[ 40.030939] IPVS: ftp: loaded support on port[0] = 21 [ 41.258784] can: request_module (can-proto-0) failed. [ 41.269693] can: request_module (can-proto-0) failed. [ 41.279028] can: request_module (can-proto-0) failed. [ 41.442700] audit: type=1400 audit(1582226859.313:38): avc: denied { create } for pid=6955 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.467482] audit: type=1400 audit(1582226859.313:39): avc: denied { create } for pid=6955 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.491621] audit: type=1400 audit(1582226859.313:40): avc: denied { create } for pid=6955 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 41.643051] random: sshd: uninitialized urandom read (32 bytes read) [ 42.434700] random: sshd: uninitialized urandom read (32 bytes read) [ 42.638237] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts. 2020/02/20 19:27:46 parsed 1 programs 2020/02/20 19:27:46 executed programs: 0 [ 49.121369] IPVS: ftp: loaded support on port[0] = 21 [ 49.887119] IPVS: ftp: loaded support on port[0] = 21 [ 49.918085] chnl_net:caif_netlink_parms(): no params data found [ 49.952720] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.960536] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.968437] device bridge_slave_0 entered promiscuous mode [ 49.976432] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.983775] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.991566] device bridge_slave_1 entered promiscuous mode [ 50.019095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.030673] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.055262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.064193] team0: Port device team_slave_0 added [ 50.064888] IPVS: ftp: loaded support on port[0] = 21 [ 50.070447] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.084286] team0: Port device team_slave_1 added [ 50.094560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.105949] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.172201] device hsr_slave_0 entered promiscuous mode [ 50.210484] device hsr_slave_1 entered promiscuous mode [ 50.282440] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.294748] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.303096] audit: type=1400 audit(1582226868.173:41): avc: denied { write } for pid=7053 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 50.328693] audit: type=1400 audit(1582226868.193:42): avc: denied { read } for pid=7053 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 50.394292] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.401320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.408807] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.415532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.425475] IPVS: ftp: loaded support on port[0] = 21 [ 50.477543] chnl_net:caif_netlink_parms(): no params data found [ 50.486069] chnl_net:caif_netlink_parms(): no params data found [ 50.563052] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.569969] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.577854] device bridge_slave_0 entered promiscuous mode [ 50.585368] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.593231] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.601861] IPVS: ftp: loaded support on port[0] = 21 [ 50.602234] device bridge_slave_0 entered promiscuous mode [ 50.615593] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.622909] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.630978] device bridge_slave_1 entered promiscuous mode [ 50.643728] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.650347] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.657637] device bridge_slave_1 entered promiscuous mode [ 50.679430] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.686463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.712970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.722102] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.732320] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.754072] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.767931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.796344] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.804428] team0: Port device team_slave_0 added [ 50.810698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.818779] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.837778] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.847612] IPVS: ftp: loaded support on port[0] = 21 [ 50.863117] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.878159] team0: Port device team_slave_0 added [ 50.885357] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.892160] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.899244] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.907054] team0: Port device team_slave_1 added [ 50.920344] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.927662] team0: Port device team_slave_1 added [ 50.941371] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 50.949532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.958005] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.964414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.971675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.980310] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.986945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.994752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.005043] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.018917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.077328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.085986] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.143123] device hsr_slave_0 entered promiscuous mode [ 51.190495] device hsr_slave_1 entered promiscuous mode [ 51.250917] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.263305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.271157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.281434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.332186] device hsr_slave_0 entered promiscuous mode [ 51.370330] device hsr_slave_1 entered promiscuous mode [ 51.413261] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.421586] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.428710] chnl_net:caif_netlink_parms(): no params data found [ 51.442932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.450793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.458951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.471948] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.500440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.540376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.548031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.558358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.569059] chnl_net:caif_netlink_parms(): no params data found [ 51.582326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.589821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.603540] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.620976] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.627520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.641105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.685373] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.693975] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.702290] device bridge_slave_0 entered promiscuous mode [ 51.758363] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.765423] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.772869] device bridge_slave_1 entered promiscuous mode [ 51.797069] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.804914] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.812747] device bridge_slave_0 entered promiscuous mode [ 51.829064] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.837801] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.845209] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.852907] device bridge_slave_1 entered promiscuous mode [ 51.866812] chnl_net:caif_netlink_parms(): no params data found [ 