[   39.611757] audit: type=1400 audit(1579251495.140:39): avc:  denied  { create } for  pid=6796 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[   39.745451] random: sshd: uninitialized urandom read (32 bytes read)
[   40.509033] random: sshd: uninitialized urandom read (32 bytes read)
[   40.699872] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts.
2020/01/17 08:58:22 parsed 1 programs
2020/01/17 08:58:22 executed programs: 0
[   46.611788] audit: type=1400 audit(1579251502.190:40): avc:  denied  { map } for  pid=6867 comm="syz-execprog" path="/root/syzkaller-shm031057869" dev="sda1" ino=16508 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[   46.920907] IPVS: ftp: loaded support on port[0] = 21
[   47.746149] IPVS: ftp: loaded support on port[0] = 21
[   47.786570] chnl_net:caif_netlink_parms(): no params data found
[   47.826946] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.834199] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.842149] device bridge_slave_0 entered promiscuous mode
[   47.842659] IPVS: ftp: loaded support on port[0] = 21
[   47.849682] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.859808] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.867172] device bridge_slave_1 entered promiscuous mode
[   47.886010] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   47.894886] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   47.928222] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   47.935705] team0: Port device team_slave_0 added
[   47.943050] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   47.950519] team0: Port device team_slave_1 added
[   47.963901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   47.973341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   48.001595] IPVS: ftp: loaded support on port[0] = 21
[   48.051840] device hsr_slave_0 entered promiscuous mode
[   48.130304] device hsr_slave_1 entered promiscuous mode
[   48.192389] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   48.204132] chnl_net:caif_netlink_parms(): no params data found
[   48.212022] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   48.268210] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.274801] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.282913] device bridge_slave_0 entered promiscuous mode
[   48.291153] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.297649] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.304816] device bridge_slave_1 entered promiscuous mode
[   48.312019] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.318516] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.325612] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.331995] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.358543] chnl_net:caif_netlink_parms(): no params data found
[   48.387806] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   48.399658] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   48.413109] IPVS: ftp: loaded support on port[0] = 21
[   48.432223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   48.439402] team0: Port device team_slave_0 added
[   48.445888] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   48.453197] team0: Port device team_slave_1 added
[   48.458755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   48.480329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   48.506735] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.513689] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.521195] device bridge_slave_0 entered promiscuous mode
[   48.572144] device hsr_slave_0 entered promiscuous mode
[   48.610288] device hsr_slave_1 entered promiscuous mode
[   48.672136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   48.704435] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.710891] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.718078] device bridge_slave_1 entered promiscuous mode
[   48.733514] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   48.747477] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   48.758082] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   48.775334] chnl_net:caif_netlink_parms(): no params data found
[   48.806825] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.813231] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.819893] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.826271] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.837726] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   48.845172] team0: Port device team_slave_0 added
[   48.862570] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.869440] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.877066] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.883708] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.906850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   48.915541] team0: Port device team_slave_1 added
[   48.921451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   48.939398] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.946003] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.954641] device bridge_slave_0 entered promiscuous mode
[   48.962849] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.969602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   48.978432] IPVS: ftp: loaded support on port[0] = 21
[   48.986875] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.993873] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.001250] device bridge_slave_1 entered promiscuous mode
[   49.026170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   49.083323] device hsr_slave_0 entered promiscuous mode
[   49.150397] device hsr_slave_1 entered promiscuous mode
[   49.212503] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   49.223454] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   49.232700] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   49.239297] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   49.246777] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   49.272982] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   49.280669] team0: Port device team_slave_0 added
[   49.286240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.294260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.309147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   49.324976] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   49.331215] 8021q: adding VLAN 0 to HW filter on device team0
[   49.337693] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   49.345110] team0: Port device team_slave_1 added
[   49.374365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   49.387522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   49.395408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   49.403431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.411880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.419428] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.425826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.449446] chnl_net:caif_netlink_parms(): no params data found
[   49.465546] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.472544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   49.488707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   49.496977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.505494] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.511859] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.535847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   49.551481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   49.663232] device hsr_slave_0 entered promiscuous mode
[   49.710368] device hsr_slave_1 entered promiscuous mode
