[ 38.960985] IPVS: ftp: loaded support on port[0] = 21 [ 40.209020] can: request_module (can-proto-0) failed. [ 40.224376] can: request_module (can-proto-0) failed. [ 40.233837] can: request_module (can-proto-0) failed. [ 40.413984] audit: type=1400 audit(1585085746.068:37): avc: denied { create } for pid=6822 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 40.437666] audit: type=1400 audit(1585085746.068:38): avc: denied { create } for pid=6822 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.461636] audit: type=1400 audit(1585085746.068:39): avc: denied { create } for pid=6822 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 40.632215] random: sshd: uninitialized urandom read (32 bytes read) [ 41.436294] random: sshd: uninitialized urandom read (32 bytes read) [ 41.618621] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. 2020/03/24 21:35:53 parsed 1 programs 2020/03/24 21:35:53 executed programs: 0 [ 47.748486] audit: type=1400 audit(1585085753.398:40): avc: denied { map } for pid=6894 comm="syz-execprog" path="/root/syzkaller-shm952168573" dev="sda1" ino=16494 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 47.931025] IPVS: ftp: loaded support on port[0] = 21 [ 48.707894] IPVS: ftp: loaded support on port[0] = 21 [ 48.752169] chnl_net:caif_netlink_parms(): no params data found [ 48.793508] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.800140] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.807163] device bridge_slave_0 entered promiscuous mode [ 48.815432] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.823527] IPVS: ftp: loaded support on port[0] = 21 [ 48.830569] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.838272] device bridge_slave_1 entered promiscuous mode [ 48.860669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.873578] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.909744] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.917473] team0: Port device team_slave_0 added [ 48.928166] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.935580] team0: Port device team_slave_1 added [ 48.943693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.953338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.964857] chnl_net:caif_netlink_parms(): no params data found [ 49.042216] device hsr_slave_0 entered promiscuous mode [ 49.100359] device hsr_slave_1 entered promiscuous mode [ 49.183923] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.192995] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.228332] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.234851] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.242806] device bridge_slave_0 entered promiscuous mode [ 49.249877] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.256757] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.263996] device bridge_slave_1 entered promiscuous mode [ 49.264696] IPVS: ftp: loaded support on port[0] = 21 [ 49.278177] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.284869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.291982] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.298450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.356837] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.367618] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.383705] chnl_net:caif_netlink_parms(): no params data found [ 49.411622] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.418910] team0: Port device team_slave_0 added [ 49.426841] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.434639] team0: Port device team_slave_1 added [ 49.440209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.452871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.552112] device hsr_slave_0 entered promiscuous mode [ 49.590519] device hsr_slave_1 entered promiscuous mode [ 49.645166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.652118] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.659388] device bridge_slave_0 entered promiscuous mode [ 49.670329] IPVS: ftp: loaded support on port[0] = 21 [ 49.673848] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.691849] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.698259] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.705929] device bridge_slave_1 entered promiscuous mode [ 49.719003] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.763700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.774703] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.783763] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.791541] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.809103] chnl_net:caif_netlink_parms(): no params data found [ 49.861388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.868517] team0: Port device team_slave_0 added [ 49.876926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.893562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.903332] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.909929] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.917196] device bridge_slave_0 entered promiscuous mode [ 49.924140] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.931766] team0: Port device team_slave_1 added [ 49.937236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.948181] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.956078] IPVS: ftp: loaded support on port[0] = 21 [ 49.960277] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.968294] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.975817] device bridge_slave_1 entered promiscuous mode [ 49.991209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.015175] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.026082] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.084217] device hsr_slave_0 entered promiscuous mode [ 50.130420] device hsr_slave_1 entered promiscuous mode [ 50.211258] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.219137] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.227704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.236178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.248509] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.255133] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.269964] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.297833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.317813] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.325720] team0: Port device team_slave_0 added [ 50.331488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.339229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.348834] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.355401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.364497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.401644] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.408896] team0: Port device team_slave_1 added [ 50.416292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.424306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.432303] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.438918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.448062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.460228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.469578] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.478833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.491028] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.497470] chnl_net:caif_netlink_parms(): no