[ 37.240710] audit: type=1400 audit(1584414212.592:40): avc: denied { create } for pid=6771 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 37.404837] random: sshd: uninitialized urandom read (32 bytes read) [ 38.086070] random: sshd: uninitialized urandom read (32 bytes read) [ 38.303073] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. 2020/03/17 03:03:39 parsed 1 programs 2020/03/17 03:03:39 executed programs: 0 [ 44.490899] IPVS: ftp: loaded support on port[0] = 21 [ 45.226033] IPVS: ftp: loaded support on port[0] = 21 [ 45.266678] chnl_net:caif_netlink_parms(): no params data found [ 45.293063] IPVS: ftp: loaded support on port[0] = 21 [ 45.315481] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.321959] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.328880] device bridge_slave_0 entered promiscuous mode [ 45.338543] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.345194] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.352848] device bridge_slave_1 entered promiscuous mode [ 45.376920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.412255] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.436646] chnl_net:caif_netlink_parms(): no params data found [ 45.445435] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.453059] team0: Port device team_slave_0 added [ 45.463580] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.471207] team0: Port device team_slave_1 added [ 45.478486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.489114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.541064] IPVS: ftp: loaded support on port[0] = 21 [ 45.562098] device hsr_slave_0 entered promiscuous mode [ 45.620352] device hsr_slave_1 entered promiscuous mode [ 45.702027] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.717050] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.723678] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.730934] device bridge_slave_0 entered promiscuous mode [ 45.738941] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.757940] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.764514] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.771771] device bridge_slave_1 entered promiscuous mode [ 45.809121] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.819741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.834611] chnl_net:caif_netlink_parms(): no params data found [ 45.857900] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.864648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.884127] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.890505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.902305] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.909770] team0: Port device team_slave_0 added [ 45.918746] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.925898] team0: Port device team_slave_1 added [ 45.936799] IPVS: ftp: loaded support on port[0] = 21 [ 45.939041] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.974647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.042109] device hsr_slave_0 entered promiscuous mode [ 46.080301] device hsr_slave_1 entered promiscuous mode [ 46.160414] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.167421] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.174778] device bridge_slave_0 entered promiscuous mode [ 46.183100] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.189516] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.197091] device bridge_slave_1 entered promiscuous mode [ 46.213704] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.221424] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.240664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.253037] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.275585] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.282899] team0: Port device team_slave_0 added [ 46.311312] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.328724] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.337169] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.344586] team0: Port device team_slave_1 added [ 46.349948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.364048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.372871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.396035] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.406517] chnl_net:caif_netlink_parms(): no params data found [ 46.452985] device hsr_slave_0 entered promiscuous mode [ 46.490385] device hsr_slave_1 entered promiscuous mode [ 46.530682] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.538488] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.560832] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.568101] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.577815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.585363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.593973] IPVS: ftp: loaded support on port[0] = 21 [ 46.599690] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.606643] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.640873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.651213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.658975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.670855] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.677639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.705978] chnl_net:caif_netlink_parms(): no params data found [ 46.723105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.732941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.763058] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.771027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.779770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.787737] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.794111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.801989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.819740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.827337] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.836156] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.843350] device bridge_slave_0 entered promiscuous mode [ 46.866068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.876425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.884075] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.891186] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.898447] device bridge_slave_1 entered promiscuous mode [ 46.928319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.936249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.944310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.953058] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.964637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.972979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.982086] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.992900] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.005266] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.011833] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.018720] device bridge_slave_0 entered promiscuous mode [ 47.040551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.047201] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.053922] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.061352] device bridge_slave_1 entered promiscuous mode [ 47.070600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.092014] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.099304] team0: Port device team_slave_0 added [ 