[ 40.076212] audit: type=1400 audit(1584084439.782:37): avc: denied { map } for pid=6751 comm="syz-fuzzer" path="/root/syzkaller-shm259911440" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.330806] IPVS: ftp: loaded support on port[0] = 21 [ 41.465548] can: request_module (can-proto-0) failed. [ 41.474696] can: request_module (can-proto-0) failed. [ 41.631976] audit: type=1400 audit(1584084441.342:38): avc: denied { create } for pid=6751 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.655865] audit: type=1400 audit(1584084441.352:39): avc: denied { create } for pid=6751 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.679700] audit: type=1400 audit(1584084441.352:40): avc: denied { create } for pid=6751 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 41.963231] random: sshd: uninitialized urandom read (32 bytes read) [ 42.767485] random: sshd: uninitialized urandom read (32 bytes read) [ 42.956198] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts. 2020/03/13 07:27:29 parsed 1 programs 2020/03/13 07:27:29 executed programs: 0 [ 49.940916] IPVS: ftp: loaded support on port[0] = 21 [ 50.755468] IPVS: ftp: loaded support on port[0] = 21 [ 50.797639] chnl_net:caif_netlink_parms(): no params data found [ 50.823738] IPVS: ftp: loaded support on port[0] = 21 [ 50.867022] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.873694] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.880773] device bridge_slave_0 entered promiscuous mode [ 50.901730] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.908087] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.915188] device bridge_slave_1 entered promiscuous mode [ 50.921243] chnl_net:caif_netlink_parms(): no params data found [ 50.944961] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.957188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.993740] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.000922] team0: Port device team_slave_0 added [ 51.012111] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.019141] team0: Port device team_slave_1 added [ 51.024332] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.030837] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.037795] device bridge_slave_0 entered promiscuous mode [ 51.044925] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.045009] IPVS: ftp: loaded support on port[0] = 21 [ 51.051364] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.063535] device bridge_slave_1 entered promiscuous mode [ 51.075425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.096024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.111916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.152884] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.231877] device hsr_slave_0 entered promiscuous mode [ 51.310310] device hsr_slave_1 entered promiscuous mode [ 51.374816] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.384958] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.394488] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.401816] team0: Port device team_slave_0 added [ 51.408976] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.416476] team0: Port device team_slave_1 added [ 51.421580] chnl_net:caif_netlink_parms(): no params data found [ 51.429808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.444270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.512889] device hsr_slave_0 entered promiscuous mode [ 51.550987] device hsr_slave_1 entered promiscuous mode [ 51.591029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.599108] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.610211] IPVS: ftp: loaded support on port[0] = 21 [ 51.631601] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.638036] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.646105] device bridge_slave_0 entered promiscuous mode [ 51.661599] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.668008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.674867] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.681249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.691700] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.698293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.704943] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.711322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.719696] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.726136] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.732984] device bridge_slave_1 entered promiscuous mode [ 51.779758] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.793648] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.816633] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.823886] team0: Port device team_slave_0 added [ 51.829568] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.836798] team0: Port device team_slave_1 added [ 51.844274] chnl_net:caif_netlink_parms(): no params data found [ 51.858201] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.875577] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.882700] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.889256] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.898071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.905738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.992262] device hsr_slave_0 entered promiscuous mode [ 52.050254] device hsr_slave_1 entered promiscuous mode [ 52.090668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.098002] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.113899] IPVS: ftp: loaded support on port[0] = 21 [ 52.123694] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.132458] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.139325] device bridge_slave_0 entered promiscuous mode [ 52.146695] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.153143] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.159994] device bridge_slave_1 entered promiscuous mode [ 52.223645] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.233479] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.245507] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.278446] chnl_net:caif_netlink_parms(): no params data found [ 52.298656] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.306020] team0: Port device team_slave_0 added [ 52.312252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.319295] team0: Port device team_slave_1 added [ 52.336257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.360280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.423613] device hsr_slave_0 entered promiscuous mode [ 52.480378] device hsr_slave_1 entered promiscuous mode [ 52.520872] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.528629] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.580512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.588658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.598579] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.605100] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.612529] device bridge_slave_0 entered promiscuous mode [ 52.643598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.655804] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.662260] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.669212] device bridge_slave_1 entered promiscuous mode [ 52.682574] chnl_net:caif_netlink_parms(): no params data found [ 52.694130] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.701316] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.707673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.714330] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.720686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.730580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.746495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.754862] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.762486] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.769586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.776925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.785130] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.793255] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.805332] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.811721] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.818696] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.827907] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.834154] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.844342] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.850922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.857738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.866369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.883407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.891390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.899584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.907452] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.913851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.921456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.929112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.936715] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.943089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.950594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.958444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.984199] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.991793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.999500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.009354] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.015881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.022775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.029531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.043851] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.051498] team0: Port device team_slave_0 added [ 53.057149] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.065419] team0: Port device team_slave_1 added [ 53.072595] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.078652] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.085253] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.094311] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.101472] device bridge_slave_0 entered promiscuous mode [ 53.108273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.117301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.126252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.144680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.151899] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.158230] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.165462] device bridge_slave_1 entered promiscuous mode [ 53.172126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.180254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.187781] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.194259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.201186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.210396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.219894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.228074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.272336] device hsr_slave_0 entered promiscuous mode [ 53.310267] device hsr_slave_1 entered promiscuous mode [ 53.361918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.381476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.389118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.397711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.405465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.413075] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.419400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.426272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.437050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.445084] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.452283] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.460014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.469973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.478455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.486349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.494144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.502050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.509528] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.515910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.522959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.531096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.546562] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.554025] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.563447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.574535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.582944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.592618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.599982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.607633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.615905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.630666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.645986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.653756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.660737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.667551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.676151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.683691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.691575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.698994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.706792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.714790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.723266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.731444] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.745262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.754815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.761920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.769463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.777436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.785065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.792809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.800364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.810077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.817479] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.824950] team0: Port device team_slave_0 added [ 53.835019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.844146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.851466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.858845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.866776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.874209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.882521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.889844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.898339] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.904643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.912623] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.919674] team0: Port device team_slave_1 added [ 53.925314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.934491] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.940746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.949010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.957689] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.964384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.034103] device hsr_slave_0 entered promiscuous mode [ 54.070359] device hsr_slave_1 entered promiscuous mode [ 54.110344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.117785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.127339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.134570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.147307] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.156392] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.163607] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.176743] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.184687] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.191786] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.197779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.208371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.216902] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.225017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.232811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.240631] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.246979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.268201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.275200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.284424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.295104] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.304368] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.314916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.322918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.331500] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.337844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