[ 41.529652] audit: type=1400 audit(1580656634.806:37): avc: denied { map } for pid=6914 comm="syz-fuzzer" path="/root/syzkaller-shm924956893" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.811068] IPVS: ftp: loaded support on port[0] = 21 [ 42.983735] can: request_module (can-proto-0) failed. [ 42.993682] can: request_module (can-proto-0) failed. [ 43.162501] audit: type=1400 audit(1580656636.446:38): avc: denied { create } for pid=6914 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.186386] audit: type=1400 audit(1580656636.446:39): avc: denied { create } for pid=6914 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.210085] audit: type=1400 audit(1580656636.446:40): avc: denied { create } for pid=6914 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 43.449771] random: sshd: uninitialized urandom read (32 bytes read) [ 44.218371] random: sshd: uninitialized urandom read (32 bytes read) [ 44.424094] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. 2020/02/02 15:17:24 parsed 1 programs 2020/02/02 15:17:24 executed programs: 0 [ 51.281005] IPVS: ftp: loaded support on port[0] = 21 [ 52.078666] IPVS: ftp: loaded support on port[0] = 21 [ 52.131636] chnl_net:caif_netlink_parms(): no params data found [ 52.150452] IPVS: ftp: loaded support on port[0] = 21 [ 52.202270] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.208644] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.216710] device bridge_slave_0 entered promiscuous mode [ 52.225732] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.232471] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.242243] device bridge_slave_1 entered promiscuous mode [ 52.264052] chnl_net:caif_netlink_parms(): no params data found [ 52.289225] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.300443] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.318619] IPVS: ftp: loaded support on port[0] = 21 [ 52.334207] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.340686] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.347640] device bridge_slave_0 entered promiscuous mode [ 52.354729] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.361165] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.368126] device bridge_slave_1 entered promiscuous mode [ 52.386545] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.394195] team0: Port device team_slave_0 added [ 52.407997] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.415338] team0: Port device team_slave_1 added [ 52.420953] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.432012] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.439958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.452958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.521985] device hsr_slave_0 entered promiscuous mode [ 52.560350] device hsr_slave_1 entered promiscuous mode [ 52.635110] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.656669] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.684262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.691424] team0: Port device team_slave_0 added [ 52.711092] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.718739] team0: Port device team_slave_1 added [ 52.724411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.731927] chnl_net:caif_netlink_parms(): no params data found [ 52.742331] IPVS: ftp: loaded support on port[0] = 21 [ 52.749579] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.756160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.763301] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.769663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.779044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.872801] device hsr_slave_0 entered promiscuous mode [ 52.910407] device hsr_slave_1 entered promiscuous mode [ 52.967888] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.975326] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.002571] chnl_net:caif_netlink_parms(): no params data found [ 53.052603] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.059297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.066240] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.072756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.073903] IPVS: ftp: loaded support on port[0] = 21 [ 53.095243] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.101998] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.109002] device bridge_slave_0 entered promiscuous mode [ 53.115857] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.122305] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.129651] device bridge_slave_0 entered promiscuous mode [ 53.144376] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.150973] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.158219] device bridge_slave_1 entered promiscuous mode [ 53.178014] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.184711] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.194256] device bridge_slave_1 entered promiscuous mode [ 53.221443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.244495] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.254080] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.261492] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.268141] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.299067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.308053] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.335842] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.343837] team0: Port device team_slave_0 added [ 53.349518] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.356887] team0: Port device team_slave_1 added [ 53.363522] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.372247] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.379324] chnl_net:caif_netlink_parms(): no params data found [ 53.392183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.402160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.421237] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.428566] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.435891] team0: Port device team_slave_0 added [ 53.444932] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.452168] team0: Port device team_slave_1 added [ 53.459482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.513247] device hsr_slave_0 entered promiscuous mode [ 53.550384] device hsr_slave_1 entered promiscuous mode [ 53.590740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.611330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.618031] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.662254] device hsr_slave_0 entered promiscuous mode [ 53.710571] device hsr_slave_1 entered promiscuous mode [ 53.781882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.789062] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.797322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.805505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.824474] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.837328] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.843555] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.856028] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.862566] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.869576] device bridge_slave_0 entered promiscuous mode [ 53.887497] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.902897] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.909374] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.917094] device bridge_slave_1 