Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. 2019/12/16 19:00:03 parsed 1 programs 2019/12/16 19:00:03 executed programs: 0 [ 44.921476] audit: type=1400 audit(1576522803.803:41): avc: denied { map } for pid=6725 comm="syz-execprog" path="/root/syzkaller-shm682557799" dev="sda1" ino=16492 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 44.973013] audit: type=1400 audit(1576522803.803:40): avc: denied { map } for pid=6725 comm="syz-execprog" path="/root/syzkaller-shm210783784" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 45.240950] IPVS: ftp: loaded support on port[0] = 21 [ 46.037937] chnl_net:caif_netlink_parms(): no params data found [ 46.051265] IPVS: ftp: loaded support on port[0] = 21 [ 46.079887] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.086938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.094057] device bridge_slave_0 entered promiscuous mode [ 46.103329] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.109782] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.117027] device bridge_slave_1 entered promiscuous mode [ 46.141063] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.152645] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.177367] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.185568] team0: Port device team_slave_0 added [ 46.194664] IPVS: ftp: loaded support on port[0] = 21 [ 46.204803] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.212777] team0: Port device team_slave_1 added [ 46.221854] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.229221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.292256] device hsr_slave_0 entered promiscuous mode [ 46.330433] device hsr_slave_1 entered promiscuous mode [ 46.390780] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.406093] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.452433] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.458971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.466452] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.472845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.489004] chnl_net:caif_netlink_parms(): no params data found [ 46.505920] IPVS: ftp: loaded support on port[0] = 21 [ 46.584258] chnl_net:caif_netlink_parms(): no params data found [ 46.608407] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.614937] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.621935] device bridge_slave_0 entered promiscuous mode [ 46.630261] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.636604] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.643554] device bridge_slave_1 entered promiscuous mode [ 46.667166] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.684379] IPVS: ftp: loaded support on port[0] = 21 [ 46.688003] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 46.698975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.706710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.726457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.736063] team0: Port device team_slave_0 added [ 46.746791] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.754153] team0: Port device team_slave_1 added [ 46.761218] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.775887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.783409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.852749] device hsr_slave_0 entered promiscuous mode [ 46.890361] device hsr_slave_1 entered promiscuous mode [ 46.950712] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.957146] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.965207] device bridge_slave_0 entered promiscuous mode [ 46.973838] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.980765] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.987569] device bridge_slave_1 entered promiscuous mode [ 47.002372] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.011545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.019567] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.037227] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.046189] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.058672] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.064981] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.073774] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.098363] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.127425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.137051] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.156262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.163692] team0: Port device team_slave_0 added [ 47.172341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.180206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.187780] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.194147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.213755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.226016] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.233494] team0: Port device team_slave_1 added [ 47.241851] chnl_net:caif_netlink_parms(): no params data found [ 47.250684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.258595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.266361] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.272763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.283139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.305064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.314044] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.321599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.321642] IPVS: ftp: loaded support on port[0] = 21 [ 47.343644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.367856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.384151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.398238] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.405577] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.412532] device bridge_slave_0 entered promiscuous mode [ 47.513506] device hsr_slave_0 entered promiscuous mode [ 47.550355] device hsr_slave_1 entered promiscuous mode [ 47.590366] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.596745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.604614] device bridge_slave_1 entered promiscuous mode [ 47.612215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.619815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.629205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.637659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.652185] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.663680] chnl_net:caif_netlink_parms(): no params data found [ 47.697677] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.710422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.717742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.725561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.738697] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.746363] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.753330] device bridge_slave_0 entered promiscuous mode [ 47.762960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.772741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.785939] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.794153] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.801196] device bridge_slave_1 entered promiscuous mode [ 47.829148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.841665] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.853117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.861386] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.873902] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.882918] team0: Port device team_slave_0 added [ 47.889173] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.897781] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.904837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.912571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.922203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.930749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.938994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.949289] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.956893] team0: Port device team_slave_1 added [ 47.995270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.009095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.018140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.047827] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.054487] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.063246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.071364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.078952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.087191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.094989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.102723] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.109252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.116440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.128610] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.137331] team0: Port device team_slave_0 added [ 48.152569] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.159881] team0: Port device team_slave_1 added [ 48.166448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.175764] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.182228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.223580] device hsr_slave_0 entered promiscuous mode [ 48.260821] device hsr_slave_1 entered promiscuous mode [ 48.301758] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.308857] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.319816] chnl_net:caif_netlink_parms(): no params data found [ 48.328848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.357083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.393791] device hsr_slave_0 entered promiscuous mode [ 48.440495] device hsr_slave_1 entered promiscuous mode [ 48.481969] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.489723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.500560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.508103] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.514512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.528385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.541356] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.548291] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.558096] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.565258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.576450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.588355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.624715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.634344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.643174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.649567] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.658164] device bridge_slave_0 entered promiscuous mode [ 48.666001] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.672690] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.679823] device bridge_slave_1 entered promiscuous mode [ 48.685955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.694120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.701861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.710520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.718375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.730812] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.739966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.755436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.762805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.771374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.793604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.809713] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.824110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.838351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.847653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.857724] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.865108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.878752] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.891675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.899832] team0: Port device team_slave_0 added [ 48.911672] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.919106] team0: Port device team_slave_1 added [ 48.925220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.943886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.951261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.967617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.032590] device hsr_slave_0 entered promiscuous mode [ 49.046080] device hsr_slave_1 entered promiscuous mode [ 49.086820] hrtimer: interrupt took 25234 ns [ 49.092873] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.107032] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.121113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.134405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.145898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.156988] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.175190] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.184928] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.200819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.207841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.231800] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.239863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.251495] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.257590] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.268566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.281190] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.289692] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.317727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.326317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.336881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.349559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.360551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.368467] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.375311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.383334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.391265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.401645] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.409387] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.424317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.434423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.442497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.449669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.458312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.469732] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.476380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.483963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.492123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.500535] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.507142