[ 37.417814] audit: type=1400 audit(1575822639.378:41): avc: denied { map } for pid=7545 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.682260] audit: type=1400 audit(1575822645.638:42): avc: denied { map } for pid=7556 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.883755] IPVS: ftp: loaded support on port[0] = 21 [ 45.908138] audit: type=1400 audit(1575822647.868:43): avc: denied { associate } for pid=7571 comm="syz-executor0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 46.235796] tipc: TX() has been purged, node left! [ 80.700964] can: request_module (can-proto-0) failed. [ 80.711428] can: request_module (can-proto-0) failed. [ 80.928319] audit: type=1400 audit(1575822682.888:44): avc: denied { create } for pid=7556 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 80.952291] audit: type=1400 audit(1575822682.888:45): avc: denied { create } for pid=7556 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 80.976030] audit: type=1400 audit(1575822682.888:46): avc: denied { create } for pid=7556 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.45' (ECDSA) to the list of known hosts. 2019/12/08 16:31:32 parsed 1 programs 2019/12/08 16:31:32 executed programs: 0 [ 91.029492] IPVS: ftp: loaded support on port[0] = 21 [ 91.040534] IPVS: ftp: loaded support on port[0] = 21 [ 91.050123] IPVS: ftp: loaded support on port[0] = 21 [ 91.061080] IPVS: ftp: loaded support on port[0] = 21 [ 91.123760] IPVS: ftp: loaded support on port[0] = 21 [ 91.167470] IPVS: ftp: loaded support on port[0] = 21 [ 91.280212] chnl_net:caif_netlink_parms(): no params data found [ 91.336426] chnl_net:caif_netlink_parms(): no params data found [ 91.392592] chnl_net:caif_netlink_parms(): no params data found [ 91.430501] chnl_net:caif_netlink_parms(): no params data found [ 91.478341] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.485933] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.493816] device bridge_slave_0 entered promiscuous mode [ 91.530576] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.537396] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.544680] device bridge_slave_1 entered promiscuous mode [ 91.560115] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.567405] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.574784] device bridge_slave_0 entered promiscuous mode [ 91.583053] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.591355] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.599149] device bridge_slave_0 entered promiscuous mode [ 91.606388] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.612801] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.621275] device bridge_slave_0 entered promiscuous mode [ 91.651892] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.661100] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.668328] device bridge_slave_1 entered promiscuous mode [ 91.681177] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.687952] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.695232] device bridge_slave_1 entered promiscuous mode [ 91.702221] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.708838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.716017] device bridge_slave_1 entered promiscuous mode [ 91.730402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.753618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.772426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.784776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.812208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.821157] chnl_net:caif_netlink_parms(): no params data found [ 91.832602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.854703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.866823] team0: Port device team_slave_0 added [ 91.914295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.924982] team0: Port device team_slave_1 added [ 91.934715] team0: Port device team_slave_0 added [ 91.944502] team0: Port device team_slave_0 added [ 91.987710] team0: Port device team_slave_1 added [ 91.993890] team0: Port device team_slave_1 added [ 92.006868] team0: Port device team_slave_0 added [ 92.059171] device hsr_slave_0 entered promiscuous mode [ 92.126081] device hsr_slave_1 entered promiscuous mode [ 92.185703] team0: Port device team_slave_1 added [ 92.211574] chnl_net:caif_netlink_parms(): no params data found [ 92.289095] device hsr_slave_0 entered promiscuous mode [ 92.326264] device hsr_slave_1 entered promiscuous mode [ 92.365860] debugfs: Directory 'hsr0' with parent '/' already present! [ 92.428892] device hsr_slave_0 entered promiscuous mode [ 92.468201] device hsr_slave_1 entered promiscuous mode [ 92.516196] debugfs: Directory 'hsr0' with parent '/' already present! [ 92.557948] device hsr_slave_0 entered promiscuous mode [ 92.596142] device hsr_slave_1 entered promiscuous mode [ 92.635936] debugfs: Directory 'hsr0' with parent '/' already present! [ 92.663984] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.672798] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.680403] device bridge_slave_0 entered promiscuous mode [ 92.691730] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.699041] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.708560] device bridge_slave_1 entered promiscuous mode [ 92.742671] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.749873] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.757460] device bridge_slave_0 entered promiscuous mode [ 92.769659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.789632] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.796644] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.803622] device bridge_slave_1 entered promiscuous mode [ 92.826169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.835841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.849119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.884039] team0: Port device team_slave_0 added [ 92.906878] team0: Port device team_slave_0 added [ 92.916915] team0: Port device team_slave_1 added [ 92.924713] team0: Port device team_slave_1 added [ 92.998666] device hsr_slave_0 entered promiscuous mode [ 93.059373] device hsr_slave_1 entered promiscuous mode [ 93.135943] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.201543] device hsr_slave_0 entered promiscuous mode [ 93.256255] device hsr_slave_1 entered promiscuous mode [ 93.295905] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.311676] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.318254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.325493] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.332015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.374369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.393637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.416743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.442840] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.451048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.470611] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.488602] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.501685] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.512632] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.521722] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.534510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.544496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.551704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.559162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.577642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.587258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.595369] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.601946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.609497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.619448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.627467] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.633950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.642030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.663184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.673781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.683745] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 93.694722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.703448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.711598] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.718005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.725530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.733968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.741991] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.748415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.755237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.769892] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.793076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.801367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.809132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.817784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.825532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.834723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.842777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.851224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.860118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.867977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.887162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.898365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.913966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.922263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.929862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.938161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.946291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.954221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.964185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.972434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.980286] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.986735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.993664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.001979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.009936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.017415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.036117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.050041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.057396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.064519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.073188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.081764] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.088329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.096875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.103903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.111686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.119761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.143942] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.152615] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.161005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.172131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.182515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.190557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.197964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.206675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.217166] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.230711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.253346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.264309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