[ 42.444820] random: cc1: uninitialized urandom read (8 bytes read) [ 42.990928] IPVS: ftp: loaded support on port[0] = 21 [ 44.139005] can: request_module (can-proto-0) failed. [ 44.148506] can: request_module (can-proto-0) failed. [ 44.323805] audit: type=1400 audit(1581810630.521:37): avc: denied { create } for pid=6863 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 44.347786] audit: type=1400 audit(1581810630.521:38): avc: denied { create } for pid=6863 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 44.379559] audit: type=1400 audit(1581810630.521:39): avc: denied { create } for pid=6863 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 44.566839] random: sshd: uninitialized urandom read (32 bytes read) [ 45.303711] random: sshd: uninitialized urandom read (32 bytes read) [ 45.503361] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. 2020/02/15 23:50:37 parsed 1 programs 2020/02/15 23:50:37 executed programs: 0 [ 51.319581] audit: type=1400 audit(1581810637.511:40): avc: denied { map } for pid=6937 comm="syz-execprog" path="/root/syzkaller-shm291552857" dev="sda1" ino=16492 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 51.630931] IPVS: ftp: loaded support on port[0] = 21 [ 52.386268] IPVS: ftp: loaded support on port[0] = 21 [ 52.429184] chnl_net:caif_netlink_parms(): no params data found [ 52.491872] IPVS: ftp: loaded support on port[0] = 21 [ 52.502060] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.508614] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.515727] device bridge_slave_0 entered promiscuous mode [ 52.524513] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.530920] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.537871] device bridge_slave_1 entered promiscuous mode [ 52.548404] chnl_net:caif_netlink_parms(): no params data found [ 52.578362] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.587372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.622831] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.629325] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.636743] device bridge_slave_0 entered promiscuous mode [ 52.644339] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.651802] team0: Port device team_slave_0 added [ 52.658959] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.666681] team0: Port device team_slave_1 added [ 52.671816] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.678199] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.685220] device bridge_slave_1 entered promiscuous mode [ 52.698885] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.711169] IPVS: ftp: loaded support on port[0] = 21 [ 52.719040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.727601] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.741809] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.812005] device hsr_slave_0 entered promiscuous mode [ 52.870301] device hsr_slave_1 entered promiscuous mode [ 52.935904] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.943029] team0: Port device team_slave_0 added [ 52.953991] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.961091] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.970143] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.977223] team0: Port device team_slave_1 added [ 53.001167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.025852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.048155] chnl_net:caif_netlink_parms(): no params data found [ 53.091938] device hsr_slave_0 entered promiscuous mode [ 53.130343] device hsr_slave_1 entered promiscuous mode [ 53.172743] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.192189] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.216002] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.222707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.229529] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.235957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.252380] IPVS: ftp: loaded support on port[0] = 21 [ 53.272286] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.278859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.285563] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.291972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.302696] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.309080] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.316624] device bridge_slave_0 entered promiscuous mode [ 53.325550] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.335393] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.342437] device bridge_slave_1 entered promiscuous mode [ 53.387884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.397135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.442121] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 53.448214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.454831] chnl_net:caif_netlink_parms(): no params data found [ 53.464163] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.482366] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.489770] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.497577] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.504596] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.518371] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.525526] team0: Port device team_slave_0 added [ 53.536969] IPVS: ftp: loaded support on port[0] = 21 [ 53.544713] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.555157] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.564650] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.571951] team0: Port device team_slave_1 added [ 53.577215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.585069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.594387] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.600612] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.608037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.636500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.646821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.662679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.670535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.678323] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.684972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.692966] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.699572] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.706841] device bridge_slave_0 entered promiscuous mode [ 53.716297] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.723594] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.730794] device bridge_slave_1 entered promiscuous mode [ 53.744998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.822063] device hsr_slave_0 entered promiscuous mode [ 53.860334] device hsr_slave_1 entered promiscuous mode [ 53.940287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.948332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.956151] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.962636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.970975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.979488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.992345] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.016700] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.024889] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.032208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.040325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.049985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.068282] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.080730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.087055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.094889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.102713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.118573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.132073] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.139301] team0: