[ 39.609164] audit: type=1400 audit(1577675839.346:37): avc: denied { map } for pid=6798 comm="syz-fuzzer" path="/root/syzkaller-shm957482371" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.870850] IPVS: ftp: loaded support on port[0] = 21 [ 41.018391] can: request_module (can-proto-0) failed. [ 41.029009] can: request_module (can-proto-0) failed. [ 41.182809] audit: type=1400 audit(1577675840.926:38): avc: denied { create } for pid=6798 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.206381] audit: type=1400 audit(1577675840.926:39): avc: denied { create } for pid=6798 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.230741] audit: type=1400 audit(1577675840.926:40): avc: denied { create } for pid=6798 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 41.487213] random: sshd: uninitialized urandom read (32 bytes read) [ 42.156741] random: sshd: uninitialized urandom read (32 bytes read) [ 42.355308] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.15' (ECDSA) to the list of known hosts. 2019/12/30 03:17:28 parsed 1 programs 2019/12/30 03:17:28 executed programs: 0 [ 49.036584] IPVS: ftp: loaded support on port[0] = 21 [ 49.806082] chnl_net:caif_netlink_parms(): no params data found [ 49.834022] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.840738] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.847554] device bridge_slave_0 entered promiscuous mode [ 49.854531] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.861055] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.867855] device bridge_slave_1 entered promiscuous mode [ 49.881280] IPVS: ftp: loaded support on port[0] = 21 [ 49.892825] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.903071] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.918768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.926047] team0: Port device team_slave_0 added [ 49.931429] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.938419] team0: Port device team_slave_1 added [ 49.943691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.951116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.012016] device hsr_slave_0 entered promiscuous mode [ 50.060285] device hsr_slave_1 entered promiscuous mode [ 50.122122] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.133165] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.157922] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.164533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.171519] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.177914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.186113] IPVS: ftp: loaded support on port[0] = 21 [ 50.251800] chnl_net:caif_netlink_parms(): no params data found [ 50.301583] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.308009] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.315801] device bridge_slave_0 entered promiscuous mode [ 50.316270] IPVS: ftp: loaded support on port[0] = 21 [ 50.334461] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.343054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.349391] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.355924] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.362984] device bridge_slave_1 entered promiscuous mode [ 50.402902] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.411196] chnl_net:caif_netlink_parms(): no params data found [ 50.437731] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.449863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.485664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.494440] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.511688] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.525974] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.532729] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.539674] device bridge_slave_0 entered promiscuous mode [ 50.546570] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.554975] team0: Port device team_slave_0 added [ 50.563438] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.569511] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.576168] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.584296] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.591241] device bridge_slave_1 entered promiscuous mode [ 50.604463] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.611835] team0: Port device team_slave_1 added [ 50.624601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.640398] IPVS: ftp: loaded support on port[0] = 21 [ 50.643334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.653546] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.674257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.681882] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.688205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.695052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.703199] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.709528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.721967] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.782004] device hsr_slave_0 entered promiscuous mode [ 50.820382] device hsr_slave_1 entered promiscuous mode [ 50.892274] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 50.899978] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.916503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.931466] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.938349] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.945691] team0: Port device team_slave_0 added [ 50.952400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.964859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.984844] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.992381] team0: Port device team_slave_1 added [ 51.002515] IPVS: ftp: loaded support on port[0] = 21 [ 51.008555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.016769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.025409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.047424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.060924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.073265] chnl_net:caif_netlink_parms(): no params data found [ 51.083023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.090778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.112529] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.132637] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.148831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.182154] device hsr_slave_0 entered promiscuous mode [ 51.210353] device hsr_slave_1 entered promiscuous mode [ 51.271600] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.289212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.296716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.315767] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.329880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.347025] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.353632] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.362154] device bridge_slave_0 entered promiscuous mode [ 51.384034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.391844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.401903] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.407907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.426699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.433286] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.439620] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.446673] device