[ 40.342769] audit: type=1400 audit(1580253145.270:37): avc: denied { map } for pid=6815 comm="syz-fuzzer" path="/root/syzkaller-shm713686134" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.620880] IPVS: ftp: loaded support on port[0] = 21 [ 41.728901] can: request_module (can-proto-0) failed. [ 41.738373] can: request_module (can-proto-0) failed. [ 41.894328] audit: type=1400 audit(1580253146.820:38): avc: denied { create } for pid=6815 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.917992] audit: type=1400 audit(1580253146.820:39): avc: denied { create } for pid=6815 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.942012] audit: type=1400 audit(1580253146.820:40): avc: denied { create } for pid=6815 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 42.231380] random: sshd: uninitialized urandom read (32 bytes read) [ 42.984409] random: sshd: uninitialized urandom read (32 bytes read) [ 43.184416] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.137' (ECDSA) to the list of known hosts. 2020/01/28 23:12:34 parsed 1 programs 2020/01/28 23:12:34 executed programs: 0 [ 50.070961] IPVS: ftp: loaded support on port[0] = 21 [ 50.985538] IPVS: ftp: loaded support on port[0] = 21 [ 51.028762] chnl_net:caif_netlink_parms(): no params data found [ 51.076666] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.083505] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.091562] IPVS: ftp: loaded support on port[0] = 21 [ 51.098734] device bridge_slave_0 entered promiscuous mode [ 51.123626] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.129987] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.137437] device bridge_slave_1 entered promiscuous mode [ 51.168188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.175989] chnl_net:caif_netlink_parms(): no params data found [ 51.189539] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.217439] IPVS: ftp: loaded support on port[0] = 21 [ 51.240535] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.247164] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.254199] device bridge_slave_0 entered promiscuous mode [ 51.262153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.269426] team0: Port device team_slave_0 added [ 51.275141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.282313] team0: Port device team_slave_1 added [ 51.294225] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.300644] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.307612] device bridge_slave_1 entered promiscuous mode [ 51.321120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.329879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.421996] device hsr_slave_0 entered promiscuous mode [ 51.460352] device hsr_slave_1 entered promiscuous mode [ 51.501134] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.509006] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.517844] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.528123] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.548727] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.556004] team0: Port device team_slave_0 added [ 51.563250] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.571380] team0: Port device team_slave_1 added [ 51.576867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.586970] IPVS: ftp: loaded support on port[0] = 21 [ 51.590437] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.598653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.605732] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.612222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.619674] chnl_net:caif_netlink_parms(): no params data found [ 51.634870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.693335] device hsr_slave_0 entered promiscuous mode [ 51.730331] device hsr_slave_1 entered promiscuous mode [ 51.782308] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.821114] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.840590] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 51.847003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.864634] chnl_net:caif_netlink_parms(): no params data found [ 51.878248] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.892250] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.898757] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.907185] device bridge_slave_0 entered promiscuous mode [ 51.914423] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.921158] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.928006] device bridge_slave_1 entered promiscuous mode [ 51.941851] IPVS: ftp: loaded support on port[0] = 21 [ 51.955391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.973706] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.993258] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.004412] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.039788] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.047482] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.056848] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.069531] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.077702] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.084674] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.091796] device bridge_slave_0 entered promiscuous mode [ 52.100242] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.106614] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.113619] device bridge_slave_1 entered promiscuous mode [ 52.129781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.141062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.149398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.157247] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.163801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.173797] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.193161] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.205369] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.215213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.241952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.249859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.257849] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.264337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.280931] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.288046] team0: Port device team_slave_0 added [ 52.294420] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.302820] team0: Port device team_slave_1 added [ 52.317687] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.325494] team0: Port device team_slave_0 added [ 52.334459] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.342187] team0: Port device team_slave_1 added [ 52.348706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.362930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.371488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.383945] chnl_net:caif_netlink_parms(): no params data found [ 52.392733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.404579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.414148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.427768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.439083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.450579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.458254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.466473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.474195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.532069] device