996] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.910198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.922088] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.930998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.938295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.945948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.953911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.963189] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.973754] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.981938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.990112] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.000395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.008213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.019145] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.026380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.033724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.041303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.048875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.056244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.062971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.070892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.078532] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.084895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.091789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.099913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.107521] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.113845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.120656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.127789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.134729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.142412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.149993] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.156355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.163835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.171397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.178575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.188310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.197795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.207447] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.213521] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.220557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.228676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.236311] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.242641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.249560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.257433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.265200] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.271551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.280418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.290815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.299383] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.308697] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.316578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.326152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.333862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.341156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.351601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.359504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.367479] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.373829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.380977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.388818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.396644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.404352] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.410801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.417633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.425393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.433104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.441903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.453338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.462564] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.469871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.477960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.488062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.496353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.503985] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.510416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.518879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.530844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.542424] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.553734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.561531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.571619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.581251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.589554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.597470] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.603842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.611587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.619914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.628349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.637341] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.645734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.652741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.662534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.670942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.679153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.686782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.693586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.701262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.709753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.718186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.727688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.736797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.745013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.752475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.760828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.768443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.776413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.783901] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.790272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.799375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.808180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.816770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.824737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.835414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.847029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.855069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.861958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.872732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.880682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.888725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.896219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.903891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.911726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.920232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.928992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.938759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.949423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.958921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.968897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.975991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.983007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.991078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.998675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.006397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.013848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.021403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.029183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.037873] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.043890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.051628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.061941] audit: type=1400 audit(1578595298.321:40): avc: denied { associate } for pid=7163 comm="syz-executor.4" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 