[ 40.050882] IPVS: ftp: loaded support on port[0] = 21 [ 41.189198] can: request_module (can-proto-0) failed. [ 41.198971] can: request_module (can-proto-0) failed. [ 41.208118] can: request_module (can-proto-0) failed. [ 41.412452] audit: type=1400 audit(1581504602.460:37): avc: denied { create } for pid=6893 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.436120] audit: type=1400 audit(1581504602.460:38): avc: denied { create } for pid=6893 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.459977] audit: type=1400 audit(1581504602.460:39): avc: denied { create } for pid=6893 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 41.627045] random: sshd: uninitialized urandom read (32 bytes read) [ 42.436328] random: sshd: uninitialized urandom read (32 bytes read) [ 42.622024] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.121' (ECDSA) to the list of known hosts. 2020/02/12 10:50:09 parsed 1 programs 2020/02/12 10:50:09 executed programs: 0 [ 48.569995] audit: type=1400 audit(1581504609.610:40): avc: denied { map } for pid=6966 comm="syz-execprog" path="/root/syzkaller-shm398243820" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 48.860922] IPVS: ftp: loaded support on port[0] = 21 [ 49.726377] IPVS: ftp: loaded support on port[0] = 21 [ 49.771659] chnl_net:caif_netlink_parms(): no params data found [ 49.813346] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.819890] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.827640] device bridge_slave_0 entered promiscuous mode [ 49.835202] IPVS: ftp: loaded support on port[0] = 21 [ 49.845906] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.852765] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.860114] device bridge_slave_1 entered promiscuous mode [ 49.889833] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.900823] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.935384] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.942712] team0: Port device team_slave_0 added [ 49.952416] chnl_net:caif_netlink_parms(): no params data found [ 49.960820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.968149] team0: Port device team_slave_1 added [ 49.979461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.989333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.051263] IPVS: ftp: loaded support on port[0] = 21 [ 50.071951] device hsr_slave_0 entered promiscuous mode [ 50.130401] device hsr_slave_1 entered promiscuous mode [ 50.209346] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.215996] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.223087] device bridge_slave_0 entered promiscuous mode [ 50.232119] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.238549] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.246172] device bridge_slave_1 entered promiscuous mode [ 50.252380] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.262973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.295983] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.332172] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.351654] chnl_net:caif_netlink_parms(): no params data found [ 50.366716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.373990] team0: Port device team_slave_0 added [ 50.389925] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.397133] team0: Port device team_slave_1 added [ 50.405524] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.412153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.420469] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.426857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.442827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.463053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.471712] IPVS: ftp: loaded support on port[0] = 21 [ 50.531990] device hsr_slave_0 entered promiscuous mode [ 50.570297] device hsr_slave_1 entered promiscuous mode [ 50.612261] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.669305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.677406] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.683865] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.691101] device bridge_slave_0 entered promiscuous mode [ 50.698038] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.704598] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.711853] device bridge_slave_1 entered promiscuous mode [ 50.738716] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.746847] chnl_net:caif_netlink_parms(): no params data found [ 50.765004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.785595] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.793508] team0: Port device team_slave_0 added [ 50.799485] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.806822] team0: Port device team_slave_1 added [ 50.817013] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.823490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.830375] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.836731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.847615] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.855030] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.863082] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.869781] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.877460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.885199] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.920655] IPVS: ftp: loaded support on port[0] = 21 [ 50.952103] device hsr_slave_0 entered promiscuous mode [ 50.990368] device hsr_slave_1 entered promiscuous mode [ 51.058546] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.066170] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.142431] chnl_net:caif_netlink_parms(): no params data found [ 51.151626] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.158018] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.166076] device bridge_slave_0 entered promiscuous mode [ 51.175365] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.181913] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.188859] device bridge_slave_1 entered promiscuous mode [ 51.219489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.226747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.247703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.261956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.272788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.293483] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.303773] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.319894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.327602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.345420] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.354734] team0: Port device team_slave_0 added [ 51.361185] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.368494] team0: Port device team_slave_1 added [ 51.374847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.387048] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.395151] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.402554] device bridge_slave_0 entered promiscuous mode [ 51.409727] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.416870] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.423508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.451913] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.459778] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.466306] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.473615] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.480483] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.487967] device bridge_slave_1 entered promiscuous mode [ 