[ 39.374260] random: cc1: uninitialized urandom read (8 bytes read) [ 40.051167] IPVS: ftp: loaded support on port[0] = 21 [ 41.238795] can: request_module (can-proto-0) failed. [ 41.248267] can: request_module (can-proto-0) failed. [ 41.422821] audit: type=1400 audit(1584443585.651:37): avc: denied { create } for pid=6786 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.446761] audit: type=1400 audit(1584443585.651:38): avc: denied { create } for pid=6786 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.470537] audit: type=1400 audit(1584443585.651:39): avc: denied { create } for pid=6786 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 41.621860] random: sshd: uninitialized urandom read (32 bytes read) [ 42.422504] random: sshd: uninitialized urandom read (32 bytes read) [ 42.600853] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.254' (ECDSA) to the list of known hosts. 2020/03/17 11:13:12 parsed 1 programs 2020/03/17 11:13:12 executed programs: 0 [ 48.520709] audit: type=1400 audit(1584443592.751:40): avc: denied { map } for pid=6859 comm="syz-execprog" path="/root/syzkaller-shm345018671" dev="sda1" ino=16496 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 48.810942] IPVS: ftp: loaded support on port[0] = 21 [ 49.547171] IPVS: ftp: loaded support on port[0] = 21 [ 49.592201] chnl_net:caif_netlink_parms(): no params data found [ 49.632645] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.639079] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.646647] device bridge_slave_0 entered promiscuous mode [ 49.654468] IPVS: ftp: loaded support on port[0] = 21 [ 49.665311] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.671981] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.679137] device bridge_slave_1 entered promiscuous mode [ 49.706146] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.717641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.750013] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.758371] team0: Port device team_slave_0 added [ 49.765644] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.772777] team0: Port device team_slave_1 added [ 49.781674] chnl_net:caif_netlink_parms(): no params data found [ 49.792015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.804451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.862440] device hsr_slave_0 entered promiscuous mode [ 49.900367] device hsr_slave_1 entered promiscuous mode [ 49.940700] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.947759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.983273] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.989697] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.996898] IPVS: ftp: loaded support on port[0] = 21 [ 50.001062] device bridge_slave_0 entered promiscuous mode [ 50.021365] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.027730] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.034857] device bridge_slave_1 entered promiscuous mode [ 50.074619] chnl_net:caif_netlink_parms(): no params data found [ 50.084004] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.092932] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.099348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.106270] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.112982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.129191] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.152078] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.159255] team0: Port device team_slave_0 added [ 50.168026] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.175214] team0: Port device team_slave_1 added [ 50.198815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.210963] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.217481] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.225836] device bridge_slave_0 entered promiscuous mode [ 50.234144] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.241670] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.248492] device bridge_slave_1 entered promiscuous mode [ 50.258613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.284401] IPVS: ftp: loaded support on port[0] = 21 [ 50.286858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.332155] device hsr_slave_0 entered promiscuous mode [ 50.410343] device hsr_slave_1 entered promiscuous mode [ 50.450798] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.457727] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.468999] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.501049] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.508114] team0: Port device team_slave_0 added [ 50.514620] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.521702] team0: Port device team_slave_1 added [ 50.526892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.540243] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.546613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.553241] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.559563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.567546] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.643477] device hsr_slave_0 entered promiscuous mode [ 50.700500] device hsr_slave_1 entered promiscuous mode [ 50.772606] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.783589] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.791845] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.799416] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.806445] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.818065] IPVS: ftp: loaded support on port[0] = 21 [ 50.849394] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.860728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.868662] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.883038] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.895531] chnl_net:caif_netlink_parms(): no params data found [ 50.913872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.921980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.932219] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.938331] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.964829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.977695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.986544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.994444] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.000921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.081733] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.096847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.106682] chnl_net:caif_netlink_parms(): no params data found [ 51.114727] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.121414] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.128616] device bridge_slave_0 entered promiscuous mode [ 51.136198] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.142619] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.149558] device bridge_slave_1 entered promiscuous mode [ 51.156262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.164127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.172048] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.178396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.187475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.209538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.231553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.251784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.274730] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.288431] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.308813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.318392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.353418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.361306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.369100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.377644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.385366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.393822] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.401408] team0: Port device team_slave_0 added [ 51.413757] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.420478] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.427622] device bridge_slave_0 entered promiscuous mode [ 51.435133] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.441828] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.448705] device bridge_slave_1 entered promiscuous mode [ 51.455147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.462940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.472294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.479129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.486475] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.493993] team0: Port device team_slave_1 added [ 51.501343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.509408] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.523654] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.530570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.538079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.546042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.552973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.560342] chnl_net:caif_netlink_parms(): no params data found [ 51.570760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.594101] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.606479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.652263] device hsr_slave_0 entered promiscuous mode [ 51.690503] device hsr_slave_1 entered promiscuous mode [ 51.731295] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.739117] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.753305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.761656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.769966] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.777170] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.783897] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.795776] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.802008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.809141] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.816888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.824478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.839069] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.845626] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.872235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.879839] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.887581] team0: Port device team_slave_0 added [ 51.895342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.903252] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.909651] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.917174] device bridge_slave_0 entered promiscuous mode [ 51.925423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.932913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.940829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.948506] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.954918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.961869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.970404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.977923] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.984319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.991091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.998798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.007067] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.013522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.020875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.028348] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.036419] team0: Port device team_slave_1 added [ 52.042204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.049661] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.057853] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.064430] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.071934] device bridge_slave_1 entered promiscuous mode [ 52.093837] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.102775] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.114661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.127754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.136585] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.148244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.156140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.164851] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.171248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.178140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.186459] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.199337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.208781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.228852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.262209] device hsr_slave_0 entered promiscuous mode [ 52.300442] device hsr_slave_1 entered promiscuous mode [ 52.350294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.358063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.365882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.373708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.383132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.400566] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.407839] team0: Port device team_slave_0 added [ 52.415015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.422166] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.430890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.439634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.451312] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.458404] team0: Port device team_slave_1 added [ 52.465177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.472888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.480627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.489183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.496816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.504468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.511880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.519663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.529745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.539034] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.547055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.554780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.562934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.570726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.578501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.589133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.599651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.618637] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.625724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.633472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.642690] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.648696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.656765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.666048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.723728] device