47.107553] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.115091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.123763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.139249] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.150661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.156887] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.164195] team0: Port device team_slave_1 added [ 47.170357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.179101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.193609] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.213051] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.221008] team0: Port device team_slave_0 added [ 47.226457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.240711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.249049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.258593] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.264761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.275971] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.285099] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.292317] team0: Port device team_slave_1 added [ 47.304354] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.314510] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.327754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.334574] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.346031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.353375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.383832] device hsr_slave_0 entered promiscuous mode [ 47.420438] device hsr_slave_1 entered promiscuous mode [ 47.460711] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.501887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.510354] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.518033] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.531089] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.537159] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.550502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.557431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.567745] chnl_net:caif_netlink_parms(): no params data found [ 47.578650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.596169] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.602619] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.619533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.637806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.645980] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.652367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.660987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.703101] device hsr_slave_0 entered promiscuous mode [ 47.720026] hrtimer: interrupt took 27429 ns [ 47.740346] device hsr_slave_1 entered promiscuous mode [ 47.791996] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.799014] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.810223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.818423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.828809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.839450] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.845910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.856716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.866154] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.878435] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.916308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.926228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.942522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.952250] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.959358] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.968021] device bridge_slave_0 entered promiscuous mode [ 47.977629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.988069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.996198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.004078] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.010486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.017511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.027571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.036879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.046170] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.053789] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.061720] device bridge_slave_1 entered promiscuous mode [ 48.075426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.083721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.091479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.098966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.106567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.115187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.133265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.147555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.155274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.163110] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.169428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.176633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.185085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.195425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.204187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.212284] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.220818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.228354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.236038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.245394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.253075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.266960] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.273297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.282222] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.296741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.308916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.322496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.332784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.340566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.349298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.358674] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.371619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.379059] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.386666] team0: Port device team_slave_0 added [ 48.393479] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.401397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.408953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.418232] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.425981] team0: Port device team_slave_1 added [ 48.433349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.444650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.451801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.459245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.467187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.474584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.482080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.489915] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.498344] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.505519] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.513720] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.519708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.527254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.541192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.547992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.555052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.562256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.571399] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.577471] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.585751] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.592220] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.653674] device