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.514944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.527336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.535574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.551610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.561446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.570268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.578538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.586524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.595178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.603020] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.609364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.617033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.624795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.632496] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.638829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.646807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.654524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.662273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.670643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.677658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.685777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.695957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.704572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.714309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.722144] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.728499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.737549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.748530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.758527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.767818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.776336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.784138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.794121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.801948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.809924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.817725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.829068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.838297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.848592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.859163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.867036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.874697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.882783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.897653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.907205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.916689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.927216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.936146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.948095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.955695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.965853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.974003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.981749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.991858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.001588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.010509] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.018320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.026518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.034293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.042051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.052313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.063549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.074322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.082078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.091836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.099615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.107908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.116384] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.123034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.131322] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.137782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.151700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.163599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.175182] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.182351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.189744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.197918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.207070] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.214249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.221629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.241665] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.254596] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.266796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.276650] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.284751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.298006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.308834] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.317686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.332859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.341970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.351942] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.359233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.367427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.379187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.393522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.407821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.421832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.433360] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.441547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.451794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.462580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.469716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.478948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.493797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.504928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.513110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.521071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.528536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.537051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.545050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.556238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.565249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.573678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.583628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.592606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.603700] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.610196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.617935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.626706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.644148] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 2019/12/16 19:00:09 executed programs: 15 [ 50.669099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.965152] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 54.827063] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 55.022431] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2019/12/16 19:00:14 executed programs: 269 [ 