[ 37.910905] IPVS: ftp: loaded support on port[0] = 21 [ 39.093026] can: request_module (can-proto-0) failed. [ 39.104397] can: request_module (can-proto-0) failed. [ 39.113501] can: request_module (can-proto-0) failed. [ 39.283778] audit: type=1400 audit(1580265746.390:37): avc: denied { create } for pid=6817 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 39.307416] audit: type=1400 audit(1580265746.390:38): avc: denied { create } for pid=6817 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 39.331727] audit: type=1400 audit(1580265746.390:39): avc: denied { create } for pid=6817 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 39.481335] random: sshd: uninitialized urandom read (32 bytes read) [ 40.333449] random: sshd: uninitialized urandom read (32 bytes read) [ 40.524244] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.11' (ECDSA) to the list of known hosts. 2020/01/29 02:42:33 parsed 1 programs 2020/01/29 02:42:33 executed programs: 0 [ 46.402138] audit: type=1400 audit(1580265753.500:40): avc: denied { map } for pid=6891 comm="syz-execprog" path="/root/syzkaller-shm038337408" dev="sda1" ino=16492 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 46.710940] IPVS: ftp: loaded support on port[0] = 21 [ 47.465767] IPVS: ftp: loaded support on port[0] = 21 [ 47.494178] chnl_net:caif_netlink_parms(): no params data found [ 47.538144] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.546571] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.554023] device bridge_slave_0 entered promiscuous mode [ 47.563568] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.570118] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.577207] device bridge_slave_1 entered promiscuous mode [ 47.588727] IPVS: ftp: loaded support on port[0] = 21 [ 47.598159] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.608264] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.628625] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.636194] team0: Port device team_slave_0 added [ 47.643167] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.650407] team0: Port device team_slave_1 added [ 47.655718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.668311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.741888] device hsr_slave_0 entered promiscuous mode [ 47.780360] device hsr_slave_1 entered promiscuous mode [ 47.842317] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.871945] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.895499] chnl_net:caif_netlink_parms(): no params data found [ 47.905194] IPVS: ftp: loaded support on port[0] = 21 [ 47.938360] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.945076] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.954253] device bridge_slave_0 entered promiscuous mode [ 47.961395] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.967823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.974727] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.981285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.996285] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.003062] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.010674] device bridge_slave_1 entered promiscuous mode [ 48.074366] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.085356] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.098025] chnl_net:caif_netlink_parms(): no params data found [ 48.126507] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.134490] team0: Port device team_slave_0 added [ 48.156198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.165517] team0: Port device team_slave_1 added [ 48.166136] IPVS: ftp: loaded support on port[0] = 21 [ 48.170877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.190542] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.196941] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.204066] device bridge_slave_0 entered promiscuous mode [ 48.210910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.233041] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.239872] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.247079] device bridge_slave_1 entered promiscuous mode [ 48.311989] device hsr_slave_0 entered promiscuous mode [ 48.350312] device hsr_slave_1 entered promiscuous mode [ 48.392311] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.430461] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.445650] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.461853] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.467952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.476838] chnl_net:caif_netlink_parms(): no params data found [ 48.494758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.514632] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.528306] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.535378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.542011] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.548349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.562513] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.569714] team0: Port device team_slave_0 added [ 48.588294] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.595070] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.602129] device bridge_slave_0 entered promiscuous mode [ 48.618869] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.625557] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.626408] IPVS: ftp: loaded support on port[0] = 21 [ 48.634608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.646075] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.653455] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.660614] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.668114] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.675081] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.683277] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.690912] team0: Port device team_slave_1 added [ 48.696471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.707856] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.714348] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.722866] device bridge_slave_1 entered promiscuous mode [ 48.742231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.753704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.777673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.785792] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.832046] device hsr_slave_0 entered promiscuous mode [ 48.870417] device hsr_slave_1 entered promiscuous mode [ 48.933114] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.941810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.949732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.957842] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.964238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.973575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.988845] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.996110] team0: Port device team_slave_0 added [ 49.023825] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.031016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.039261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.047297] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.053704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.062947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.074541] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.081877] team0: Port device team_slave_1 added [ 49.101958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.117548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.125493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.142016] chnl_net:caif_netlink_parms(): no params data found [ 49.152726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.160735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.232211] device hsr_slave_0 entered promiscuous mode [ 49.270321] device hsr_slave_1 entered promiscuous mode [ 49.332747] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.344258] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.355551] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.363088] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.374216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.381903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.407286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.418147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.425432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.433388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.455428] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.462213] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.469136] device bridge_slave_0 entered promiscuous mode [ 49.480931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.490275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.498187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.508102] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.516051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.524384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.532351] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.538706] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.546201] device bridge_slave_1 entered promiscuous mode [ 49.563294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.609336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.617102] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.635292] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.642691] team0: Port device team_slave_0 added [ 49.664711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.671665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.679950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.690488] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.697640] team0: Port device team_slave_1 added [ 49.707080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.715501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.723321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.731271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.741063] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.747091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.755232] chnl_net:caif_netlink_parms(): no params data found [ 49.769155] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.775627] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.784105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.826757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.835222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.843680] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.850233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.859605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.871015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.878894] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.923396] device hsr_slave_0 entered promiscuous mode [ 49.980553] device hsr_slave_1 entered promiscuous mode [ 50.040812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.047966] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.059889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.068016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.075810] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.082199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.090858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.099509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.111162] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.119070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.131164] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.137528] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.144850] device bridge_slave_0 entered promiscuous mode [ 50.151767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.159538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.167347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.174371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.181456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.189005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.196718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.205178] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.211530] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.221371] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 50.229931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.239546] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.246643] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.253715] device bridge_slave_1 entered promiscuous mode [ 50.272739] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.283220] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.290821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.298650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.308579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.315546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.325520] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.337227] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.355504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.363423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.372349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.382518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.395523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.405590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.413843] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.420387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.427414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.435074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.442975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.456978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.468589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.477279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.485813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.493933] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.500461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.508437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.516067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.524040] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.532736] team0: Port device team_slave_0 added [ 50.539641] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.547137] team0: Port device team_slave_1 added [ 50.553396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.562362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.568883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.584192] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.590557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.604375] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.619571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.630684] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 50.637649] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.645555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.653225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.660548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.668175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.675078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.684297] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.690843] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.732257] device hsr_slave_0 entered promiscuous mode [ 50.770302] device hsr_slave_1 entered promiscuous mode [ 50.831110] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.838194] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.846852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.858501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.868422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.880824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.888366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.904015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.911897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.919583] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.925981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.932993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.941005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.957867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.975826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.988019] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.995400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.002998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.009915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.018252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.026009] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.032522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.041445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.049133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.061174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.069025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.082666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.099598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.115927] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.122904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.131047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.139144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.148845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.165717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.182184] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.194018] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.201699] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.207834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.217266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.226112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.234340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.242686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.250921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.259271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.274272] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.285948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.299830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.309128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.318022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.328409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.335791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.344252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.351875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.359642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.367896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.375764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.383568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.391355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.398977] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.405374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.412904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.424027] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2020/01/29 02:42:38 executed programs: 9 [ 51.432650] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.441403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.451723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.465526] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 51.475264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.488872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.504652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.518138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.526951] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.530566] ================================================================== [ 51.533478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.540886] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 51.540892] Read of size 4 at addr ffff88808775d51c by task syz-executor.5/6979 [ 51.540893] [ 51.540900] CPU: 1 PID: 6979 Comm: syz-executor.5 Not tainted 4.14.168-syzkaller #0 [ 51.540903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.540906] Call Trace: [ 51.540917] dump_stack+0xf7/0x13b [ 51.540923] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 51.540932] print_address_description.cold.7+0x9/0x1c9 [ 51.552269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.554724] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 51.554734] kasan_report.cold.8+0x11a/0x2d3 [ 