hsr_slave_0 entered promiscuous mode [ 52.570401] device hsr_slave_1 entered promiscuous mode [ 52.672007] device hsr_slave_0 entered promiscuous mode [ 52.710356] device hsr_slave_1 entered promiscuous mode [ 52.750766] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.758672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.765834] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.779328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.787112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.795434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.802911] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.822491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.846297] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.853717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.861769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.869405] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.876727] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.883939] device bridge_slave_0 entered promiscuous mode [ 52.890936] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.897294] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.904336] device bridge_slave_1 entered promiscuous mode [ 52.911732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.953126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.964094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.976086] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.986532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.995360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.008630] chnl_net:caif_netlink_parms(): no params data found [ 53.019061] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.034512] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.040642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.053434] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.073101] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.081179] team0: Port device team_slave_0 added [ 53.086875] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.094632] team0: Port device team_slave_1 added [ 53.100440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.107831] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.118591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.125871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.135467] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.142507] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.149737] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.224435] device hsr_slave_0 entered promiscuous mode [ 53.260333] device hsr_slave_1 entered promiscuous mode [ 53.320815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.334523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.349271] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.359438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.369049] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.376244] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.383312] device bridge_slave_0 entered promiscuous mode [ 53.391604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.399316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.407152] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.414480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.421464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.431283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.442497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.449752] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.456521] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.464001] device bridge_slave_1 entered promiscuous mode [ 53.481603] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.489596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.497620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.505224] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.511739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.518814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.537393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.545124] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.561382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.568149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.579602] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.602057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.614692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.622900] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.639618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.656677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.666407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.674209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.681820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.690935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.698675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.709309] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.717658] team0: Port device team_slave_0 added [ 53.726034] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.735422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.744086] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.751563] team0: Port device team_slave_1 added [ 53.757008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.765986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.774673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.783374] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.789460] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.797397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.807996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.830700] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.839347] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.849098] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.864907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.874344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.882390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.889351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.901566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.923054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.947437] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.957165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.972189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.981945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.999781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.009456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.024887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.033015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.041634] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.048085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.055546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.068853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.083270] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.089673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.106127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.154199] device hsr_slave_0 entered promiscuous