[ 38.877942] audit: type=1400 audit(1575484769.236:37): avc: denied { map } for pid=6680 comm="syz-fuzzer" path="/root/syzkaller-shm059315069" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.110956] IPVS: ftp: loaded support on port[0] = 21 [ 40.268059] can: request_module (can-proto-0) failed. [ 40.277499] can: request_module (can-proto-0) failed. [ 40.442536] audit: type=1400 audit(1575484770.806:38): avc: denied { create } for pid=6680 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 40.466632] audit: type=1400 audit(1575484770.806:39): avc: denied { create } for pid=6680 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.490695] audit: type=1400 audit(1575484770.806:40): avc: denied { create } for pid=6680 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 40.747293] random: sshd: uninitialized urandom read (32 bytes read) [ 41.469080] random: sshd: uninitialized urandom read (32 bytes read) [ 41.667431] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.218' (ECDSA) to the list of known hosts. 2019/12/04 18:39:38 parsed 1 programs 2019/12/04 18:39:38 executed programs: 0 [ 48.740980] IPVS: ftp: loaded support on port[0] = 21 [ 49.614614] chnl_net:caif_netlink_parms(): no params data found [ 49.642389] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.649359] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.656836] device bridge_slave_0 entered promiscuous mode [ 49.663633] IPVS: ftp: loaded support on port[0] = 21 [ 49.669378] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.675881] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.683921] device bridge_slave_1 entered promiscuous mode [ 49.704754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.717653] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.738960] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.746626] team0: Port device team_slave_0 added [ 49.753688] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.761024] team0: Port device team_slave_1 added [ 49.767895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.779215] IPVS: ftp: loaded support on port[0] = 21 [ 49.787864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.831911] device hsr_slave_0 entered promiscuous mode [ 49.890397] device hsr_slave_1 entered promiscuous mode [ 49.951159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.958169] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.016451] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.023049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.030050] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.031718] IPVS: ftp: loaded support on port[0] = 21 [ 50.036429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.052095] chnl_net:caif_netlink_parms(): no params data found [ 50.109354] IPVS: ftp: loaded support on port[0] = 21 [ 50.153628] chnl_net:caif_netlink_parms(): no params data found [ 50.178789] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.186092] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.193219] device bridge_slave_0 entered promiscuous mode [ 50.200998] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.207523] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.214698] device bridge_slave_1 entered promiscuous mode [ 50.265560] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.314350] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.333823] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.340657] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.347876] device bridge_slave_0 entered promiscuous mode [ 50.362682] chnl_net:caif_netlink_parms(): no params data found [ 50.371074] IPVS: ftp: loaded support on port[0] = 21 [ 50.377809] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.385388] team0: Port device team_slave_0 added [ 50.391558] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.398079] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.405869] device bridge_slave_1 entered promiscuous mode [ 50.424245] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.431524] team0: Port device team_slave_1 added [ 50.436984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.446907] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.502390] device hsr_slave_0 entered promiscuous mode [ 50.560406] device hsr_slave_1 entered promiscuous mode [ 50.601406] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.618922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.643197] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.649887] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.656742] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.663782] device bridge_slave_0 entered promiscuous mode [ 50.676014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.694406] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.701866] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.713524] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.719901] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.726954] device bridge_slave_1 entered promiscuous mode [ 50.746150] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.755669] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.768651] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.776211] team0: Port device team_slave_0 added [ 50.782600] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.789817] team0: Port device team_slave_1 added [ 50.807610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.815407] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.829067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.835833] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.843167] team0: Port device team_slave_0 added [ 50.850549] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.857593] team0: Port device team_slave_1 added [ 50.876397] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.883520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.890829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.963508] device hsr_slave_0 entered promiscuous mode [ 51.000386] device hsr_slave_1 entered promiscuous mode [ 51.103214] device hsr_slave_0 entered promiscuous mode [ 51.170361] device hsr_slave_1 entered promiscuous mode [ 51.220815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.228064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.237077] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.244156] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.264192] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.278882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.289474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.297201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.308837] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.322407] chnl_net:caif_netlink_parms(): no params data found [ 51.356532] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.364054] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.405386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.415385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.423362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.431440] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.437790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.457027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.465770] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.472645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.482057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.489720] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.496409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.506201] chnl_net:caif_netlink_parms(): no