[   49.750327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.758161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   49.767270] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   49.774595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.782894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.794124] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   49.801905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   49.810845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   49.826778] chnl_net:caif_netlink_parms(): no params data found
[   49.839579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   49.853049] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   49.859426] 8021q: adding VLAN 0 to HW filter on device team0
[   49.868462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   49.884571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.892846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.900875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.908708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.916366] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.922821] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.929759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   49.945982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   49.955969] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.962804] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.969888] device bridge_slave_0 entered promiscuous mode
[   49.977937] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.984445] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.991855] device bridge_slave_1 entered promiscuous mode
[   49.997983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.006353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.014205] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.020704] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.028390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   50.037926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   50.047542] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   50.075533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   50.084110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.092258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   50.099712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.108415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   50.116535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   50.132576] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   50.141771] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   50.156035] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.162785] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.169686] device bridge_slave_0 entered promiscuous mode
[   50.177033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   50.184775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   50.192353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.202485] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   50.208489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.224138] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.230743] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.237627] device bridge_slave_1 entered promiscuous mode
[   50.257222] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   50.264967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   50.274422] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   50.281839] team0: Port device team_slave_0 added
[   50.294318] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   50.303585] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.310454] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   50.324928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   50.334647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   50.342670] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   50.349851] team0: Port device team_slave_1 added
[   50.356737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   50.368588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   50.381948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   50.394421] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.401452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   50.409182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.418947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   50.427770] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   50.435770] team0: Port device team_slave_0 added
[   50.441656] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   50.448749] team0: Port device team_slave_1 added
[   50.458767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   50.469682] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   50.475925] 8021q: adding VLAN 0 to HW filter on device team0
[   50.482774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.489760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   50.497469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.505148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.512074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.520834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   50.529496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   50.537354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   50.558104] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.570234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   50.577831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.585601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   50.593815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.603172] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   50.609337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.617275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   50.641527] audit: type=1400 audit(1579251506.220:41): avc:  denied  { map } for  pid=6921 comm="syz-executor.2" path=2F6D656D66643A73656375726974792E73656C696E7578202864656C6574656429 dev="tmpfs" ino=26820 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1
[   50.676681] device hsr_slave_0 entered promiscuous mode
[   50.720314] device hsr_slave_1 entered promiscuous mode
[   50.761816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   50.769904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.778346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.786670] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.793072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.806754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.819097] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   50.827858] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   50.836107] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   50.894104] device hsr_slave_0 entered promiscuous mode
[   50.940488] device hsr_slave_1 entered promiscuous mode
[   50.986813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   50.995522] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   51.006505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.014517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.027451] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.033865] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.044650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.051940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.059178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[   51.066962] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   51.076893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   51.087283] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   51.093840] 8021q: adding VLAN 0 to HW filter on device team0
