[ 38.009185] random: cc1: uninitialized urandom read (8 bytes read) [ 38.570852] IPVS: ftp: loaded support on port[0] = 21 [ 39.713400] can: request_module (can-proto-0) failed. [ 39.723316] can: request_module (can-proto-0) failed. [ 39.892306] audit: type=1400 audit(1578503633.618:37): avc: denied { create } for pid=6699 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 39.915888] audit: type=1400 audit(1578503633.618:38): avc: denied { create } for pid=6699 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 39.939562] audit: type=1400 audit(1578503633.618:39): avc: denied { create } for pid=6699 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 40.093497] random: sshd: uninitialized urandom read (32 bytes read) [ 40.865737] random: sshd: uninitialized urandom read (32 bytes read) [ 41.051355] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. 2020/01/08 17:14:00 parsed 1 programs 2020/01/08 17:14:00 executed programs: 0 [ 47.012408] audit: type=1400 audit(1578503640.738:40): avc: denied { map } for pid=6770 comm="syz-execprog" path="/root/syzkaller-shm256784279" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 47.075363] IPVS: ftp: loaded support on port[0] = 21 [ 47.946662] chnl_net:caif_netlink_parms(): no params data found [ 47.954764] IPVS: ftp: loaded support on port[0] = 21 [ 48.002212] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.008814] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.015910] device bridge_slave_0 entered promiscuous mode [ 48.025323] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.031866] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.038829] device bridge_slave_1 entered promiscuous mode [ 48.057583] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.066829] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.086453] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.094866] IPVS: ftp: loaded support on port[0] = 21 [ 48.100804] team0: Port device team_slave_0 added [ 48.108036] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.115675] team0: Port device team_slave_1 added [ 48.121062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.130343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.222225] device hsr_slave_0 entered promiscuous mode [ 48.260327] device hsr_slave_1 entered promiscuous mode [ 48.308778] chnl_net:caif_netlink_parms(): no params data found [ 48.317492] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.336899] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.368003] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.374796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.381896] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.388643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.401950] IPVS: ftp: loaded support on port[0] = 21 [ 48.409880] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.416450] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.426073] device bridge_slave_0 entered promiscuous mode [ 48.432937] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.439291] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.447006] device bridge_slave_1 entered promiscuous mode [ 48.475842] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.496744] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.535380] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.542830] team0: Port device team_slave_0 added [ 48.553604] chnl_net:caif_netlink_parms(): no params data found [ 48.563594] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.572075] team0: Port device team_slave_1 added [ 48.578110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.595856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.627304] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.635749] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.644218] device bridge_slave_0 entered promiscuous mode [ 48.702853] device hsr_slave_0 entered promiscuous mode [ 48.760516] device hsr_slave_1 entered promiscuous mode [ 48.810823] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.818032] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.825117] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.832490] device bridge_slave_1 entered promiscuous mode [ 48.854060] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.862780] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.871026] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.902439] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.909781] team0: Port device team_slave_0 added [ 48.923471] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.931820] team0: Port device team_slave_1 added [ 48.932645] IPVS: ftp: loaded support on port[0] = 21 [ 48.957441] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.967174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.978698] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.985180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.992522] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.999177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.009357] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.017603] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.025900] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.033772] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.060810] chnl_net:caif_netlink_parms(): no params data found [ 49.142385] device hsr_slave_0 entered promiscuous mode [ 49.200330] device hsr_slave_1 entered promiscuous mode [ 49.241787] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.249169] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.284720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.315916] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.324358] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.341379] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.352083] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.358175] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.365449] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.372138] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.379141] device bridge_slave_0 entered promiscuous mode [ 49.386538] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.393471] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.400838] device bridge_slave_1 entered promiscuous mode [ 49.412384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.419751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.452137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.463569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.472946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.481231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.489723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.498652] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.506642] IPVS: ftp: loaded support on port[0] = 21 [ 49.514522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.522774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.532986] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.539445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.546338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.554247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.562480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.583852] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.590721] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.600176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.608303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.617231] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.623859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.636683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.644215] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.651940] team0: Port device team_slave_0 added [ 49.663022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.671594] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.682493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.691285] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.698328] team0: Port device team_slave_1 added [ 49.704370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.712354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.719437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.792143] device hsr_slave_0 entered promiscuous mode [ 49.830349] device hsr_slave_1 entered promiscuous mode [ 49.911329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.920203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.932758] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.966167] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.973886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.982099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.990607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.998465] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.005443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.013604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.020836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.030714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.039748] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.046687] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.054420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.073849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.081629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.089558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.098729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.106502] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.113094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.120806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.128486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.137771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.152488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.167613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.175522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.183851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.192323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.200307] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.206678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.213834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.222306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.229607] chnl_net:caif_netlink_parms(): no params data found [ 50.243455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.254159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.265068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.278475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.287024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.295087] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.301499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.308339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.316914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.324610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.334203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.343607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.353244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.361478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.369262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.381365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.389110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.399925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.408005] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.424811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.433552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.441591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.449273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.457004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.464850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.471867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.489768] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.496167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.518746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.529074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.543697] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.553089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.561050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.568646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.576752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.584364] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.591271] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.598117] device bridge_slave_0 entered promiscuous mode [ 50.604868] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.612262] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.619180] device bridge_slave_1 entered promiscuous mode [ 50.654962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.671364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.679722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.699157] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.709388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.720786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.728299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.736407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.744273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.752687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.760286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.768957] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.789095] chnl_net:caif_netlink_parms(): no params data found [ 50.807830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.817360] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.823827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.832864] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.839985] team0: Port device team_slave_0 added [ 50.846444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.854616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.868193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.881070] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.887099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.895189] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.902982] team0: Port device team_slave_1 added [ 50.926970] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.937061] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.944991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.955514] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.968241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.994413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.001689] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.009286] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.016875] device