[ 41.578655] random: cc1: uninitialized urandom read (8 bytes read) [ 42.100881] IPVS: ftp: loaded support on port[0] = 21 [ 43.258379] can: request_module (can-proto-0) failed. [ 43.269378] can: request_module (can-proto-0) failed. [ 43.422556] audit: type=1400 audit(1578686896.602:37): avc: denied { create } for pid=6818 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.446786] audit: type=1400 audit(1578686896.602:38): avc: denied { create } for pid=6818 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.470762] audit: type=1400 audit(1578686896.602:39): avc: denied { create } for pid=6818 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 43.754440] random: sshd: uninitialized urandom read (32 bytes read) [ 44.488245] random: sshd: uninitialized urandom read (32 bytes read) [ 44.663872] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. 2020/01/10 20:08:24 parsed 1 programs 2020/01/10 20:08:24 executed programs: 0 [ 51.505943] audit: type=1400 audit(1578686904.682:40): avc: denied { map } for pid=6891 comm="syz-execprog" path="/root/syzkaller-shm802508940" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 51.740902] IPVS: ftp: loaded support on port[0] = 21 [ 52.566322] chnl_net:caif_netlink_parms(): no params data found [ 52.581739] IPVS: ftp: loaded support on port[0] = 21 [ 52.608005] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.615026] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.622167] device bridge_slave_0 entered promiscuous mode [ 52.635540] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.642036] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.649034] device bridge_slave_1 entered promiscuous mode [ 52.669497] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.680568] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.694816] IPVS: ftp: loaded support on port[0] = 21 [ 52.706923] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.714428] team0: Port device team_slave_0 added [ 52.722453] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.729550] team0: Port device team_slave_1 added [ 52.734959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.744551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.811830] device hsr_slave_0 entered promiscuous mode [ 52.870323] device hsr_slave_1 entered promiscuous mode [ 52.912217] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.932647] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.962562] chnl_net:caif_netlink_parms(): no params data found [ 52.992646] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.999328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.007057] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.013457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.026760] IPVS: ftp: loaded support on port[0] = 21 [ 53.062600] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.068984] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.076017] device bridge_slave_0 entered promiscuous mode [ 53.083180] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.089532] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.096976] device bridge_slave_1 entered promiscuous mode [ 53.158840] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.168751] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.176504] chnl_net:caif_netlink_parms(): no params data found [ 53.219462] IPVS: ftp: loaded support on port[0] = 21 [ 53.225604] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.233101] team0: Port device team_slave_0 added [ 53.240811] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.256438] team0: Port device team_slave_1 added [ 53.262345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.269739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.303553] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.310525] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.317491] device bridge_slave_0 entered promiscuous mode [ 53.325250] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.331793] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.338662] device bridge_slave_1 entered promiscuous mode [ 53.412815] device hsr_slave_0 entered promiscuous mode [ 53.480335] device hsr_slave_1 entered promiscuous mode [ 53.541961] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.586169] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.597873] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.607023] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.623253] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.640849] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.654748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.672845] chnl_net:caif_netlink_parms(): no params data found [ 53.692201] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.700287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.706852] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.716313] team0: Port device team_slave_0 added [ 53.716971] IPVS: ftp: loaded support on port[0] = 21 [ 53.724523] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.733891] team0: Port device team_slave_1 added [ 53.745408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.759654] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.767322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.776216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.784044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.809258] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.817570] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.834970] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.841655] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.848648] device bridge_slave_0 entered promiscuous mode [ 53.855494] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.862036] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.869036] device bridge_slave_1 entered promiscuous mode [ 53.913105] device hsr_slave_0 entered promiscuous mode [ 53.950463] device hsr_slave_1 entered promiscuous mode [ 54.010737] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.027108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.035570] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.052428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.060617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.068261] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.074633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.092564] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.102392] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.118774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.162226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.170297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.177954] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.184480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.195746] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.210321] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.217549] team0: Port device team_slave_0 added [ 54.235265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.251659] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.258819] team0: Port device team_slave_1 added [ 54.264325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.285078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.295197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.309106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.324492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.333927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.357215] chnl_net:caif_netlink_parms(): no