[   51.101547] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[   51.108381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.133960] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.146942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   51.156052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   51.165823] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   51.179969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.192445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.201196] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.207680] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.214880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.222691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.232296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   51.242508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   51.255634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.263711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.271673] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.278034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.285451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.293630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.301722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.309563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   51.322552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   51.338277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.346928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.355027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.364580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   51.373650] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   51.381853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.389538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.397861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   51.412570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.422876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   51.436877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.444769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.454026] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   51.461218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.469167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   51.491648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.499438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.509912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.524554] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.533313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   51.557532] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.567678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.576671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.586404] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   51.595288] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   51.603007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   51.613175] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   51.620179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   51.631526] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   51.637998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.645062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.652519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.659932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.667800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.674943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.684930] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   51.691644] 8021q: adding VLAN 0 to HW filter on device team0
[   51.701178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   51.709225] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[   51.716194] 8021q: adding VLAN 0 to HW filter on device team0
[   51.724687] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.735194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.742871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.752658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   51.761772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   51.771390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.779394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.787611] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.793990] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.802310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.810104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.817779] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.824171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.831648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.839890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.848193] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   51.854618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.869122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   51.877857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   51.886380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.894477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.902553] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.908913] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.916225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.924831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.932716] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.939065] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.948674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   51.957681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   51.965099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.973642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.983572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   51.994400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   52.001960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.014981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.023604] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   52.035343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   52.044304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   52.056665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
2020/01/17 08:58:27 executed programs: 15
[   52.063967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.072402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.079835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.089080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.097578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.105731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.113647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.121029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.131585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   52.142672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   52.151004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.158473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.167003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.174650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.183937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   52.193275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.199776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.207428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.218509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[   52.226351] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   52.233303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.241654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.249123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.261820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[   52.269902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.282863] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[   52.288999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.304503] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   52.311193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.318645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.337221] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.345896] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[   52.360248] 8021q: adding VLAN 0 to HW filter on device batadv0
2020/01/17 08:58:32 executed programs: 243
2020/01/17 08:58:37 executed programs: 564