.347039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.361998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.368344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.379702] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.402373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.411391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.421374] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.432278] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.438356] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.449417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.462314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.469096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.481811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.489243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.497281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.505872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.521511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.529214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.536459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.543851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.551874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.559940] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.566416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.574075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.582956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.592381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.600695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.607673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.616054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.624183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.630581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.645496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.655207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.663728] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.669903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.679054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.692112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.704420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.713800] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 54.714148] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 54.735311] ================================================================== [ 54.739883] BUG: unable to handle kernel paging request [ 54.742735] BUG: KASAN: use-after-free in padata_parallel_worker+0x37a/0x420 [ 54.742740] Write of size 8 at addr ffff88808af0f4d8 by task kworker/0:3/6863 [ 54.748092] at ffffffffffffffc8 [ 54.755259] [ 54.762512] IP: pcrypt_aead_enc+0x7b/0xf0 [ 54.765852] CPU: 0 PID: 6863 Comm: kworker/0:3 Not tainted 4.14.173-syzkaller #0 [ 54.767544] PGD 786d067 [ 54.771666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.779172] P4D 786d067 [ 54.781832] Workqueue: pencrypt padata_parallel_worker [ 54.791161] PUD 786f067 [ 54.799065] PMD 0 [ 54.801715] Call Trace: [ 54.801726] dump_stack+0xf7/0x13b [ 54.804886] Oops: 0000 [#1] PREEMPT SMP KASAN [ 54.807467] ? padata_parallel_worker+0x37a/0x420 [ 54.810981] Modules linked in: [ 54.815453] print_address_description.cold.7+0x9/0x1c9 [ 54.823438] ? padata_parallel_worker+0x37a/0x420 [ 54.828913] CPU: 1 PID: 2546 Comm: kworker/1:2 Not tainted 4.14.173-syzkaller #0 [ 54.833853] kasan_report.cold.8+0x11a/0x2d3 [ 54.841382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.845781] __asan_report_store8_noabort+0x17/0x20 [ 54.855113] Workqueue: pencrypt padata_parallel_worker [ 54.860109] padata_parallel_worker+0x37a/0x420 [ 54.860115] ? padata_sysfs_store+0xa0/0xa0 [ 54.865368] task: ffff8880a04f06c0 task.stack: ffff8880a04f8000 [ 54.870016] process_one_work+0x79e/0x16c0 [ 54.874322] RIP: 0010:pcrypt_aead_enc+0x7b/0xf0 [ 54.880366] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 54.884572] RSP: 0018:ffff8880a04ffc90 EFLAGS: 00010246 [ 54.889223] worker_thread+0xcc/0xee0 [ 54.899231] kthread+0x338/0x400 [ 54.903003] RAX: dffffc0000000000 RBX: ffff88808a39f310 RCX: ffffffff82b08cfe [ 54.906347] ? process_one_work+0x16c0/0x16c0 [ 54.913592] RDX: 1ffffffffffffff9 RSI: 0000000000000008 RDI: ffff88808a39f348 [ 54.918238] ? kthread_create_on_node+0xa0/0xa0 [ 54.925484] RBP: ffff8880a04ffcb0 R08: 0000000000000001 R09: 0000000000000000 [ 54.930130] ret_from_fork+0x24/0x30 [ 54.937395] R10: 0000000000000050 R11: ffff8880a04f06c0 R12: 0000000000000000 [ 54.937401] R13: ffff88808a39f348 R14: ffff8880a04ffcf8 R15: 1ffff1101409ff9b [ 54.941103] [ 54.948355] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 54.955605] Allocated by task 6889: [ 54.957225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.965437] save_stack_trace+0x16/0x20 [ 54.969036] CR2: ffffffffffffffc8 CR3: 0000000079637000 CR4: 00000000001406e0 [ 54.974897] save_stack+0x43/0xd0 [ 54.978847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.986094] kasan_kmalloc+0xc7/0xe0 [ 54.989519] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.996766] __kmalloc+0x15b/0x7b0 [ 55.000462] Call Trace: [ 55.007712] tls_push_record+0xf6/0x14c0 [ 55.011232] padata_parallel_worker+0x24e/0x420 [ 55.013790] tls_sw_sendmsg+0x90b/0x10a0 [ 55.017841] ? padata_sysfs_store+0xa0/0xa0 [ 55.022501] inet_sendmsg+0x108/0x440 [ 55.026545] process_one_work+0x79e/0x16c0 [ 55.030840] sock_sendmsg+0xb5/0xf0 [ 55.034620] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 55.038830] SYSC_sendto+0x1e3/0x2c0 [ 55.042435] worker_thread+0xcc/0xee0 [ 55.047089] SyS_sendto+0x9/0x10 [ 55.050781] kthread+0x338/0x400 [ 55.054565] do_syscall_64+0x1c7/0x5b0 [ 55.057908] ? process_one_work+0x16c0/0x16c0 [ 55.061250] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 55.065111] ? kthread_create_on_node+0xa0/0xa0 [ 55.069580] [ 55.076053] ret_from_fork+0x24/0x30 [ 55.080696] Freed by task 6889: [ 55.082305] Code: [ 55.085996] save_stack_trace+0x16/0x20 [ 55.089252] 00 [ 55.091380] save_stack+0x43/0xd0 [ 55.091384] kasan_slab_free+0x71/0xc0 [ 55.095329] 0f [ 55.097204] kfree+0xcc/0x270 [ 55.100630] 85 [ 55.104495] tls_push_record+0xd32/0x14c0 [ 55.106358] 82 [ 55.109440] tls_sw_sendmsg+0x90b/0x10a0 [ 55.111304] 00 [ 55.115427] inet_sendmsg+0x108/0x440 [ 55.117289] 00 [ 55.121329] sock_sendmsg+0xb5/0xf0 [ 55.123244] 00 [ 55.127020] SYSC_sendto+0x1e3/0x2c0 [ 55.128890] 48 [ 55.132489] SyS_sendto+0x9/0x10 [ 55.134351] b8 [ 55.138040] do_syscall_64+0x1c7/0x5b0 [ 55.139915] 00 [ 55.143260] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 55.145134] 00 [ 55.149017] [ 55.150887] 00 [ 55.156065] The buggy address belongs to the object at ffff88808af0f480 [ 55.156065] which belongs to the cache kmalloc-256 of size 256 [ 55.157958] 00 [ 55.159569] The buggy address is located 88 bytes inside of [ 55.159569] 256-byte region [ffff88808af0f480, ffff88808af0f580) [ 55.161437] 00 [ 55.174195] The buggy address belongs to the page: [ 55.176068] fc [ 55.188103] page:ffffea00022bc3c0 count:1 mapcount:0 mapping:ffff88808af0f0c0 index:0x0 [ 55.189973] ff [ 55.196743] df [ 55.204865] flags: 0x1fffc0000000100(slab) [ 55.206731] 4d [ 55.208600] raw: 01fffc0000000100 ffff88808af0f0c0 0000000000000000 000000010000000c [ 55.212927] 8b [ 55.214802] raw: ffffea00022d79e0 ffffea00022d5920 ffff8880aa8007c0 0000000000000000 [ 55.223751] 64 [ 55.225628] page dumped because: kasan: bad access detected [ 55.233488] 24 [ 55.235376] [ 55.241061] 38 [ 55.242939] Memory state around the buggy address: [ 55.244557] 49 [ 55.246440] ffff88808af0f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.251344] 8d [ 55.253219] ffff88808af0f400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 55.260555] 7c [ 55.262421] >ffff88808af0f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.269765] 24 [ 55.271632] ^ [ 55.278979] c8 [ 55.280848] ffff88808af0f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.287054] 48 [ 55.288920] ffff88808af0f580: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 55.296270] 89 [ 55.298153] ================================================================== [ 55.305517] fa [ 55.307457] Kernel panic - not syncing: panic_on_warn set ... [ 55.307457] [ 55.314741] 48 c1 ea 03 80 3c 02 00 75 5a 4c 89 ef <41> ff 54 24 c8 48 8d 7b 1c 48 ba 00 00 00 00 00 fc ff df 48 89 [ 55.334651] RIP: pcrypt_aead_enc+0x7b/0xf0 RSP: ffff8880a04ffc90 [ 55.340776] CR2: ffffffffffffffc8 [ 55.344208] ---[ end trace 7da702cb215ed2b3 ]--- [ 56.443785] Shutting down cpus with NMI [ 56.449140] Kernel Offset: disabled [ 56.452763] Rebooting in 86400 seconds..