params data found [ 54.367553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.375479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.384900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.396626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.453233] device hsr_slave_0 entered promiscuous mode [ 54.490332] device hsr_slave_1 entered promiscuous mode [ 54.533512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.540860] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.547778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.557655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.572673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.580671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.593061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.607271] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.616225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.623950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.636425] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.647181] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.656182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.677673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.686912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.693811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.701787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.712282] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.718362] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.729329] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.752703] chnl_net:caif_netlink_parms(): no params data found [ 54.771650] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.777682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.786655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.793700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.802223] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.808336] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.822225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.831796] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.861264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.869773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.876984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.885648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.893724] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.900198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.907087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.915140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.922840] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.929173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.936002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.943820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.951424] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.957757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.965644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.977712] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.984773] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.991756] device bridge_slave_0 entered promiscuous mode [ 54.998176] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.004912] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.012155] device bridge_slave_0 entered promiscuous mode [ 55.019231] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.025906] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.032911] device bridge_slave_1 entered promiscuous mode [ 55.039332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.049188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.056276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.064377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.072190] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.078518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.091856] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.098282] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.106227] device bridge_slave_1 entered promiscuous mode [ 55.118504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.134323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.149965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.157946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.166994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.179112] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.203618] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.212265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.221251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.228056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.236164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.245815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.254149] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.263462] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.272310] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.295481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.303060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.313350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.321089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.328588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.338326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.356359] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.363497] team0: Port device team_slave_0 added [ 55.371416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.380982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.388492] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.395132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.403287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.410412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.418004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.425646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.433489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.442222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.449708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.459027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.467607] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.475230] team0: Port device team_slave_0 added [ 55.480730] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.487736] team0: Port device team_slave_1 added [ 55.496654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.504965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.512212] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.519398] team0: Port device team_slave_1 added [ 