2020/01/17 08:58:42 executed programs: 881
[   69.169838] l2tp_core: tunl 4194308: sockfd_lookup(fd=5) returned -9
[   70.054317] l2tp_core: tunl 4194308: sockfd_lookup(fd=5) returned -9
2020/01/17 08:58:47 executed programs: 1204
2020/01/17 08:58:52 executed programs: 1520
2020/01/17 08:58:57 executed programs: 1832
[   84.464774] l2tp_core: tunl 4194308: sockfd_lookup(fd=5) returned -9
2020/01/17 08:59:02 executed programs: 2148
2020/01/17 08:59:07 executed programs: 2456
2020/01/17 08:59:12 executed programs: 2771
2020/01/17 08:59:17 executed programs: 3081
2020/01/17 08:59:22 executed programs: 3385
2020/01/17 08:59:27 executed programs: 3702
2020/01/17 08:59:32 executed programs: 4011
2020/01/17 08:59:37 executed programs: 4322
2020/01/17 08:59:42 executed programs: 4633
2020/01/17 08:59:47 executed programs: 4938
2020/01/17 08:59:52 executed programs: 5240
2020/01/17 08:59:57 executed programs: 5535
2020/01/17 09:00:02 executed programs: 5845
2020/01/17 09:00:07 executed programs: 6153
[  152.861307] ==================================================================
[  152.868936] BUG: KASAN: use-after-free in l2tp_session_queue_purge+0xb0/0xc0
[  152.876135] Read of size 4 at addr ffff888083e88d40 by task syz-executor.0/32564
[  152.883787] 
[  152.885422] CPU: 0 PID: 32564 Comm: syz-executor.0 Not tainted 4.14.165-syzkaller #0
[  152.893304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  152.902840] Call Trace:
[  152.905434]  dump_stack+0xf7/0x13b
[  152.909134]  ? l2tp_session_queue_purge+0xb0/0xc0
[  152.913998]  print_address_description.cold.7+0x9/0x1c9
[  152.919378]  ? l2tp_session_queue_purge+0xb0/0xc0
[  152.924240]  kasan_report.cold.8+0x11a/0x2d3
[  152.928680]  __asan_report_load4_noabort+0x14/0x20
[  152.933640]  l2tp_session_queue_purge+0xb0/0xc0
[  152.938322]  l2tp_tunnel_closeall+0x1b6/0x2f0
[  152.942832]  ? trace_hardirqs_on+0xd/0x10
[  152.947298]  l2tp_udp_encap_destroy+0x7d/0xc0
[  152.951808]  udpv6_destroy_sock+0x89/0xb0
[  152.956082]  sk_common_release+0x5e/0x2c0
[  152.960250]  udp_lib_close+0x9/0x10
[  152.963876]  inet_release+0xd9/0x1c0
[  152.967583]  inet6_release+0x46/0x60
[  152.971471]  __sock_release+0xc2/0x2a0
[  152.975375]  sock_close+0x10/0x20
[  152.978830]  __fput+0x232/0x750
[  152.982120]  ? _raw_spin_unlock_irq+0x27/0x80
[  152.986613]  ____fput+0x9/0x10
[  152.989822]  task_work_run+0xe5/0x170
[  152.993676]  exit_to_usermode_loop+0x16a/0x1b0
[  152.998315]  do_syscall_64+0x416/0x5b0
[  153.002193]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  153.007152]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  153.012506] RIP: 0033:0x413ae1
[  153.015737] RSP: 002b:00007ffec4617ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  153.023438] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413ae1
[  153.030830] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000005
[  153.038384] RBP: 0000000000000000 R08: 0000000000760760 R09: ffffffffffffffff
[  153.045846] R10: 00007ffec4617d70 R11: 0000000000000293 R12: 000000000075bf20
[  153.053230] R13: 0000000000000003 R14: 0000000000760768 R15: 000000000075bf2c
[  153.060515] 
[  153.062140] Allocated by task 32565:
[  153.066026]  save_stack_trace+0x16/0x20
[  153.070199]  save_stack+0x43/0xd0
[  153.073648]  kasan_kmalloc+0xc7/0xe0
[  153.077371]  __kmalloc+0x15b/0x7b0
[  153.080905]  l2tp_session_create+0x31/0x1630
[  153.085387]  pppol2tp_connect+0x10c1/0x1900
[  153.089731]  SYSC_connect+0x1e3/0x2a0
[  153.093584]  SyS_connect+0x9/0x10
[  153.097155]  do_syscall_64+0x1c7/0x5b0
[  153.101090]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  153.106271] 
[  153.107951] Freed by task 32565:
[  153.111312]  save_stack_trace+0x16/0x20
[  153.115285]  save_stack+0x43/0xd0
[  153.118725]  kasan_slab_free+0x71/0xc0
[  153.122831]  kfree+0xcc/0x270
[  153.126094]  l2tp_session_free+0x14f/0x1d0
[  153.130319]  pppol2tp_session_destruct+0xbb/0xf0
[  153.135062]  __sk_destruct+0x46/0x4e0
[  153.138954]  sk_destruct+0x83/0xb0
[  153.142616]  __sk_free+0x47/0x1f0
[  153.146053]  sk_free+0x23/0x30
[  153.149234]  pppol2tp_release+0x209/0x290
[  153.153377]  __sock_release+0xc2/0x2a0
[  153.157336]  sock_close+0x10/0x20
[  153.160789]  __fput+0x232/0x750
[  153.164063]  ____fput+0x9/0x10
[  153.167244]  task_work_run+0xe5/0x170
[  153.171046]  exit_to_usermode_loop+0x16a/0x1b0
[  153.175752]  do_syscall_64+0x416/0x5b0
[  153.179637]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  153.184816] 
[  153.186433] The buggy address belongs to the object at ffff888083e88d40
[  153.186433]  which belongs to the cache kmalloc-512 of size 512
[  153.199078] The buggy address is located 0 bytes inside of
[  153.199078]  512-byte region [ffff888083e88d40, ffff888083e88f40)
[  153.211144] The buggy address belongs to the page:
[  153.216071] page:ffffea00020fa200 count:1 mapcount:0 mapping:ffff888083e880c0 index:0x0
[  153.224210] flags: 0x1fffc0000000100(slab)
[  153.228583] raw: 01fffc0000000100 ffff888083e880c0 0000000000000000 0000000100000006
[  153.236590] raw: ffffea00025af2a0 ffffea0002575f60 ffff8880aa800940 0000000000000000
[  153.244629] page dumped because: kasan: bad access detected
[  153.250531] 
[  153.252227] Memory state around the buggy address:
[  153.257178]  ffff888083e88c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.264634]  ffff888083e88c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  153.272225] >ffff888083e88d00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[  153.279658]                                            ^
[  153.285211]  ffff888083e88d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.292771]  ffff888083e88e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.301891] ==================================================================
[  153.309681] Disabling lock debugging due to kernel taint
[  153.315881] Kernel panic - not syncing: panic_on_warn set ...
[  153.315881] 
[  153.323423] CPU: 0 PID: 32564 Comm: syz-executor.0 Tainted: G    B           4.14.165-syzkaller #0
[  153.332700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  153.342203] Call Trace:
[  153.344806]  dump_stack+0xf7/0x13b
[  153.348340]  ? l2tp_session_queue_purge+0xb0/0xc0
[  153.353306]  panic+0x1b0/0x358
[  153.356700]  ? add_taint.cold.5+0x11/0x11
[  153.360941]  ? ___preempt_schedule+0x16/0x18
[  153.365335]  ? l2tp_session_queue_purge+0xb0/0xc0
[  153.370180]  kasan_end_report+0x47/0x4f
[  153.374146]  kasan_report.cold.8+0x76/0x2d3
[  153.378553]  __asan_report_load4_noabort+0x14/0x20
[  153.383503]  l2tp_session_queue_purge+0xb0/0xc0
[  153.388275]  l2tp_tunnel_closeall+0x1b6/0x2f0
[  153.393003]  ? trace_hardirqs_on+0xd/0x10
[  153.397394]  l2tp_udp_encap_destroy+0x7d/0xc0
[  153.401903]  udpv6_destroy_sock+0x89/0xb0
[  153.406043]  sk_common_release+0x5e/0x2c0
[  153.410545]  udp_lib_close+0x9/0x10
[  153.414542]  inet_release+0xd9/0x1c0
[  153.418336]  inet6_release+0x46/0x60
[  153.422035]  __sock_release+0xc2/0x2a0
[  153.425918]  sock_close+0x10/0x20
[  153.429363]  __fput+0x232/0x750
[  153.432629]  ? _raw_spin_unlock_irq+0x27/0x80
[  153.437135]  ____fput+0x9/0x10
[  153.440335]  task_work_run+0xe5/0x170
[  153.444134]  exit_to_usermode_loop+0x16a/0x1b0
[  153.448911]  do_syscall_64+0x416/0x5b0
[  153.452912]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  153.457855]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  153.463050] RIP: 0033:0x413ae1
[  153.466224] RSP: 002b:00007ffec4617ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  153.474038] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413ae1
[  153.481394] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000005
[  153.488830] RBP: 0000000000000000 R08: 0000000000760760 R09: ffffffffffffffff
[  153.496170] R10: 00007ffec4617d70 R11: 0000000000000293 R12: 000000000075bf20
[  153.503611] R13: 0000000000000003 R14: 0000000000760768 R15: 000000000075bf2c
[  153.512765] Kernel Offset: disabled
[  153.516410] Rebooting in 86400 seconds..