[ 46.076162] audit: type=1400 audit(1584425284.625:37): avc: denied { map } for pid=6944 comm="syz-fuzzer" path="/root/syzkaller-shm669239820" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 46.341014] IPVS: ftp: loaded support on port[0] = 21 [ 47.468582] can: request_module (can-proto-0) failed. [ 47.480210] can: request_module (can-proto-0) failed. [ 47.662685] audit: type=1400 audit(1584425286.215:38): avc: denied { create } for pid=6944 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 47.686538] audit: type=1400 audit(1584425286.215:39): avc: denied { create } for pid=6944 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 47.710210] audit: type=1400 audit(1584425286.215:40): avc: denied { create } for pid=6944 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 47.988703] random: sshd: uninitialized urandom read (32 bytes read) [ 48.748749] random: sshd: uninitialized urandom read (32 bytes read) [ 48.934556] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts. 2020/03/17 06:08:14 parsed 1 programs 2020/03/17 06:08:14 executed programs: 0 [ 55.981047] IPVS: ftp: loaded support on port[0] = 21 [ 56.826767] IPVS: ftp: loaded support on port[0] = 21 [ 56.856208] chnl_net:caif_netlink_parms(): no params data found [ 56.884750] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.892435] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.899854] device bridge_slave_0 entered promiscuous mode [ 56.907979] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.915219] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.923713] device bridge_slave_1 entered promiscuous mode [ 56.941548] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.951144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.967178] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.974799] team0: Port device team_slave_0 added [ 56.980386] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.987502] team0: Port device team_slave_1 added [ 56.993153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.000585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.071993] device hsr_slave_0 entered promiscuous mode [ 57.110545] device hsr_slave_1 entered promiscuous mode [ 57.160789] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.170967] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.201427] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.208414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.215736] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.222181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.223372] IPVS: ftp: loaded support on port[0] = 21 [ 57.301410] chnl_net:caif_netlink_parms(): no params data found [ 57.351522] IPVS: ftp: loaded support on port[0] = 21 [ 57.377827] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 57.384126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.393037] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.399455] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.406568] device bridge_slave_0 entered promiscuous mode [ 57.434152] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.440673] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.447630] device bridge_slave_1 entered promiscuous mode [ 57.472142] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.479314] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.489871] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.502054] chnl_net:caif_netlink_parms(): no params data found [ 57.524267] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 57.530749] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.546479] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.554708] team0: Port device team_slave_0 added [ 57.559876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.568932] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.576524] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.591485] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.601468] team0: Port device team_slave_1 added [ 57.607106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.617617] IPVS: ftp: loaded support on port[0] = 21 [ 57.620701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.631985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.640050] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.646425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.682473] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.688858] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.696484] device bridge_slave_0 entered promiscuous mode [ 57.703170] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.709539] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.717649] device bridge_slave_1 entered promiscuous mode [ 57.762073] device hsr_slave_0 entered promiscuous mode [ 57.800438] device hsr_slave_1 entered promiscuous mode [ 57.860914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.878366] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.885749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.893717] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.900110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.909153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.917685] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.928815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.942494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.950347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.966972] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.977064] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.989056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.010835] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.018319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.026513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.037844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.048890] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 58.056245] team0: Port device team_slave_0 added [ 58.079724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.081409] IPVS: ftp: loaded support on port[0] = 21 [ 58.088511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.099780] team0: Port device team_slave_1 added [ 58.105683] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.145151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.153068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.167115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 58.174644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.243014] device hsr_slave_0 entered promiscuous mode [ 58.280454] device hsr_slave_1 entered promiscuous mode [ 58.330686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.336891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.344882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.354497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.363098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.374611] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 58.380786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.396072] chnl_net:caif_netlink_parms(): no