[ 36.741702] random: cc1: uninitialized urandom read (8 bytes read) [ 37.280863] IPVS: ftp: loaded support on port[0] = 21 [ 38.509228] can: request_module (can-proto-0) failed. [ 38.520791] can: request_module (can-proto-0) failed. [ 38.682547] audit: type=1400 audit(1582884073.640:37): avc: denied { create } for pid=6764 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 38.709268] audit: type=1400 audit(1582884073.670:38): avc: denied { create } for pid=6764 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 38.733291] audit: type=1400 audit(1582884073.670:39): avc: denied { create } for pid=6764 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 39.011598] random: sshd: uninitialized urandom read (32 bytes read) [ 39.757869] random: sshd: uninitialized urandom read (32 bytes read) [ 39.952095] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.53' (ECDSA) to the list of known hosts. 2020/02/28 10:01:21 parsed 1 programs 2020/02/28 10:01:21 executed programs: 0 [ 46.637327] audit: type=1400 audit(1582884081.590:40): avc: denied { map } for pid=6836 comm="syz-execprog" path="/root/syzkaller-shm150735070" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 46.960914] IPVS: ftp: loaded support on port[0] = 21 [ 47.766637] IPVS: ftp: loaded support on port[0] = 21 [ 47.807379] chnl_net:caif_netlink_parms(): no params data found [ 47.846835] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.853723] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.860877] device bridge_slave_0 entered promiscuous mode [ 47.861767] IPVS: ftp: loaded support on port[0] = 21 [ 47.868055] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.878733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.886153] device bridge_slave_1 entered promiscuous mode [ 47.906551] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.919208] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.941634] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.948776] team0: Port device team_slave_0 added [ 47.970712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.977714] team0: Port device team_slave_1 added [ 47.989053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.998000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.016749] chnl_net:caif_netlink_parms(): no params data found [ 48.062433] device hsr_slave_0 entered promiscuous mode [ 48.130278] device hsr_slave_1 entered promiscuous mode [ 48.212401] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.224168] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.234455] IPVS: ftp: loaded support on port[0] = 21 [ 48.262480] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.268868] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.275877] device bridge_slave_0 entered promiscuous mode [ 48.282442] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.288779] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.296247] device bridge_slave_1 entered promiscuous mode [ 48.309119] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.315561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.322715] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.329046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.344119] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.353954] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.377370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.384425] team0: Port device team_slave_0 added [ 48.406987] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.414774] team0: Port device team_slave_1 added [ 48.436275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.444301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.465653] chnl_net:caif_netlink_parms(): no params data found [ 48.500895] IPVS: ftp: loaded support on port[0] = 21 [ 48.522719] device hsr_slave_0 entered promiscuous mode [ 48.560304] device hsr_slave_1 entered promiscuous mode [ 48.670919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.678112] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.716581] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.723076] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.730700] device bridge_slave_0 entered promiscuous mode [ 48.768020] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.774576] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.782733] device bridge_slave_1 entered promiscuous mode [ 48.796880] chnl_net:caif_netlink_parms(): no params data found [ 48.825407] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.843614] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.853970] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.863377] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.872299] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.897386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.917644] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.924178] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.931308] device bridge_slave_0 entered promiscuous mode [ 48.943315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.953369] team0: Port device team_slave_0 added [ 48.958545] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.965219] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.972719] device bridge_slave_1 entered promiscuous mode [ 48.973218] IPVS: ftp: loaded support on port[0] = 21 [ 48.980187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.993151] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.004161] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.011757] team0: Port device team_slave_1 added [ 49.023326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.032572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.042555] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.048636] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.059299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.075269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.088293] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.118026] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.162865] device hsr_slave_0 entered promiscuous mode [ 49.200409] device hsr_slave_1 entered promiscuous mode [ 49.243744] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.251325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.271320] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.278935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.288280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.296151] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.302531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.311797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.321037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.335063] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.342872] team0: Port device team_slave_0 added [ 49.349191] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.357120] team0: Port device team_slave_1 added [ 49.362850] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.372106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.379818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.387494] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.393862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.400984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.412315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.455747] chnl_net:caif_netlink_parms(): no params data found [ 49.467457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.481133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.492113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.539938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.554420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.563336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.578797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.587263] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.663347] device hsr_slave_0 entered promiscuous mode [ 49.740326] device hsr_slave_1 entered promiscuous mode [ 49.780550] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.787590] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.796909] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.804719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.816546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.823693] chnl_net:caif_netlink_parms(): no params data found [ 49.848039] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.856611] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.864262] device bridge_slave_0 entered promiscuous mode [ 49.871338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.879224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.887473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.894970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.906164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.918202] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.926483] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.933173] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.939593] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.946680] device bridge_slave_1 entered promiscuous mode [ 