Port device team_slave_0 added [ 54.145955] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.153223] team0: Port device team_slave_1 added [ 54.158836] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.167237] chnl_net:caif_netlink_parms(): no params data found [ 54.182416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.190175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.201408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.213264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.228006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.236121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.244504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.252228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.274139] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.281315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.289182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.298767] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.305243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.334542] device hsr_slave_0 entered promiscuous mode [ 54.390447] device hsr_slave_1 entered promiscuous mode [ 54.438506] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.452291] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.460607] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.468038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.475335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.496844] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.514853] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.522097] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.529971] device bridge_slave_0 entered promiscuous mode [ 54.570753] chnl_net:caif_netlink_parms(): no params data found [ 54.580246] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.586499] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.594077] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.601157] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.608270] device bridge_slave_1 entered promiscuous mode [ 54.623826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.644363] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.657120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.667959] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.677505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.686531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.696340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.704179] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.710572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.743576] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.752602] team0: Port device team_slave_0 added [ 54.758677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.766029] team0: Port device team_slave_1 added [ 54.774239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.789631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.801055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.808847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.816709] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.823255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.841163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.850881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.859163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.868656] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.875477] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.882945] device bridge_slave_0 entered promiscuous mode [ 54.889771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.897832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.908160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.928943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.937823] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.945340] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.953264] device bridge_slave_1 entered promiscuous mode [ 54.973025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.981116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.988945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.003502] hrtimer: interrupt took 26391 ns [ 55.008675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.018040] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.027362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.045760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.064917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.143513] device hsr_slave_0 entered promiscuous mode [ 55.180319] device hsr_slave_1 entered promiscuous mode [ 55.210793] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.218613] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.235032] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.245752] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.261575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.268619] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.276705] team0: Port device team_slave_0 added [ 55.282707] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.289840] team0: Port device team_slave_1 added [ 55.295521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.303694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.310816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.317902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.325485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.335578] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.341970] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.351275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.359625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.370793] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.376876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.388559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.407600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.416626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.424303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.432443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.440481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.448079] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.454484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.463154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.474424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.522360] device hsr_slave_0 entered promiscuous mode [ 55.560676] device hsr_slave_1 entered promiscuous mode [ 