51.499859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.517037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.524422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.532713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.540377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.548226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.556529] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.562972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.625018] chnl_net:caif_netlink_parms(): no params data found [ 51.634242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.643877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.652334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.703402] device hsr_slave_0 entered promiscuous mode [ 51.740457] device hsr_slave_1 entered promiscuous mode [ 51.814938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.825933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.834053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.842402] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.848767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.855901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.863674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.871307] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.877661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.884679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.892430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.900196] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.906569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.914977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.923597] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.932294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.942120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.959041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.968442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.988178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.995908] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.007568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.014640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.023139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.032974] team0: Port device team_slave_0 added [ 52.052693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.061976] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.069416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.077611] team0: Port device team_slave_1 added [ 52.087664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.096858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.107775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.117047] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.126068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.134886] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.141783] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.149489] device bridge_slave_0 entered promiscuous mode [ 52.156487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.164398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.172816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.180723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.188529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.200478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.208202] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.223224] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.229615] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.236678] device bridge_slave_1 entered promiscuous mode [ 52.255060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.265354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.272958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.283056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.290831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.297890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.305081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.313238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.321374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.329048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.337109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.349532] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.356254] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.364044] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.373898] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.382871] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.392719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.401531] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.407590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.463395] device hsr_slave_0 entered promiscuous mode [ 52.500443] device hsr_slave_1 entered promiscuous mode [ 52.541622] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.549016] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.564316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.572668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.583030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.593939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.607809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.615493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.623238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.631802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.639505] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.645916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.656163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.668501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.676287] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.684659] team0: Port device team_slave_0 added [ 52.690730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.697827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.707756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.715593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.723800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.731478] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.738049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.752747] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.761182] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.767248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.777399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.785889] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.793351] team0: Port device team_slave_1 added [ 52.799290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.807088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.816725] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.824868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.833720] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.841301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.883830] device hsr_slave_0 entered promiscuous mode [ 52.940504] device hsr_slave_1 entered promiscuous mode [ 