[ 39.435663] random: cc1: uninitialized urandom read (8 bytes read) [ 40.081121] IPVS: ftp: loaded support on port[0] = 21 [ 41.189914] can: request_module (can-proto-0) failed. [ 41.201125] can: request_module (can-proto-0) failed. [ 41.363188] audit: type=1400 audit(1575082462.862:37): avc: denied { create } for pid=6739 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.387707] audit: type=1400 audit(1575082462.862:38): avc: denied { create } for pid=6739 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.411427] audit: type=1400 audit(1575082462.862:39): avc: denied { create } for pid=6739 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 41.660673] random: sshd: uninitialized urandom read (32 bytes read) [ 42.350976] random: sshd: uninitialized urandom read (32 bytes read) [ 42.551795] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.18' (ECDSA) to the list of known hosts. 2019/11/30 02:54:30 parsed 1 programs 2019/11/30 02:54:30 executed programs: 0 [ 49.185982] audit: type=1400 audit(1575082470.682:40): avc: denied { map } for pid=6812 comm="syz-execprog" path="/root/syzkaller-shm048683447" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 49.440943] IPVS: ftp: loaded support on port[0] = 21 [ 50.259922] IPVS: ftp: loaded support on port[0] = 21 [ 50.298853] chnl_net:caif_netlink_parms(): no params data found [ 50.349515] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.357443] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.364662] device bridge_slave_0 entered promiscuous mode [ 50.373691] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.380509] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.387403] device bridge_slave_1 entered promiscuous mode [ 50.399961] IPVS: ftp: loaded support on port[0] = 21 [ 50.414365] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.423508] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.443588] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.450956] team0: Port device team_slave_0 added [ 50.456908] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.464436] team0: Port device team_slave_1 added [ 50.469848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.477247] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.542586] device hsr_slave_0 entered promiscuous mode [ 50.590522] device hsr_slave_1 entered promiscuous mode [ 50.668012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.677579] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.719173] chnl_net:caif_netlink_parms(): no params data found [ 50.746790] IPVS: ftp: loaded support on port[0] = 21 [ 50.786798] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.793390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.800750] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.807695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.839270] chnl_net:caif_netlink_parms(): no params data found [ 50.857112] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.865451] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.872444] device bridge_slave_0 entered promiscuous mode [ 50.888447] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.895698] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.902690] device bridge_slave_1 entered promiscuous mode [ 50.927589] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.952964] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.973316] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.979719] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.986699] device bridge_slave_0 entered promiscuous mode [ 50.995458] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.002592] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.009496] device bridge_slave_1 entered promiscuous mode [ 51.024303] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.032516] team0: Port device team_slave_0 added [ 51.038301] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.046262] team0: Port device team_slave_1 added [ 51.062756] IPVS: ftp: loaded support on port[0] = 21 [ 51.063283] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.082037] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.093469] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.103047] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.136572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.143871] team0: Port device team_slave_0 added [ 51.203352] device hsr_slave_0 entered promiscuous mode [ 51.240586] device hsr_slave_1 entered promiscuous mode [ 51.280596] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.287733] team0: Port device team_slave_1 added [ 51.293032] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.312187] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.319381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.354252] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.422006] device hsr_slave_0 entered promiscuous mode [ 51.460352] device hsr_slave_1 entered promiscuous mode [ 51.501358] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.508420] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.517231] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.534636] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.553612] chnl_net:caif_netlink_parms(): no params data found [ 51.573360] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.593863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.607492] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.629833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.638520] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.656031] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.656385] IPVS: ftp: loaded support on port[0] = 21 [ 51.662678] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.676223] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.687496] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.694662] device bridge_slave_0 entered promiscuous mode [ 51.703113] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.709654] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.716769] device bridge_slave_1 entered promiscuous mode [ 51.722882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.730835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.771831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.797957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.806259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.813982] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.820377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.828107] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.837835] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.858616] chnl_net:caif_netlink_parms(): no params data found [ 51.884628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.897228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.914435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.923920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.931570] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.938258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.945225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.961698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.969489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.977066] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.984504] team0: Port device team_slave_0 added [ 51.989927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.997538] team0: Port device team_slave_1 added [ 52.002935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.013953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.023640] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.031624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.039855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.058268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.067012] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.073170] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.079642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.087716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.095450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.102563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.109763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.163416] device hsr_slave_0 entered promiscuous mode [ 52.200319] device hsr_slave_1 entered promiscuous mode [ 52.240969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.248016] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.256245] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.266901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.274421] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.281359] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.288338] device bridge_slave_0 entered promiscuous mode [ 52.295326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.303605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.311228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.318993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.326594] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.332951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.339758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.350255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.358195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.366080] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.372546] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.379548] device bridge_slave_1 entered promiscuous mode [ 52.399779] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.408472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.416498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.426229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.434872] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.446581] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.455387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.462633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.470596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.478168] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.484579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.491724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.499366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.509135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.528346] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.537105] team0: Port device team_slave_0 added [ 52.542714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.552080] team0: Port device team_slave_1 added [ 52.557782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.565942] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.575689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.583348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.590518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.625933] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.633718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.643117] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.649186] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.657245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.689604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.702758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.714075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.753564] device hsr_slave_0 entered promiscuous mode [ 52.830301] device hsr_slave_1 entered promiscuous mode [ 52.901053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.908171] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.917165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.924969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.932633] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.938980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.945856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.953900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.961551] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.967887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.974830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.982679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.990409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.997440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.010246] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.020907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.029481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.037616] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.047792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.055533] chnl_net:caif_netlink_parms(): no params data found [ 53.066872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.074545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.082581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.090713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.100911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.111187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.126443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.134248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.145630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.153320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.161287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.169876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.177785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.186515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.204883] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.212196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.219825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.228975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.237087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.245936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.255561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.276956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.286798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.296311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.305774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.313598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.322870] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.329515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.338557] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.347339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.359288] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.366222] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.373688] device