entered promiscuous mode [ 53.929755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.945449] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.956359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.964498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.972333] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.978713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.992879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.035987] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.046853] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.061706] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.076308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.089805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.097827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.105539] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.112223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.123198] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.130899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.142542] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.149683] team0: Port device team_slave_0 added [ 54.155785] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.162965] team0: Port device team_slave_1 added [ 54.168656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.175893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.183099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.191448] chnl_net:caif_netlink_parms(): no params data found [ 54.203262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.212502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.222085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.233416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.241776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.249512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.257466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.265329] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.271700] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.278430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.295454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.309260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.318452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.334440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.343972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.413545] device hsr_slave_0 entered promiscuous mode [ 54.470536] device hsr_slave_1 entered promiscuous mode [ 54.510325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.517914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.525808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.533804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.541788] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.548145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.559384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.574940] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.583616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.591094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.598633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.608051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.618264] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.625295] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.633133] device bridge_slave_0 entered promiscuous mode [ 54.639640] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.649042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.657073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.664865] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.671308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.681002] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.687591] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.695289] device bridge_slave_1 entered promiscuous mode [ 54.702011] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.708097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.718726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.730552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.737707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.754014] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.765008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.778934] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.787389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.794825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.801891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.818935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.827934] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.834700] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.843425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.851958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.862750] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.871596] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.878080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.885975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.896341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.916247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.925584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.933982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.941953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.949541] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.955986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.963845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.972310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.983359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.991746] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.998921] team0: Port device team_slave_0 added [ 55.005395] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.012588] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.020692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.028674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.037020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.044876] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.051277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.058437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.065466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.074153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.082770] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.090753] team0: Port device team_slave_1 added [ 55.096820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.105472] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.113013] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.121380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.129138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.137051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.147191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.156129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.164304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.174591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.182823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.193210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.202117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.209898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.218302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.226190] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.232600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.239736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.247643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.255279] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.261697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.269385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.283405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.306267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.325311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.335773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.344333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.354565] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.361196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.369309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.423511] device