bridge_slave_1 entered promiscuous mode [ 51.482078] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.492305] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.499647] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.510092] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.519041] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.534757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.542292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.558916] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.566918] chnl_net:caif_netlink_parms(): no params data found [ 51.582225] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.589814] team0: Port device team_slave_0 added [ 51.598641] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.605891] team0: Port device team_slave_1 added [ 51.612552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.639941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.653557] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.659632] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.743540] device hsr_slave_0 entered promiscuous mode [ 51.790319] device hsr_slave_1 entered promiscuous mode [ 51.830628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.837679] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.847819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.862955] chnl_net:caif_netlink_parms(): no params data found [ 51.878031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.885812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.893457] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.899821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.907717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.923360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.938130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.952512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.960855] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.973929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.985904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.994176] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.000558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.013070] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.022345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.029640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.039910] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.047365] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.054746] device bridge_slave_0 entered promiscuous mode [ 52.061532] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.067909] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.075116] device bridge_slave_1 entered promiscuous mode [ 52.090330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.107672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.115193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.123303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.131046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.138464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.151608] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.160603] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.166705] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.179934] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.190758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.201320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.208517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.215949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.222948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.230910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.238572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.246516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.267226] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.274054] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.282133] device bridge_slave_0 entered promiscuous mode [ 52.296655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.314161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.332831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.339985] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.350462] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.358586] device bridge_slave_1 entered promiscuous mode [ 52.373919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.384337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.395882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.407168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.416397] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.422858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.432692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.442895] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.449872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.461203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.489458] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.502352] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.510141] team0: Port device team_slave_0 added [ 52.518837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.526380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.542062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.549597] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.555983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.563921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.586236] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.599436] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.612840] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.619895] team0: Port device team_slave_1 added [ 52.627881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.643005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.651802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.659777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.706584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.731547] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.738689] team0: Port device team_slave_0 added [ 52.782259] device hsr_slave_0 entered promiscuous mode [ 52.821311] device hsr_slave_1 entered promiscuous mode [ 52.860645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.868214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.875857] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.886431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.896817] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.903915] team0: Port device team_slave_1 added [ 52.909316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.916702] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.927115] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.935216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.943319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.951228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.959667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.970708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.978677] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.997479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.007680] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.018566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.031126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.038569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.046096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.056568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.102129] device