Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. 2020/01/16 00:47:48 parsed 1 programs 2020/01/16 00:47:48 executed programs: 0 [ 50.956122] audit: type=1400 audit(1579135668.480:40): avc: denied { map } for pid=7086 comm="syz-execprog" path="/root/syzkaller-shm922757819" dev="sda1" ino=16492 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 51.220984] IPVS: ftp: loaded support on port[0] = 21 [ 52.049128] chnl_net:caif_netlink_parms(): no params data found [ 52.057561] IPVS: ftp: loaded support on port[0] = 21 [ 52.090775] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.097730] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.104892] device bridge_slave_0 entered promiscuous mode [ 52.123669] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.131279] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.138410] device bridge_slave_1 entered promiscuous mode [ 52.159121] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.169913] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.192006] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.199523] team0: Port device team_slave_0 added [ 52.205539] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.213054] team0: Port device team_slave_1 added [ 52.218483] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.219199] IPVS: ftp: loaded support on port[0] = 21 [ 52.226072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.293273] device hsr_slave_0 entered promiscuous mode [ 52.350379] device hsr_slave_1 entered promiscuous mode [ 52.393159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.402863] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.466456] chnl_net:caif_netlink_parms(): no params data found [ 52.497900] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.504674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.511741] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.518134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.538222] IPVS: ftp: loaded support on port[0] = 21 [ 52.552454] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.558900] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.566343] device bridge_slave_0 entered promiscuous mode [ 52.573395] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.579756] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.587013] device bridge_slave_1 entered promiscuous mode [ 52.611294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.630341] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.655626] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.663189] team0: Port device team_slave_0 added [ 52.669553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.676878] team0: Port device team_slave_1 added [ 52.684133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.719052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.741064] chnl_net:caif_netlink_parms(): no params data found [ 52.802238] device hsr_slave_0 entered promiscuous mode [ 52.840538] device hsr_slave_1 entered promiscuous mode [ 52.880740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.911741] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.945204] IPVS: ftp: loaded support on port[0] = 21 [ 52.950822] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.957359] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.964994] device bridge_slave_0 entered promiscuous mode [ 52.974935] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.983030] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.990091] device bridge_slave_1 entered promiscuous mode [ 53.002287] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.008652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.015321] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.021697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.033212] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 53.039295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.054576] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.063684] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.122790] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.129994] team0: Port device team_slave_0 added [ 53.138349] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.145625] team0: Port device team_slave_1 added [ 53.152262] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.171428] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.178743] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.185835] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.193981] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.200805] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.212394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.225438] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.235670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.249091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.256120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.273743] chnl_net:caif_netlink_parms(): no params data found [ 53.288239] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.294566] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.302828] IPVS: ftp: loaded support on port[0] = 21 [ 53.353083] device hsr_slave_0 entered promiscuous mode [ 53.390492] device hsr_slave_1 entered promiscuous mode [ 53.434983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.453875] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.463682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.479658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.489757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.497672] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.504667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.518728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.558390] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.565233] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.573342] device bridge_slave_0 entered promiscuous mode [ 53.579807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.588088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.596067] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.602455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.612685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.627912] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.634684] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.641694] device bridge_slave_1 entered promiscuous mode [ 53.647907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.659069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.687176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.699680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.709877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.743185] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.751526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.759213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.767053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.777538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.788761] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.796491] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.813302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.821321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.831341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.842150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.849779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.870840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.878421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.886993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.895110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.903242] chnl_net:caif_netlink_parms(): no params data found [ 