49.953871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.962830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.970909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.977711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.988350] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.994446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.014277] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.020820] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.039398] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.045884] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.053413] device bridge_slave_0 entered promiscuous mode [ 50.067209] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.085766] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.092397] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.099252] device bridge_slave_1 entered promiscuous mode [ 50.110881] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.125485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.146090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.155033] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.168896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.177338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.185266] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.191683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.199045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.208036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.217388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.225697] team0: Port device team_slave_0 added [ 50.237402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.246900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.254591] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.261012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.279279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.293854] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.301769] team0: Port device team_slave_1 added [ 50.313511] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.321722] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.329439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.338765] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.347126] team0: Port device team_slave_0 added [ 50.352977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.360508] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.367609] team0: Port device team_slave_1 added [ 50.376337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.384843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.394232] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.401301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.410577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.417836] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.482776] device hsr_slave_0 entered promiscuous mode [ 50.520333] device hsr_slave_1 entered promiscuous mode [ 50.570989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.577848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.595861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.605615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.612912] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.620667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.628128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.637048] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.645571] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.693844] device hsr_slave_0 entered promiscuous mode [ 50.750357] device hsr_slave_1 entered promiscuous mode [ 50.790499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.798155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.806333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.814208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.821335] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.830597] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.837712] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.850567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.860772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.870834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.881115] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.895651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.903999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.911998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.920722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.928891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.937049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.945005] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.952325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.959570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.966658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.981098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.989346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.016479] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.022973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.031030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.042278] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.048476] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.065327] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.072148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.079616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.087525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.096105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.104698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.121436] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.127811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.149300] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.165447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.178434] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.204554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.216583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.225633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.235669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.270539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.285143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.294116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.303268] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.309733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.319816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.338586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.351074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.357329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.365167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.373573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.382004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.390725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.404587] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.411068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.423284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.435279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.443797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.452965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.460804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.469180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.479510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.489078] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.499317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.507206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.517676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.525514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.533759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.542103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.549617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.559181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.571059] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.577915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.586639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.594858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.603002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.610766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.626057] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.632457] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.639310] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.655048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2020/02/28 10:01:26 executed programs: 13 [ 