hsr_slave_0 entered promiscuous mode [ 52.760519] device hsr_slave_1 entered promiscuous mode [ 52.820257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.827695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.842623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.850601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.858061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.868218] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.877772] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.887472] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.894024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.903877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.912932] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.920151] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.933629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.940400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.947225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.959318] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.967584] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.988440] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.004854] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.030028] hrtimer: interrupt took 29183 ns [ 53.036728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.065693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.077042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.085717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.095139] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.101557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.114817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.123963] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.138269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.148525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.155747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.163225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.177962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.186375] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.192894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.200941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.213533] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.221087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.228003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.237015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.248197] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.254530] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.263466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.273485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.288113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.296168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.306234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.315521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.322896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.330861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.341265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.350675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.358544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.367509] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.374016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.386331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.399768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.408706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.418078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.425501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.433413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.441080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.448771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.456545] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.463208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.472320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.482754] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.496446] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.502643] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.518197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.531094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.539849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.546894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.564022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.571850] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.578338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.585526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.594167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.602668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.612109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.620551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.628072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.638660] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.647250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.657146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.665669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.675135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.685340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.693108] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.699448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.706519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.717223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.727922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.740655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.748441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.781138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.789363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 2020/03/17 11:13:18 executed programs: 7 [ 53.797710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.809363] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.831898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.840863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.851313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.858481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.866946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.874949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.883289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.891155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.898663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.912724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.921427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.928824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.938030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.945825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.954040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.965255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.973378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.981145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.994987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.002934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.010900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.019994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.028264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.035997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.045960] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.052123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.136265] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.145450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.178163] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.199603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.216236] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.234624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.542804] ================================================================== [ 