hsr_slave_0 entered promiscuous mode [ 48.690577] device hsr_slave_1 entered promiscuous mode [ 48.732476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.742122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.749388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.759290] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.767197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.775518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.783605] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.790141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.797362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.805089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.812899] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.819214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.826378] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.835513] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.844057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.854498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.862492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.869918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.877893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.885856] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.892250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.901074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.912412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.925074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.931926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.939747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.952938] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.959543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.966862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.977172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.985831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.996779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.006090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.016296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.029714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.041799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.049758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.058011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.067550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.075844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.085947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.093354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.101446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.109724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.117948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.125981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.137240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.148679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.160799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.168281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.177094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.186028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.197928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.211864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.223365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.232055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.239464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.247470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.255529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.265446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.285161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 2020/03/17 03:03:44 executed programs: 14 [ 49.294855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.308098] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.314620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.326031] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.332445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.346789] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.361411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.369573] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.379314] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.388340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.395518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.405200] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.414937] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.421754] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.428945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.438819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.449950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.457688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.468052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.476203] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.482579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.491624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.499877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.507180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.515858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.523682] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.530062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.538213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.546127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.556455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.564313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.576702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.586882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.594926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.603030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.610659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.618344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.627879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.638377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.649449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.661218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.671091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.679150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.696909] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.703614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.718714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.728233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.745017] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.755534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.405789] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 52.463418] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 53.562952] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 54.122373] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/03/17 03:03:49 executed programs: 220 [ 56.861805] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 56.943186] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 58.149007] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 