mode [ 54.190626] device hsr_slave_1 entered promiscuous mode [ 54.240714] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.248025] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.255772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.265894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.274731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.292222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.299960] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.306503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.319844] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.333410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.347366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.359088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.372078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.379812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.389455] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.396070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.407969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.420131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.430763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.438634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.453548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.461705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.471518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.479092] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.489807] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.497939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.505928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.514258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.522155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.532799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.542334] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.552033] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.558217] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.567514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.578662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.585741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.593673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.601352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.608453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.615684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.623560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.632426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.641304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.648811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.664916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.674314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.686576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.694748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.709003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.720685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.728736] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.735146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.742525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.750802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.758446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.766623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.776377] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.782834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.792614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.801234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.810946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.821509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.829693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.837160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.847448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.855362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.865154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.873273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.881215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.891642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.899935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.911907] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.918081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.927316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.934778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.942260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.949621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.957563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.965386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.978380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.987516] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.994350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.012200] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.019983] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.033133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.043491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.054426] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.061527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.069397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.077377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.085437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.095828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.104603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.119039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.131113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.141669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.149575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.157765] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.165035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.172540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.179671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.192694] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.198799] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.219538] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.228414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.237279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.245735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.254342] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.260870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.268435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.277660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.287147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.296171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.304077] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.310480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.319511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.328321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.338436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.348882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.357599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.371226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.380725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.388482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.403010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.417213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.432097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.446256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.457548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 