bridge_slave_0 entered promiscuous mode [ 53.380841] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.387243] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.394736] device bridge_slave_1 entered promiscuous mode [ 53.413522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.427812] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.448158] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.457939] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.488503] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.496144] team0: Port device team_slave_0 added [ 53.502000] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.509158] team0: Port device team_slave_1 added [ 53.517390] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.530229] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.542502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.550480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.560879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.573581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.585202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.609936] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.624529] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.649450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.683429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.692149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.729717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.746492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.765960] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.772442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.782333] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.796769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.833544] device hsr_slave_0 entered promiscuous mode [ 53.850522] device hsr_slave_1 entered promiscuous mode [ 53.890831] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.905554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.917601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.931893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.939821] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.946767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.958777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.966385] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.978130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.987023] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.003251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.010454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.017370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.025801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.036992] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.046967] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.053955] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.073216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.090402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.098195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.109572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.123355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.131853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.139075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.148556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.156441] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.162844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.170384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.178108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.188907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.198955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.205985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.216571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.224535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.232518] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.238863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.246038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.253972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.263537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.281028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.289111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.297791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.306931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.315031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.324620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.334127] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.341489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.352667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.361707] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.367893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.377390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.386044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.394957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.404748] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.413429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.420654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.428153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.436100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.442998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.451805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.462504] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.468934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.478250] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.485089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.492745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.501487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.511006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.518798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.527045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.534711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.542490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.549947] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.556324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.565031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.576209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.583355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.591362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.599512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.607283] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.613630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.625912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.634242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.648198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.656975] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.664237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.677099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.686228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.696375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.704165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.716423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.727783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.735712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.745110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.752036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.759383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.768097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.777543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.788047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.799003] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.806444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.814448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.823962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.838345] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.849138] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/11/30 