55.620800] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.627899] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.639728] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.652040] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.659177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.667571] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.683436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.691167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.699042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.708209] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.714644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.722248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.729056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.738066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.753203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.760668] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.769564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.779298] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.786471] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.804275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.813334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.824093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.834458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.847690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.856038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.864066] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.870500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.877324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.885882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.894321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.901526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.909510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.919703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.929309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.937979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.945917] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.952340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.959678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.972681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.979686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.993867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.003966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.016104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.023951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.032219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.039829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.059043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.069260] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.080617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.087480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.095365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.104619] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.112626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.124208] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.130469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.137684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.145530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.152583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.160501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.168008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.178101] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.184628] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.192763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.204572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.212347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.221950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.229405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.242360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.250546] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.260927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.269848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.277747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.285837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.296474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.304227] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.310617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.317917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.326157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.333809] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.340186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.347250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.356964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.365308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.378756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.387371] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.395290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.405059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.413505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.424053] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.430532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.444673] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.454701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.464574] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.472579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.479563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.486870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.497932] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.504385] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.513685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.526357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.534208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.544073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.552303] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.558701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.566286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.574273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.582237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.594189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.601367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.609549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.617565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.625794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.635407] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.641815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.648730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.656975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.664736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.676075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.688139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.696187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.705651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.715959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.725859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.733451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.741680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.749517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.757780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.772184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.782361] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.788437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.796479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.804582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.813694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.828172] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 2020/02/15 23:50:43 executed programs: 14 [ 56.836315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.868761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.885070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.893959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.902692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.911482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.922115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.934773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.943424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.951852] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.958192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.966907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.986821] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.998898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.312672] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 