params data found [ 58.407856] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 58.415423] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 58.422585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.430562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.493918] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.507886] chnl_net:caif_netlink_parms(): no params data found [ 58.544356] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.553838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.574612] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.581168] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.588244] device bridge_slave_0 entered promiscuous mode [ 58.595377] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.601881] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.608878] device bridge_slave_1 entered promiscuous mode [ 58.620758] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.629121] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.635988] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.659120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.666221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.676330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.696968] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.706266] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.717000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.726943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.741566] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.747991] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.755488] device bridge_slave_0 entered promiscuous mode [ 58.762958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.771792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.779375] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.785777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.793003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.801566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.809156] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.815668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.822568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.847027] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 58.854682] team0: Port device team_slave_0 added [ 58.861837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.872843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.879968] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.886762] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.894965] device bridge_slave_1 entered promiscuous mode [ 58.922296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.929936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.938389] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.947292] team0: Port device team_slave_1 added [ 58.954993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.972185] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.997870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.005671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.013763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.022690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.034820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.056209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.078006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.091739] chnl_net:caif_netlink_parms(): no params data found [ 59.105212] audit: type=1400 audit(1584425297.655:41): avc: denied { map } for pid=7066 comm="syz-executor.5" path="/dev/ashmem" dev="devtmpfs" ino=1878 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 59.133126] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.141278] memory commitment underflow [ 59.141367] ------------[ cut here ]------------ [ 59.150451] WARNING: CPU: 1 PID: 7066 at mm/util.c:606 __vm_enough_memory.cold.5+0x13/0x62 [ 59.152104] team0: Port device team_slave_0 added [ 59.158858] Kernel panic - not syncing: panic_on_warn set ... [ 59.158858] [ 59.164935] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.171086] CPU: 1 PID: 7066 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 59.171089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.171091] Call Trace: [ 59.171107] dump_stack+0xf7/0x13b [ 59.171117] ? __vm_enough_memory.cold.5+0x13/0x62 [ 59.171123] panic+0x1b0/0x36a [ 59.171128] ? add_taint.cold.5+0x11/0x11 [ 59.171138] ? __vm_enough_memory.cold.5+0x13/0x62 [ 59.171187] __warn.cold.8+0x25/0x2a [ 59.171192] ? __vm_enough_memory.cold.5+0x13/0x62 [ 59.171197] report_bug+0x1a4/0x1f3 [ 59.171205] do_error_trap+0x1bd/0x310 [ 59.171211] ? math_error+0x300/0x300 [ 59.182835] team0: Port device team_slave_1 added [ 59.185664] ? vprintk_emit+0x1be/0x4e0 [ 59.197402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.197596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.202021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.206038] do_invalid_op+0x1b/0x20 [ 59.206047] invalid_op+0x1b/0x40 [ 59.206057] RIP: 0010:__vm_enough_memory.cold.5+0x13/0x62 [ 59.286086] RSP: 0018:ffff888099a7fbb0 EFLAGS: 00010282 [ 59.291470] RAX: 000000000000001b RBX: ffffffff87a05bc0 RCX: 0000000000000000 [ 59.298757] RDX: 000000000000001b RSI: ffff888098950b80 RDI: ffffed101334ff6d [ 59.306029] RBP: ffff888099a7fbe8 R08: ffff888098950ba0 R09: 0000000000000000 [ 59.313306] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000021 [ 59.320570] R13: 0000000000000001 R14: ffff888098c7ac80 R15: fff8000000012616 [ 59.327842] security_vm_enough_memory_mm+0x80/0xa0 [ 59.332873] mmap_region+0x1d4/0xfa0 [ 59.336571] ? selinux_msg_queue_msgctl+0x50/0x50 [ 59.341393] ? security_mmap_addr+0x60/0x90 [ 59.345710] do_mmap+0x544/0xe20 [ 59.349080] vm_mmap_pgoff+0x181/0x200 [ 59.352973] ? vma_is_stack_for_current+0x90/0x90 [ 59.357799] ? kvm_clock_read+0x23/0x40 [ 59.361752] ? kvm_clock_get_cycles+0x9/0x10 [ 59.366159] ? ktime_get+0x142/0x240 [ 59.369851] ? SyS_futex+0xf1/0x250 [ 59.373462] SyS_mmap_pgoff+0x9d/0x6b0 [ 59.377330] ? do_futex+0x1840/0x1840 [ 59.381114] ? find_mergeable_anon_vma+0x290/0x290 [ 59.386025] ? SyS_clock_settime+0x1b0/0x1b0 [ 59.390424] ? do_syscall_64+0x4c/0x5b0 [ 59.394396] ? align_vdso_addr+0x60/0x60 [ 59.398448] SyS_mmap+0x16/0x20 [ 59.401712] do_syscall_64+0x1c9/0x5b0 [ 59.405592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.410431] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 59.416132] RIP: 0033:0x458dea [ 59.419314] RSP: 002b:00007ffc575022a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 59.427005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458dea [ 59.434260] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 0000000000000000 [ 59.441954] RBP: ffffffffffffffff R08: ffffffffffffffff R09: 0000000000000000 [ 59.449206] R10: 0000000000020022 R11: 0000000000000246 R12: 0000000000000000 [ 59.456563] R13: 0000000000021000 R14: 0000000000020022 R15: 0000000000000000 [ 59.466411] Kernel Offset: disabled [ 59.470186] Rebooting in 86400 seconds..