56.378173] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 56.410869] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 57.227338] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 57.955238] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 59.938952] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2019/12/16 19:00:19 executed programs: 580 [ 61.840170] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 61.991848] ================================================================== [ 61.999422] BUG: KASAN: use-after-free in l2tp_session_create+0x1423/0x1630 [ 62.006525] Read of size 4 at addr ffff888094076018 by task syz-executor.3/9403 [ 62.014094] [ 62.015722] CPU: 0 PID: 9403 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 62.023515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.032861] Call Trace: [ 62.035441] dump_stack+0xf7/0x13b [ 62.035455] ? l2tp_session_create+0x1423/0x1630 [ 62.035462] print_address_description.cold.7+0x9/0x1c9 [ 62.035467] ? l2tp_session_create+0x1423/0x1630 [ 62.035471] kasan_report.cold.8+0x11a/0x2d3 [ 62.035478] __asan_report_load4_noabort+0x14/0x20 [ 62.035482] l2tp_session_create+0x1423/0x1630 [ 62.035488] ? trace_hardirqs_on_caller+0x40c/0x580 [ 62.035492] ? l2tp_session_get+0x181/0x660 [ 62.035496] ? trace_hardirqs_on+0xd/0x10 [ 62.035504] pppol2tp_connect+0x10c1/0x1900 [ 62.035515] ? pppol2tp_seq_show+0xc40/0xc40 [ 62.035522] ? __might_fault+0xf1/0x1b0 [ 62.035526] ? lock_downgrade+0x7f0/0x7f0 [ 62.035538] ? security_socket_connect+0x6a/0xa0 [ 62.035546] SYSC_connect+0x1e3/0x2a0 [ 62.035550] ? SYSC_bind+0x210/0x210 [ 62.072987] ? _copy_to_user+0x91/0xb0 [ 62.072997] ? nsecs_to_jiffies+0x20/0x20 [ 62.073008] ? SyS_clock_gettime+0x115/0x160 [ 62.073013] ? SyS_clock_settime+0x1a0/0x1a0 [ 62.073019] ? move_addr_to_kernel+0x20/0x20 [ 62.073026] ? do_syscall_64+0x4c/0x5b0 [ 62.073031] ? SyS_accept+0x10/0x10 [ 62.073035] SyS_connect+0x9/0x10 [ 62.073040] do_syscall_64+0x1c7/0x5b0 [ 62.073043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 62.073053] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 62.073060] RIP: 0033:0x459a29 [ 62.081501] RSP: 002b:00007f3c73afbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 62.081512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 62.081515] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 62.081518] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 62.081521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c73afc6d4 [ 62.081524] R13: 00000000004bff90 R14: 00000000004d1f00 R15: 00000000ffffffff [ 62.081537] [ 62.081540] Allocated by task 9403: [ 62.081550] save_stack_trace+0x16/0x20 [ 62.081556] save_stack+0x43/0xd0 [ 62.081560] kasan_kmalloc+0xc7/0xe0 [ 62.081565] __kmalloc+0x15b/0x7b0 [ 62.081571] l2tp_session_create+0x31/0x1630 [ 62.081577] pppol2tp_connect+0x10c1/0x1900 [ 62.090245] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -88 [ 62.090289] SYSC_connect+0x1e3/0x2a0 [ 62.127665] SyS_connect+0x9/0x10 [ 62.127672] do_syscall_64+0x1c7/0x5b0 [ 62.127677] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 62.127681] [ 62.136045] Freed by task 9414: [ 62.136055] save_stack_trace+0x16/0x20 [ 62.136060] save_stack+0x43/0xd0 [ 62.136064] kasan_slab_free+0x71/0xc0 [ 62.136067] kfree+0xcc/0x270 [ 62.136074] l2tp_session_free+0x14f/0x1d0 [ 62.136077] l2tp_tunnel_closeall+0x23d/0x2f0 [ 62.136082] l2tp_udp_encap_destroy+0x7d/0xc0 [ 62.140995] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -88 [ 62.143146] udpv6_destroy_sock+0x89/0xb0 [ 62.143153] sk_common_release+0x5e/0x2c0 [ 62.143158] udp_lib_close+0x9/0x10 [ 62.196966] inet_release+0xd9/0x1c0 [ 62.196974] inet6_release+0x46/0x60 [ 62.209502] __sock_release+0xc2/0x2a0 [ 62.209506] sock_close+0x10/0x20 [ 62.209513] __fput+0x232/0x750 [ 62.209518] ____fput+0x9/0x10 [ 62.256899] task_work_run+0xe5/0x170 [ 62.264118] exit_to_usermode_loop+0x16a/0x1b0 [ 62.264122] do_syscall_64+0x416/0x5b0 [ 62.264128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 62.264130] [ 62.264134] The buggy address belongs to the object at ffff888094076000 [ 62.264134] which belongs to the cache kmalloc-512 of size 512 [ 62.264138] The buggy address is located 24 bytes inside of [ 62.264138] 512-byte region [ffff888094076000, ffff888094076200) [ 62.264141] The buggy address belongs to the page: [ 62.302269] page:ffffea0002501d80 count:1 mapcount:0 mapping:ffff888094076000 index:0x0 [ 62.384860] flags: 0x1fffc0000000100(slab) [ 62.389105] raw: 01fffc0000000100 ffff888094076000 0000000000000000 0000000100000006 [ 62.396961] raw: ffffea000256a6a0 ffffea00024a1120 ffff8880aa800940 0000000000000000 [ 62.404817] page dumped because: kasan: bad access detected [ 62.410498] [ 62.412100] Memory state around the buggy address: [ 62.417003] ffff888094075f00: fb fb fb fb fb fb fc fc fc fc fb fb fb fb fb fb [ 62.424337] ffff888094075f80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 62.431683] >ffff888094076000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.439040] ^ [ 62.443164] ffff888094076080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.450508] ffff888094076100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.457852] ================================================================== [ 62.465198] Disabling lock debugging due to kernel taint [ 62.478796] Kernel panic - not syncing: panic_on_warn set ... [ 62.478796] [ 62.479423] kobject: 'loop4' (ffff8880a4b2cf60): kobject_uevent_env [ 62.486212] CPU: 0 PID: 9403 Comm: syz-executor.3 Tainted: G B 4.14.158-syzkaller #0 [ 62.486215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.486217] Call Trace: [ 62.486230] dump_stack+0xf7/0x13b [ 62.486237] ? l2tp_session_create+0x1423/0x1630 [ 62.486242] panic+0x1b0/0x358 [ 62.486245] ? add_taint.cold.5+0x11/0x11 [ 62.486250] ? ___preempt_schedule+0x16/0x18 [ 62.486256] ? l2tp_session_create+0x1423/0x1630 [ 62.486261] kasan_end_report+0x47/0x4f [ 62.486264] kasan_report.cold.8+0x76/0x2d3 [ 62.486269] __asan_report_load4_noabort+0x14/0x20 [ 62.486272] l2tp_session_create+0x1423/0x1630 [ 62.486279] ? trace_hardirqs_on_caller+0x40c/0x580 [ 62.486282] ? l2tp_session_get+0x181/0x660 [ 62.486285] ? trace_hardirqs_on+0xd/0x10 [ 62.486291] pppol2tp_connect+0x10c1/0x1900 [ 62.486296] ? pppol2tp_seq_show+0xc40/0xc40 [ 62.486302] ? __might_fault+0xf1/0x1b0 [ 62.486306] ? lock_downgrade+0x7f0/0x7f0 [ 62.486318] ? security_socket_connect+0x6a/0xa0 [ 62.486323] SYSC_connect+0x1e3/0x2a0 [ 62.486327] ? SYSC_bind+0x210/0x210 [ 62.486333] ? _copy_to_user+0x91/0xb0 [ 62.486340] ? nsecs_to_jiffies+0x20/0x20 [ 62.486347] ? SyS_clock_gettime+0x115/0x160 [ 62.486350] ? SyS_clock_settime+0x1a0/0x1a0 [ 62.486353] ? move_addr_to_kernel+0x20/0x20 [ 62.486357] ? do_syscall_64+0x4c/0x5b0 [ 62.486361] ? SyS_accept+0x10/0x10 [ 62.486365] SyS_connect+0x9/0x10 [ 62.486368] do_syscall_64+0x1c7/0x5b0 [ 62.486372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 62.486378] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 62.486383] RIP: 0033:0x459a29 [ 62.486385] RSP: 002b:00007f3c73afbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 62.486391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 62.502316] kobject: 'loop4' (ffff8880a4b2cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 62.511145] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 62.511147] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 62.511149] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c73afc6d4 [ 62.511151] R13: 00000000004bff90 R14: 00000000004d1f00 R15: 00000000ffffffff [ 62.512776] Kernel Offset: disabled [ 62.707417] Rebooting in 86400 seconds..