params data found [ 51.514864] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.522063] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.528992] device bridge_slave_0 entered promiscuous mode [ 51.538720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.554509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.563743] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.570362] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.577692] device bridge_slave_1 entered promiscuous mode [ 51.598045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.611184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.619751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.633858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.645726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.654230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.663132] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.670850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.683063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.692260] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.701124] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.716413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.724321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.732472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.740964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.748835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.755819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.762803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.771506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.779129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.788388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.806674] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.814085] team0: Port device team_slave_0 added [ 51.820285] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.827784] team0: Port device team_slave_1 added [ 51.833563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.840339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.847219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.855852] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.863905] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.876304] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.883452] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.892058] device bridge_slave_0 entered promiscuous mode [ 51.898842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.908307] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.914784] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.921682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.928991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.939199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.947501] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.954419] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.961955] device bridge_slave_1 entered promiscuous mode [ 51.974521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.993257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.002565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.021925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.031114] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.039166] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.045803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.053531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.062301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.070220] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.076810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.083850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.091852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.099509] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.105884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.114564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.122341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.163383] device hsr_slave_0 entered promiscuous mode [ 52.200396] device hsr_slave_1 entered promiscuous mode [ 52.241491] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.249352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.258158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.276056] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.283490] team0: Port device team_slave_0 added [ 52.288723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.296266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.304150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.311821] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.318713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.325756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.333750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.341743] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.349027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.359161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.373744] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.381880] team0: Port device team_slave_1 added [ 52.387527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.398846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.407309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.417944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.426967] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.434884] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.454272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.463947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.472751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.483450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.491091] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.532297] device hsr_slave_0 entered promiscuous mode [ 52.570407] device hsr_slave_1 entered promiscuous mode [ 52.650337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.658331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.666707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.674801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.682702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.693624] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.706066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.713999] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.724954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.732525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.739802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.751712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.762167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.771446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.779829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.788134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.795940] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.806147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.815905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.824306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.831555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.839703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.848795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.859171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.879103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.888158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.896323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.904885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.915414] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.924900] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.932836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.941204] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.947253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.964491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.972673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.984584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.003961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.015283] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.027158] ================================================================== [ 