[ 38.864672] audit: type=1400 audit(1576623688.255:37): avc: denied { map } for pid=6714 comm="syz-fuzzer" path="/root/syzkaller-shm521771365" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.120918] IPVS: ftp: loaded support on port[0] = 21 [ 40.228354] can: request_module (can-proto-0) failed. [ 40.238261] can: request_module (can-proto-0) failed. [ 40.392344] audit: type=1400 audit(1576623689.785:38): avc: denied { create } for pid=6714 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 40.418569] audit: type=1400 audit(1576623689.805:39): avc: denied { create } for pid=6714 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.442192] audit: type=1400 audit(1576623689.805:40): avc: denied { create } for pid=6714 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 40.617564] random: sshd: uninitialized urandom read (32 bytes read) [ 41.371162] random: sshd: uninitialized urandom read (32 bytes read) [ 41.557440] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. 2019/12/17 23:01:36 parsed 1 programs 2019/12/17 23:01:36 executed programs: 0 [ 47.670922] IPVS: ftp: loaded support on port[0] = 21 [ 48.495231] chnl_net:caif_netlink_parms(): no params data found [ 48.502675] IPVS: ftp: loaded support on port[0] = 21 [ 48.547045] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.553950] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.561199] device bridge_slave_0 entered promiscuous mode [ 48.569536] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.576002] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.582957] device bridge_slave_1 entered promiscuous mode [ 48.594542] IPVS: ftp: loaded support on port[0] = 21 [ 48.629884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.640784] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.676651] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.684011] team0: Port device team_slave_0 added [ 48.691194] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.698230] team0: Port device team_slave_1 added [ 48.705316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.712473] chnl_net:caif_netlink_parms(): no params data found [ 48.726019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.802469] device hsr_slave_0 entered promiscuous mode [ 48.840347] device hsr_slave_1 entered promiscuous mode [ 48.912525] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.920721] IPVS: ftp: loaded support on port[0] = 21 [ 48.935528] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.942007] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.948960] device bridge_slave_0 entered promiscuous mode [ 48.956057] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.971205] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.977765] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.985033] device bridge_slave_1 entered promiscuous mode [ 49.015940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.042609] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.055112] chnl_net:caif_netlink_parms(): no params data found [ 49.075657] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.082885] team0: Port device team_slave_0 added [ 49.104270] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.110828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.117685] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.124074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.133479] IPVS: ftp: loaded support on port[0] = 21 [ 49.137085] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.146272] team0: Port device team_slave_1 added [ 49.153637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.174954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.216707] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.223297] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.230221] device bridge_slave_0 entered promiscuous mode [ 49.281970] device hsr_slave_0 entered promiscuous mode [ 49.331349] device hsr_slave_1 entered promiscuous mode [ 49.400675] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.418098] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.424607] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.432075] device bridge_slave_1 entered promiscuous mode [ 49.438245] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.487063] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.508310] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.514756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.521401] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.527730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.538609] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.539027] IPVS: ftp: loaded support on port[0] = 21 [ 49.563624] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.570684] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.577772] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.584541] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.592347] chnl_net:caif_netlink_parms(): no params data found [ 49.613097] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.620328] team0: Port device team_slave_0 added [ 49.626024] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.633177] team0: Port device team_slave_1 added [ 49.648111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.655582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.762687] device hsr_slave_0 entered promiscuous mode [ 49.800410] device hsr_slave_1 entered promiscuous mode [ 49.849537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.876811] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.883710] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.891025] device bridge_slave_0 entered promiscuous mode [ 49.897351] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.957886] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.964592] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.971509] device bridge_slave_1 entered promiscuous mode [ 49.977716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.985547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.995322] chnl_net:caif_netlink_parms(): no params data found [ 50.024842] chnl_net:caif_netlink_parms(): no params data found [ 50.051992] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.061678] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.067784] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.083474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.091383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.100965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.107897] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.117558] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.137431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.156073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.163890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.171760] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.178169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.186034] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.193430] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.199806] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.206792] device bridge_slave_0 entered promiscuous mode [ 50.214186] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.233608] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.240767] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.247170] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.254121] device bridge_slave_1 entered promiscuous mode [ 50.265501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.275175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.282828] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.289177] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.298216] device bridge_slave_0 entered promiscuous mode [ 