58.711851] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 59.119003] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 61.311832] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/02/15 23:50:48 executed programs: 213 [ 62.026939] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 62.382473] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 62.836321] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 62.949524] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 63.185551] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 63.322732] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 66.360473] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 66.506726] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/02/15 23:50:53 executed programs: 493 [ 68.544069] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 69.035729] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 69.351040] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 71.742510] ================================================================== [ 71.750097] BUG: KASAN: use-after-free in inet_shutdown+0x287/0x300 [ 71.756616] Read of size 4 at addr ffff8880aa413940 by task syz-executor.1/10033 [ 71.764155] [ 71.765793] CPU: 1 PID: 10033 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0 [ 71.773693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.783167] Call Trace: [ 71.785761] dump_stack+0xf7/0x13b [ 71.789306] ? inet_shutdown+0x287/0x300 [ 71.793379] print_address_description.cold.7+0x9/0x1c9 [ 71.798744] ? inet_shutdown+0x287/0x300 [ 71.802816] kasan_report.cold.8+0x11a/0x2d3 [ 71.807234] __asan_report_load4_noabort+0x14/0x20 [ 71.812388] inet_shutdown+0x287/0x300 [ 71.816287] pppol2tp_session_close+0x91/0xc0 [ 71.820789] l2tp_tunnel_closeall+0x1df/0x2f0 [ 71.825288] ? trace_hardirqs_on+0xd/0x10 [ 71.829540] l2tp_udp_encap_destroy+0x7d/0xc0 [ 71.834162] udpv6_destroy_sock+0x89/0xb0 [ 71.838312] sk_common_release+0x5e/0x2c0 [ 71.842464] udp_lib_close+0x9/0x10 [ 71.846093] inet_release+0xd9/0x1c0 [ 71.849817] inet6_release+0x46/0x60 [ 71.853550] __sock_release+0xc2/0x2a0 [ 71.857453] sock_close+0x10/0x20 [ 71.860919] __fput+0x232/0x750 [ 71.864202] ? _raw_spin_unlock_irq+0x27/0x80 [ 71.868704] ____fput+0x9/0x10 [ 71.871895] task_work_run+0xe5/0x170 [ 71.875920] exit_to_usermode_loop+0x16a/0x1b0 [ 71.880515] do_syscall_64+0x416/0x5b0 [ 71.884526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 71.889370] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 71.894555] RIP: 0033:0x459a59 [ 71.897746] RSP: 002b:00007f5586a8ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 71.905457] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459a59 [ 71.912871] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 71.920141] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 71.927505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5586a8f6d4 [ 71.934776] R13: 00000000004c0006 R14: 00000000004d2298 R15: 00000000ffffffff [ 71.942063] [ 71.943684] Allocated by task 10044: [ 71.947399] save_stack_trace+0x16/0x20 [ 71.951384] save_stack+0x43/0xd0 [ 71.954840] kasan_kmalloc+0xc7/0xe0 [ 71.958584] kasan_slab_alloc+0x12/0x20 [ 71.962562] kmem_cache_alloc+0x12e/0x790 [ 71.966712] sock_alloc_inode+0x18/0x230 [ 71.970777] alloc_inode+0x56/0x150 [ 71.974411] new_inode_pseudo+0xc/0xd0 [ 71.978308] sock_alloc+0x3c/0x280 [ 71.981864] __sock_create+0x7a/0x540 [ 71.985666] SyS_socket+0xc6/0x1a0 [ 71.989229] do_syscall_64+0x1c7/0x5b0 2020/02/15 23:50:58 executed programs: 770 [ 71.993330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 71.997630] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -88 [ 71.998511] [ 72.006191] Freed by task 10029: [ 72.009575] save_stack_trace+0x16/0x20 [ 72.013764] save_stack+0x43/0xd0 [ 72.017201] kasan_slab_free+0x71/0xc0 [ 72.021188] kmem_cache_free+0x80/0x2d0 [ 72.025145] sock_destroy_inode+0x50/0x60 [ 72.029430] destroy_inode+0xb3/0x100 [ 72.033228] evict+0x36f/0x590 [ 72.036419] iput+0x3ac/0x810 [ 72.039516] dentry_unlink_inode+0x23e/0x2f0 [ 72.043906] __dentry_kill+0x2d2/0x540 [ 72.047873] dput.part.27+0x49a/0x610 [ 72.051665] dput+0xe/0x20 [ 72.054498] __fput+0x3f7/0x750 [ 72.057755] ____fput+0x9/0x10 [ 72.060927] task_work_run+0xe5/0x170 [ 72.064930] exit_to_usermode_loop+0x16a/0x1b0 [ 72.069493] do_syscall_64+0x416/0x5b0 [ 72.073481] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 72.078746] [ 72.080355] The buggy address belongs to the object at ffff8880aa413940 [ 72.080355] which belongs to the cache sock_inode_cache of size 992 [ 72.093521] The buggy address is located 0 bytes inside of [ 72.093521] 992-byte region [ffff8880aa413940, ffff8880aa413d20) [ 72.105222] The buggy address belongs to the page: [ 72.110244] page:ffffea0002a904c0 count:1 mapcount:0 mapping:ffff8880aa413040 index:0xffff8880aa413ffd [ 72.119682] flags: 0x1fffc0000000100(slab) [ 72.124034] raw: 01fffc0000000100 ffff8880aa413040 ffff8880aa413ffd 0000000100000003 [ 72.131910] raw: ffffea00024ffce0 ffffea00024ff420 ffff8880a9e11a80 0000000000000000 [ 72.139777] page dumped because: kasan: bad access detected [ 72.145584] [ 72.147190] Memory state around the buggy address: [ 72.152101] ffff8880aa413800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.159851] ffff8880aa413880: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 72.167289] >ffff8880aa413900: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 72.174632] ^ [ 72.180070] ffff8880aa413980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.187429] ffff8880aa413a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.194898] ================================================================== [ 72.202240] Disabling lock debugging due to kernel taint [ 72.214609] Kernel panic - not syncing: panic_on_warn set ... [ 72.214609] [ 72.221997] CPU: 1 PID: 10033 Comm: syz-executor.1 Tainted: G B 4.14.171-syzkaller #0 [ 72.231275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.240627] Call Trace: [ 72.243274] dump_stack+0xf7/0x13b [ 72.246801] ? inet_shutdown+0x287/0x300 [ 72.250862] panic+0x1b0/0x358 [ 72.254181] ? add_taint.cold.5+0x11/0x11 [ 72.258308] ? ___preempt_schedule+0x16/0x18 [ 72.262716] ? inet_shutdown+0x287/0x300 [ 72.266765] kasan_end_report+0x47/0x4f [ 72.270733] kasan_report.cold.8+0x76/0x2d3 [ 72.275041] __asan_report_load4_noabort+0x14/0x20 [ 72.280161] inet_shutdown+0x287/0x300 [ 72.284044] pppol2tp_session_close+0x91/0xc0 [ 72.288611] l2tp_tunnel_closeall+0x1df/0x2f0 [ 72.293105] ? trace_hardirqs_on+0xd/0x10 [ 72.298374] l2tp_udp_encap_destroy+0x7d/0xc0 [ 72.302857] udpv6_destroy_sock+0x89/0xb0 [ 72.307356] sk_common_release+0x5e/0x2c0 [ 72.311708] udp_lib_close+0x9/0x10 [ 72.315339] inet_release+0xd9/0x1c0 [ 72.319040] inet6_release+0x46/0x60 [ 72.324041] __sock_release+0xc2/0x2a0 [ 72.327921] sock_close+0x10/0x20 [ 72.331365] __fput+0x232/0x750 [ 72.334635] ? _raw_spin_unlock_irq+0x27/0x80 [ 72.339127] ____fput+0x9/0x10 [ 72.342392] task_work_run+0xe5/0x170 [ 72.346308] exit_to_usermode_loop+0x16a/0x1b0 [ 72.350928] do_syscall_64+0x416/0x5b0 [ 72.354809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 72.359647] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 72.364926] RIP: 0033:0x459a59 [ 72.368116] RSP: 002b:00007f5586a8ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 72.375805] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459a59 [ 72.383062] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 72.390328] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 72.397667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5586a8f6d4 [ 72.404948] R13: 00000000004c0006 R14: 00000000004d2298 R15: 00000000ffffffff [ 72.413946] Kernel Offset: disabled [ 72.417672] Rebooting in 86400 seconds..