2020/01/28 23:12:40 executed programs: 14 [ 55.468212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.477887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.485859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.495087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.504447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.516584] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.524468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.554139] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.566486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.722420] ================================================================== [ 55.729941] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 55.736738] Read of size 8 at addr ffff88808535afa0 by task kworker/u4:2/25 [ 55.743903] [ 55.745521] CPU: 1 PID: 25 Comm: kworker/u4:2 Not tainted 4.14.168-syzkaller #0 [ 55.752971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.763642] Workqueue: tipc_rcv tipc_recv_work [ 55.768278] Call Trace: [ 55.770981] dump_stack+0xf7/0x13b [ 55.774719] ? __lock_acquire+0x32f9/0x4500 [ 55.779025] print_address_description.cold.7+0x9/0x1c9 [ 55.784385] ? __lock_acquire+0x32f9/0x4500 [ 55.788715] kasan_report.cold.8+0x11a/0x2d3 [ 55.793145] __asan_report_load8_noabort+0x14/0x20 [ 55.798188] __lock_acquire+0x32f9/0x4500 [ 55.802333] ? __lock_acquire+0x6a4/0x4500 [ 55.806560] ? preempt_schedule+0x4d/0x60 [ 55.810691] ? preempt_schedule_common+0x1f/0xe0 [ 55.815438] ? release_sock+0x122/0x180 [ 55.819407] ? trace_hardirqs_on+0x10/0x10 [ 55.823644] ? trace_hardirqs_off+0x10/0x10 [ 55.828042] ? trace_hardirqs_off+0x10/0x10 [ 55.832458] ? _raw_spin_unlock_bh+0x30/0x40 [ 55.836857] ? release_sock+0x122/0x180 [ 55.840870] ? __lock_is_held+0xb5/0x140 [ 55.844912] lock_acquire+0x173/0x400 [ 55.848826] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.853408] _raw_spin_lock_bh+0x31/0x40 [ 55.858103] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.862674] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.867095] tipc_receive_from_sock+0x290/0x570 [ 55.871763] ? tipc_send_work+0x5e0/0x5e0 [ 55.876631] ? lock_downgrade+0x7f0/0x7f0 [ 55.880808] ? trace_hardirqs_off+0x10/0x10 [ 55.885107] ? __lock_is_held+0xb5/0x140 [ 55.889164] tipc_recv_work+0x78/0xd0 [ 55.892960] process_one_work+0x7a3/0x16c0 [ 55.897362] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 55.902028] worker_thread+0xcc/0xee0 [ 55.905855] kthread+0x33b/0x410 [ 55.909215] ? process_one_work+0x16c0/0x16c0 [ 55.913703] ? kthread_create_on_node+0xa0/0xa0 [ 55.918371] ret_from_fork+0x3a/0x50 [ 55.922156] [ 55.923770] Allocated by task 2338: [ 55.927383] save_stack_trace+0x16/0x20 [ 55.931339] save_stack+0x43/0xd0 [ 55.934838] kasan_kmalloc+0xc7/0xe0 [ 55.938529] kmem_cache_alloc_trace+0x152/0x7b0 [ 55.943184] tipc_subscrb_connect_cb+0x44/0x140 [ 55.947880] tipc_accept_from_sock+0x29e/0x4c0 [ 55.952453] tipc_recv_work+0x78/0xd0 [ 55.956239] process_one_work+0x7a3/0x16c0 [ 55.960510] worker_thread+0xcc/0xee0 [ 55.964422] kthread+0x33b/0x410 [ 55.967764] ret_from_fork+0x3a/0x50 [ 55.971463] [ 55.973076] Freed by task 2338: [ 55.976351] save_stack_trace+0x16/0x20 [ 55.980315] save_stack+0x43/0xd0 [ 55.983872] kasan_slab_free+0x71/0xc0 [ 55.987740] kfree+0xcc/0x270 [ 55.990837] tipc_subscrb_put+0x19/0x20 [ 55.994807] tipc_subscrb_release_cb+0x1a/0x20 [ 55.999380] tipc_close_conn+0x15d/0x1f0 [ 56.003422] tipc_send_work+0x462/0x5e0 [ 56.007432] process_one_work+0x7a3/0x16c0 [ 56.011653] worker_thread+0xcc/0xee0 [ 56.015440] kthread+0x33b/0x410 [ 56.018794] ret_from_fork+0x3a/0x50 [ 56.022493] [ 56.024207] The buggy address belongs to the object at ffff88808535af80 [ 56.024207] which belongs to the cache kmalloc-96 of size 96 [ 56.036738] The buggy address is located 32 bytes inside of [ 56.036738] 96-byte region [ffff88808535af80, ffff88808535afe0) [ 56.048552] The buggy address belongs to the page: [ 56.053485] page:ffffea000214d680 count:1 mapcount:0 mapping:ffff88808535a000 index:0x0 [ 56.061612] flags: 0x1fffc0000000100(slab) [ 56.067481] raw: 01fffc0000000100 ffff88808535a000 0000000000000000 0000000100000020 [ 56.075350] raw: ffffea0002967e60 ffff8880aa801448 ffff8880aa8004c0 0000000000000000 [ 56.083225] page dumped because: kasan: bad access detected [ 56.089077] [ 56.090696] Memory state around the buggy address: [ 56.095607] ffff88808535ae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 56.103055] ffff88808535af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 56.110504] >ffff88808535af80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 56.117857] ^ [ 56.123118] ffff88808535b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.130465] ffff88808535b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.137812] ================================================================== [ 56.145158] Disabling lock debugging due to kernel taint [ 56.150605] Kernel panic - not syncing: panic_on_warn set ... [ 56.150605] [ 56.158135] CPU: 1 PID: 25 Comm: kworker/u4:2 Tainted: G B 4.14.168-syzkaller #0 [ 56.166782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.176413] Workqueue: tipc_rcv tipc_recv_work [ 56.181025] Call Trace: [ 56.183642] dump_stack+0xf7/0x13b [ 56.187326] ? __lock_acquire+0x32f9/0x4500 [ 56.191706] panic+0x1b0/0x36a [ 56.194888] ? add_taint.cold.5+0x11/0x11 [ 56.199028] ? lock_downgrade+0x7f0/0x7f0 [ 56.203248] ? __lock_acquire+0x32f9/0x4500 [ 56.207561] kasan_end_report+0x47/0x4f [ 56.211531] kasan_report.cold.8+0x76/0x2d3 [ 56.215893] __asan_report_load8_noabort+0x14/0x20 [ 56.220804] __lock_acquire+0x32f9/0x4500 [ 56.224936] ? __lock_acquire+0x6a4/0x4500 [ 56.229157] ? preempt_schedule+0x4d/0x60 [ 56.233298] ? preempt_schedule_common+0x1f/0xe0 [ 56.238058] ? release_sock+0x122/0x180 [ 56.242034] ? trace_hardirqs_on+0x10/0x10 [ 56.246274] ? trace_hardirqs_off+0x10/0x10 [ 56.250593] ? trace_hardirqs_off+0x10/0x10 [ 56.255521] ? _raw_spin_unlock_bh+0x30/0x40 [ 56.259931] ? release_sock+0x122/0x180 [ 56.264016] ? __lock_is_held+0xb5/0x140 [ 56.268196] lock_acquire+0x173/0x400 [ 56.272065] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 56.276725] _raw_spin_lock_bh+0x31/0x40 [ 56.280783] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 56.285409] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 56.289947] tipc_receive_from_sock+0x290/0x570 [ 56.294605] ? tipc_send_work+0x5e0/0x5e0 [ 56.298744] ? lock_downgrade+0x7f0/0x7f0 [ 56.303161] ? trace_hardirqs_off+0x10/0x10 [ 56.307476] ? __lock_is_held+0xb5/0x140 [ 56.311529] tipc_recv_work+0x78/0xd0 [ 56.315388] process_one_work+0x7a3/0x16c0 [ 56.319765] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 56.324463] worker_thread+0xcc/0xee0 [ 56.328267] kthread+0x33b/0x410 [ 56.331694] ? process_one_work+0x16c0/0x16c0 [ 56.336318] ? kthread_create_on_node+0xa0/0xa0 [ 56.340978] ret_from_fork+0x3a/0x50 [ 56.346264] Kernel Offset: disabled [ 56.349892] Rebooting in 86400 seconds..