53.034286] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.034900] BUG: KASAN: use-after-free in _copy_to_user+0x84/0xb0 [ 53.043945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.047623] Read of size 924 at addr ffff88807bfffff3 by task syz-executor.2/6809 [ 53.047627] [ 53.056632] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.061622] CPU: 0 PID: 6809 Comm: syz-executor.2 Not tainted 4.14.157-syzkaller #0 [ 53.061625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.061628] Call Trace: [ 53.061644] dump_stack+0xf7/0x13b [ 53.061651] ? _copy_to_user+0x84/0xb0 [ 53.061663] print_address_description.cold.7+0x9/0x1c9 [ 53.065541] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.069474] ? _copy_to_user+0x84/0xb0 [ 53.079990] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.086915] kasan_report.cold.8+0x11a/0x2d3 [ 53.086923] check_memory_region+0x13e/0x1b0 [ 53.086928] kasan_check_read+0x11/0x20 [ 53.086934] _copy_to_user+0x84/0xb0 [ 53.086943] bpf_test_finish.isra.5+0xd5/0x170 [ 53.086949] ? bpf_test_run+0x2d0/0x2d0 [ 53.089539] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.093849] ? kvm_clock_read+0x23/0x40 [ 53.093853] ? kvm_clock_get_cycles+0x9/0x10 [ 53.093861] ? ktime_get+0x13c/0x240 [ 53.093868] ? bpf_test_run+0x210/0x2d0 [ 53.093876] ? eth_gro_receive+0x880/0x880 [ 53.100204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.103114] bpf_prog_test_run_skb+0x66d/0xbc0 [ 53.111664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.113638] ? bpf_test_init.isra.6+0xa0/0xa0 [ 53.122500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.124108] ? __bpf_prog_get+0x128/0x170 [ 53.130959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.132739] SyS_bpf+0x97e/0x28c3 [ 53.138732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.141048] ? bpf_prog_get+0x10/0x10 [ 53.141057] ? kasan_check_read+0x11/0x20 [ 53.141064] ? _copy_to_user+0x91/0xb0 [ 53.141073] ? put_timespec64+0xa4/0xf0 [ 53.141079] ? nsecs_to_jiffies+0x20/0x20 [ 53.147256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.150948] ? SyS_clock_gettime+0x115/0x160 [ 53.150961] ? do_syscall_64+0x4c/0x5b0 [ 53.150969] ? bpf_prog_get+0x10/0x10 [ 53.150974] do_syscall_64+0x1c7/0x5b0 [ 53.150980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.157339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.159518] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.165639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.167342] RIP: 0033:0x459829 [ 53.173228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.178643] RSP: 002b:00007f4785727c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.178651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 53.178653] RDX: 0000000000000028 RSI: 0000000020000140 RDI: 000000000000000a [ 53.178656] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 53.178658] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47857286d4 [ 53.178660] R13: 00000000004bfb92 R14: 00000000004d1758 R15: 00000000ffffffff [ 53.178674] [ 53.178677] The buggy address belongs to the page: [ 53.178684] page:ffffea0001efffc0 count:0 mapcount:0 mapping: (null) index:0x0 [ 53.183390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.190300] flags: 0x1fffc0000000000() [ 53.190306] raw: 01fffc0000000000 0000000000000000 0000000000000000 00000000ffffffff [ 53.190310] raw: ffffea0001efffe0 ffffea0001efffe0 0000000000000000 0000000000000000 [ 53.190313] page dumped because: kasan: bad access detected [ 53.190315] [ 53.190317] Memory state around the buggy address: [ 53.190321] ffff88807bfffe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.195935] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.202099] ffff88807bffff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.202102] >ffff88807bffff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.202105] ^ [ 53.202108] ffff88807c000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.202111] ffff88807c000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.202113] ================================================================== [ 53.202115] Disabling lock debugging due to kernel taint [ 53.472512] Kernel panic - not syncing: panic_on_warn set ... [ 53.472512] [ 53.480677] CPU: 0 PID: 6809 Comm: syz-executor.2 Tainted: G B 4.14.157-syzkaller #0 [ 53.489939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.499422] Call Trace: [ 53.502002] dump_stack+0xf7/0x13b [ 53.505559] ? _copy_to_user+0x84/0xb0 [ 53.509597] panic+0x1b0/0x358 [ 53.512776] ? add_taint.cold.5+0x11/0x11 [ 53.516926] ? ___preempt_schedule+0x16/0x18 [ 53.521489] ? _copy_to_user+0x84/0xb0 [ 53.525531] kasan_end_report+0x47/0x4f [ 53.529748] kasan_report.cold.8+0x76/0x2d3 [ 53.534182] check_memory_region+0x13e/0x1b0 [ 53.538580] kasan_check_read+0x11/0x20 [ 53.542603] _copy_to_user+0x84/0xb0 [ 53.546310] bpf_test_finish.isra.5+0xd5/0x170 [ 53.551029] ? bpf_test_run+0x2d0/0x2d0 [ 53.555023] ? kvm_clock_read+0x23/0x40 [ 53.559367] ? kvm_clock_get_cycles+0x9/0x10 [ 53.563783] ? ktime_get+0x13c/0x240 [ 53.568016] ? bpf_test_run+0x210/0x2d0 [ 53.571985] ? eth_gro_receive+0x880/0x880 [ 53.578528] bpf_prog_test_run_skb+0x66d/0xbc0 [ 53.583196] ? bpf_test_init.isra.6+0xa0/0xa0 [ 53.587688] ? __bpf_prog_get+0x128/0x170 [ 53.591887] SyS_bpf+0x97e/0x28c3 [ 53.596913] ? bpf_prog_get+0x10/0x10 [ 53.600796] ? kasan_check_read+0x11/0x20 [ 53.605056] ? _copy_to_user+0x91/0xb0 [ 53.608947] ? put_timespec64+0xa4/0xf0 [ 53.613151] ? nsecs_to_jiffies+0x20/0x20 [ 53.617612] ? SyS_clock_gettime+0x115/0x160 [ 53.622346] ? do_syscall_64+0x4c/0x5b0 [ 53.626441] ? bpf_prog_get+0x10/0x10 [ 53.631462] do_syscall_64+0x1c7/0x5b0 [ 53.635476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.640443] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.645879] RIP: 0033:0x459829 [ 53.649148] RSP: 002b:00007f4785727c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.656972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 53.664274] RDX: 0000000000000028 RSI: 0000000020000140 RDI: 000000000000000a [ 53.671842] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 53.679471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47857286d4 [ 53.686861] R13: 00000000004bfb92 R14: 00000000004d1758 R15: 00000000ffffffff [ 53.696112] Kernel Offset: disabled [ 53.699750] Rebooting in 86400 seconds..