50.304826] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.312228] team0: Port device team_slave_0 added [ 50.317581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.324986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.331941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.339582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.347205] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.353602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.361067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.370274] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.376345] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.391464] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.399434] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.406976] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.413899] device bridge_slave_1 entered promiscuous mode [ 50.426569] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.433895] team0: Port device team_slave_1 added [ 50.441732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.453375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.461893] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.477252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.485689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.493937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.501734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.509461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.517152] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.523552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.530493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.541641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.561849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.569596] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.594325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.602243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.609804] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.616176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.623224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.631275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.639011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.648945] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.658120] team0: Port device team_slave_0 added [ 50.671478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.678624] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.686204] team0: Port device team_slave_0 added [ 50.692596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.701741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.708947] team0: Port device team_slave_1 added [ 50.715448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.723456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.731274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.772062] device hsr_slave_0 entered promiscuous mode [ 50.810350] device hsr_slave_1 entered promiscuous mode [ 50.860842] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.867937] team0: Port device team_slave_1 added [ 50.877715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.885566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.893189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.901549] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.921615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.928924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.937095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.944598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.952618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.963701] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.013457] device hsr_slave_0 entered promiscuous mode [ 51.050416] device hsr_slave_1 entered promiscuous mode [ 51.092411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.099457] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.106723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.114801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.122505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.138484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.146014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.153442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.161184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.168867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.178491] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.184712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.232096] device hsr_slave_0 entered promiscuous mode [ 51.290345] device hsr_slave_1 entered promiscuous mode [ 51.342923] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.350987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.359811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.376546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.386568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.394848] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.402103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.409659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.417733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.425447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.435893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.448566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.455647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.463690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.471159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.477904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.488439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.495890] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.504101] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.511029] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.519970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.529571] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.536995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.547211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.556597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.564154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.570575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.579459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.591472] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.602814] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.616627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.623962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.632185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.639731] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.646110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.655157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.664284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.687781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.697510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.707605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.718254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.728512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.744272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.762831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.771332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.785894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.801831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.809597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.819746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.828138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.836128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.847200] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.855873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.865385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.875706] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.886815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.895420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.907102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.914903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.924113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.934149] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.944991] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.951822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.959340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.971233] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.978488] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.984985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.008669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.018235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.025406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.033147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.040451] hrtimer: interrupt took 28197 ns [ 52.040977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.056438] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.062839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.071842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.084541] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.094758] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.114549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.142961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.155492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.167744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.183812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.192750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.208712] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.215154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.222883] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 52.222909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.241926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.253530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.268645] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.275076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.286516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.302977] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.313324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.323562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.332485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.339577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.348165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.356838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.364710] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.371095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.379308] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.388234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.397406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.404559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.412132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.419079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.426899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.434462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.444926] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.451669] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.459787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.467688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.474768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.482817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.490767] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.497113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.504284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.512495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.520630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.529318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.541338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.554669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.562807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.571021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.578518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.586092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.593741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.601326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.608948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.617004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.624662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.634269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.642447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.650479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.657997] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.664371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.671608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.680847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.688877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.702609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.711343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.718358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.726136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.733825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.742293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.749981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.760611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.769541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.780995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.789840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.797038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.804966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.812836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.820821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.828406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.836223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.843886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 2019/12/17 23:01:42 executed programs: 15 [ 52.851490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.859819] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.877131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.887924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.900751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.913128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.924496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.933918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.943393] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.949405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.963166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.975290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.984874] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.991558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.013679] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.029828] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.045124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.063645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.883729] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 55.176911] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 55.438051] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 57.388044] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 57.824380] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2019/12/17 