58.397392] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 58.972730] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/03/17 03:03:54 executed programs: 521 [ 61.432627] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 63.616847] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/03/17 03:03:59 executed programs: 821 [ 65.136097] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 68.420163] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/03/17 03:04:04 executed programs: 1124 [ 69.648947] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 70.315208] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 71.527536] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 71.572555] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 73.134085] ================================================================== [ 73.141656] BUG: KASAN: use-after-free in l2tp_session_create+0x144f/0x1720 [ 73.149205] Read of size 4 at addr ffff88808d3d4a18 by task syz-executor.5/12244 [ 73.156823] [ 73.158480] CPU: 1 PID: 12244 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 73.166441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.175792] Call Trace: [ 73.178377] dump_stack+0xf7/0x13b [ 73.181920] ? l2tp_session_create+0x144f/0x1720 [ 73.186940] print_address_description.cold.7+0x9/0x1c9 [ 73.193433] ? l2tp_session_create+0x144f/0x1720 [ 73.198192] kasan_report.cold.8+0x11a/0x2d3 [ 73.202603] __asan_report_load4_noabort+0x14/0x20 [ 73.207535] l2tp_session_create+0x144f/0x1720 [ 73.212156] ? trace_hardirqs_on_caller+0x40c/0x580 [ 73.217172] ? l2tp_session_get+0x181/0x660 [ 73.221489] ? trace_hardirqs_on+0xd/0x10 [ 73.225740] pppol2tp_connect+0x10c1/0x1900 [ 73.230062] ? pppol2tp_seq_show+0xc40/0xc40 [ 73.234471] ? __might_fault+0xf1/0x1b0 [ 73.238442] ? lock_downgrade+0x7f0/0x7f0 [ 73.242860] ? security_socket_connect+0x6a/0xa0 [ 73.247613] SYSC_connect+0x1e3/0x2a0 [ 73.251412] ? SYSC_bind+0x210/0x210 [ 73.255216] ? _copy_to_user+0x91/0xb0 [ 73.259111] ? nsecs_to_jiffies+0x20/0x20 [ 73.263270] ? SyS_clock_gettime+0x115/0x160 [ 73.267678] ? SyS_clock_settime+0x1a0/0x1a0 [ 73.272101] ? move_addr_to_kernel+0x20/0x20 [ 73.276768] ? do_syscall_64+0x4c/0x5b0 [ 73.280738] ? SyS_accept+0x10/0x10 [ 73.284361] SyS_connect+0x9/0x10 [ 73.287807] do_syscall_64+0x1c7/0x5b0 [ 73.291693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.296544] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 73.301726] RIP: 0033:0x459a59 [ 73.304920] RSP: 002b:00007f1de98a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 73.312731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 73.320004] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 73.327269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 73.334539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1de98a86d4 [ 73.341808] R13: 00000000004c0006 R14: 00000000004d2298 R15: 00000000ffffffff [ 73.349096] [ 73.350804] Allocated by task 12244: [ 73.354514] save_stack_trace+0x16/0x20 [ 73.358484] save_stack+0x43/0xd0 [ 73.361932] kasan_kmalloc+0xc7/0xe0 [ 73.365746] __kmalloc+0x15b/0x7b0 [ 73.369289] l2tp_session_create+0x34/0x1720 [ 73.374923] pppol2tp_connect+0x10c1/0x1900 [ 73.380979] SYSC_connect+0x1e3/0x2a0 [ 73.384777] SyS_connect+0x9/0x10 [ 73.388225] do_syscall_64+0x1c7/0x5b0 [ 73.392108] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 73.401565] [ 73.403216] Freed by task 12249: [ 73.406582] save_stack_trace+0x16/0x20 [ 73.410634] save_stack+0x43/0xd0 [ 73.414113] kasan_slab_free+0x71/0xc0 [ 73.418025] kfree+0xcc/0x270 [ 73.421142] l2tp_session_free+0x14f/0x1d0 [ 73.425357] l2tp_tunnel_closeall+0x23d/0x2f0 [ 73.429851] l2tp_udp_encap_destroy+0x7d/0xc0 [ 73.434350] udpv6_destroy_sock+0x89/0xb0 [ 73.438503] sk_common_release+0x5e/0x2c0 [ 73.442632] udp_lib_close+0x9/0x10 [ 73.446336] inet_release+0xd9/0x1c0 [ 73.450034] inet6_release+0x46/0x60 [ 73.453732] __sock_release+0xc2/0x2a0 [ 73.457630] sock_close+0x10/0x20 [ 73.461244] __fput+0x232/0x750 [ 73.464516] ____fput+0x9/0x10 [ 73.467697] task_work_run+0xe5/0x170 [ 73.471475] exit_to_usermode_loop+0x16a/0x1b0 [ 73.476127] do_syscall_64+0x416/0x5b0 [ 73.479992] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 73.485159] [ 73.486763] The buggy address belongs to the object at ffff88808d3d4a00 [ 73.486763] which belongs to the cache kmalloc-512 of size 512 [ 73.499391] The buggy address is located 24 bytes inside of [ 73.499391] 512-byte region [ffff88808d3d4a00, ffff88808d3d4c00) [ 73.511152] The buggy address belongs to the page: [ 73.516060] page:ffffea000234f500 count:1 mapcount:0 mapping:ffff88808d3d4000 index:0xffff88808d3d4000 [ 73.525568] flags: 0x1fffc0000000100(slab) [ 73.529783] raw: 01fffc0000000100 ffff88808d3d4000 ffff88808d3d4000 0000000100000004 [ 73.537941] raw: ffffea00023a9a60 ffffea00023b78a0 ffff8880aa800940 0000000000000000 [ 73.545816] page dumped because: kasan: bad access detected [ 73.551589] [ 73.553253] Memory state around the buggy address: [ 73.558694] ffff88808d3d4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.566123] ffff88808d3d4980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.573508] >ffff88808d3d4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.580860] ^ [ 73.585010] ffff88808d3d4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.592354] ffff88808d3d4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.600763] ================================================================== [ 73.608123] Disabling lock debugging due to kernel taint [ 73.615588] Kernel panic - not syncing: panic_on_warn set ... [ 73.615588] [ 73.622959] CPU: 1 PID: 12244 Comm: syz-executor.5 Tainted: G B 4.14.173-syzkaller #0 [ 73.632031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.641712] Call Trace: [ 73.644283] dump_stack+0xf7/0x13b [ 73.647802] ? l2tp_session_create+0x144f/0x1720 [ 73.652534] panic+0x1b0/0x358 [ 73.655725] ? add_taint.cold.5+0x11/0x11 [ 73.659857] ? ___preempt_schedule+0x16/0x18 [ 73.664354] ? l2tp_session_create+0x144f/0x1720 [ 73.669102] kasan_end_report+0x47/0x4f [ 73.673050] kasan_report.cold.8+0x76/0x2d3 [ 73.677348] __asan_report_load4_noabort+0x14/0x20 [ 73.682255] l2tp_session_create+0x144f/0x1720 [ 73.686812] ? trace_hardirqs_on_caller+0x40c/0x580 [ 73.691824] ? l2tp_session_get+0x181/0x660 [ 73.696124] ? trace_hardirqs_on+0xd/0x10 [ 73.700252] pppol2tp_connect+0x10c1/0x1900 [ 73.704557] ? pppol2tp_seq_show+0xc40/0xc40 [ 73.708941] ? __might_fault+0xf1/0x1b0 [ 73.712902] ? lock_downgrade+0x7f0/0x7f0 [ 73.717039] ? security_socket_connect+0x6a/0xa0 [ 73.721789] SYSC_connect+0x1e3/0x2a0 [ 73.725580] ? SYSC_bind+0x210/0x210 [ 73.729272] ? _copy_to_user+0x91/0xb0 [ 73.733137] ? nsecs_to_jiffies+0x20/0x20 [ 73.737274] ? SyS_clock_gettime+0x115/0x160 [ 73.741669] ? SyS_clock_settime+0x1a0/0x1a0 [ 73.746062] ? move_addr_to_kernel+0x20/0x20 [ 73.750876] ? do_syscall_64+0x4c/0x5b0 [ 73.754838] ? SyS_accept+0x10/0x10 [ 73.758443] SyS_connect+0x9/0x10 [ 73.761871] do_syscall_64+0x1c7/0x5b0 [ 73.765735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.770674] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 73.775847] RIP: 0033:0x459a59 [ 73.779016] RSP: 002b:00007f1de98a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 73.787558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 73.794990] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 73.802239] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 73.810079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1de98a86d4 [ 73.817341] R13: 00000000004c0006 R14: 00000000004d2298 R15: 00000000ffffffff [ 73.825959] Kernel Offset: disabled [ 73.829579] Rebooting in 86400 seconds..