hsr_slave_0 entered promiscuous mode [ 53.150437] device hsr_slave_1 entered promiscuous mode [ 53.203813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.210450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.217857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.227955] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.234292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.242768] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.248830] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.257984] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.266415] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.278868] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.287321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.299993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.308073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.315980] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.322368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.331376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.351850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.361430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.371528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.382280] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.393511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.408666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.417577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.425582] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.431986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.438987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.454110] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.462905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.473869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.509688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.534547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.542544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.549827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.560606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.568713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.580298] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.587496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.594914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.602303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.609066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.616214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.623109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.629862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.637668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.647432] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.654007] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.662668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.671374] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.677439] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.691172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.697907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.705856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.713900] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.720298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.727339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.735396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.743084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.752855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.767520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.788285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.800934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.808640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.816992] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.823397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.836669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.844836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.852624] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.858962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.865928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.873590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.881308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.890330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.897795] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.904432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.912723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.921222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.928719] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.935095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.943889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.952020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.961190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.968751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.981317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.989940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.999756] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.007319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.018420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.031541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.040849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.048360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.055649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.063788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.071525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.079176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.086853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.094455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.102338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.109175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.118111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.127298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.139348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.146517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.155114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.163244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.170950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.181072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.196919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.207447] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.213683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.221308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.228745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.237369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.246558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.256873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.269811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.279642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.292947] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.299005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.306874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.315069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.324163] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.338821] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.347655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.362094] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/30 