[ 39.972237] audit: type=1400 audit(1579217154.056:40): avc: denied { create } for pid=6854 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 40.133973] random: sshd: uninitialized urandom read (32 bytes read) [ 40.929570] random: sshd: uninitialized urandom read (32 bytes read) [ 41.130852] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts. 2020/01/16 23:26:00 parsed 1 programs 2020/01/16 23:26:01 executed programs: 0 [ 47.281158] IPVS: ftp: loaded support on port[0] = 21 [ 48.116342] IPVS: ftp: loaded support on port[0] = 21 [ 48.163029] chnl_net:caif_netlink_parms(): no params data found [ 48.213483] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.220817] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.228231] device bridge_slave_0 entered promiscuous mode [ 48.228903] IPVS: ftp: loaded support on port[0] = 21 [ 48.235700] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.245961] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.253141] device bridge_slave_1 entered promiscuous mode [ 48.292270] chnl_net:caif_netlink_parms(): no params data found [ 48.301750] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.324725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.361039] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.368346] team0: Port device team_slave_0 added [ 48.373824] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.380289] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.387166] device bridge_slave_0 entered promiscuous mode [ 48.396154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.403898] team0: Port device team_slave_1 added [ 48.404464] IPVS: ftp: loaded support on port[0] = 21 [ 48.409370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.421866] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.428379] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.438043] device bridge_slave_1 entered promiscuous mode [ 48.448920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.465278] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.477022] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.552468] device hsr_slave_0 entered promiscuous mode [ 48.590368] device hsr_slave_1 entered promiscuous mode [ 48.630699] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.652281] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.674028] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.681827] team0: Port device team_slave_0 added [ 48.706717] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.713930] team0: Port device team_slave_1 added [ 48.724959] IPVS: ftp: loaded support on port[0] = 21 [ 48.725838] chnl_net:caif_netlink_parms(): no params data found [ 48.742088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.756169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.766940] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.773485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.780643] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.787149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.852042] device hsr_slave_0 entered promiscuous mode [ 48.900409] device hsr_slave_1 entered promiscuous mode [ 48.974973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.995894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.009615] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.016273] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.023579] device bridge_slave_0 entered promiscuous mode [ 49.042597] chnl_net:caif_netlink_parms(): no params data found [ 49.051879] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.058395] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.066607] device bridge_slave_1 entered promiscuous mode [ 49.087077] IPVS: ftp: loaded support on port[0] = 21 [ 49.098142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.118249] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.124711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.131347] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.137674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.148066] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.183647] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.191862] team0: Port device team_slave_0 added [ 49.209542] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.226957] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.234212] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.241152] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.249068] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.256591] team0: Port device team_slave_1 added [ 49.281722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.297879] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.304585] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.313100] device bridge_slave_0 entered promiscuous mode [ 49.319444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.372837] chnl_net:caif_netlink_parms(): no params data found [ 49.381416] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.387802] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.396079] device bridge_slave_1 entered promiscuous mode [ 49.418918] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.428096] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.484254] device hsr_slave_0 entered promiscuous mode [ 49.520474] device hsr_slave_1 entered promiscuous mode [ 49.606387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.615146] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.623569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.638499] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.646411] team0: Port device team_slave_0 added [ 49.653180] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.667774] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.675138] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.684276] team0: Port device team_slave_1 added [ 49.690436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.697938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.707819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.715261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.769021] chnl_net:caif_netlink_parms(): no params data found [ 49.782811] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.789221] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.797211] device bridge_slave_0 entered promiscuous mode [ 49.816408] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.823897] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.832884] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.844038] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.851377] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.858591] device bridge_slave_1 entered promiscuous mode [ 49.913491] device hsr_slave_0 entered promiscuous mode [ 49.950479] device hsr_slave_1 entered promiscuous mode [ 49.995641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.003166] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.013746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.024729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.034435] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.044436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.052478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.060607] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.066978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.102885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.113788] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.120321] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.126712] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.134769] device