[ 38.465807] audit: type=1400 audit(1581734216.451:37): avc: denied { map } for pid=6980 comm="syz-fuzzer" path="/root/syzkaller-shm126257368" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.741042] IPVS: ftp: loaded support on port[0] = 21 [ 39.870301] can: request_module (can-proto-0) failed. [ 39.883216] can: request_module (can-proto-0) failed. [ 40.065737] audit: type=1400 audit(1581734218.051:38): avc: denied { create } for pid=6980 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 40.090245] audit: type=1400 audit(1581734218.051:39): avc: denied { create } for pid=6980 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.114222] audit: type=1400 audit(1581734218.051:40): avc: denied { create } for pid=6980 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 40.276728] random: sshd: uninitialized urandom read (32 bytes read) [ 41.061039] random: sshd: uninitialized urandom read (32 bytes read) [ 41.282506] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. 2020/02/15 02:37:05 parsed 1 programs 2020/02/15 02:37:05 executed programs: 0 [ 47.551013] IPVS: ftp: loaded support on port[0] = 21 [ 48.297111] IPVS: ftp: loaded support on port[0] = 21 [ 48.343274] chnl_net:caif_netlink_parms(): no params data found [ 48.392438] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.398886] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.406834] device bridge_slave_0 entered promiscuous mode [ 48.407160] IPVS: ftp: loaded support on port[0] = 21 [ 48.444120] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.450554] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.457569] device bridge_slave_1 entered promiscuous mode [ 48.482006] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.493744] chnl_net:caif_netlink_parms(): no params data found [ 48.503205] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.533057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.540728] team0: Port device team_slave_0 added [ 48.548052] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.555424] team0: Port device team_slave_1 added [ 48.560898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.571290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.621292] IPVS: ftp: loaded support on port[0] = 21 [ 48.642062] device hsr_slave_0 entered promiscuous mode [ 48.680353] device hsr_slave_1 entered promiscuous mode [ 48.724905] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.738975] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.748043] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.754621] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.761976] device bridge_slave_0 entered promiscuous mode [ 48.778880] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.785362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.792849] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.799382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.810445] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.817197] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.824382] device bridge_slave_1 entered promiscuous mode [ 48.878074] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.888085] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.902162] chnl_net:caif_netlink_parms(): no params data found [ 48.956620] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.964310] team0: Port device team_slave_0 added [ 48.982890] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.989400] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.997143] device bridge_slave_0 entered promiscuous mode [ 48.997918] IPVS: ftp: loaded support on port[0] = 21 [ 49.004468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.016089] team0: Port device team_slave_1 added [ 49.022137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.029664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.043677] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.051415] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.058593] device bridge_slave_1 entered promiscuous mode [ 49.163057] device hsr_slave_0 entered promiscuous mode [ 49.220479] device hsr_slave_1 entered promiscuous mode [ 49.263149] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.270587] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.279357] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.308895] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.336607] chnl_net:caif_netlink_parms(): no params data found [ 49.345644] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.353287] team0: Port device team_slave_0 added [ 49.367737] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.374323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.381123] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.387488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.396652] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.403011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.413365] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.422235] team0: Port device team_slave_1 added [ 49.428507] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.435926] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.443864] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.452472] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.459225] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.475734] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.484363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.499384] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.514460] IPVS: ftp: loaded support on port[0] = 21 [ 49.528648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.573550] device hsr_slave_0 entered promiscuous mode [ 49.610517] device hsr_slave_1 entered promiscuous mode [ 49.660781] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.669821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.676947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.695406] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.701650] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.708378] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.724464] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.731091] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.738124] device bridge_slave_0 entered promiscuous mode [ 49.745110] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.752007] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.759071] device bridge_slave_1 entered promiscuous mode [ 49.781526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.800840] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.809781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.823991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.832132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.839738] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.846320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.855147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.904187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.912674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.920716] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.927143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.937339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.955503] chnl_net:caif_netlink_parms(): no params data found [ 49.967068] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.974511] team0: Port device team_slave_0 added [ 49.980627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.987815] team0: Port device team_slave_1 added [ 