.287395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.294820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.303709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.312057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.320222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.328992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.337000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.344656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.352855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.361217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.369276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.377095] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.383456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.390542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.399086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.407349] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.413907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.421118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.429453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.437455] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.443959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.451222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.459165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.468711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.476399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.483919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.492201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.499944] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.506352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.522761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.534120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.570251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.579511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.588485] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.594875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.602948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.611065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.619105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.628327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.636684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.644640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.652773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.661300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.669511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.677744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.685766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.693867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.702101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.710016] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.716542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.723606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.732037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.742239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.749639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.781520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.793637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.820217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.879909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.888087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.900915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.910177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.919604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.930068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.938628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.946778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.954385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.962306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.970819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.980806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.990369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.999125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.010284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.019410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.029531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.045995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.061894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.083293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.134114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.164035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.275957] ================================================================== [ 95.286474] BUG: KASAN: slab-out-of-bounds in hci_event_packet+0x7fcf/0x9a96 [ 95.294641] Read of size 1 at addr ffff888094e26c00 by task kworker/u5:2/7670 [ 95.302382] [ 95.304380] CPU: 1 PID: 7670 Comm: kworker/u5:2 Not tainted 5.4.0-syzkaller #0 [ 95.313774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.313800] Workqueue: hci2 hci_rx_work [ 95.313806] Call Trace: [ 95.313891] dump_stack+0x12d/0x187 [ 95.313907] print_address_description.constprop.8.cold.10+0x9/0x31d [ 95.313914] ? hci_event_packet+0x7fcf/0x9a96 [ 95.313919] __kasan_report.cold.11+0x1b/0x3a [ 95.313923] ? hci_event_packet+0x7fcf/0x9a96 [ 95.313929] ? hci_event_packet+0x7fcf/0x9a96 [ 95.313945] kasan_report+0x12/0x20 [ 95.313950] __asan_report_load1_noabort+0x14/0x20 [ 95.313955] hci_event_packet+0x7fcf/0x9a96 [ 95.356145] ? unwind_next_frame.part.6+0x1ab/0xa20 [ 95.356160] ? hci_cmd_complete_evt+0xb690/0xb690 [ 95.356171] ? unwind_next_frame+0x3e/0x50 [ 95.356177] ? profile_setup.cold.14+0xa0/0xa0 [ 95.356187] ? arch_stack_walk+0x8a/0xf0 [ 95.356198] ? ret_from_fork+0x3a/0x50 [ 