03:17:34 executed programs: 15 [ 55.657100] ================================================================== [ 55.664608] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 55.671271] Read of size 8 at addr ffff888099502ea0 by task kworker/u4:3/1000 [ 55.678659] [ 55.680287] CPU: 1 PID: 1000 Comm: kworker/u4:3 Not tainted 4.14.160-syzkaller #0 [ 55.687896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.697259] Workqueue: tipc_rcv tipc_recv_work [ 55.701837] Call Trace: [ 55.704427] dump_stack+0xf7/0x13b [ 55.707961] ? __lock_acquire+0x32f9/0x4500 [ 55.712280] print_address_description.cold.7+0x9/0x1c9 [ 55.712285] ? __lock_acquire+0x32f9/0x4500 [ 55.712288] kasan_report.cold.8+0x11a/0x2d3 [ 55.712292] __asan_report_load8_noabort+0x14/0x20 [ 55.712295] __lock_acquire+0x32f9/0x4500 [ 55.712298] ? __lock_acquire+0x6a4/0x4500 [ 55.712302] ? preempt_schedule+0x4d/0x60 [ 55.712305] ? preempt_schedule_common+0x1f/0xe0 [ 55.712310] ? release_sock+0x122/0x180 [ 55.712314] ? trace_hardirqs_on+0x10/0x10 [ 55.712318] ? trace_hardirqs_off+0x10/0x10 [ 55.712321] ? trace_hardirqs_off+0x10/0x10 [ 55.712325] ? _raw_spin_unlock_bh+0x30/0x40 [ 55.712328] ? release_sock+0x122/0x180 [ 55.712332] ? __lock_is_held+0xb5/0x140 [ 55.712337] lock_acquire+0x173/0x400 [ 55.712341] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.712346] _raw_spin_lock_bh+0x31/0x40 [ 55.712349] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.712352] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.712358] tipc_receive_from_sock+0x290/0x570 [ 55.712362] ? tipc_send_work+0x5e0/0x5e0 [ 55.712365] ? lock_downgrade+0x7f0/0x7f0 [ 55.712370] ? trace_hardirqs_off+0x10/0x10 [ 55.712375] ? __lock_is_held+0xb5/0x140 [ 55.712379] tipc_recv_work+0x78/0xd0 [ 55.712386] process_one_work+0x7a3/0x16c0 [ 55.712390] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 55.712396] worker_thread+0xcc/0xee0 [ 55.712402] kthread+0x33b/0x410 [ 55.712405] ? process_one_work+0x16c0/0x16c0 [ 55.712408] ? kthread_create_on_node+0xa0/0xa0 [ 55.712412] ret_from_fork+0x3a/0x50 [ 55.712416] [ 55.712419] Allocated by task 1000: [ 55.712424] save_stack_trace+0x16/0x20 [ 55.712427] save_stack+0x43/0xd0 [ 55.712428] kasan_kmalloc+0xc7/0xe0 [ 55.712433] kmem_cache_alloc_trace+0x152/0x7b0 [ 55.712435] tipc_subscrb_connect_cb+0x44/0x140 [ 55.712438] tipc_accept_from_sock+0x29e/0x4c0 [ 55.712441] tipc_recv_work+0x78/0xd0 [ 55.712444] process_one_work+0x7a3/0x16c0 [ 55.712447] worker_thread+0xcc/0xee0 [ 55.712449] kthread+0x33b/0x410 [ 55.712451] ret_from_fork+0x3a/0x50 [ 55.712452] [ 55.712453] Freed by task 5: [ 55.712455] save_stack_trace+0x16/0x20 [ 55.712457] save_stack+0x43/0xd0 [ 55.712460] kasan_slab_free+0x71/0xc0 [ 55.774336] kobject: 'loop3' (ffff8880a4a2a9a0): kobject_uevent_env [ 55.774655] kfree+0xcc/0x270 [ 55.778631] kobject: 'loop3' (ffff8880a4a2a9a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 55.782668] tipc_subscrb_put+0x19/0x20 [ 55.782670] tipc_subscrb_release_cb+0x1a/0x20 [ 55.782675] tipc_close_conn+0x15d/0x1f0 [ 55.782678] tipc_send_work+0x462/0x5e0 [ 55.782682] process_one_work+0x7a3/0x16c0 [ 55.782684] worker_thread+0xcc/0xee0 [ 55.782688] kthread+0x33b/0x410 [ 55.782692] ret_from_fork+0x3a/0x50 [ 55.782693] [ 55.782696] The buggy address belongs to the object at ffff888099502e80 [ 55.782696] which belongs to the cache kmalloc-96 of size 96 [ 55.782699] The buggy address is located 32 bytes inside of [ 55.782699] 96-byte region [ffff888099502e80, ffff888099502ee0) [ 55.782700] The buggy address belongs to the page: [ 55.782703] page:ffffea0002654080 count:1 mapcount:0 mapping:ffff888099502000 index:0x0 [ 55.782707] flags: 0x1fffc0000000100(slab) [ 55.782712] raw: 01fffc0000000100 ffff888099502000 0000000000000000 0000000100000020 [ 55.782716] raw: ffffea00026bc220 ffffea00025cd3a0 ffff8880aa8004c0 0000000000000000 [ 55.782717] page dumped because: kasan: bad access detected [ 55.782718] [ 55.782719] Memory state around the buggy address: [ 55.782722] ffff888099502d80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 55.782725] ffff888099502e00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 55.782727] >ffff888099502e80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.782728] ^ [ 55.782731] ffff888099502f00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.782734] ffff888099502f80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.848562] kobject: 'loop3' (ffff8880a4a2a9a0): kobject_uevent_env [ 55.849809] ================================================================== [ 55.849810] Disabling lock debugging due to kernel taint [ 55.849813] Kernel panic - not syncing: panic_on_warn set ... [ 55.849813] [ 55.849819] CPU: 1 PID: 1000 Comm: kworker/u4:3 Tainted: G B 4.14.160-syzkaller #0 [ 55.849821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.849832] Workqueue: tipc_rcv tipc_recv_work [ 55.853786] kobject: 'loop3' (ffff8880a4a2a9a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 55.857646] Call Trace: [ 55.857655] dump_stack+0xf7/0x13b [ 55.857662] ? __lock_acquire+0x32f9/0x4500 [ 55.857667] panic+0x1b0/0x36a [ 55.900057] kobject: 'loop3' (ffff8880a4a2a9a0): kobject_uevent_env [ 55.904269] ? add_taint.cold.5+0x11/0x11 [ 55.908063] kobject: 'loop3' (ffff8880a4a2a9a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 55.911395] ? lock_downgrade+0x7f0/0x7f0 [ 55.911401] ? __lock_acquire+0x32f9/0x4500 [ 55.911405] kasan_end_report+0x47/0x4f [ 55.911408] kasan_report.cold.8+0x76/0x2d3 [ 55.911411] __asan_report_load8_noabort+0x14/0x20 [ 55.911415] __lock_acquire+0x32f9/0x4500 [ 55.911418] ? __lock_acquire+0x6a4/0x4500 [ 55.911422] ? preempt_schedule+0x4d/0x60 [ 55.911425] ? preempt_schedule_common+0x1f/0xe0 [ 55.911430] ? release_sock+0x122/0x180 [ 55.911435] ? trace_hardirqs_on+0x10/0x10 [ 55.951977] kobject: 'loop3' (ffff8880a4a2a9a0): kobject_uevent_env [ 55.953901] ? trace_hardirqs_off+0x10/0x10 [ 55.958478] kobject: 'loop3' (ffff8880a4a2a9a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 55.962507] ? trace_hardirqs_off+0x10/0x10 [ 55.962513] ? _raw_spin_unlock_bh+0x30/0x40 [ 55.962517] ? release_sock+0x122/0x180 [ 55.962521] ? __lock_is_held+0xb5/0x140 [ 55.962526] lock_acquire+0x173/0x400 [ 55.962530] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.962534] _raw_spin_lock_bh+0x31/0x40 [ 55.962537] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.962540] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.962545] tipc_receive_from_sock+0x290/0x570 [ 55.962550] ? tipc_send_work+0x5e0/0x5e0 [ 56.004940] kobject: 'loop3' (ffff8880a4a2a9a0): kobject_uevent_env [ 56.007420] ? lock_downgrade+0x7f0/0x7f0 [ 56.007427] ? trace_hardirqs_off+0x10/0x10 [ 56.012940] kobject: 'loop3' (ffff8880a4a2a9a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 56.020467] ? __lock_is_held+0xb5/0x140 [ 56.020475] tipc_recv_work+0x78/0xd0 [ 56.020481] process_one_work+0x7a3/0x16c0 [ 56.020486] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 56.020491] worker_thread+0xcc/0xee0 [ 56.020497] kthread+0x33b/0x410 [ 56.020500] ? process_one_work+0x16c0/0x16c0 [ 56.020502] ? kthread_create_on_node+0xa0/0xa0 [ 56.020509] ret_from_fork+0x3a/0x50 [ 56.061546] kobject: 'loop3' (ffff8880a4a2a9a0): kobject_uevent_env [ 56.068622] Kernel Offset: disabled [ 56.372132] Rebooting in 86400 seconds..