bridge_slave_0 entered promiscuous mode [ 50.141989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.149194] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.156238] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.163174] device bridge_slave_1 entered promiscuous mode [ 50.177128] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.184414] team0: Port device team_slave_0 added [ 50.191748] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.199917] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.206610] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.213757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.222301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.229934] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.236552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.243558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.251197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.265720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.272946] team0: Port device team_slave_1 added [ 50.278738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.286492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.303457] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.312667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.322343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.336281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.352003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.360740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.368353] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.374960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.382716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.407196] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.415034] team0: Port device team_slave_0 added [ 50.424832] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.472890] device hsr_slave_0 entered promiscuous mode [ 50.510507] device hsr_slave_1 entered promiscuous mode [ 50.550585] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.557907] team0: Port device team_slave_1 added [ 50.564174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.572640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.587499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.596316] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.603335] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.610524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.618426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.627049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.634836] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.641243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.648258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.657638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.669506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.677138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.696856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.703936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.712124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.719738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.727636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.735373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.743252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.753024] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.763029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.777941] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.822181] device hsr_slave_0 entered promiscuous mode [ 50.880366] device hsr_slave_1 entered promiscuous mode [ 50.920683] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.928731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.936478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.945842] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.959513] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.967737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.975378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.983796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.993015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.000229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.008099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.016283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.035084] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.041584] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.052726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.063581] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.071465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.086076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.093954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.102164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.111303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.123861] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.136534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.143816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.151932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.159649] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.166084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.173821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.181525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.191729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.201661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.209548] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.220440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.227699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.239868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.247801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.256113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.264342] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.270861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.278086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.286300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.294589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.304404] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.313214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.320992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.332236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.339882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.349634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.363096] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.375036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.383306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.390868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.400914] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.406953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.418970] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.425915] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.434867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.455228] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.463880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.472450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.480547] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.487004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.495064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.505631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.515798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.523141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.531834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.539755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.548140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.556460] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.562886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.570579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.581489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.590822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.599857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.608623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.616811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.624526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.632576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.640351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.648362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.661149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.669887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.684285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.692836] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.706431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.715958] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.722558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.741359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.749836] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.772289] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.782172] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.789906] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.803167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.815248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.823033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.831878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.839010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.849959] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.855900] hrtimer: interrupt took 23346 ns [ 51.863023] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.869142] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.881059] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.887195] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.895980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.919318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.928616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 2020/01/16 23:26:06 executed programs: 12 [ 51.949938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.958051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.974480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.982726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.995465] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.002044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.011809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.018747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.029053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.040811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.051849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.059447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.067498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.075976] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.082417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.089592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.097589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.105291] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.111726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.118689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.126656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.134335] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.140860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.148082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.157127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.172292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.184755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.192675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.202802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.211596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.219180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.227939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.235794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.244962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.256044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.276749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.285149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.294405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.303711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.314122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.331311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.339195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.358757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.388673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.409925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.423516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.433167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.442267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.449406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.457762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.465633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.473732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.481840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.489516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.497878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.507763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.518393] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.524892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.533496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.542121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.551950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.559203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.568454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.577451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.589131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.597035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.606757] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.613348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.621889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.629670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.643120] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.649438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.659913] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.669463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.677044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.690715] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.703154] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.722338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.735117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.744998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.389518] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 