95.356204] ? stack_trace_save+0x82/0xb0 [ 95.356208] ? stack_trace_consume_entry+0x170/0x170 [ 95.356212] ? profile_setup.cold.14+0xa0/0xa0 [ 95.356223] ? save_trace+0x3e/0x980 [ 95.356235] ? __lock_acquire+0x2cd5/0x4ef0 [ 95.356254] ? __kasan_check_read+0x11/0x20 [ 95.356259] ? mark_lock+0xc5/0x11d0 [ 95.356267] ? mark_held_locks+0xb8/0x130 [ 95.356273] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 95.356279] ? skb_dequeue+0x11d/0x1b0 [ 95.356283] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 95.356287] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 95.356296] ? trace_hardirqs_on+0x28/0x1b0 [ 95.356308] hci_rx_work+0x53d/0x930 [ 95.364745] kobject: 'hci4' (00000000e946358c): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4' [ 95.365678] ? hci_rx_work+0x53d/0x930 [ 95.365691] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 95.365700] ? trace_hardirqs_on+0x28/0x1b0 [ 95.365710] process_one_work+0x85b/0x1630 [ 95.365720] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 95.365734] worker_thread+0x85/0xb60 [ 95.365740] ? __kthread_parkme+0x47/0x1a0 [ 95.365751] kthread+0x334/0x3f0 [ 95.365755] ? process_one_work+0x1630/0x1630 [ 95.365759] ? kthread_mod_delayed_work+0x190/0x190 [ 95.365769] ret_from_fork+0x3a/0x50 [ 95.365782] [ 95.365787] Allocated by task 7689: [ 95.365797] save_stack+0x21/0x90 [ 95.365802] __kasan_kmalloc.constprop.9+0xc7/0xd0 [ 95.365806] kasan_kmalloc+0x9/0x10 [ 95.365811] __kmalloc_node_track_caller+0x4d/0x70 [ 95.365819] __kmalloc_reserve.isra.46+0x2c/0xc0 [ 95.365822] __alloc_skb+0xd7/0x570 [ 95.365828] vhci_write+0xa8/0x3e0 [ 95.365835] new_sync_write+0x402/0x7e0 [ 95.365838] __vfs_write+0x97/0x110 [ 95.365843] vfs_write+0x18a/0x520 [ 95.365847] ksys_write+0x105/0x220 [ 95.365851] __x64_sys_write+0x6e/0xb0 [ 95.365859] do_syscall_64+0xd0/0x600 [ 95.365864] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.379011] kobject: 'rfkill9' (00000000d3a0d7df): kobject_add_internal: parent: 'hci4', set: 'devices' [ 95.380119] [ 95.380124] Freed by task 0: [ 95.380127] (stack is not available) [ 95.380129] [ 95.380135] The buggy address belongs to the object at ffff888094e26800 [ 95.380135] which belongs to the cache kmalloc-1k of size 1024 [ 95.380139] The buggy address is located 0 bytes to the right of [ 95.380139] 1024-byte region [ffff888094e26800, ffff888094e26c00) [ 95.380142] The buggy address belongs to the page: [ 95.380148] page:ffffea0002538980 refcount:1 mapcount:0 mapping:ffff8880aa800c40 index:0x0 [ 95.380156] raw: 01fffc0000000200 ffffea00025190c8 ffffea0002550fc8 ffff8880aa800c40 [ 95.380165] raw: 0000000000000000 ffff888094e26000 0000000100000002 0000000000000000 [ 95.380168] page dumped because: kasan: bad access detected [ 95.380170] [ 95.380171] Memory state around the buggy address: [ 95.380175] ffff888094e26b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.380179] ffff888094e26b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.392222] kobject: 'rfkill9' (00000000d3a0d7df): kobject_uevent_env [ 95.393984] >ffff888094e26c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.393988] ^ [ 95.393992] ffff888094e26c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.393995] ffff888094e26d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.393998] ================================================================== [ 95.394002] Disabling lock debugging due to kernel taint [ 95.397020] kobject: 'loop3' (000000004da26631): kobject_uevent_env [ 95.402869] kobject: 'rfkill9' (00000000d3a0d7df): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill9' [ 95.407115] Kernel panic - not syncing: panic_on_warn set ... [ 95.407126] CPU: 1 PID: 7670 Comm: kworker/u5:2 Tainted: G B 5.4.0-syzkaller #0 [ 95.407128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.407143] Workqueue: hci2 hci_rx_work [ 95.407147] Call Trace: [ 95.407162] dump_stack+0x12d/0x187 [ 95.407170] ? hci_event_packet+0x7f00/0x9a96 [ 95.407178] panic+0x22a/0x4f5 [ 95.407182] ? add_taint.cold.7+0x11/0x11 [ 95.407191] ? ___preempt_schedule+0x16/0x18 [ 95.407196] ? hci_event_packet+0x7fcf/0x9a96 [ 95.407202] end_report+0x47/0x4f [ 95.407206] __kasan_report.cold.11+0xe/0x3a [ 95.407210] ? hci_event_packet+0x7fcf/0x9a96 [ 95.407215] ? hci_event_packet+0x7fcf/0x9a96 [ 95.407218] kasan_report+0x12/0x20 [ 95.407222] __asan_report_load1_noabort+0x14/0x20 [ 95.407225] hci_event_packet+0x7fcf/0x9a96 [ 95.407238] ? unwind_next_frame.part.6+0x1ab/0xa20 [ 95.407244] ? hci_cmd_complete_evt+0xb690/0xb690 [ 95.407256] ? unwind_next_frame+0x3e/0x50 [ 95.407262] ? profile_setup.cold.14+0xa0/0xa0 [ 95.407270] ? arch_stack_walk+0x8a/0xf0 [ 95.407277] ? ret_from_fork+0x3a/0x50 [ 95.407281] ? stack_trace_save+0x82/0xb0 [ 95.407284] ? stack_trace_consume_entry+0x170/0x170 [ 95.407287] ? profile_setup.cold.14+0xa0/0xa0 [ 95.407296] ? save_trace+0x3e/0x980 [ 95.407302] ? __lock_acquire+0x2cd5/0x4ef0 [ 95.407314] ? __kasan_check_read+0x11/0x20 [ 95.407318] ? mark_lock+0xc5/0x11d0 [ 95.407325] ? mark_held_locks+0xb8/0x130 [ 95.407329] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 95.407335] ? skb_dequeue+0x11d/0x1b0 [ 95.407339] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 95.407342] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 95.407350] ? trace_hardirqs_on+0x28/0x1b0 [ 95.407357] hci_rx_work+0x53d/0x930 [ 95.407360] ? hci_rx_work+0x53d/0x930 [ 95.407367] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 95.407370] ? trace_hardirqs_on+0x28/0x1b0 [ 95.407377] process_one_work+0x85b/0x1630 [ 95.407384] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 95.407392] worker_thread+0x85/0xb60 [ 95.407399] ? __kthread_parkme+0x47/0x1a0 [ 95.407407] kthread+0x334/0x3f0 [ 95.407411] ? process_one_work+0x1630/0x1630 [ 95.407415] ? kthread_mod_delayed_work+0x190/0x190 [ 95.407420] ret_from_fork+0x3a/0x50 [ 95.409240] Kernel Offset: disabled [ 95.981048] Rebooting in 86400 seconds..