55.526300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.533912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.542430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.550977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.558396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.566490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.574004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.582465] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.589901] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.598331] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.607405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.615209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.629410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.637314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.644787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.652776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.666252] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.674525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.703315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.711210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.719073] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.725479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.732793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.782279] device hsr_slave_0 entered promiscuous mode [ 55.820504] device hsr_slave_1 entered promiscuous mode [ 55.902163] device hsr_slave_0 entered promiscuous mode [ 55.940403] device hsr_slave_1 entered promiscuous mode [ 55.980534] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.987808] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.997913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.006426] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.022861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.030732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.038255] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.044648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.054577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.064307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.072880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.079824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.091269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.101055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.115621] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.122501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.130381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.138124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.145863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.154637] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.168136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.198303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.206808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.226991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.234621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.247180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.254866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.269806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.279516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.287400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.296202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.306637] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.313259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.330143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.339442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.348585] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.375319] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.384441] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.397432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.406576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.424496] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.436435] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.450384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.466648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.487800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.498631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.509432] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.516193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.529229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.537032] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.543435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.551353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.559117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.566986] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.573386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.580468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.589231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.598336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.605217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.614280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.621522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.631431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.639146] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 2020/01/10 20:08:29 executed programs: 10 [ 56.648606] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.657550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.667849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.708699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.728197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.736886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.754211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.768500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.776724] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.783112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.789986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.797005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.806895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.818138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.825601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.833796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.841949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.849697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.857544] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.863947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.873009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.883138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.893655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.904053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.914504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.921765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.929351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.938024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.947554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.963915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.984797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.995232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.003413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.011069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.021816] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.027881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.036232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.044431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.054712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.064698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.075336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.084981] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.094964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.103011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.110781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.118283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.128059] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.137809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.148640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.165963] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.183048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.251388] ================================================================== [ 