49.994492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.005644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.017273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.024742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.035533] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.047058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.057038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.067895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.092784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.103177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.111055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.118905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.126890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.134723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.193594] device hsr_slave_0 entered promiscuous mode [ 50.230552] device hsr_slave_1 entered promiscuous mode [ 50.273477] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.282250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.305465] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.315801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.323664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.335793] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.342493] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.349682] device bridge_slave_0 entered promiscuous mode [ 50.356585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.364935] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.374079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.383733] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.389962] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.396388] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.404444] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.411837] device bridge_slave_1 entered promiscuous mode [ 50.423027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.430632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.437617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.445612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.465790] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.472314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.521784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.532173] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.541372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.562672] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.569872] team0: Port device team_slave_0 added [ 50.579638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.587525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.595516] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.601912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.610562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.624557] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.632724] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.639922] team0: Port device team_slave_1 added [ 50.646068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.653458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.665305] chnl_net:caif_netlink_parms(): no params data found [ 50.673522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.681960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.689718] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.696159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.705771] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.724777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.743970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.793754] device hsr_slave_0 entered promiscuous mode [ 50.830567] device hsr_slave_1 entered promiscuous mode [ 50.870912] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.878016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.888138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.909226] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.921160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.935581] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.942657] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.949712] device bridge_slave_0 entered promiscuous mode [ 50.957839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.973203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.981266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.989009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.996786] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.004709] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.012633] device bridge_slave_1 entered promiscuous mode [ 51.035772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.044845] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.058456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.067176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.079391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.089907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.097910] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.119232] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.127430] team0: Port device team_slave_0 added [ 51.135304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.142867] team0: Port device team_slave_1 added [ 51.153942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.163022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.177097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.186630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.197013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.206655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.214551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.223628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.238807] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.243207] hrtimer: interrupt took 24907 ns [ 51.250625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.266913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.285449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.298948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.309729] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.326082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.337770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.368624] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.380659] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.386781] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.396447] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.411628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.418583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.482467] device hsr_slave_0 entered promiscuous mode [ 51.520557] device hsr_slave_1 entered promiscuous mode [ 51.560920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.568761] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.583866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.592661] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.598771] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.614986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.624140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.633418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.644687] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.651106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.661343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.670336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.682441] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.689520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.696706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.704954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.713122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.721152] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.727740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.735090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.743345