51.554740] __asan_report_load4_noabort+0x14/0x20 [ 51.554745] __vb2_perform_fileio+0x10fd/0x12b0 [ 51.554754] ? vb2_core_poll+0x730/0x730 [ 51.565115] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.571626] vb2_read+0xf/0x20 [ 51.571635] vb2_fop_read+0x1b6/0x390 [ 51.571642] ? vb2_fop_write+0x390/0x390 [ 51.571646] v4l2_read+0x133/0x240 [ 51.571655] __vfs_read+0xdb/0x840 [ 51.571661] ? vfs_copy_file_range+0xb40/0xb40 [ 51.571668] ? fsnotify+0x1160/0x1160 [ 51.571680] ? __inode_security_revalidate+0xd3/0x100 [ 51.581603] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.583620] ? selinux_file_permission+0x31f/0x3e0 [ 51.583630] ? security_file_permission+0x149/0x1c0 [ 51.583638] ? rw_verify_area+0xb8/0x2b0 [ 51.583646] vfs_read+0xf5/0x300 [ 51.592015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.594166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.597395] SyS_read+0x100/0x250 [ 51.608157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.609558] ? kernel_write+0x130/0x130 [ 51.609567] ? do_syscall_64+0x4c/0x5b0 [ 51.609576] ? kernel_write+0x130/0x130 [ 51.616848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.618936] do_syscall_64+0x1c7/0x5b0 [ 51.618942] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.618954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.626663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.627775] RIP: 0033:0x45a219 [ 51.627779] RSP: 002b:00007faf8a3e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.627786] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 51.627789] RDX: 000000000000008a RSI: 0000000020000100 RDI: 0000000000000005 [ 51.627791] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 51.627795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8a3e96d4 [ 51.636040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.637208] R13: 00000000004c7bb4 R14: 00000000004ddc18 R15: 00000000ffffffff [ 51.637222] [ 51.637226] Allocated by task 6979: [ 51.637237] save_stack_trace+0x16/0x20 [ 51.637244] save_stack+0x43/0xd0 [ 51.641274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.645203] kasan_kmalloc+0xc7/0xe0 [ 51.645210] kmem_cache_alloc_trace+0x152/0x7a0 [ 51.645217] __vb2_init_fileio+0x160/0xaf0 [ 51.645221] __vb2_perform_fileio+0xa9f/0x12b0 [ 51.645224] vb2_read+0xf/0x20 [ 51.645228] vb2_fop_read+0x1b6/0x390 [ 51.645232] v4l2_read+0x133/0x240 [ 51.645237] __vfs_read+0xdb/0x840 [ 51.645241] vfs_read+0xf5/0x300 [ 51.645248] SyS_read+0x100/0x250 [ 51.649594] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.653562] do_syscall_64+0x1c7/0x5b0 [ 51.653569] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.653571] [ 51.653574] Freed by task 6975: [ 51.653580] save_stack_trace+0x16/0x20 [ 51.653584] save_stack+0x43/0xd0 [ 51.653588] kasan_slab_free+0x71/0xc0 [ 51.653591] kfree+0xcc/0x270 [ 51.653597] __vb2_cleanup_fileio+0xee/0x140 [ 51.653600] vb2_core_queue_release+0xf/0x70 [ 51.653604] _vb2_fop_release+0x1ac/0x280 [ 51.653608] vb2_fop_release+0x66/0xd0 [ 51.653612] vivid_fop_release+0x15f/0x3a0 [ 51.653616] v4l2_release+0xeb/0x1a0 [ 51.653620] __fput+0x232/0x750 [ 51.653624] ____fput+0x9/0x10 [ 51.653628] task_work_run+0xe5/0x170 [ 51.653634] exit_to_usermode_loop+0x16a/0x1b0 [ 51.665883] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 51.667206] do_syscall_64+0x416/0x5b0 [ 51.667213] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.667216] [ 51.667220] The buggy address belongs to the object at ffff88808775d200 [ 51.667220] which belongs to the cache kmalloc-1024 of size 1024 [ 51.667224] The buggy address is located 796 bytes inside of [ 51.667224] 1024-byte region [ffff88808775d200, ffff88808775d600) [ 51.667228] The buggy address belongs to the page: [ 51.674707] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.678068] page:ffffea00021dd700 count:1 mapcount:0 mapping:ffff88808775c000 index:0x0 compound_mapcount: 0 [ 51.678078] flags: 0x1fffc0000008100(slab|head) [ 51.678084] raw: 01fffc0000008100 ffff88808775c000 0000000000000000 0000000100000007 [ 51.678089] raw: ffffea0002965320 ffffea00028f46a0 ffff8880aa800ac0 0000000000000000 [ 51.678093] page dumped because: kasan: bad access detected [ 51.688571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.690659] [ 51.690663] Memory state around the buggy address: [ 51.690668] ffff88808775d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.690671] ffff88808775d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.690674] >ffff88808775d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.690677] ^ [ 51.690680] ffff88808775d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.690684] ffff88808775d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.690686] ================================================================== [ 51.690688] Disabling lock debugging due to kernel taint [ 51.863733] Kernel panic - not syncing: panic_on_warn set ... [ 51.863733] [ 52.112542] CPU: 1 PID: 6979 Comm: syz-executor.5 Tainted: G B 4.14.168-syzkaller #0 [ 52.121656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.130999] Call Trace: [ 52.134047] dump_stack+0xf7/0x13b [ 52.137677] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 52.142511] panic+0x1b0/0x358 [ 52.145684] ? add_taint.cold.5+0x11/0x11 [ 52.149936] ? ___preempt_schedule+0x16/0x18 [ 52.154347] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 52.159179] kasan_end_report+0x47/0x4f [ 52.163148] kasan_report.cold.8+0x76/0x2d3 [ 52.167452] __asan_report_load4_noabort+0x14/0x20 [ 52.172364] __vb2_perform_fileio+0x10fd/0x12b0 [ 52.177030] ? vb2_core_poll+0x730/0x730 [ 52.182906] vb2_read+0xf/0x20 [ 52.186085] vb2_fop_read+0x1b6/0x390 [ 52.189993] ? vb2_fop_write+0x390/0x390 [ 52.194040] v4l2_read+0x133/0x240 [ 52.197563] __vfs_read+0xdb/0x840 [ 52.201101] ? vfs_copy_file_range+0xb40/0xb40 [ 52.205675] ? fsnotify+0x1160/0x1160 [ 52.209457] ? __inode_security_revalidate+0xd3/0x100 [ 52.214737] ? selinux_file_permission+0x31f/0x3e0 [ 52.219822] ? security_file_permission+0x149/0x1c0 [ 52.226017] ? rw_verify_area+0xb8/0x2b0 [ 52.230345] vfs_read+0xf5/0x300 [ 52.233758] SyS_read+0x100/0x250 [ 52.237194] ? kernel_write+0x130/0x130 [ 52.241305] ? do_syscall_64+0x4c/0x5b0 [ 52.245718] ? kernel_write+0x130/0x130 [ 52.249688] do_syscall_64+0x1c7/0x5b0 [ 52.253566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.258395] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 52.263573] RIP: 0033:0x45a219 [ 52.266742] RSP: 002b:00007faf8a3e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.274438] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 52.281783] RDX: 000000000000008a RSI: 0000000020000100 RDI: 0000000000000005 [ 52.289146] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 52.296539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8a3e96d4 [ 52.303802] R13: 00000000004c7bb4 R14: 00000000004ddc18 R15: 00000000ffffffff [ 52.312491] Kernel Offset: disabled [ 52.316220] Rebooting in 86400 seconds..