params data found [ 50.507581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.522475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.593580] device hsr_slave_0 entered promiscuous mode [ 50.630454] device hsr_slave_1 entered promiscuous mode [ 50.690495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.699063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.707171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.715552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.725710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.741638] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.749480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.758559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.768783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.779860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.791039] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.799021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.812974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.824124] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.831151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.839031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.847024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.854802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.862637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.897993] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.904846] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.913814] device bridge_slave_0 entered promiscuous mode [ 50.922243] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.928617] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.935963] device bridge_slave_1 entered promiscuous mode [ 50.949391] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 50.981366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.990778] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.002839] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.010797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.035199] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.055650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.062632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.069856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.078925] team0: Port device team_slave_0 added [ 51.084969] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.092752] team0: Port device team_slave_1 added [ 51.098827] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.115180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.122433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.140906] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.147491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.164474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.171642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.178863] chnl_net:caif_netlink_parms(): no params data found [ 51.263313] device hsr_slave_0 entered promiscuous mode [ 51.282872] device hsr_slave_1 entered promiscuous mode [ 51.322214] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.329056] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.345268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.353164] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.375781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.382085] ------------[ cut here ]------------ [ 51.387149] kernel BUG at include/linux/scatterlist.h:124! [ 51.388106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.397723] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 51.404739] Modules linked in: [ 51.405839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.407936] CPU: 0 PID: 6971 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 51.422012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.431529] task: ffff88807dffe140 task.stack: ffff888093758000 [ 51.437583] RIP: 0010:gcmaes_decrypt.constprop.13+0x8e9/0xe20 [ 51.443454] RSP: 0018:ffff88809375f928 EFLAGS: 00010293 [ 51.449009] RAX: ffffea00022dbd82 RBX: ffff8880929a1148 RCX: ffff8880929a0d90 [ 51.456411] RDX: 0000000087654321 RSI: 4f4a414d00000003 RDI: 1ffff110125341b2 [ 51.463771] RBP: ffff88809375fa20 R08: 0000000000000007 R09: 0000000000000000 [ 51.471155] R10: ffffed10126ebf4b R11: ffff88809375fa5b R12: 0000000000000010 [ 51.478470] R13: ffff8880a8a54500 R14: ffff8880a8a54508 R15: ffff8880929a1108 [ 51.485885] FS: 00007f4c7c166700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 51.494515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.500617] CR2: 0000000020c18000 CR3: 000000007de34000 CR4: 00000000001406f0 [ 51.507901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.515315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.522739] Call Trace: [ 51.525549] ? aesni_gcm_enc_avx2+0x130/0x130 [ 51.530396] ? trace_hardirqs_on_caller+0x40c/0x580 [ 51.535438] ? trace_hardirqs_on+0xd/0x10 [ 51.539583] generic_gcmaes_decrypt+0xf8/0x140 [ 51.544159] ? helper_rfc4106_decrypt+0x430/0x430 [ 51.548990] ? __local_bh_enable_ip+0x9c/0x180 [ 51.553563] gcmaes_wrapper_decrypt+0x141/0x1c0 [ 51.558224] aead_recvmsg+0x1171/0x2660 [ 51.562195] ? aead_release+0x50/0x50 [ 51.565985] ? _raw_spin_unlock_bh+0x30/0x40 [ 51.570383] ? release_sock+0x11f/0x180 [ 51.574346] ? aead_check_key.isra.5+0x54/0x1e0 [ 51.579000] ? aead_sendpage_nokey+0x80/0x80 [ 51.583396] aead_recvmsg_nokey+0x50/0x60 [ 51.587528] sock_recvmsg+0xb7/0xf0 [ 51.591193] SYSC_recvfrom+0x302/0x3d0 [ 51.595083] ? kernel_recvmsg+0x130/0x130 [ 51.599231] ? __might_fault+0xf1/0x1b0 [ 51.603258] ? lock_downgrade+0x7f0/0x7f0 [ 51.607825] ? nsecs_to_jiffies+0x20/0x20 [ 51.612132] ? SyS_clock_gettime+0x115/0x160 [ 51.616703] ? SyS_clock_settime+0x1a0/0x1a0 [ 51.621171] ? move_addr_to_kernel+0x20/0x20 [ 51.625746] ? do_syscall_64+0x4c/0x5b0 [ 51.630044] ? SyS_send+0x20/0x20 [ 51.633491] SyS_recvfrom+0x9/0x10 [ 51.637217] do_syscall_64+0x1c7/0x5b0 [ 51.641112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.646903] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.652079] RIP: 0033:0x45a219 [ 51.655251] RSP: 002b:00007f4c7c165c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 51.663063] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045a219 [ 51.670404] RDX: 0000000100000205 RSI: 0000000020003240 RDI: 0000000000000004 [ 51.677824] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000415 [ 51.685247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c7c1666d4 [ 51.692525] R13: 00000000004c7c34 R14: 00000000004ddd38 R15: 00000000ffffffff [ 51.700179] Code: 87 04 00 00 41 f6 44 24 08 01 0f 84 c6 fd ff ff 0f 0b e8 b4 ef d1 ff e9 1b fe ff ff 0f 0b 0f 0b 0f 0b 0f 0b e8 a2 ef d1 ff eb 93 <0f> 0b b8 f4 ff ff ff e9 54 fa ff ff 0f 0b 48 b8 00 00 00 00 00 [ 51.720247] RIP: gcmaes_decrypt.constprop.13+0x8e9/0xe20 RSP: ffff88809375f928 [ 51.728364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.729805] ---[ end trace c00933c4719b190c ]--- [ 51.738549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.740954] Kernel panic - not syncing: Fatal exception [ 51.748678] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.755612] Kernel Offset: disabled [ 51.765985] Rebooting in 86400 seconds..