23:01:47 executed programs: 237 [ 57.903928] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 57.968366] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 59.905633] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 61.229941] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 61.871164] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 62.232222] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2019/12/17 23:01:52 executed programs: 526 [ 63.243848] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 63.330790] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 64.014821] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 66.771508] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2019/12/17 23:01:57 executed programs: 811 [ 67.976211] ================================================================== [ 67.983766] BUG: KASAN: use-after-free in inet_shutdown+0x287/0x300 [ 67.990154] Read of size 4 at addr ffff888088e52140 by task syz-executor.4/10072 [ 67.997674] [ 67.999285] CPU: 0 PID: 10072 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 68.007161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.016498] Call Trace: [ 68.019081] dump_stack+0xf7/0x13b [ 68.022620] ? inet_shutdown+0x287/0x300 [ 68.026662] print_address_description.cold.7+0x9/0x1c9 [ 68.032005] ? inet_shutdown+0x287/0x300 [ 68.036049] kasan_report.cold.8+0x11a/0x2d3 [ 68.040439] __asan_report_load4_noabort+0x14/0x20 [ 68.045366] inet_shutdown+0x287/0x300 [ 68.049236] pppol2tp_session_close+0x91/0xc0 [ 68.053713] l2tp_tunnel_closeall+0x1df/0x2f0 [ 68.058191] ? trace_hardirqs_on+0xd/0x10 [ 68.062320] l2tp_udp_encap_destroy+0x7d/0xc0 [ 68.066799] udpv6_destroy_sock+0x89/0xb0 [ 68.070929] sk_common_release+0x5e/0x2c0 [ 68.075066] udp_lib_close+0x9/0x10 [ 68.078673] inet_release+0xd9/0x1c0 [ 68.082370] inet6_release+0x46/0x60 [ 68.086065] __sock_release+0xc2/0x2a0 [ 68.089932] sock_close+0x10/0x20 [ 68.093366] __fput+0x232/0x750 [ 68.096633] ? _raw_spin_unlock_irq+0x27/0x80 [ 68.101130] ____fput+0x9/0x10 [ 68.104304] task_work_run+0xe5/0x170 [ 68.108089] exit_to_usermode_loop+0x16a/0x1b0 [ 68.112653] do_syscall_64+0x416/0x5b0 [ 68.116526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 68.121354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 68.126547] RIP: 0033:0x459a59 [ 68.129719] RSP: 002b:00007f90e01b7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 68.137421] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459a59 [ 68.144674] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 68.151939] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 68.159207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90e01b86d4 [ 68.166465] R13: 00000000004c0006 R14: 00000000004d2298 R15: 00000000ffffffff [ 68.173728] [ 68.175341] Allocated by task 10082: [ 68.179040] save_stack_trace+0x16/0x20 [ 68.182993] save_stack+0x43/0xd0 [ 68.186424] kasan_kmalloc+0xc7/0xe0 [ 68.190123] kasan_slab_alloc+0x12/0x20 [ 68.194080] kmem_cache_alloc+0x12e/0x790 [ 68.198216] sock_alloc_inode+0x18/0x230 [ 68.202692] alloc_inode+0x56/0x150 [ 68.206318] new_inode_pseudo+0xc/0xd0 [ 68.210185] sock_alloc+0x3c/0x280 [ 68.213705] __sock_create+0x7a/0x540 [ 68.217513] SyS_socket+0xc6/0x1a0 [ 68.221038] do_syscall_64+0x1c7/0x5b0 [ 68.224906] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 68.230074] [ 68.231683] Freed by task 10065: [ 68.235034] save_stack_trace+0x16/0x20 [ 68.238996] save_stack+0x43/0xd0 [ 68.242439] kasan_slab_free+0x71/0xc0 [ 68.246313] kmem_cache_free+0x80/0x2d0 [ 68.250275] sock_destroy_inode+0x50/0x60 [ 68.254405] destroy_inode+0xb3/0x100 [ 68.258185] evict+0x36f/0x590 [ 68.261361] iput+0x3ac/0x810 [ 68.264447] dentry_unlink_inode+0x23e/0x2f0 [ 68.268840] __dentry_kill+0x2d2/0x540 [ 68.272713] dput.part.27+0x49a/0x610 [ 68.276498] dput+0xe/0x20 [ 68.279332] __fput+0x3f7/0x750 [ 68.282595] ____fput+0x9/0x10 [ 68.285773] task_work_run+0xe5/0x170 [ 68.289573] exit_to_usermode_loop+0x16a/0x1b0 [ 68.294138] do_syscall_64+0x416/0x5b0 [ 68.298012] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 68.303211] [ 68.304820] The buggy address belongs to the object at ffff888088e52140 [ 68.304820] which belongs to the cache sock_inode_cache of size 992 [ 68.317900] The buggy address is located 0 bytes inside of [ 68.317900] 992-byte region [ffff888088e52140, ffff888088e52520) [ 68.329585] The buggy address belongs to the page: [ 68.334505] page:ffffea0002239480 count:1 mapcount:0 mapping:ffff888088e52140 index:0xffff888088e52ffd [ 68.343942] flags: 0x1fffc0000000100(slab) [ 68.348171] raw: 01fffc0000000100 ffff888088e52140 ffff888088e52ffd 0000000100000003 [ 68.356042] raw: ffffea000268d2a0 ffffea000268d2e0 ffff88821b75e6c0 0000000000000000 [ 68.363919] page dumped because: kasan: bad access detected [ 68.369623] [ 68.371236] Memory state around the buggy address: [ 68.376151] ffff888088e52000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.383508] ffff888088e52080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.390880] >ffff888088e52100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 68.398252] ^ [ 68.404225] ffff888088e52180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.411578] ffff888088e52200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.418933] ================================================================== [ 68.426285] Disabling lock debugging due to kernel taint [ 68.525586] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 68.537204] Kernel panic - not syncing: panic_on_warn set ... [ 68.537204] [ 68.544612] CPU: 0 PID: 10072 Comm: syz-executor.4 Tainted: G B 4.14.159-syzkaller #0 [ 68.553705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.559777] kobject: 'loop3' (ffff8880a4afe960): kobject_uevent_env [ 68.563050] Call Trace: [ 68.563062] dump_stack+0xf7/0x13b [ 68.563067] ? inet_shutdown+0x287/0x300 [ 68.563073] panic+0x1b0/0x358 [ 68.563076] ? add_taint.cold.5+0x11/0x11 [ 68.563084] ? ___preempt_schedule+0x16/0x18 [ 68.569498] kobject: 'loop3' (ffff8880a4afe960): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 68.572055] ? inet_shutdown+0x287/0x300 [ 68.572060] kasan_end_report+0x47/0x4f [ 68.572063] kasan_report.cold.8+0x76/0x2d3 [ 68.572067] __asan_report_load4_noabort+0x14/0x20 [ 68.572070] inet_shutdown+0x287/0x300 [ 68.572076] pppol2tp_session_close+0x91/0xc0 [ 68.572080] l2tp_tunnel_closeall+0x1df/0x2f0 [ 68.572086] ? trace_hardirqs_on+0xd/0x10 [ 68.576029] kobject: 'loop5' (ffff8880a4b852e0): kobject_uevent_env [ 68.579669] l2tp_udp_encap_destroy+0x7d/0xc0 [ 68.582875] kobject: 'loop5' (ffff8880a4b852e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 68.586968] udpv6_destroy_sock+0x89/0xb0 [ 68.659360] sk_common_release+0x5e/0x2c0 [ 68.663487] udp_lib_close+0x9/0x10 [ 68.667100] inet_release+0xd9/0x1c0 [ 68.670790] inet6_release+0x46/0x60 [ 68.674477] __sock_release+0xc2/0x2a0 [ 68.678348] sock_close+0x10/0x20 [ 68.681779] __fput+0x232/0x750 [ 68.685035] ? _raw_spin_unlock_irq+0x27/0x80 [ 68.689525] ____fput+0x9/0x10 [ 68.692696] task_work_run+0xe5/0x170 [ 68.696477] exit_to_usermode_loop+0x16a/0x1b0 [ 68.701044] do_syscall_64+0x416/0x5b0 [ 68.704907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 68.709729] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 68.714896] RIP: 0033:0x459a59 [ 68.718063] RSP: 002b:00007f90e01b7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 68.725759] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459a59 [ 68.733008] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 68.740269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 68.747522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90e01b86d4 [ 68.754775] R13: 00000000004c0006 R14: 00000000004d2298 R15: 00000000ffffffff [ 68.763562] Kernel Offset: disabled [ 68.767238] Rebooting in 86400 seconds..