59.258938] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 59.266162] Read of size 4 at addr ffff88809df7d51c by task syz-executor.2/7142 [ 59.273593] [ 59.275207] CPU: 1 PID: 7142 Comm: syz-executor.2 Not tainted 4.14.163-syzkaller #0 [ 59.282983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.292344] Call Trace: [ 59.294920] dump_stack+0xf7/0x13b [ 59.298447] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 59.303271] print_address_description.cold.7+0x9/0x1c9 [ 59.308626] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 59.313461] kasan_report.cold.8+0x11a/0x2d3 [ 59.317861] __asan_report_load4_noabort+0x14/0x20 [ 59.322776] __vb2_perform_fileio+0x10fd/0x12b0 [ 59.327425] ? vb2_core_poll+0x730/0x730 [ 59.331468] vb2_read+0xf/0x20 [ 59.334644] vb2_fop_read+0x1b6/0x390 [ 59.338429] ? vb2_fop_write+0x390/0x390 [ 59.342480] v4l2_read+0x133/0x240 [ 59.346001] do_iter_read+0x35e/0x570 [ 59.349778] ? dup_iter+0x250/0x250 [ 59.353387] vfs_readv+0xb6/0x110 [ 59.356819] ? compat_rw_copy_check_uvector+0x310/0x310 [ 59.362159] ? __fget+0x1ad/0x2f0 [ 59.365602] ? lock_downgrade+0x7f0/0x7f0 [ 59.369731] ? __fget+0x1ca/0x2f0 [ 59.373160] ? do_preadv+0x250/0x250 [ 59.376853] ? __fget_light+0x166/0x200 [ 59.380807] do_readv+0x10d/0x320 [ 59.384238] ? vfs_readv+0x110/0x110 [ 59.387952] ? do_syscall_64+0x4c/0x5b0 [ 59.391960] ? do_preadv+0x250/0x250 [ 59.395656] SyS_readv+0xb/0x10 [ 59.398937] do_syscall_64+0x1c7/0x5b0 [ 59.402817] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.407640] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 59.412821] RIP: 0033:0x459829 [ 59.415998] RSP: 002b:00007f854150ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 59.423691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 59.430992] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 59.438290] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 59.445579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f854150f6d4 [ 59.452828] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 00000000ffffffff [ 59.460083] [ 59.461688] Allocated by task 7131: [ 59.465296] save_stack_trace+0x16/0x20 [ 59.469371] save_stack+0x43/0xd0 [ 59.472801] kasan_kmalloc+0xc7/0xe0 [ 59.476542] kmem_cache_alloc_trace+0x152/0x7a0 [ 59.481201] __vb2_init_fileio+0x160/0xaf0 [ 59.485413] __vb2_perform_fileio+0xa9f/0x12b0 [ 59.489995] vb2_read+0xf/0x20 [ 59.493172] vb2_fop_read+0x1b6/0x390 [ 59.496947] v4l2_read+0x133/0x240 [ 59.500550] do_iter_read+0x35e/0x570 [ 59.504326] vfs_readv+0xb6/0x110 [ 59.507771] do_readv+0x10d/0x320 [ 59.511214] SyS_readv+0xb/0x10 [ 59.514476] do_syscall_64+0x1c7/0x5b0 [ 59.518351] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 59.523517] [ 59.525137] Freed by task 7133: [ 59.528399] save_stack_trace+0x16/0x20 [ 59.532392] save_stack+0x43/0xd0 [ 59.535821] kasan_slab_free+0x71/0xc0 [ 59.539687] kfree+0xcc/0x270 [ 59.542823] __vb2_cleanup_fileio+0xee/0x140 [ 59.547217] vb2_core_queue_release+0xf/0x70 [ 59.551673] _vb2_fop_release+0x1ac/0x280 [ 59.555800] vb2_fop_release+0x66/0xd0 [ 59.559666] vivid_fop_release+0x15f/0x3a0 [ 59.563966] v4l2_release+0xeb/0x1a0 [ 59.567664] __fput+0x232/0x750 [ 59.570935] ____fput+0x9/0x10 [ 59.574114] task_work_run+0xe5/0x170 [ 59.577899] exit_to_usermode_loop+0x16a/0x1b0 [ 59.582463] do_syscall_64+0x416/0x5b0 [ 59.586331] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 59.591496] [ 59.593113] The buggy address belongs to the object at ffff88809df7d200 [ 59.593113] which belongs to the cache kmalloc-1024 of size 1024 [ 59.605950] The buggy address is located 796 bytes inside of [ 59.605950] 1024-byte region [ffff88809df7d200, ffff88809df7d600) [ 59.617931] The buggy address belongs to the page: [ 59.622849] page:ffffea000277df00 count:1 mapcount:0 mapping:ffff88809df7c000 index:0x0 compound_mapcount: 0 [ 59.632910] flags: 0x1fffc0000008100(slab|head) [ 59.637559] raw: 01fffc0000008100 ffff88809df7c000 0000000000000000 0000000100000007 [ 59.645444] raw: ffffea0002aa6b20 ffffea000298dca0 ffff8880aa800ac0 0000000000000000 [ 59.653320] page dumped because: kasan: bad access detected [ 59.659209] [ 59.660905] Memory state around the buggy address: [ 59.665840] ffff88809df7d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.673187] ffff88809df7d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.680629] >ffff88809df7d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.687979] ^ [ 59.692105] ffff88809df7d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.699447] ffff88809df7d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.706783] ================================================================== [ 59.714123] Disabling lock debugging due to kernel taint [ 59.720956] Kernel panic - not syncing: panic_on_warn set ... [ 59.720956] [ 59.728342] CPU: 1 PID: 7142 Comm: syz-executor.2 Tainted: G B 4.14.163-syzkaller #0 [ 59.737404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.746744] Call Trace: [ 59.749316] dump_stack+0xf7/0x13b [ 59.752892] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 59.757760] panic+0x1b0/0x358 [ 59.761045] ? add_taint.cold.5+0x11/0x11 [ 59.765178] ? ___preempt_schedule+0x16/0x18 [ 59.769580] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 59.774467] kasan_end_report+0x47/0x4f [ 59.778421] kasan_report.cold.8+0x76/0x2d3 [ 59.782723] __asan_report_load4_noabort+0x14/0x20 [ 59.787630] __vb2_perform_fileio+0x10fd/0x12b0 [ 59.792292] ? vb2_core_poll+0x730/0x730 [ 59.796333] vb2_read+0xf/0x20 [ 59.799502] vb2_fop_read+0x1b6/0x390 [ 59.803287] ? vb2_fop_write+0x390/0x390 [ 59.807336] v4l2_read+0x133/0x240 [ 59.810877] do_iter_read+0x35e/0x570 [ 59.814664] ? dup_iter+0x250/0x250 [ 59.818271] vfs_readv+0xb6/0x110 [ 59.821701] ? compat_rw_copy_check_uvector+0x310/0x310 [ 59.827050] ? __fget+0x1ad/0x2f0 [ 59.830498] ? lock_downgrade+0x7f0/0x7f0 [ 59.834627] ? __fget+0x1ca/0x2f0 [ 59.838057] ? do_preadv+0x250/0x250 [ 59.841758] ? __fget_light+0x166/0x200 [ 59.845732] do_readv+0x10d/0x320 [ 59.849191] ? vfs_readv+0x110/0x110 [ 59.852907] ? do_syscall_64+0x4c/0x5b0 [ 59.856877] ? do_preadv+0x250/0x250 [ 59.860571] SyS_readv+0xb/0x10 [ 59.863846] do_syscall_64+0x1c7/0x5b0 [ 59.867716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.872543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 59.877741] RIP: 0033:0x459829 [ 59.880920] RSP: 002b:00007f854150ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 59.888877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 59.896169] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 59.903448] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 59.910817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f854150f6d4 [ 59.918275] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 00000000ffffffff [ 59.926821] Kernel Offset: disabled [ 59.930480] Rebooting in 86400 seconds..