53.913240] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.932637] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.939840] team0: Port device team_slave_0 added [ 53.946460] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.952902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.962637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.969482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.979911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.986324] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.993747] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.001389] team0: Port device team_slave_1 added [ 54.027794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.041680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.049838] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.057891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.066488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.074322] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.080722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.094982] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.101913] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.108812] device bridge_slave_0 entered promiscuous mode [ 54.121876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.173442] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.179826] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.187190] device bridge_slave_1 entered promiscuous mode [ 54.215439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.226880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.236783] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.261346] chnl_net:caif_netlink_parms(): no params data found [ 54.270722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.278447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.286415] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.292867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.302212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.309709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.327803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.335262] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.393715] device hsr_slave_0 entered promiscuous mode [ 54.452479] device hsr_slave_1 entered promiscuous mode [ 54.502570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.525801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.537038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.544372] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.552383] team0: Port device team_slave_0 added [ 54.560289] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.567662] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.576376] team0: Port device team_slave_1 added [ 54.583044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.590773] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.599430] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.608382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.619649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.628279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.635604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.643441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.651273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.656378] hrtimer: interrupt took 25122 ns [ 54.667024] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.674160] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.681912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.721901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.732032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.745515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.759118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.838876] device hsr_slave_0 entered promiscuous mode [ 54.870384] device hsr_slave_1 entered promiscuous mode [ 54.900783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.910402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.918937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.933026] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.939615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.948177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.960711] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.967601] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.974405] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.982239] device bridge_slave_0 entered promiscuous mode [ 54.988745] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.997327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.004455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.012220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.025627] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.034112] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.042501] device bridge_slave_1 entered promiscuous mode [ 55.049736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.059065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.068183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.078855] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.085013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.105765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.114566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.122789] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.129401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.136550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.144219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.154715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.175739] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.185073] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.193694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.206060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.219773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.228381] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.236266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.247397] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.258138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.279213] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.293168] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.301743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.318165] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.325797] team0: Port device team_slave_0 added [ 55.331711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.338643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.345871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.353952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.362046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.371046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.381079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.388472] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.396684] team0: Port device team_slave_1 added [ 55.404399] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.411322] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.418196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.426509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.434639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.443160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.453057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.461817] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.476769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.485639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.493664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.503372] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.509558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.542454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.556252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.566608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.575193] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.581624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.589556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.633572] device