51.881471] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 51.889124] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.899010] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.923734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.931793] team0: Port device team_slave_0 added [ 51.938618] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.950996] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.960828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.981597] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.989562] team0: Port device team_slave_1 added [ 51.996018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.004066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.023248] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.033169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.056174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.080576] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.088033] team0: Port device team_slave_0 added [ 52.096196] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.104490] team0: Port device team_slave_1 added [ 52.111918] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.121527] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.172678] device hsr_slave_0 entered promiscuous mode [ 52.210371] device hsr_slave_1 entered promiscuous mode [ 52.261150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.268486] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.279009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.288604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.296277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.314615] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.323592] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.335003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.355557] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.364803] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.373528] device bridge_slave_0 entered promiscuous mode [ 52.387133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.452271] device hsr_slave_0 entered promiscuous mode [ 52.480652] device hsr_slave_1 entered promiscuous mode [ 52.521897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.530093] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.538381] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.545940] device bridge_slave_1 entered promiscuous mode [ 52.553642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.566104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.574963] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.582792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.593336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.603748] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.617896] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.639516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.650899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.659391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.668307] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.676007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.685296] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.693822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.712697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.726486] refcount_t: underflow; use-after-free. [ 52.731958] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.732472] ------------[ cut here ]------------ [ 52.743400] WARNING: CPU: 0 PID: 7086 at lib/refcount.c:187 refcount_sub_and_test.cold.13+0x13/0x1c [ 52.744332] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.752852] Kernel panic - not syncing: panic_on_warn set ... [ 52.752852] [ 52.752861] CPU: 0 PID: 7086 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0 [ 52.752863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.752866] Call Trace: [ 52.752880] dump_stack+0xf7/0x13b [ 52.752888] ? refcount_sub_and_test.cold.13+0x13/0x1c [ 52.752894] panic+0x1b0/0x358 [ 52.752899] ? add_taint.cold.5+0x11/0x11 [ 52.759081] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.766949] ? __schedule+0x788/0x1d20 [ 52.766960] ? refcount_sub_and_test.cold.13+0x13/0x1c [ 52.766966] __warn.cold.8+0x25/0x2c [ 52.766972] ? refcount_sub_and_test.cold.13+0x13/0x1c [ 52.766979] report_bug+0x1a4/0x1f3 [ 52.766987] do_error_trap+0x1bd/0x310 [ 52.766992] ? math_error+0x300/0x300 [ 52.767001] ? vprintk_emit+0x1d2/0x4e0 [ 52.803809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.804806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.814002] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.814942] do_invalid_op+0x1b/0x20 [ 52.822986] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.824036] invalid_op+0x1b/0x40 [ 52.832160] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.833061] RIP: 0010:refcount_sub_and_test.cold.13+0x13/0x1c [ 52.837078] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.841363] RSP: 0018:ffff88808e437728 EFLAGS: 00010282 [ 52.841369] RAX: 0000000000000026 RBX: 0000000000008100 RCX: 0000000000000000 [ 52.841372] RDX: 0000000000000026 RSI: ffffffff868cf080 RDI: ffffed1011c86edc [ 52.841375] RBP: ffff88808e437738 R08: ffff888092b50988 R09: 0000000000000000 [ 52.841377] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008100 [ 52.841379] R13: ffff8880757629fc R14: ffffffff88352d20 R15: 0000000000000000 [ 52.841399] ? refcount_sub_and_test.cold.13+0x13/0x1c [ 52.841407] sock_wfree+0x9b/0x120 [ 52.841414] sctp_wfree+0x28b/0x5f0 [ 52.848309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.851566] skb_release_head_state+0xfc/0x1f0 [ 52.851571] skb_release_all+0xd/0x50 [ 52.851575] consume_skb+0x84/0x2a0 [ 52.851583] sctp_chunk_put+0x150/0x230 [ 52.851589] sctp_chunk_free+0x3f/0x50 [ 52.851596] __sctp_outq_teardown+0x1a2/0xe10 [ 52.859806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.863011] ? sock_def_wakeup+0xd4/0x1a0 [ 52.863021] sctp_outq_free+0x9/0x10 [ 52.863025] sctp_association_free+0x1d5/0x711 [ 52.863034] sctp_do_sm+0xea4/0x4dd0 [ 52.863043] ? trace_hardirqs_off+0x10/0x10 [ 52.869479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.873135] ? rcu_read_lock_sched_held+0x108/0x120 [ 52.873145] ? kmem_cache_alloc_node_trace+0x373/0x780 [ 52.873156] ? sctp_do_8_2_transport_strike.isra.17+0x800/0x800 [ 52.873168] ? rcu_read_lock_sched_held+0x108/0x120 [ 52.879729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.883494] ? kmem_cache_alloc+0x623/0x790 [ 52.883503] ? skb_trim+0x160/0x160 [ 52.883509] ? sctp_chunkify+0x47/0x2a0 [ 52.883515] ? sctp_chunkify+0x47/0x2a0 [ 52.883519] ? _sctp_make_chunk+0x18e/0x260 [ 52.883527] ? memcpy+0x45/0x50 [ 52.892305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.896036] ? sctp_make_abort_no_data+0x1a0/0x1a0 [ 52.904558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.909063] sctp_primitive_ABORT+0x7c/0xc0 [ 52.925130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.932678] sctp_close+0x23e/0x710 [ 52.932689] ? sctp_init_sock+0x1200/0x1200 [ 52.932698] ? lock_acquire+0x173/0x400 [ 52.932705] ? __sock_release+0x7d/0x2a0 [ 52.932718] inet_release+0xd9/0x1c0 [ 52.932724] __sock_release+0xc2/0x2a0 [ 52.932730] sock_close+0x10/0x20 [ 52.932736] __fput+0x232/0x750 [ 52.932741] ? _raw_spin_unlock_irq+0x27/0x80 [ 52.932748] ____fput+0x9/0x10 [ 52.932752] task_work_run+0xe5/0x170 [ 52.932761] exit_to_usermode_loop+0x16a/0x1b0 [ 52.932766] do_syscall_64+0x416/0x5b0 [ 52.932770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.932777] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 52.932781] RIP: 0033:0x4141d1 [ 52.932784] RSP: 002b:00007fffc2adbcd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 52.932789] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004141d1 [ 52.932794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 52.932798] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 52.932801] R10: 00007fffc2adbdb0 R11: 0000000000000293 R12: 000000000075bf20 [ 52.932804] R13: 000000000000cdf5 R14: 0000000000761400 R15: 000000000075bf2c [ 52.942602] Kernel Offset: disabled [ 53.245454] Rebooting in 86400 seconds..