hsr_slave_0 entered promiscuous mode [ 55.470737] device hsr_slave_1 entered promiscuous mode [ 55.534854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.542008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.549727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.559196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.568009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.577949] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.585667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.599883] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.616148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.625351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.633913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.641978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.653040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.668415] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.678572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.690945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.705394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.713543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.721314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.732266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.744192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.755673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.763277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.771724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.782508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.792422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.803931] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.812161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.819822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.828097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.836277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.844011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.851176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.859322] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.867866] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.874220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.885638] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.892225] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.900254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.911309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.922588] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.929184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.942567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.954566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.980426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.997766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.007909] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.020917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.029360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.037680] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.044208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.051951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.059796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.067709] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.074545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.083010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.098803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.109910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.122286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.140880] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 2020/02/02 15:17:29 executed programs: 8 [ 56.163143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.174210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.184352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.195012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.228791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.241409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.251866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.262663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.279796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.287513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.295756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.305405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.315144] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.323213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.335713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.345647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.356302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.364895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.374602] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.382328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.393620] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.404854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.413656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.425373] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.431799] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.443119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.453537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.463664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.488896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.508839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.519960] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.526825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.538036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.546631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.554957] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.561391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.568510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.577078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.585041] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.597262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.606655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.617868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.625428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.633356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.641295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.652418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.661654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.668941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.677608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.688291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.695712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.704198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.714904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.724223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.736042] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.746804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.761079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.776039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.794922] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.811414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.969800] vivid-000: kernel_thread() failed [ 58.367085] ================================================================== [ 58.374665] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 58.381861] Read of size 4 at addr ffff88809f71be5c by task syz-executor.2/7183 [ 58.389306] [ 58.390946] CPU: 1 PID: 7183 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 58.398732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.408088] Call Trace: [ 58.410690] dump_stack+0xf7/0x13b [ 58.414228] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.419082] print_address_description.cold.7+0x9/0x1c9 [ 58.424448] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.429372] kasan_report.cold.8+0x11a/0x2d3 [ 58.433792] __asan_report_load4_noabort+0x14/0x20 [ 58.438720] __vb2_perform_fileio+0x10fd/0x12b0 [ 58.443404] ? vb2_core_poll+0x730/0x730 [ 58.447485] vb2_read+0xf/0x20 [ 58.450677] vb2_fop_read+0x1b6/0x390 [ 58.454475] ? vb2_fop_write+0x390/0x390 [ 58.458572] v4l2_read+0x135/0x240 [ 58.462367] __vfs_read+0xde/0x840 [ 58.465917] ? vfs_copy_file_range+0xb50/0xb50 [ 58.470504] ? fsnotify+0x1160/0x1160 [ 58.474315] ? __inode_security_revalidate+0xd3/0x100 [ 58.479510] ? selinux_file_permission+0x31f/0x3e0 [ 58.484439] ? security_file_permission+0x14f/0x1c0 [ 58.489447] ? rw_verify_area+0xb8/0x2b0 [ 58.493500] vfs_read+0xf5/0x300 [ 58.496864] SyS_read+0x100/0x250 [ 58.500309] ? kernel_write+0x130/0x130 [ 58.504284] ? do_syscall_64+0x4c/0x5b0 [ 58.508257] ? kernel_write+0x130/0x130 [ 58.512223] do_syscall_64+0x1c9/0x5b0 [ 58.516099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 58.521073] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.526257] RIP: 0033:0x458da9 [ 58.529440] RSP: 002b:00007fd61ca2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.537150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 58.544538] RDX: 0000000000000052 RSI: 0000000020000540 RDI: 0000000000000003 [ 58.551886] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 58.559232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61ca2f6d4 [ 58.566496] R13: 00000000004c4ac8 R14: 00000000004da088 R15: 00000000ffffffff [ 58.573759] [ 58.575381] Allocated by task 7174: [ 58.579088] save_stack_trace+0x16/0x20 [ 58.583053] save_stack+0x43/0xd0 [ 58.586494] kasan_kmalloc+0xc7/0xe0 [ 58.590215] kmem_cache_alloc_trace+0x152/0x7b0 [ 58.594877] __vb2_init_fileio+0x160/0xaf0 [ 58.599219] __vb2_perform_fileio+0xa9f/0x12b0 [ 58.603806] vb2_read+0xf/0x20 [ 58.607047] vb2_fop_read+0x1b6/0x390 [ 58.610854] v4l2_read+0x135/0x240 [ 58.614401] __vfs_read+0xde/0x840 [ 58.617928] vfs_read+0xf5/0x300 [ 58.621282] SyS_read+0x100/0x250 [ 58.624722] do_syscall_64+0x1c9/0x5b0 [ 58.628611] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.633789] [ 58.635399] Freed by task 7164: [ 58.638672] save_stack_trace+0x16/0x20 [ 58.642640] save_stack+0x43/0xd0 [ 58.646088] kasan_slab_free+0x71/0xc0 [ 58.649968] kfree+0xcc/0x270 [ 58.653068] __vb2_cleanup_fileio+0xee/0x140 [ 58.657551] vb2_core_queue_release+0xf/0x70 [ 58.661953] _vb2_fop_release+0x1ac/0x280 [ 58.666109] vb2_fop_release+0x66/0xd0 [ 58.669990] vivid_fop_release+0x15f/0x3a0 [ 58.674223] v4l2_release+0xee/0x1a0 [ 58.677936] __fput+0x235/0x750 [ 58.681200] ____fput+0x9/0x10 [ 58.684392] task_work_run+0xeb/0x180 [ 58.688186] exit_to_usermode_loop+0x16a/0x1b0 [ 58.692750] do_syscall_64+0x418/0x5b0 [ 58.696633] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.701805] [ 58.703425] The buggy address belongs to the object at ffff88809f71bb40 [ 58.703425] which belongs to the cache kmalloc-1024 of size 1024 [ 58.716250] The buggy address is located 796 bytes inside of [ 58.716250] 1024-byte region [ffff88809f71bb40, ffff88809f71bf40) [ 58.728313] The buggy address belongs to the page: [ 58.733244] page:ffffea00027dc680 count:1 mapcount:0 mapping:ffff88809f71a040 index:0x0 compound_mapcount: 0 [ 58.743310] flags: 0x1fffc0000008100(slab|head) [ 58.747972] raw: 01fffc0000008100 ffff88809f71a040 0000000000000000 0000000100000007 [ 58.755963] raw: ffffea00029a4520 ffffea000264e3a0 ffff8880aa800ac0 0000000000000000 [ 58.763853] page dumped because: kasan: bad access detected [ 58.769570] [ 58.771194] Memory state around the buggy address: [ 58.776115] ffff88809f71bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.783483] ffff88809f71bd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.790834] >ffff88809f71be00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.798190] ^ [ 58.804423] ffff88809f71be80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.811867] ffff88809f71bf00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.819312] ================================================================== [ 58.826703] Disabling lock debugging due to kernel taint [ 58.834591] Kernel panic - not syncing: panic_on_warn set ... [ 58.834591] [ 58.842540] CPU: 1 PID: 7183 Comm: syz-executor.2 Tainted: G B 4.14.169-syzkaller #0 [ 58.851544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.860893] Call Trace: [ 58.863469] dump_stack+0xf7/0x13b [ 58.866993] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.871828] panic+0x1b0/0x36a [ 58.875062] ? add_taint.cold.5+0x11/0x11 [ 58.879198] ? ___preempt_schedule+0x16/0x18 [ 58.883605] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.888434] kasan_end_report+0x47/0x4f [ 58.892512] kasan_report.cold.8+0x76/0x2d3 [ 58.896829] __asan_report_load4_noabort+0x14/0x20 [ 58.901948] __vb2_perform_fileio+0x10fd/0x12b0 [ 58.906618] ? vb2_core_poll+0x730/0x730 [ 58.910674] vb2_read+0xf/0x20 [ 58.913859] vb2_fop_read+0x1b6/0x390 [ 58.917639] ? vb2_fop_write+0x390/0x390 [ 58.922136] v4l2_read+0x135/0x240 [ 58.925663] __vfs_read+0xde/0x840 [ 58.929195] ? vfs_copy_file_range+0xb50/0xb50 [ 58.933761] ? fsnotify+0x1160/0x1160 [ 58.937669] ? __inode_security_revalidate+0xd3/0x100 [ 58.943038] ? selinux_file_permission+0x31f/0x3e0 [ 58.947958] ? security_file_permission+0x14f/0x1c0 [ 58.953050] ? rw_verify_area+0xb8/0x2b0 [ 58.957115] vfs_read+0xf5/0x300 [ 58.960496] SyS_read+0x100/0x250 [ 58.963941] ? kernel_write+0x130/0x130 [ 58.967905] ? do_syscall_64+0x4c/0x5b0 [ 58.971930] ? kernel_write+0x130/0x130 [ 58.975918] do_syscall_64+0x1c9/0x5b0 [ 58.979791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 58.984642] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.989828] RIP: 0033:0x458da9 [ 58.993010] RSP: 002b:00007fd61ca2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.000703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 59.008050] RDX: 0000000000000052 RSI: 0000000020000540 RDI: 0000000000000003 [ 59.015422] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 59.022738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61ca2f6d4 [ 59.029991] R13: 00000000004c4ac8 R14: 00000000004da088 R15: 00000000ffffffff [ 59.038710] Kernel Offset: disabled [ 59.042343] Rebooting in 86400 seconds..