hsr_slave_0 entered promiscuous mode [ 55.680752] device hsr_slave_1 entered promiscuous mode [ 55.726031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.735025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.743676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.751605] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.758125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.765918] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.778303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.788027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.796189] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.804895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.812794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.823623] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.833014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.851229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.857744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.866296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.874091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.885565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.895367] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.904804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.912080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.925703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.934774] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.942873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.956747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.967193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.975592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.984020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.992361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.012999] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.022316] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.028396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.037260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.048824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.058674] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.065244] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.086338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.098226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.114952] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.130326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.138952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.149313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.157589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.165512] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.171922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.181227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 2020/01/16 00:47:53 executed programs: 16 [ 56.191642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.203026] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.209603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.219634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.233515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.241738] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.248337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.255414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.263388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.270483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.279739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.289918] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.296777] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.303730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.315607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.324890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.334093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.344166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.357102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.364445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.372594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.383661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.393599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.403891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.413245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.421188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.429096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.437185] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.443844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.450894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.460087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.468245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.480410] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.486514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.500829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.511261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.518318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.528393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.536183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.536635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.557608] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.564055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.582128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.595525] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.609985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.628987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.642504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.652172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.659395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.672859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.680703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.690405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.699676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.707178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.716074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.723812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.733416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.743580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.750949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.758543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.768923] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.775567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.787149] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.799337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.866511] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 60.733906] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/01/16 00:47:58 executed programs: 185 [ 62.927790] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 63.289429] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 63.807629] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 65.012330] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 65.866981] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 65.933552] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 66.051440] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/01/16 