bridge_slave_0 entered promiscuous mode [ 51.042929] FAULT_INJECTION: forcing a failure. [ 51.042929] name failslab, interval 1, probability 0, space 0, times 1 [ 51.054574] CPU: 0 PID: 6823 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 51.062370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.071710] Call Trace: [ 51.074280] dump_stack+0xf7/0x13b [ 51.077848] should_fail.cold.3+0x105/0x14b [ 51.082153] should_failslab+0xba/0xf0 [ 51.086028] __kmalloc+0x2e8/0x7b0 [ 51.089756] ? tls_push_record+0xf6/0x14c0 [ 51.093980] tls_push_record+0xf6/0x14c0 [ 51.098030] tls_sw_sendpage+0x443/0xc50 [ 51.102215] ? tls_sw_sendmsg+0x10a0/0x10a0 [ 51.106568] ? pipe_lock+0x4f/0x60 [ 51.110095] inet_sendpage+0x122/0x600 [ 51.113967] ? kernel_sendpage+0xd0/0xd0 [ 51.118004] kernel_sendpage+0x60/0xd0 [ 51.121920] ? pipe_lock+0x4f/0x60 [ 51.125484] sock_sendpage+0x6d/0xd0 [ 51.129178] pipe_to_sendpage+0x206/0x420 [ 51.133373] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.138263] __splice_from_pipe+0x2cb/0x720 [ 51.142653] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.147538] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.152372] splice_from_pipe+0xb5/0x110 [ 51.156421] ? selinux_file_permission+0x2d1/0x3e0 [ 51.161329] ? splice_shrink_spd+0xa0/0xa0 [ 51.165545] ? rw_verify_area+0xb8/0x2b0 [ 51.169614] generic_splice_sendpage+0x10/0x20 [ 51.174211] SyS_splice+0x6e9/0x1580 [ 51.177918] ? __sb_end_write+0xa4/0xd0 [ 51.181874] ? compat_SyS_vmsplice+0x1e0/0x1e0 [ 51.186437] ? do_syscall_64+0x4c/0x5b0 [ 51.190394] ? compat_SyS_vmsplice+0x1e0/0x1e0 [ 51.194976] do_syscall_64+0x1c7/0x5b0 [ 51.198843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.203731] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.209171] RIP: 0033:0x459a29 [ 51.212349] RSP: 002b:00007f33a17f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 51.220052] RAX: ffffffffffffffda RBX: 00007f33a17f8c90 RCX: 0000000000459a29 [ 51.227557] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.234815] RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 [ 51.242069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33a17f96d4 [ 51.249335] R13: 00000000004c9222 R14: 00000000004df820 R15: 0000000000000005 [ 51.273059] device hsr_slave_0 entered promiscuous mode [ 51.330301] device hsr_slave_1 entered promiscuous mode [ 51.370524] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.377474] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.389501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.396102] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.404263] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.412756] device bridge_slave_1 entered promiscuous mode [ 51.428154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.439070] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.451051] kasan: CONFIG_KASAN_INLINE enabled [ 51.455815] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 51.481063] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 51.487380] Modules linked in: [ 51.490562] CPU: 0 PID: 6823 Comm: syz-executor.3 Not tainted 4.14.162-syzkaller #0 [ 51.490682] kobject: 'batman_adv' (ffff8880a9b45580): kobject_add_internal: parent: 'bond_slave_1', set: '' [ 51.498479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.498484] task: ffff8880874a23c0 task.stack: ffff88808bdf8000 [ 51.498495] RIP: 0010:scatterwalk_copychunks+0x3c5/0x690 [ 51.498497] RSP: 0018:ffff88808bdff610 EFLAGS: 00010202 [ 51.498501] RAX: 0000000000000000 RBX: ffff88808ded44e4 RCX: 000000000000401d [ 51.498503] RDX: 0000000000000002 RSI: 0000000000000010 RDI: ffff88808ded44d8 [ 51.498506] RBP: ffff88808bdff670 R08: ffffed1011d5b804 R09: ffffed1011d5b800 [ 51.498508] R10: 0000000000000000 R11: ffff88808eadc01c R12: 0000000000001000 [ 51.498510] R13: ffff88808bdff6b0 R14: 000000000000001d R15: dffffc0000000000 [ 51.498514] FS: 00007f33a17f9700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 51.498519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.585593] CR2: 00007ffc06219c2c CR3: 00000000a1663000 CR4: 00000000001406f0 [ 51.592940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.600199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.607467] Call Trace: [ 51.610050] scatterwalk_map_and_copy+0x10d/0x1a0 [ 51.614875] ? scatterwalk_copychunks+0x690/0x690 [ 51.619698] ? rcu_read_lock_sched_held+0x108/0x120 [ 51.624697] ? kernel_fpu_end+0x9b/0x110 [ 51.628741] ? kernel_fpu_begin+0x170/0x170 [ 51.633041] gcmaes_encrypt.constprop.14+0x2d5/0xae0 [ 51.638148] generic_gcmaes_encrypt+0xf8/0x13d [ 51.642722] ? helper_rfc4106_encrypt+0x430/0x430 [ 51.647551] ? __kmalloc+0x36d/0x7b0 [ 51.651254] ? sk_stream_wait_memory+0x840/0xd00 [ 51.656011] gcmaes_wrapper_encrypt+0xe0/0x140 [ 51.660596] tls_push_record+0x8e6/0x14c0 [ 51.664732] tls_sw_sendpage+0x443/0xc50 [ 51.668792] ? tls_sw_sendmsg+0x10a0/0x10a0 [ 51.673097] ? pipe_lock+0x4f/0x60 [ 51.676622] inet_sendpage+0x122/0x600 [ 51.680489] ? kernel_sendpage+0xd0/0xd0 [ 51.684553] kernel_sendpage+0x60/0xd0 [ 51.688440] ? pipe_lock+0x4f/0x60 [ 51.692039] sock_sendpage+0x6d/0xd0 [ 51.695748] pipe_to_sendpage+0x206/0x420 [ 51.699886] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.704711] __splice_from_pipe+0x2cb/0x720 [ 51.709085] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.714046] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.718891] splice_from_pipe+0xb5/0x110 [ 51.722948] ? selinux_file_permission+0x2d1/0x3e0 [ 51.727873] ? splice_shrink_spd+0xa0/0xa0 [ 51.732101] ? rw_verify_area+0xb8/0x2b0 [ 51.736140] generic_splice_sendpage+0x10/0x20 [ 51.740698] SyS_splice+0x6e9/0x1580 [ 51.744388] ? __sb_end_write+0xa4/0xd0 [ 51.748351] ? compat_SyS_vmsplice+0x1e0/0x1e0 [ 51.753113] ? do_syscall_64+0x4c/0x5b0 [ 51.757123] ? compat_SyS_vmsplice+0x1e0/0x1e0 [ 51.761696] do_syscall_64+0x1c7/0x5b0 [ 51.765589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.770419] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.775703] RIP: 0033:0x459a29 [ 51.778882] RSP: 002b:00007f33a17f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 51.786570] RAX: ffffffffffffffda RBX: 00007f33a17f8c90 RCX: 0000000000459a29 [ 51.793840] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.801165] RBP: 000000000075bf20 R08: 0000000100000000 R09: 0000000000000000 [ 51.808447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33a17f96d4 [ 51.815721] R13: 00000000004c9222 R14: 00000000004df820 R15: 0000000000000005 [ 51.822986] Code: ff ff 48 89 c7 e8 dc ef 26 00 4c 89 ea 48 c1 ea 03 42 80 3c 3a 00 0f 85 84 01 00 00 48 8d 70 10 49 89 45 00 48 89 f2 48 c1 ea 03 <42> 0f b6 14 3a 84 d2 74 09 80 fa 03 0f 8e 4d 02 00 00 48 8b 5d [ 51.842047] RIP: scatterwalk_copychunks+0x3c5/0x690 RSP: ffff88808bdff610 [ 51.849983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.857194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.860236] ---[ end trace 749c36773e5a4361 ]--- [ 51.865755] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.874957] Kernel panic - not syncing: Fatal exception [ 51.879616] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.881644] Kernel Offset: disabled [ 51.891165] Rebooting in 86400 seconds..