57.550355] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 57.557540] Read of size 4 at addr ffff8880a159999c by task syz-executor.4/7207 [ 57.564969] [ 57.566580] CPU: 0 PID: 7207 Comm: syz-executor.4 Not tainted 4.14.173-syzkaller #0 [ 57.574447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.583853] Call Trace: [ 57.586450] dump_stack+0xf7/0x13b [ 57.589983] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 57.594823] print_address_description.cold.7+0x9/0x1c9 [ 57.600174] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 57.605002] kasan_report.cold.8+0x11a/0x2d3 [ 57.609401] __asan_report_load4_noabort+0x14/0x20 [ 57.614318] __vb2_perform_fileio+0x10fd/0x12b0 [ 57.618973] ? retint_kernel+0x2d/0x2d [ 57.622866] ? vb2_core_poll+0x730/0x730 [ 57.626915] vb2_read+0xf/0x20 [ 57.630090] vb2_fop_read+0x1b6/0x390 [ 57.633889] ? vb2_fop_write+0x390/0x390 [ 57.638024] v4l2_read+0x133/0x240 [ 57.641573] do_iter_read+0x35e/0x570 [ 57.645662] ? dup_iter+0x250/0x250 [ 57.649545] ? trace_hardirqs_off+0x10/0x10 [ 57.653905] vfs_readv+0xb6/0x110 [ 57.657349] ? find_held_lock+0x36/0x1d0 [ 57.661470] ? compat_rw_copy_check_uvector+0x310/0x310 [ 57.666820] ? __fget+0x1ad/0x2f0 [ 57.670269] ? __fget_light+0x166/0x200 [ 57.674247] do_preadv+0x158/0x250 [ 57.677790] ? do_readv+0x320/0x320 [ 57.681427] ? do_syscall_64+0x4c/0x5b0 [ 57.685611] ? SyS_writev+0x10/0x10 [ 57.689274] SyS_preadv+0xc/0x10 [ 57.692627] do_syscall_64+0x1c7/0x5b0 [ 57.696497] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.701439] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.706621] RIP: 0033:0x459a29 [ 57.709790] RSP: 002b:00007efe12d1dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 57.717482] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 57.724757] RDX: 0000000000000006 RSI: 00000000200018c0 RDI: 0000000000000004 [ 57.732019] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 57.739269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efe12d1e6d4 [ 57.746548] R13: 00000000004c6d3d R14: 00000000004dc0b8 R15: 00000000ffffffff [ 57.753841] [ 57.755450] Allocated by task 7207: [ 57.759058] save_stack_trace+0x16/0x20 [ 57.763026] save_stack+0x43/0xd0 [ 57.766457] kasan_kmalloc+0xc7/0xe0 [ 57.770162] kmem_cache_alloc_trace+0x152/0x7a0 [ 57.775120] __vb2_init_fileio+0x160/0xaf0 [ 57.779340] __vb2_perform_fileio+0xa9f/0x12b0 [ 57.783936] vb2_read+0xf/0x20 [ 57.787220] vb2_fop_read+0x1b6/0x390 [ 57.791013] v4l2_read+0x133/0x240 [ 57.794799] do_iter_read+0x35e/0x570 [ 57.798589] vfs_readv+0xb6/0x110 [ 57.802027] do_preadv+0x158/0x250 [ 57.805641] SyS_preadv+0xc/0x10 [ 57.808990] do_syscall_64+0x1c7/0x5b0 [ 57.812864] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.818045] [ 57.819667] Freed by task 7200: [ 57.823040] save_stack_trace+0x16/0x20 [ 57.827026] save_stack+0x43/0xd0 [ 57.830462] kasan_slab_free+0x71/0xc0 [ 57.834338] kfree+0xcc/0x270 [ 57.837435] __vb2_cleanup_fileio+0xee/0x140 [ 57.841837] vb2_core_queue_release+0xf/0x70 [ 57.846232] _vb2_fop_release+0x1ac/0x280 [ 57.850381] vb2_fop_release+0x66/0xd0 [ 57.854266] vivid_fop_release+0x15f/0x3a0 [ 57.858636] v4l2_release+0xeb/0x1a0 [ 57.862434] __fput+0x232/0x750 [ 57.865785] ____fput+0x9/0x10 [ 57.868959] task_work_run+0xe5/0x170 [ 57.872783] exit_to_usermode_loop+0x16a/0x1b0 [ 57.877344] do_syscall_64+0x416/0x5b0 [ 57.881226] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.886408] [ 57.888012] The buggy address belongs to the object at ffff8880a1599680 [ 57.888012] which belongs to the cache kmalloc-1024 of size 1024 [ 57.900821] The buggy address is located 796 bytes inside of [ 57.900821] 1024-byte region [ffff8880a1599680, ffff8880a1599a80) [ 57.912797] The buggy address belongs to the page: [ 57.917733] page:ffffea0002856600 count:1 mapcount:0 mapping:ffff8880a1598000 index:0x0 compound_mapcount: 0 [ 57.927694] flags: 0x1fffc0000008100(slab|head) [ 57.932432] raw: 01fffc0000008100 ffff8880a1598000 0000000000000000 0000000100000007 [ 57.940310] raw: ffffea000293f5a0 ffffea00028481a0 ffff8880aa800ac0 0000000000000000 [ 57.948189] page dumped because: kasan: bad access detected [ 57.953879] [ 57.955487] Memory state around the buggy address: [ 57.960409] ffff8880a1599880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.967752] ffff8880a1599900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.975097] >ffff8880a1599980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.982512] ^ [ 57.986645] ffff8880a1599a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.994073] ffff8880a1599a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.001459] ================================================================== [ 58.008801] Disabling lock debugging due to kernel taint [ 58.022918] Kernel panic - not syncing: panic_on_warn set ... [ 58.022918] [ 58.030920] CPU: 0 PID: 7207 Comm: syz-executor.4 Tainted: G B 4.14.173-syzkaller #0 [ 58.039948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.049282] Call Trace: [ 58.051864] dump_stack+0xf7/0x13b [ 58.055393] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.060396] panic+0x1b0/0x358 [ 58.064095] ? add_taint.cold.5+0x11/0x11 [ 58.068294] ? ___preempt_schedule+0x16/0x18 [ 58.072696] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.077787] kasan_end_report+0x47/0x4f [ 58.081895] kasan_report.cold.8+0x76/0x2d3 [ 58.086495] __asan_report_load4_noabort+0x14/0x20 [ 58.091504] __vb2_perform_fileio+0x10fd/0x12b0 [ 58.096170] ? retint_kernel+0x2d/0x2d [ 58.100085] ? vb2_core_poll+0x730/0x730 [ 58.104323] vb2_read+0xf/0x20 [ 58.107495] vb2_fop_read+0x1b6/0x390 [ 58.111304] ? vb2_fop_write+0x390/0x390 [ 58.115363] v4l2_read+0x133/0x240 [ 58.118899] do_iter_read+0x35e/0x570 [ 58.122683] ? dup_iter+0x250/0x250 [ 58.126290] ? trace_hardirqs_off+0x10/0x10 [ 58.130785] vfs_readv+0xb6/0x110 [ 58.134228] ? find_held_lock+0x36/0x1d0 [ 58.138622] ? compat_rw_copy_check_uvector+0x310/0x310 [ 58.143968] ? __fget+0x1ad/0x2f0 [ 58.147421] ? __fget_light+0x166/0x200 [ 58.151380] do_preadv+0x158/0x250 [ 58.154919] ? do_readv+0x320/0x320 [ 58.158529] ? do_syscall_64+0x4c/0x5b0 [ 58.162769] ? SyS_writev+0x10/0x10 [ 58.166382] SyS_preadv+0xc/0x10 [ 58.169740] do_syscall_64+0x1c7/0x5b0 [ 58.173743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 58.178732] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.183907] RIP: 0033:0x459a29 [ 58.187093] RSP: 002b:00007efe12d1dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 58.194787] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 58.202056] RDX: 0000000000000006 RSI: 00000000200018c0 RDI: 0000000000000004 [ 58.209319] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 58.216582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efe12d1e6d4 [ 58.223831] R13: 00000000004c6d3d R14: 00000000004dc0b8 R15: 00000000ffffffff [ 58.232490] Kernel Offset: disabled [ 58.236229] Rebooting in 86400 seconds..