00:48:03 executed programs: 434 [ 67.042484] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 67.176694] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 68.749939] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 69.633253] ================================================================== [ 69.640667] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 69.647339] Read of size 8 at addr ffff888089ddeea0 by task syz-executor.5/9583 [ 69.654794] [ 69.656430] CPU: 0 PID: 9583 Comm: syz-executor.5 Not tainted 4.14.165-syzkaller #0 [ 69.664363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.673724] Call Trace: [ 69.676421] dump_stack+0xf7/0x13b [ 69.679951] ? __lock_acquire+0x32f9/0x4500 [ 69.684271] print_address_description.cold.7+0x9/0x1c9 [ 69.689644] ? __lock_acquire+0x32f9/0x4500 [ 69.693971] kasan_report.cold.8+0x11a/0x2d3 [ 69.698382] __asan_report_load8_noabort+0x14/0x20 [ 69.703310] __lock_acquire+0x32f9/0x4500 [ 69.707679] ? save_stack_trace+0x16/0x20 [ 69.711825] ? save_stack+0x43/0xd0 [ 69.715454] ? kasan_slab_free+0x71/0xc0 [ 69.719525] ? kmem_cache_free+0x80/0x2d0 [ 69.723876] ? __lock_acquire+0x6a4/0x4500 [ 69.728109] ? __lock_acquire+0x6a4/0x4500 [ 69.732446] ? trace_hardirqs_on+0x10/0x10 [ 69.736893] ? trace_hardirqs_off+0x10/0x10 [ 69.741204] ? trace_hardirqs_on+0x10/0x10 [ 69.745440] ? __lock_acquire+0x6a4/0x4500 [ 69.749663] ? __lock_is_held+0xb5/0x140 [ 69.753743] lock_acquire+0x173/0x400 [ 69.757548] ? lock_sock_nested+0x3a/0x100 [ 69.761782] _raw_spin_lock_bh+0x31/0x40 [ 69.768022] ? lock_sock_nested+0x3a/0x100 [ 69.772270] lock_sock_nested+0x3a/0x100 [ 69.776325] pppol2tp_release+0x45/0x290 [ 69.780378] __sock_release+0xc2/0x2a0 [ 69.784250] sock_close+0x10/0x20 [ 69.787684] __fput+0x232/0x750 [ 69.790966] ? _raw_spin_unlock_irq+0x27/0x80 [ 69.795615] ____fput+0x9/0x10 [ 69.798885] task_work_run+0xe5/0x170 [ 69.802680] exit_to_usermode_loop+0x16a/0x1b0 [ 69.807393] do_syscall_64+0x416/0x5b0 [ 69.811276] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 69.816220] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 69.821396] RIP: 0033:0x413711 [ 69.824573] RSP: 002b:00007ffcc05e2c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 69.832274] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413711 [ 69.839534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 69.847831] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 69.855101] R10: 00007ffcc05e2cf0 R11: 0000000000000293 R12: 000000000075bfc8 [ 69.862498] R13: 0000000000010ffc R14: 0000000000760c10 R15: 000000000075bfd4 [ 69.869765] [ 69.871388] Allocated by task 9605: [ 69.875005] save_stack_trace+0x16/0x20 [ 69.878961] save_stack+0x43/0xd0 [ 69.882401] kasan_kmalloc+0xc7/0xe0 [ 69.886111] __kmalloc+0x15b/0x7b0 [ 69.889634] sk_prot_alloc+0x146/0x240 [ 69.893513] sk_alloc+0x30/0xc10 [ 69.896969] pppol2tp_create+0x23/0x1d0 [ 69.900938] pppox_create+0xd3/0x1f0 [ 69.904874] __sock_create+0x262/0x540 [ 69.908752] SyS_socket+0xc6/0x1a0 [ 69.912300] do_syscall_64+0x1c7/0x5b0 [ 69.916164] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 69.921343] [ 69.923018] Freed by task 9605: [ 69.926283] save_stack_trace+0x16/0x20 [ 69.930373] save_stack+0x43/0xd0 [ 69.933810] kasan_slab_free+0x71/0xc0 [ 69.937789] kfree+0xcc/0x270 [ 69.940883] __sk_destruct+0x3e1/0x4e0 [ 69.944882] sk_destruct+0x83/0xb0 [ 69.948400] __sk_free+0x47/0x1f0 [ 69.951841] sk_free+0x23/0x30 [ 69.955029] pppol2tp_session_sock_put+0x4d/0x60 [ 69.959852] l2tp_tunnel_closeall+0x208/0x2f0 [ 69.964333] l2tp_udp_encap_destroy+0x7d/0xc0 [ 69.968832] udpv6_destroy_sock+0x89/0xb0 [ 69.972965] sk_common_release+0x5e/0x2c0 [ 69.977150] udp_lib_close+0x9/0x10 [ 69.980769] inet_release+0xd9/0x1c0 [ 69.984473] inet6_release+0x46/0x60 [ 69.988168] __sock_release+0xc2/0x2a0 [ 69.992121] sock_close+0x10/0x20 [ 69.995570] __fput+0x232/0x750 [ 69.998849] ____fput+0x9/0x10 [ 70.002029] task_work_run+0xe5/0x170 [ 70.005925] exit_to_usermode_loop+0x16a/0x1b0 [ 70.010496] do_syscall_64+0x416/0x5b0 [ 70.014374] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 70.019649] [ 70.021266] The buggy address belongs to the object at ffff888089ddee00 [ 70.021266] which belongs to the cache kmalloc-2048 of size 2048 [ 70.034110] The buggy address is located 160 bytes inside of [ 70.034110] 2048-byte region [ffff888089ddee00, ffff888089ddf600) [ 70.046120] The buggy address belongs to the page: [ 70.051045] page:ffffea0002277780 count:1 mapcount:0 mapping:ffff888089dde580 index:0x0 compound_mapcount: 0 [ 70.061008] flags: 0x1fffc0000008100(slab|head) [ 70.065668] raw: 01fffc0000008100 ffff888089dde580 0000000000000000 0000000100000003 [ 70.073540] raw: ffffea0002a6a1a0 ffffea0001d22c20 ffff8880aa800c40 0000000000000000 [ 70.081412] page dumped because: kasan: bad access detected [ 70.087369] [ 70.088974] Memory state around the buggy address: [ 70.094064] ffff888089dded80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.101562] ffff888089ddee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.108974] >ffff888089ddee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.116365] ^ [ 70.120764] ffff888089ddef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.128308] ffff888089ddef80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.135647] ================================================================== [ 70.142993] Disabling lock debugging due to kernel taint [ 70.148489] Kernel panic - not syncing: panic_on_warn set ... [ 70.148489] [ 70.155874] CPU: 0 PID: 9583 Comm: syz-executor.5 Tainted: G B 4.14.165-syzkaller #0 [ 70.164893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.174430] Call Trace: [ 70.177009] dump_stack+0xf7/0x13b [ 70.180542] ? __lock_acquire+0x32f9/0x4500 [ 70.184857] panic+0x1b0/0x358 [ 70.188039] ? add_taint.cold.5+0x11/0x11 [ 70.192179] ? lock_downgrade+0x7f0/0x7f0 [ 70.196344] ? __lock_acquire+0x32f9/0x4500 [ 70.200663] kasan_end_report+0x47/0x4f [ 70.204632] kasan_report.cold.8+0x76/0x2d3 [ 70.208941] __asan_report_load8_noabort+0x14/0x20 [ 70.213865] __lock_acquire+0x32f9/0x4500 [ 70.218050] ? save_stack_trace+0x16/0x20 [ 70.222185] ? save_stack+0x43/0xd0 [ 70.225853] ? kasan_slab_free+0x71/0xc0 [ 70.229989] ? kmem_cache_free+0x80/0x2d0 [ 70.234201] ? __lock_acquire+0x6a4/0x4500 [ 70.238446] ? __lock_acquire+0x6a4/0x4500 [ 70.242689] ? trace_hardirqs_on+0x10/0x10 [ 70.246911] ? trace_hardirqs_off+0x10/0x10 [ 70.251274] ? trace_hardirqs_on+0x10/0x10 [ 70.255543] ? __lock_acquire+0x6a4/0x4500 [ 70.259765] ? __lock_is_held+0xb5/0x140 [ 70.263815] lock_acquire+0x173/0x400 [ 70.267659] ? lock_sock_nested+0x3a/0x100 [ 70.271906] _raw_spin_lock_bh+0x31/0x40 [ 70.275976] ? lock_sock_nested+0x3a/0x100 [ 70.280210] lock_sock_nested+0x3a/0x100 [ 70.284275] pppol2tp_release+0x45/0x290 [ 70.288329] __sock_release+0xc2/0x2a0 [ 70.292314] sock_close+0x10/0x20 [ 70.295756] __fput+0x232/0x750 [ 70.299023] ? _raw_spin_unlock_irq+0x27/0x80 [ 70.303642] ____fput+0x9/0x10 [ 70.308097] task_work_run+0xe5/0x170 [ 70.311891] exit_to_usermode_loop+0x16a/0x1b0 [ 70.316453] do_syscall_64+0x416/0x5b0 [ 70.320340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 70.325182] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 70.330481] RIP: 0033:0x413711 [ 70.333674] RSP: 002b:00007ffcc05e2c10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 70.341505] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413711 [ 70.348766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 70.356132] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 70.363399] R10: 00007ffcc05e2cf0 R11: 0000000000000293 R12: 000000000075bfc8 [ 70.371621] R13: 0000000000010ffc R14: 0000000000760c10 R15: 000000000075bfd4 [ 70.380368] Kernel Offset: disabled [ 70.384107] Rebooting in 86400 seconds..