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.757978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.778865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.788493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.796361] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.802876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.811542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.820290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.839453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.847145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.855332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.863023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.871076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.878734] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.885494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.893625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.902283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.918034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.926820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.935994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.946782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.956821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.969544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.978262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.986101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.994573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.003103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.018884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.028603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.038751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.047701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.059405] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.067985] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.075543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.085357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.098707] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.107641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.115442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.124445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.131946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.139692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.151808] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.157917] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.166687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.175635] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.182460] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.188751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.196033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.203592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.212828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.222214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.232453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.243033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.251497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.259264] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.265891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.272857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.281011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.288696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.296737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.305144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.313611] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.322006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.331518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.339877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.349921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.358329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.366306] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.372968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.379851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.387618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.395469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.403644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.411845] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.419030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.426258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.435674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.447381] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.454093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.464774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.474614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.489891] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.500986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.511054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.523581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.531400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.539004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.547003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.555125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.567467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.574968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.583389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.591144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.597710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.605213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.614764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.623007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.630148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.637862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.648811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.661894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.671162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.679080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.688227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.697895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.706516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.721216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.729253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.739985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.747881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.758802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.775750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.784287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.796802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.808150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.822502] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.828574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2020/02/15 02:37:10 executed programs: 14 [ 52.848911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.858630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.872513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.895135] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.906358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.914427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.927620] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.934134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.946260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.967908] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.986566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.619428] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 