02:54:36 executed programs: 15 [ 56.583322] ================================================================== [ 56.590732] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 56.597390] Read of size 8 at addr ffff8880973d9da0 by task kworker/u4:4/2274 [ 56.604650] [ 56.606276] CPU: 0 PID: 2274 Comm: kworker/u4:4 Not tainted 4.14.156-syzkaller #0 [ 56.613888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.623245] Workqueue: tipc_rcv tipc_recv_work [ 56.627814] Call Trace: [ 56.630399] dump_stack+0xf7/0x13b [ 56.633934] ? __lock_acquire+0x32f9/0x4500 [ 56.638250] print_address_description.cold.7+0x9/0x1c9 [ 56.643704] ? __lock_acquire+0x32f9/0x4500 [ 56.648024] kasan_report.cold.8+0x11a/0x2d3 [ 56.652431] __asan_report_load8_noabort+0x14/0x20 [ 56.657356] __lock_acquire+0x32f9/0x4500 [ 56.661501] ? __lock_acquire+0x6a4/0x4500 [ 56.665744] ? preempt_schedule+0x4d/0x60 [ 56.669882] ? preempt_schedule_common+0x1f/0xe0 [ 56.674632] ? release_sock+0x122/0x180 [ 56.678601] ? trace_hardirqs_on+0x10/0x10 [ 56.682829] ? trace_hardirqs_off+0x10/0x10 [ 56.687161] ? trace_hardirqs_off+0x10/0x10 [ 56.691477] ? _raw_spin_unlock_bh+0x30/0x40 [ 56.695886] ? release_sock+0x122/0x180 [ 56.699863] ? __lock_is_held+0xb5/0x140 [ 56.703915] lock_acquire+0x173/0x400 [ 56.707707] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 56.712277] _raw_spin_lock_bh+0x31/0x40 [ 56.716329] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 56.720899] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 56.725301] tipc_receive_from_sock+0x290/0x570 [ 56.729976] ? tipc_send_work+0x5e0/0x5e0 [ 56.734117] ? lock_downgrade+0x7f0/0x7f0 [ 56.738259] ? trace_hardirqs_off+0x10/0x10 [ 56.742572] ? __lock_is_held+0xb5/0x140 [ 56.746634] tipc_recv_work+0x78/0xd0 [ 56.750442] process_one_work+0x7a3/0x16c0 [ 56.754790] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 56.759460] worker_thread+0xcc/0xee0 [ 56.763368] kthread+0x33b/0x410 [ 56.766738] ? process_one_work+0x16c0/0x16c0 [ 56.771220] ? kthread_create_on_node+0xa0/0xa0 [ 56.775894] ret_from_fork+0x3a/0x50 [ 56.779613] [ 56.781231] Allocated by task 6872: [ 56.784851] save_stack_trace+0x16/0x20 [ 56.788816] save_stack+0x43/0xd0 [ 56.792260] kasan_kmalloc+0xc7/0xe0 [ 56.795975] kmem_cache_alloc_trace+0x152/0x7b0 [ 56.800640] tipc_subscrb_connect_cb+0x44/0x140 [ 56.805301] tipc_accept_from_sock+0x29e/0x4c0 [ 56.809906] tipc_recv_work+0x78/0xd0 [ 56.813836] process_one_work+0x7a3/0x16c0 [ 56.818063] worker_thread+0xcc/0xee0 [ 56.821863] kthread+0x33b/0x410 [ 56.825218] ret_from_fork+0x3a/0x50 [ 56.829054] [ 56.830678] Freed by task 950: [ 56.833866] save_stack_trace+0x16/0x20 [ 56.837833] save_stack+0x43/0xd0 [ 56.841308] kasan_slab_free+0x71/0xc0 [ 56.845184] kfree+0xcc/0x270 [ 56.848278] tipc_subscrb_put+0x19/0x20 [ 56.852239] tipc_subscrb_release_cb+0x1a/0x20 [ 56.856832] tipc_close_conn+0x15d/0x1f0 [ 56.860882] tipc_send_work+0x462/0x5e0 [ 56.865010] process_one_work+0x7a3/0x16c0 [ 56.869252] worker_thread+0xcc/0xee0 [ 56.873033] kthread+0x33b/0x410 [ 56.876376] ret_from_fork+0x3a/0x50 [ 56.880070] [ 56.881686] The buggy address belongs to the object at ffff8880973d9d80 [ 56.881686] which belongs to the cache kmalloc-96 of size 96 [ 56.894162] The buggy address is located 32 bytes inside of [ 56.894162] 96-byte region [ffff8880973d9d80, ffff8880973d9de0) [ 56.905852] The buggy address belongs to the page: [ 56.910867] page:ffffea00025cf640 count:1 mapcount:0 mapping:ffff8880973d9000 index:0xffff8880973d9480 [ 56.920293] flags: 0x1fffc0000000100(slab) [ 56.924559] raw: 01fffc0000000100 ffff8880973d9000 ffff8880973d9480 0000000100000019 [ 56.932424] raw: ffffea00025da1e0 ffffea000240c620 ffff8880aa8004c0 0000000000000000 [ 56.940278] page dumped because: kasan: bad access detected [ 56.945970] [ 56.947588] Memory state around the buggy address: [ 56.952497] ffff8880973d9c80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 56.959839] ffff8880973d9d00: 00 00 00 00 00 00 00 00 05 fc fc fc fc fc fc fc [ 56.967296] >ffff8880973d9d80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 56.974632] ^ [ 56.979021] ffff8880973d9e00: 00 00 00 00 00 00 00 00 05 fc fc fc fc fc fc fc [ 56.986363] ffff8880973d9e80: 00 00 00 00 00 00 00 00 05 fc fc fc fc fc fc fc [ 56.993702] ================================================================== [ 57.001044] Disabling lock debugging due to kernel taint [ 57.006470] Kernel panic - not syncing: panic_on_warn set ... [ 57.006470] [ 57.013809] CPU: 0 PID: 2274 Comm: kworker/u4:4 Tainted: G B 4.14.156-syzkaller #0 [ 57.022619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.032047] Workqueue: tipc_rcv tipc_recv_work [ 57.036603] Call Trace: [ 57.039169] dump_stack+0xf7/0x13b [ 57.042682] ? __lock_acquire+0x32f9/0x4500 [ 57.046979] panic+0x1b0/0x36a [ 57.050143] ? add_taint.cold.5+0x11/0x11 [ 57.054273] ? lock_downgrade+0x7f0/0x7f0 [ 57.058397] ? __lock_acquire+0x32f9/0x4500 [ 57.062693] kasan_end_report+0x47/0x4f [ 57.066649] kasan_report.cold.8+0x76/0x2d3 [ 57.070948] __asan_report_load8_noabort+0x14/0x20 [ 57.075855] __lock_acquire+0x32f9/0x4500 [ 57.079976] ? __lock_acquire+0x6a4/0x4500 [ 57.084201] ? preempt_schedule+0x4d/0x60 [ 57.088342] ? preempt_schedule_common+0x1f/0xe0 [ 57.093099] ? release_sock+0x122/0x180 [ 57.097069] ? trace_hardirqs_on+0x10/0x10 [ 57.101293] ? trace_hardirqs_off+0x10/0x10 [ 57.105972] ? trace_hardirqs_off+0x10/0x10 [ 57.110276] ? _raw_spin_unlock_bh+0x30/0x40 [ 57.114672] ? release_sock+0x122/0x180 [ 57.118625] ? __lock_is_held+0xb5/0x140 [ 57.122677] lock_acquire+0x173/0x400 [ 57.126469] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 57.131044] _raw_spin_lock_bh+0x31/0x40 [ 57.135094] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 57.139666] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 57.144316] tipc_receive_from_sock+0x290/0x570 [ 57.148964] ? tipc_send_work+0x5e0/0x5e0 [ 57.153095] ? lock_downgrade+0x7f0/0x7f0 [ 57.157226] ? trace_hardirqs_off+0x10/0x10 [ 57.161649] ? __lock_is_held+0xb5/0x140 [ 57.165713] tipc_recv_work+0x78/0xd0 [ 57.169493] process_one_work+0x7a3/0x16c0 [ 57.173708] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 57.178370] worker_thread+0xcc/0xee0 [ 57.182162] kthread+0x33b/0x410 [ 57.185509] ? process_one_work+0x16c0/0x16c0 [ 57.190022] ? kthread_create_on_node+0xa0/0xa0 [ 57.194684] ret_from_fork+0x3a/0x50 [ 57.199938] Kernel Offset: disabled [ 57.203557] Rebooting in 86400 seconds..