56.500408] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 56.663743] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/01/16 23:26:11 executed programs: 185 [ 57.976876] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 57.994569] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 58.270715] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 58.974088] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/01/16 23:26:16 executed programs: 460 [ 63.175972] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 65.398237] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 66.441378] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 66.951844] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/01/16 23:26:21 executed programs: 734 [ 67.401571] ================================================================== [ 67.409044] BUG: KASAN: use-after-free in pppol2tp_connect+0x150e/0x1900 [ 67.415864] Write of size 4 at addr ffff88809f3869d0 by task syz-executor.3/9983 [ 67.423494] [ 67.425109] CPU: 0 PID: 9983 Comm: syz-executor.3 Not tainted 4.14.165-syzkaller #0 [ 67.433010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.442533] Call Trace: [ 67.445121] dump_stack+0xf7/0x13b [ 67.448650] ? pppol2tp_connect+0x150e/0x1900 [ 67.453168] print_address_description.cold.7+0x9/0x1c9 [ 67.458676] ? pppol2tp_connect+0x150e/0x1900 [ 67.463174] kasan_report.cold.8+0x11a/0x2d3 [ 67.467591] __asan_report_store4_noabort+0x17/0x20 [ 67.472625] pppol2tp_connect+0x150e/0x1900 [ 67.476952] ? pppol2tp_seq_show+0xc40/0xc40 [ 67.481357] ? __might_fault+0xf1/0x1b0 [ 67.485457] ? lock_downgrade+0x7f0/0x7f0 [ 67.489755] ? security_socket_connect+0x6a/0xa0 [ 67.494528] SYSC_connect+0x1e3/0x2a0 [ 67.498345] ? SYSC_bind+0x210/0x210 [ 67.502099] ? _copy_to_user+0x91/0xb0 [ 67.505993] ? nsecs_to_jiffies+0x20/0x20 [ 67.510232] ? SyS_clock_gettime+0x115/0x160 [ 67.514652] ? SyS_clock_settime+0x1a0/0x1a0 [ 67.519049] ? move_addr_to_kernel+0x20/0x20 [ 67.523503] ? do_syscall_64+0x4c/0x5b0 [ 67.527492] ? SyS_accept+0x10/0x10 [ 67.531121] SyS_connect+0x9/0x10 [ 67.534664] do_syscall_64+0x1c7/0x5b0 [ 67.538580] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 67.543436] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 67.548624] RIP: 0033:0x459a59 [ 67.551810] RSP: 002b:00007f397891fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 67.559515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 67.566877] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 67.574182] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 67.581567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39789206d4 [ 67.588879] R13: 00000000004c0006 R14: 00000000004d2298 R15: 00000000ffffffff [ 67.596184] [ 67.597800] Allocated by task 9983: [ 67.601539] save_stack_trace+0x16/0x20 [ 67.605612] save_stack+0x43/0xd0 [ 67.609050] kasan_kmalloc+0xc7/0xe0 [ 67.612747] __kmalloc+0x15b/0x7b0 [ 67.616281] l2tp_session_create+0x31/0x1630 [ 67.620778] pppol2tp_connect+0x10c1/0x1900 [ 67.625089] SYSC_connect+0x1e3/0x2a0 [ 67.628895] SyS_connect+0x9/0x10 [ 67.632424] do_syscall_64+0x1c7/0x5b0 [ 67.636500] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 67.644280] [ 67.645906] Freed by task 9992: [ 67.649184] save_stack_trace+0x16/0x20 [ 67.653149] save_stack+0x43/0xd0 [ 67.656698] kasan_slab_free+0x71/0xc0 [ 67.660759] kfree+0xcc/0x270 [ 67.663858] l2tp_session_free+0x14f/0x1d0 [ 67.668086] l2tp_tunnel_closeall+0x23d/0x2f0 [ 67.672735] l2tp_udp_encap_destroy+0x7d/0xc0 [ 67.677341] udpv6_destroy_sock+0x89/0xb0 [ 67.681736] sk_common_release+0x5e/0x2c0 [ 67.685877] udp_lib_close+0x9/0x10 [ 67.689502] inet_release+0xd9/0x1c0 [ 67.693200] inet6_release+0x46/0x60 [ 67.697011] __sock_release+0xc2/0x2a0 [ 67.700894] sock_close+0x10/0x20 [ 67.704348] __fput+0x232/0x750 [ 67.707713] ____fput+0x9/0x10 [ 67.710926] task_work_run+0xe5/0x170 [ 67.714724] exit_to_usermode_loop+0x16a/0x1b0 [ 67.719313] do_syscall_64+0x416/0x5b0 [ 67.723525] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 67.728805] [ 67.730538] The buggy address belongs to the object at ffff88809f386840 [ 67.730538] which belongs to the cache kmalloc-512 of size 512 [ 67.743410] The buggy address is located 400 bytes inside of [ 67.743410] 512-byte region [ffff88809f386840, ffff88809f386a40) [ 67.755499] The buggy address belongs to the page: [ 67.760503] page:ffffea00027ce180 count:1 mapcount:0 mapping:ffff88809f3860c0 index:0x0 [ 67.768747] flags: 0x1fffc0000000100(slab) [ 67.772980] raw: 01fffc0000000100 ffff88809f3860c0 0000000000000000 0000000100000006 [ 67.781124] raw: ffffea000218cd20 ffffea00028678e0 ffff8880aa800940 0000000000000000 [ 67.789000] page dumped because: kasan: bad access detected [ 67.794719] [ 67.796337] Memory state around the buggy address: [ 67.801248] ffff88809f386880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.808785] ffff88809f386900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.816169] >ffff88809f386980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.823625] ^ [ 67.829780] ffff88809f386a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 67.837656] ffff88809f386a80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 67.845106] ================================================================== [ 67.852614] Disabling lock debugging due to kernel taint [ 67.936391] Kernel panic - not syncing: panic_on_warn set ... [ 67.936391] [ 67.943810] CPU: 0 PID: 9983 Comm: syz-executor.3 Tainted: G B 4.14.165-syzkaller #0 [ 67.952815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.962475] Call Trace: [ 67.965063] dump_stack+0xf7/0x13b [ 67.968609] ? pppol2tp_connect+0x150e/0x1900 [ 67.973108] panic+0x1b0/0x358 [ 67.976294] ? add_taint.cold.5+0x11/0x11 [ 67.980550] ? ___preempt_schedule+0x16/0x18 [ 67.984949] ? pppol2tp_connect+0x150e/0x1900 [ 67.989430] kasan_end_report+0x47/0x4f [ 67.993505] kasan_report.cold.8+0x76/0x2d3 [ 67.997871] __asan_report_store4_noabort+0x17/0x20 [ 68.002954] pppol2tp_connect+0x150e/0x1900 [ 68.007316] ? pppol2tp_seq_show+0xc40/0xc40 [ 68.011733] ? __might_fault+0xf1/0x1b0 [ 68.015693] ? lock_downgrade+0x7f0/0x7f0 [ 68.019823] ? security_socket_connect+0x6a/0xa0 [ 68.024585] SYSC_connect+0x1e3/0x2a0 [ 68.028427] ? SYSC_bind+0x210/0x210 [ 68.032128] ? _copy_to_user+0x91/0xb0 [ 68.036327] ? nsecs_to_jiffies+0x20/0x20 [ 68.040479] ? SyS_clock_gettime+0x115/0x160 [ 68.045017] ? SyS_clock_settime+0x1a0/0x1a0 [ 68.049569] ? move_addr_to_kernel+0x20/0x20 [ 68.054447] ? do_syscall_64+0x4c/0x5b0 [ 68.058418] ? SyS_accept+0x10/0x10 [ 68.062038] SyS_connect+0x9/0x10 [ 68.065580] do_syscall_64+0x1c7/0x5b0 [ 68.069459] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 68.075017] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 68.080203] RIP: 0033:0x459a59 [ 68.083419] RSP: 002b:00007f397891fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 68.091111] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 68.098597] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 68.106009] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 68.113500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39789206d4 [ 68.120914] R13: 00000000004c0006 R14: 00000000004d2298 R15: 00000000ffffffff [ 68.130213] Kernel Offset: disabled [ 68.134329] Rebooting in 86400 seconds..