54.632985] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 54.694278] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 55.427218] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 55.478748] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 56.997594] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/02/15 02:37:15 executed programs: 220 [ 59.285868] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 60.769705] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 61.307404] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 61.798902] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 62.119481] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 62.294842] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/02/15 02:37:20 executed programs: 488 [ 62.835032] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 63.135155] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 63.318219] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 66.673364] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 66.803977] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 67.386884] ================================================================== [ 67.394449] BUG: KASAN: use-after-free in inet_shutdown+0x287/0x300 [ 67.400864] Read of size 4 at addr ffff888087dd6600 by task syz-executor.5/9997 [ 67.408451] [ 67.410100] CPU: 0 PID: 9997 Comm: syz-executor.5 Not tainted 4.14.171-syzkaller #0 [ 67.417890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.427250] Call Trace: [ 67.429846] dump_stack+0xf7/0x13b [ 67.433394] ? inet_shutdown+0x287/0x300 [ 67.437447] print_address_description.cold.7+0x9/0x1c9 [ 67.442818] ? inet_shutdown+0x287/0x300 [ 67.446979] kasan_report.cold.8+0x11a/0x2d3 [ 67.451502] __asan_report_load4_noabort+0x14/0x20 [ 67.456546] inet_shutdown+0x287/0x300 [ 67.460442] pppol2tp_session_close+0x91/0xc0 [ 67.464940] l2tp_tunnel_closeall+0x1df/0x2f0 [ 67.469585] ? trace_hardirqs_on+0xd/0x10 [ 67.473740] l2tp_udp_encap_destroy+0x7d/0xc0 [ 67.478244] udpv6_destroy_sock+0x89/0xb0 [ 67.482395] sk_common_release+0x5e/0x2c0 [ 67.486549] udp_lib_close+0x9/0x10 [ 67.490190] inet_release+0xd9/0x1c0 [ 67.493918] inet6_release+0x46/0x60 [ 67.497630] __sock_release+0xc2/0x2a0 [ 67.501520] sock_close+0x10/0x20 [ 67.504974] __fput+0x232/0x750 [ 67.508312] ? _raw_spin_unlock_irq+0x27/0x80 [ 67.512817] ____fput+0x9/0x10 [ 67.516191] task_work_run+0xe5/0x170 [ 67.519997] exit_to_usermode_loop+0x16a/0x1b0 [ 67.524692] do_syscall_64+0x416/0x5b0 [ 67.528624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 67.533581] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 67.538790] RIP: 0033:0x459a29 [ 67.542074] RSP: 002b:00007f9c7f074c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 67.549779] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459a29 [ 67.557050] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 67.564464] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 67.571737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c7f0756d4 [ 67.579011] R13: 00000000004bff90 R14: 00000000004d1f00 R15: 00000000ffffffff [ 67.586292] [ 67.587943] Allocated by task 10003: [ 67.591663] save_stack_trace+0x16/0x20 [ 67.595819] save_stack+0x43/0xd0 [ 67.599289] kasan_kmalloc+0xc7/0xe0 [ 67.603017] kasan_slab_alloc+0x12/0x20 [ 67.607123] kmem_cache_alloc+0x12e/0x790 [ 67.611269] sock_alloc_inode+0x18/0x230 [ 67.615331] alloc_inode+0x56/0x150 [ 67.618959] new_inode_pseudo+0xc/0xd0 [ 67.622989] sock_alloc+0x3c/0x280 [ 67.626635] __sock_create+0x7a/0x540 [ 67.630437] SyS_socket+0xc6/0x1a0 [ 67.634113] do_syscall_64+0x1c7/0x5b0 [ 67.638016] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 67.643284] [ 67.645032] Freed by task 9990: [ 67.648314] save_stack_trace+0x16/0x20 [ 67.652291] save_stack+0x43/0xd0 [ 67.655745] kasan_slab_free+0x71/0xc0 [ 67.659632] kmem_cache_free+0x80/0x2d0 [ 67.663615] sock_destroy_inode+0x50/0x60 [ 67.667753] destroy_inode+0xb3/0x100 [ 67.672323] evict+0x36f/0x590 [ 67.675561] iput+0x3ac/0x810 [ 67.678729] dentry_unlink_inode+0x23e/0x2f0 [ 67.683224] __dentry_kill+0x2d2/0x540 [ 67.687103] dput.part.27+0x49a/0x610 [ 67.690894] dput+0xe/0x20 [ 67.693739] __fput+0x3f7/0x750 [ 67.697067] ____fput+0x9/0x10 [ 67.700495] task_work_run+0xe5/0x170 [ 67.704288] exit_to_usermode_loop+0x16a/0x1b0 [ 67.708855] do_syscall_64+0x416/0x5b0 [ 67.712845] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 67.718289] [ 67.719899] The buggy address belongs to the object at ffff888087dd6600 [ 67.719899] which belongs to the cache sock_inode_cache of size 992 [ 67.732991] The buggy address is located 0 bytes inside of [ 67.732991] 992-byte region [ffff888087dd6600, ffff888087dd69e0) [ 67.744680] The buggy address belongs to the page: [ 67.749596] page:ffffea00021f7580 count:1 mapcount:0 mapping:ffff888087dd6180 index:0xffff888087dd6ffd [ 67.759055] flags: 0x1fffc0000000100(slab) [ 67.763271] raw: 01fffc0000000100 ffff888087dd6180 ffff888087dd6ffd 0000000100000003 [ 67.771154] raw: ffffea00021f7560 ffffea00021f75e0 ffff88821b75e6c0 0000000000000000 [ 67.779104] page dumped because: kasan: bad access detected [ 67.784851] [ 67.786494] Memory state around the buggy address: [ 67.791521] ffff888087dd6500: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 67.798863] ffff888087dd6580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.806210] >ffff888087dd6600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.813551] ^ [ 67.817011] ffff888087dd6680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.824358] ffff888087dd6700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.831829] ================================================================== [ 67.839358] Disabling lock debugging due to kernel taint [ 67.851812] Kernel panic - not syncing: panic_on_warn set ... [ 67.851812] [ 67.859198] CPU: 0 PID: 9997 Comm: syz-executor.5 Tainted: G B 4.14.171-syzkaller #0 [ 67.868201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.877715] Call Trace: [ 67.880298] dump_stack+0xf7/0x13b [ 67.883854] ? inet_shutdown+0x287/0x300 2020/02/15 02:37:25 executed programs: 739 [ 67.887961] panic+0x1b0/0x358 [ 67.891188] ? add_taint.cold.5+0x11/0x11 [ 67.895338] ? ___preempt_schedule+0x16/0x18 [ 67.899742] ? inet_shutdown+0x287/0x300 [ 67.903805] kasan_end_report+0x47/0x4f [ 67.907773] kasan_report.cold.8+0x76/0x2d3 [ 67.912091] __asan_report_load4_noabort+0x14/0x20 [ 67.917015] inet_shutdown+0x287/0x300 [ 67.920905] pppol2tp_session_close+0x91/0xc0 [ 67.925388] l2tp_tunnel_closeall+0x1df/0x2f0 [ 67.929972] ? trace_hardirqs_on+0xd/0x10 [ 67.934205] l2tp_udp_encap_destroy+0x7d/0xc0 [ 67.938686] udpv6_destroy_sock+0x89/0xb0 [ 67.942844] sk_common_release+0x5e/0x2c0 [ 67.946980] udp_lib_close+0x9/0x10 [ 67.950589] inet_release+0xd9/0x1c0 [ 67.954328] inet6_release+0x46/0x60 [ 67.958029] __sock_release+0xc2/0x2a0 [ 67.961927] sock_close+0x10/0x20 [ 67.965364] __fput+0x232/0x750 [ 67.968743] ? _raw_spin_unlock_irq+0x27/0x80 [ 67.973232] ____fput+0x9/0x10 [ 67.976415] task_work_run+0xe5/0x170 [ 67.980422] exit_to_usermode_loop+0x16a/0x1b0 [ 67.984985] do_syscall_64+0x416/0x5b0 [ 67.988877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 67.993708] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 67.998879] RIP: 0033:0x459a29 [ 68.002048] RSP: 002b:00007f9c7f074c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 68.009895] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459a29 [ 68.017152] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 68.024434] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 68.031802] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c7f0756d4 [ 68.039173] R13: 00000000004bff90 R14: 00000000004d1f00 R15: 00000000ffffffff [ 68.048319] Kernel Offset: disabled [ 68.051949] Rebooting in 86400 seconds..