55.064921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.116714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.126955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.138095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.148118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.156005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.163782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.171844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.179796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.187527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.195336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.202735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.210392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.218117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.226141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.233619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.241166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.248631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.257666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.270501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.280735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.290467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.297965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.310262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.318781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.319144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.319453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.319782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.320069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.320368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.322431] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.322465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.326354] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.326375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.327559] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.329352] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.332240] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.333865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.341305] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.343039] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.343064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.346605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.347831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.348335] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.348358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.355314] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.363564] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.365336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.365407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.365463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.365513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.365564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.365872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.379147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.387100] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.388167] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.398153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.401968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.402051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.402100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.402149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.408074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.420206] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.421237] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.426008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.451012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.451109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 2020/01/09 18:41:39 executed programs: 6 [ 56.330409] ================================================================== [ 56.330436] BUG: KASAN: user-memory-access in insert_char+0x1e2/0x440 [ 56.330441] Read of size 212 at addr 00000000ffffff3a by task syz-executor.5/7204 [ 56.330444] [ 56.330450] CPU: 1 PID: 7204 Comm: syz-executor.5 Not tainted 4.19.94-syzkaller #0 [ 56.330453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.330456] Call Trace: [ 56.330466] dump_stack+0x123/0x177 [ 56.330477] kasan_report.cold.9+0x6d/0x309 [ 56.330481] ? insert_char+0x1e2/0x440 [ 56.330488] check_memory_region+0x13e/0x1b0 [ 56.330495] memmove+0x23/0x50 [ 56.330501] insert_char+0x1e2/0x440 [ 56.330511] do_con_trol+0x33e0/0x6370 [ 56.330519] ? reset_palette+0x200/0x200 [ 56.330527] ? lock_downgrade+0x860/0x860 [ 56.330535] ? kasan_check_read+0x11/0x20 [ 56.330546] ? __atomic_notifier_call_chain+0x9e/0x110 [ 56.330555] do_con_write.part.26+0xad0/0x1aa0 [ 56.330561] ? n_tty_write+0x30a/0x1060 [ 56.330580] ? __mutex_lock+0x51b/0x1210 [ 56.330593] ? do_con_trol+0x6370/0x6370 [ 56.330598] ? mark_held_locks+0xc7/0x130 [ 56.330605] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 56.330610] ? add_wait_queue+0x107/0x160 [ 56.330616] ? lockdep_hardirqs_on+0x421/0x5c0 [ 56.330620] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 56.330627] ? trace_hardirqs_on+0x28/0x190 [ 56.330635] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 56.330642] con_write+0x1f/0x80 [ 56.330647] n_tty_write+0x4a4/0x1060 [ 56.330662] ? process_echoes+0x130/0x130 [ 56.330669] ? do_wait_intr_irq+0x310/0x310 [ 56.330677] ? kasan_check_write+0x14/0x20 [ 56.330683] tty_write+0x346/0x770 [ 56.330691] ? process_echoes+0x130/0x130 [ 56.330700] __vfs_write+0xe3/0x890 [ 56.330709] ? kernel_read+0x130/0x130 [ 56.330715] ? __might_sleep+0x95/0x190 [ 56.330726] ? __inode_security_revalidate+0x9d/0xc0 [ 56.330734] ? selinux_file_permission+0x326/0x3f0 [ 56.330743] ? security_file_permission+0x46/0x190 [ 56.330751] ? rw_verify_area+0xb8/0x2b0 [ 56.330759] vfs_write+0x150/0x4d0 [ 56.330768] ksys_write+0x103/0x260 [ 56.330775] ? __ia32_sys_read+0xa0/0xa0 [ 56.330785] ? do_syscall_64+0x21/0x4e0 [ 56.330790] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.330799] __x64_sys_write+0x6e/0xb0 [ 56.330806] do_syscall_64+0xd0/0x4e0 [ 56.330819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.330825] RIP: 0033:0x45a6f9 [ 56.330831] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.330834] RSP: 002b:00007f25a8f57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.330840] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 56.330844] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000004 [ 56.330847] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 56.330850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25a8f586d4 [ 56.330853] R13: 00000000004cbbaf R14: 00000000004e5858 R15: 00000000ffffffff [ 56.330866] ================================================================== [ 56.330869] Disabling lock debugging due to kernel taint [ 56.330889] Kernel panic - not syncing: panic_on_warn set ... [ 56.330889] [ 56.330894] CPU: 1 PID: 7204 Comm: syz-executor.5 Tainted: G B 4.19.94-syzkaller #0 [ 56.330897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.330898] Call Trace: [ 56.330903] dump_stack+0x123/0x177 [ 56.330908] panic+0x1cd/0x375 [ 56.330912] ? __warn_printk+0xd6/0xd6 [ 56.330918] ? do_raw_spin_unlock+0x54/0x260 [ 56.330924] kasan_end_report+0x47/0x4f [ 56.330928] kasan_report.cold.9+0x76/0x309 [ 56.330932] ? insert_char+0x1e2/0x440 [ 56.330937] check_memory_region+0x13e/0x1b0 [ 56.330940] memmove+0x23/0x50 [ 56.330944] insert_char+0x1e2/0x440 [ 56.330950] do_con_trol+0x33e0/0x6370 [ 56.330956] ? reset_palette+0x200/0x200 [ 56.330959] ? lock_downgrade+0x860/0x860 [ 56.330964] ? kasan_check_read+0x11/0x20 [ 56.330971] ? __atomic_notifier_call_chain+0x9e/0x110 [ 56.330976] do_con_write.part.26+0xad0/0x1aa0 [ 56.330980] ? n_tty_write+0x30a/0x1060 [ 56.330986] ? __mutex_lock+0x51b/0x1210 [ 56.330994] ? do_con_trol+0x6370/0x6370 [ 56.330997] ? mark_held_locks+0xc7/0x130 [ 56.331001] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 56.331005] ? add_wait_queue+0x107/0x160 [ 56.331009] ? lockdep_hardirqs_on+0x421/0x5c0 [ 56.331013] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 56.331018] ? trace_hardirqs_on+0x28/0x190 [ 56.331023] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 56.331028] con_write+0x1f/0x80 [ 56.331032] n_tty_write+0x4a4/0x1060 [ 56.331041] ? process_echoes+0x130/0x130 [ 56.331045] ? do_wait_intr_irq+0x310/0x310 [ 56.331051] ? kasan_check_write+0x14/0x20 [ 56.331056] tty_write+0x346/0x770 [ 56.331060] ? process_echoes+0x130/0x130 [ 56.331066] __vfs_write+0xe3/0x890 [ 56.331071] ? kernel_read+0x130/0x130 [ 56.331076] ? __might_sleep+0x95/0x190 [ 56.331082] ? __inode_security_revalidate+0x9d/0xc0 [ 56.331087] ? selinux_file_permission+0x326/0x3f0 [ 56.331092] ? security_file_permission+0x46/0x190 [ 56.331097] ? rw_verify_area+0xb8/0x2b0 [ 56.331103] vfs_write+0x150/0x4d0 [ 56.331108] ksys_write+0x103/0x260 [ 56.331113] ? __ia32_sys_read+0xa0/0xa0 [ 56.331118] ? do_syscall_64+0x21/0x4e0 [ 56.331122] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.331128] __x64_sys_write+0x6e/0xb0 [ 56.331132] do_syscall_64+0xd0/0x4e0 [ 56.331137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.331141] RIP: 0033:0x45a6f9 [ 56.331145] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.331147] RSP: 002b:00007f25a8f57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.331151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 56.331154] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000004 [ 56.331156] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 56.331159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25a8f586d4 [ 56.331161] R13: 00000000004cbbaf R14: 00000000004e5858 R15: 00000000ffffffff [ 56.332416] Kernel Offset: disabled [ 56.937985] Rebooting in 86400 seconds..