[ 31.131757] audit: type=1400 audit(1520419421.674:10): avc: denied { sys_admin } for pid=4147 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 31.138795] IPVS: ftp: loaded support on port[0] = 21 [ 31.179826] audit: type=1400 audit(1520419421.722:11): avc: denied { net_admin } for pid=4148 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 31.487438] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.953428] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 31.959538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.006264] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.056232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.071402] audit: type=1400 audit(1520419422.614:12): avc: denied { sys_chroot } for pid=4148 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.242787] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2018/03/07 10:43:49 parsed 1 programs 2018/03/07 10:43:49 executed programs: 0 [ 39.115242] IPVS: ftp: loaded support on port[0] = 21 [ 39.161669] IPVS: ftp: loaded support on port[0] = 21 [ 39.202521] IPVS: ftp: loaded support on port[0] = 21 [ 39.253050] IPVS: ftp: loaded support on port[0] = 21 [ 39.314562] IPVS: ftp: loaded support on port[0] = 21 [ 39.406686] IPVS: ftp: loaded support on port[0] = 21 [ 39.504825] IPVS: ftp: loaded support on port[0] = 21 [ 39.616550] IPVS: ftp: loaded support on port[0] = 21 [ 40.609697] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.633403] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.641375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.651552] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.973070] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.992594] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.317452] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.440638] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.030937] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.037189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.069244] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.075538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.103454] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.109787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.239395] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.245535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.290276] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.328628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.367568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.489700] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.520654] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.526810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.559601] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.566209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.575589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.598157] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.610461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.616588] kasan: CONFIG_KASAN_INLINE enabled [ 43.621776] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 43.622657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.629183] general protection fault: 0000 [#1] SMP KASAN [ 43.641173] Dumping ftrace buffer: [ 43.644700] (ftrace buffer empty) [ 43.648422] Modules linked in: [ 43.651605] CPU: 1 PID: 5512 Comm: syz-executor4 Not tainted 4.16.0-rc4+ #63 [ 43.652454] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.658765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.658782] RIP: 0010:l2tp_tunnel_create+0x1df/0x1860 [ 43.658789] RSP: 0018:ffff8801caf276d8 EFLAGS: 00010293 [ 43.664837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.674157] RAX: ffff8801c2d2e100 RBX: ffff8801caf27968 RCX: ffffffff854a08df [ 43.674161] RDX: 0000000000000000 RSI: 1ffff100395e4eb1 RDI: ffff8801cc232830 [ 43.674171] RBP: ffff8801caf27990 R08: 0000000000000000 R09: 1ffff100395e4e88 [ 43.674176] R10: ffff8801caf27408 R11: 0000000000000001 R12: ffff8801cc232800 [ 43.674182] R13: ffff8801caf27c00 R14: ffff8801caf27b20 R15: ffff8801caf27748 [ 43.687504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.690537] FS: 00007f4ed11cd700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 43.690542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.690546] CR2: 00007fb058ceb010 CR3: 00000001cf627005 CR4: 00000000001606e0 [ 43.690553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.690559] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.699216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.705053] Call Trace: [ 43.705076] ? l2tp_init_net+0x3c0/0x3c0 [ 43.705082] ? l2tp_tunnel_get+0x3c7/0x690 [ 43.705093] ? lock_downgrade+0x980/0x980 [ 43.705110] ? __local_bh_enable_ip+0x121/0x230 [ 43.705118] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 43.705124] ? l2tp_tunnel_get+0x3c7/0x690 [ 43.705131] ? trace_hardirqs_on+0xd/0x10 [ 43.705137] ? __local_bh_enable_ip+0x121/0x230 [ 43.705144] ? l2tp_tunnel_get+0x401/0x690 [ 43.705152] ? l2tp_tunnel_find_nth+0x620/0x620 [ 43.705161] ? mark_held_locks+0xaf/0x100 [ 43.705170] ? do_raw_spin_trylock+0x190/0x190 [ 43.705177] ? __local_bh_enable_ip+0x121/0x230 [ 43.705186] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 43.705197] ? lock_sock_nested+0x91/0x110 [ 43.729660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.732990] ? trace_hardirqs_on+0xd/0x10 [ 43.733000] ? __local_bh_enable_ip+0x121/0x230 [ 43.733015] pppol2tp_connect+0x14b8/0x1dd0 [ 43.828896] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.830414] ? pppol2tp_recv_payload_hook+0x1b0/0x1b0 [ 43.830427] ? selinux_netlbl_socket_connect+0x76/0x1b0 [ 43.835094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.840064] ? selinux_socket_connect+0x311/0x730 [ 43.840074] ? lock_downgrade+0x980/0x980 [ 43.840083] ? selinux_socket_setsockopt+0x80/0x80 [ 43.840090] ? lock_release+0xa40/0xa40 [ 43.840097] ? check_same_owner+0x320/0x320 [ 43.840107] ? __check_object_size+0x8b/0x530 [ 43.840119] ? __might_sleep+0x95/0x190 [ 43.840139] ? security_socket_connect+0x89/0xb0 [ 43.840151] SYSC_connect+0x213/0x4a0 [ 43.840163] ? SYSC_bind+0x410/0x410 [ 43.840172] ? get_unused_fd_flags+0x121/0x190 [ 43.840192] ? trace_hardirqs_off+0xd/0x10 [ 43.840201] ? exit_to_usermode_loop+0x198/0x2f0 [ 43.840211] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 43.840222] SyS_connect+0x24/0x30 [ 43.840230] ? SyS_accept+0x30/0x30 [ 43.846721] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.850905] do_syscall_64+0x281/0x940 [ 43.850915] ? __do_page_fault+0xc90/0xc90 [ 43.850922] ? _raw_spin_unlock_irq+0x27/0x70 [ 43.850932] ? finish_task_switch+0x1c1/0x7e0 [ 43.855074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.859739] ? syscall_return_slowpath+0x550/0x550 [ 43.859747] ? syscall_return_slowpath+0x2ac/0x550 [ 43.859755] ? prepare_exit_to_usermode+0x350/0x350 [ 43.859764] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 43.943795] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.948233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.948248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 43.948257] RIP: 0033:0x453e69 [ 43.961558] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.965274] RSP: 002b:00007f4ed11ccc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 43.965282] RAX: ffffffffffffffda RBX: 00007f4ed11cd6d4 RCX: 0000000000453e69 [ 43.965286] RDX: 000000000000002e RSI: 00000000205fafd2 RDI: 0000000000000004 [ 43.965290] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 43.965294] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 43.965298] R13: 000000000000005c R14: 00000000006f0940 R15: 0000000000000000 [ 43.965312] Code: [ 43.991974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.994139] 7c 24 30 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 70 15 00 00 48 8b 85 80 fd ff ff 49 39 44 24 30 0f 85 db 12 00 00 e8 51 fd 26 fc 02 00 00 00 00 fc ff df 3c 02 7f 08 84 c0 0f 85 ba 11 00 00 [ 44.097399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.100472] RIP: l2tp_tunnel_create+0x1df/0x1860 RSP: ffff8801caf276d8 [ 44.101271] ---[ end trace 61f421c2bd0222a9 ]--- [ 44.117964] Kernel panic - not syncing: Fatal exception [ 44.121126] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.123755] Dumping ftrace buffer: [ 44.123760] (ftrace buffer empty) [ 44.123762] Kernel Offset: disabled [ 44.140579] Rebooting in 86400 seconds..