52.981315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.988085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.995281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.006372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.017466] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.051696] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.060461] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.073056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.079978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.087803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.094629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.102457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.110466] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.125999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.135894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.146039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.153228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.161417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.178946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.190732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.201047] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.207411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.216278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.224525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.232514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.244041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.254068] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.276987] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.285396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.295000] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.305219] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.312055] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.319111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.327606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.348973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.361655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.375261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.384891] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.393392] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.401543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.409594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.418391] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.424850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.432623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.440610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.448183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.454707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.461921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.481734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.489177] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.501579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.518481] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.526056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.533293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.540854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.548501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.555463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.565111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.575563] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.583957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.593574] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.599849] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.609484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 2020/02/12 10:50:14 executed programs: 6 [ 53.624320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.638112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.656803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.666919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.678818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.688020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.705950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.717896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.728637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.737037] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.743457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.755599] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.762428] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.770876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.783243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.791647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.798482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.805711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.813506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.821674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.829411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.837334] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.843735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.856011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.865231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.874427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.883554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.893600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.902263] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.908706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.916196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.924286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.932223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.941852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.952417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.963154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.971217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.002435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.023424] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.029831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.037258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.045876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.057765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.066004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.075291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.083191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.092707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.103541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.110928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.118567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.131329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.138900] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.145270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.153734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.163371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.174862] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.183681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.190925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.198715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.207051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.214805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.223858] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.235134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.242213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.248912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.257717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.266634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.274806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.288205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.296387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.307191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.315571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.323495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.331119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.338694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.346767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.356451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.366398] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.376002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.385356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.394307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.403619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.414568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.426160] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.432950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.449489] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.485454] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.504363] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.513290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.520734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.528716] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.535467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.542771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.553902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.563492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.966548] vivid-000: kernel_thread() failed [ 57.723514] ================================================================== [ 57.732261] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 57.739459] Read of size 4 at addr ffff888092ad879c by task syz-executor.4/7273 [ 57.746907] [ 57.748570] CPU: 0 PID: 7273 Comm: syz-executor.4 Not tainted 4.14.170-syzkaller #0 [ 57.756368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.765844] Call Trace: [ 57.768429] dump_stack+0xf7/0x13b [ 57.771970] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 57.776819] print_address_description.cold.7+0x9/0x1c9 [ 57.782181] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 57.787021] kasan_report.cold.8+0x11a/0x2d3 [ 57.791426] __asan_report_load4_noabort+0x14/0x20 [ 57.796361] __vb2_perform_fileio+0x10fd/0x12b0 [ 57.801045] ? vb2_core_poll+0x730/0x730 [ 57.805123] vb2_read+0xf/0x20 [ 57.808323] vb2_fop_read+0x1b6/0x390 [ 57.812193] ? vb2_fop_write+0x390/0x390 [ 57.816259] v4l2_read+0x133/0x240 [ 57.819799] __vfs_read+0xdb/0x840 [ 57.823342] ? vfs_copy_file_range+0xb40/0xb40 [ 57.827930] ? fsnotify+0x1160/0x1160 [ 57.831737] ? __inode_security_revalidate+0xd3/0x100 [ 57.836929] ? selinux_file_permission+0x31f/0x3e0 [ 57.841856] ? security_file_permission+0x149/0x1c0 [ 57.846888] ? rw_verify_area+0xb8/0x2b0 [ 57.850961] vfs_read+0xf5/0x300 [ 57.854402] SyS_read+0x100/0x250 [ 57.857872] ? kernel_write+0x130/0x130 [ 57.861874] ? do_syscall_64+0x4c/0x5b0 [ 57.865866] ? kernel_write+0x130/0x130 [ 57.869849] do_syscall_64+0x1c7/0x5b0 [ 57.873818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.878772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.883959] RIP: 0033:0x45a219 [ 57.887143] RSP: 002b:00007f32d58afc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.894850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 57.902221] RDX: 000000000000008a RSI: 0000000020000100 RDI: 0000000000000005 [ 57.909507] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 57.916792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32d58b06d4 [ 57.924057] R13: 00000000004c7bb4 R14: 00000000004ddc18 R15: 00000000ffffffff [ 57.931330] [ 57.932948] Allocated by task 7273: [ 57.936571] save_stack_trace+0x16/0x20 [ 57.940660] save_stack+0x43/0xd0 [ 57.944108] kasan_kmalloc+0xc7/0xe0 [ 57.947824] kmem_cache_alloc_trace+0x152/0x7a0 [ 57.952482] __vb2_init_fileio+0x160/0xaf0 [ 57.956721] __vb2_perform_fileio+0xa9f/0x12b0 [ 57.961315] vb2_read+0xf/0x20 [ 57.964522] vb2_fop_read+0x1b6/0x390 [ 57.968332] v4l2_read+0x133/0x240 [ 57.971864] __vfs_read+0xdb/0x840 [ 57.975390] vfs_read+0xf5/0x300 [ 57.978965] SyS_read+0x100/0x250 [ 57.982463] do_syscall_64+0x1c7/0x5b0 [ 57.986355] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.991538] [ 57.993158] Freed by task 7263: [ 57.996439] save_stack_trace+0x16/0x20 [ 58.000413] save_stack+0x43/0xd0 [ 58.003848] kasan_slab_free+0x71/0xc0 [ 58.007842] kfree+0xcc/0x270 [ 58.010948] __vb2_cleanup_fileio+0xee/0x140 [ 58.015349] vb2_core_queue_release+0xf/0x70 [ 58.019755] _vb2_fop_release+0x1ac/0x280 [ 58.024005] vb2_fop_release+0x66/0xd0 [ 58.028291] vivid_fop_release+0x15f/0x3a0 [ 58.032537] v4l2_release+0xeb/0x1a0 [ 58.036285] __fput+0x232/0x750 [ 58.039571] ____fput+0x9/0x10 [ 58.042762] task_work_run+0xe5/0x170 [ 58.046864] get_signal+0x148c/0x1b30 [ 58.050749] do_signal+0x7f/0x19a0 [ 58.054293] exit_to_usermode_loop+0x114/0x1b0 [ 58.058998] do_syscall_64+0x416/0x5b0 [ 58.062887] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.068069] [ 58.069687] The buggy address belongs to the object at ffff888092ad8480 [ 58.069687] which belongs to the cache kmalloc-1024 of size 1024 [ 58.082669] The buggy address is located 796 bytes inside of [ 58.082669] 1024-byte region [ffff888092ad8480, ffff888092ad8880) [ 58.094764] The buggy address belongs to the page: [ 58.099733] page:ffffea00024ab600 count:1 mapcount:0 mapping:ffff888092ad8000 index:0x0 compound_mapcount: 0 [ 58.109759] flags: 0x1fffc0000008100(slab|head) [ 58.114424] raw: 01fffc0000008100 ffff888092ad8000 0000000000000000 0000000100000007 [ 58.122487] raw: ffffea00024ae3a0 ffffea0002561fa0 ffff8880aa800ac0 0000000000000000 [ 58.131783] page dumped because: kasan: bad access detected [ 58.137493] [ 58.139111] Memory state around the buggy address: [ 58.144046] ffff888092ad8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.152628] ffff888092ad8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.159984] >ffff888092ad8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.167336] ^ [ 58.171475] ffff888092ad8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.178969] ffff888092ad8880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.186538] ================================================================== [ 58.193892] Disabling lock debugging due to kernel taint [ 58.204293] Kernel panic - not syncing: panic_on_warn set ... [ 58.204293] [ 58.211901] CPU: 0 PID: 7273 Comm: syz-executor.4 Tainted: G B 4.14.170-syzkaller #0 [ 58.220906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.230248] Call Trace: [ 58.232846] dump_stack+0xf7/0x13b [ 58.236388] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.241524] panic+0x1b0/0x358 [ 58.244742] ? add_taint.cold.5+0x11/0x11 [ 58.248883] ? ___preempt_schedule+0x16/0x18 [ 58.253484] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.258326] kasan_end_report+0x47/0x4f [ 58.262520] kasan_report.cold.8+0x76/0x2d3 [ 58.266834] __asan_report_load4_noabort+0x14/0x20 [ 58.271894] __vb2_perform_fileio+0x10fd/0x12b0 [ 58.276555] ? vb2_core_poll+0x730/0x730 [ 58.280605] vb2_read+0xf/0x20 [ 58.283777] vb2_fop_read+0x1b6/0x390 [ 58.287621] ? vb2_fop_write+0x390/0x390 [ 58.291891] v4l2_read+0x133/0x240 [ 58.295425] __vfs_read+0xdb/0x840 [ 58.298955] ? vfs_copy_file_range+0xb40/0xb40 [ 58.303689] ? fsnotify+0x1160/0x1160 [ 58.307601] ? __inode_security_revalidate+0xd3/0x100 [ 58.312789] ? selinux_file_permission+0x31f/0x3e0 [ 58.317718] ? security_file_permission+0x149/0x1c0 [ 58.322815] ? rw_verify_area+0xb8/0x2b0 [ 58.327106] vfs_read+0xf5/0x300 [ 58.330471] SyS_read+0x100/0x250 [ 58.334460] ? kernel_write+0x130/0x130 [ 58.338449] ? do_syscall_64+0x4c/0x5b0 [ 58.342419] ? kernel_write+0x130/0x130 [ 58.346495] do_syscall_64+0x1c7/0x5b0 [ 58.350432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 58.355603] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.360815] RIP: 0033:0x45a219 [ 58.363993] RSP: 002b:00007f32d58afc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.372092] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 58.379680] RDX: 000000000000008a RSI: 0000000020000100 RDI: 0000000000000005 [ 58.386951] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 58.394327] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32d58b06d4 [ 58.401851] R13: 00000000004c7bb4 R14: 00000000004ddc18 R15: 00000000ffffffff [ 58.410943] Kernel Offset: disabled [ 58.414704] Rebooting in 86400 seconds..