51.680556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.689805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.702886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.717078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.725565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.737319] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.743840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.751206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.759009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.767050] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.773464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.780422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.788057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.796079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.804317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.814542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.822076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.832600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.841178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.849184] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.859623] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.867518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.877770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.885382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.894861] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.902275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.910823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.921407] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.927444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.935038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.944768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.951764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.959218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.969627] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.975932] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.983755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.997204] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.007540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.015473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.025317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.033859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.045963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.052868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.060889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.068407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.076505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.085113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.092970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.100468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.108241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.116664] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.123045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.130618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.139117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.149667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.159262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.167658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.180528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.188017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.195949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.203711] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.212466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.223155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.234695] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.241281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.248361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.258511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.274298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.295557] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.304697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.321226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.328098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.342366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.351153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.358829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.379270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.391123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.409806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.426085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.439117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.466856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.485757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.507895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.554171] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.568962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.651025] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.686532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.795806] ================================================================== [ 54.803338] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 54.810614] Read of size 8 at addr ffff888088eeef20 by task kworker/u4:4/2254 [ 54.819047] [ 54.820672] CPU: 1 PID: 2254 Comm: kworker/u4:4 Not tainted 4.14.171-syzkaller #0 [ 54.828282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.837661] Workqueue: tipc_rcv tipc_recv_work [ 54.842237] Call Trace: [ 54.844820] dump_stack+0xf7/0x13b [ 54.848577] ? __lock_acquire+0x32f9/0x4500 [ 54.852899] print_address_description.cold.7+0x9/0x1c9 [ 54.858293] ? __lock_acquire+0x32f9/0x4500 [ 54.862626] kasan_report.cold.8+0x11a/0x2d3 [ 54.867037] __asan_report_load8_noabort+0x14/0x20 [ 54.872053] __lock_acquire+0x32f9/0x4500 [ 54.876200] ? __lock_acquire+0x6a4/0x4500 [ 54.880434] ? preempt_schedule+0x4d/0x60 [ 54.884582] ? preempt_schedule_common+0x1f/0xe0 [ 54.889340] ? release_sock+0x122/0x180 [ 54.893311] ? trace_hardirqs_on+0x10/0x10 [ 54.897543] ? trace_hardirqs_off+0x10/0x10 [ 54.902246] ? trace_hardirqs_off+0x10/0x10 [ 54.906576] ? _raw_spin_unlock_bh+0x30/0x40 [ 54.911015] ? release_sock+0x122/0x180 [ 54.914989] ? __lock_is_held+0xb5/0x140 [ 54.919055] lock_acquire+0x173/0x400 [ 54.923006] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 54.927708] _raw_spin_lock_bh+0x31/0x40 [ 54.931762] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 54.936338] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 54.940748] tipc_receive_from_sock+0x290/0x570 [ 54.945536] ? tipc_send_work+0x5e0/0x5e0 [ 54.949682] ? trace_hardirqs_off+0x10/0x10 [ 54.954001] ? __lock_is_held+0xb5/0x140 [ 54.958058] tipc_recv_work+0x78/0xd0 [ 54.961856] process_one_work+0x7a3/0x16c0 [ 54.966097] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 54.970773] worker_thread+0xcc/0xee0 [ 54.974575] kthread+0x33b/0x410 [ 54.977955] ? process_one_work+0x16c0/0x16c0 [ 54.982611] ? kthread_create_on_node+0xa0/0xa0 [ 54.987302] ret_from_fork+0x3a/0x50 [ 54.991034] [ 54.992662] Allocated by task 25: [ 54.996126] save_stack_trace+0x16/0x20 [ 55.000111] save_stack+0x43/0xd0 [ 55.003565] kasan_kmalloc+0xc7/0xe0 [ 55.007281] kmem_cache_alloc_trace+0x152/0x7b0 [ 55.011946] tipc_subscrb_connect_cb+0x44/0x140 [ 55.016620] tipc_accept_from_sock+0x29e/0x4c0 [ 55.021197] tipc_recv_work+0x78/0xd0 [ 55.025015] process_one_work+0x7a3/0x16c0 [ 55.029273] worker_thread+0xcc/0xee0 [ 55.033074] kthread+0x33b/0x410 [ 55.036436] ret_from_fork+0x3a/0x50 [ 55.040137] [ 55.041754] Freed by task 2243: [ 55.045026] save_stack_trace+0x16/0x20 [ 55.049111] save_stack+0x43/0xd0 [ 55.052559] kasan_slab_free+0x71/0xc0 [ 55.056450] kfree+0xcc/0x270 [ 55.059552] tipc_subscrb_put+0x19/0x20 [ 55.063526] tipc_subscrb_release_cb+0x1a/0x20 [ 55.068099] tipc_close_conn+0x15d/0x1f0 [ 55.072150] tipc_send_work+0x462/0x5e0 [ 55.076126] process_one_work+0x7a3/0x16c0 [ 55.080353] worker_thread+0xcc/0xee0 [ 55.084147] kthread+0x33b/0x410 [ 55.087510] ret_from_fork+0x3a/0x50 [ 55.091210] [ 55.092838] The buggy address belongs to the object at ffff888088eeef00 [ 55.092838] which belongs to the cache kmalloc-96 of size 96 [ 55.105499] The buggy address is located 32 bytes inside of [ 55.105499] 96-byte region [ffff888088eeef00, ffff888088eeef60) [ 55.117194] The buggy address belongs to the page: [ 55.122133] page:ffffea000223bb80 count:1 mapcount:0 mapping:ffff888088eee000 index:0xffff888088eee300 [ 55.131750] flags: 0x1fffc0000000100(slab) [ 55.136203] raw: 01fffc0000000100 ffff888088eee000 ffff888088eee300 000000010000001f [ 55.144082] raw: ffffea00021cc2a0 ffffea000251db20 ffff8880aa8004c0 0000000000000000 [ 55.151961] page dumped because: kasan: bad access detected [ 55.157662] [ 55.159283] Memory state around the buggy address: [ 55.164209] ffff888088eeee00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.171580] ffff888088eeee80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.178964] >ffff888088eeef00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.186319] ^ [ 55.190725] ffff888088eeef80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 55.198175] ffff888088eef000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.205561] ================================================================== [ 55.212947] Disabling lock debugging due to kernel taint [ 55.218387] Kernel panic - not syncing: panic_on_warn set ... [ 55.218387] [ 55.225747] CPU: 1 PID: 2254 Comm: kworker/u4:4 Tainted: G B 4.14.171-syzkaller #0 [ 55.234569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.243919] Workqueue: tipc_rcv tipc_recv_work [ 55.248497] Call Trace: [ 55.251140] dump_stack+0xf7/0x13b [ 55.254665] ? __lock_acquire+0x32f9/0x4500 [ 55.258982] panic+0x1b0/0x36a [ 55.262173] ? add_taint.cold.5+0x11/0x11 [ 55.266309] ? lock_downgrade+0x7f0/0x7f0 [ 55.270568] ? __lock_acquire+0x32f9/0x4500 [ 55.274881] kasan_end_report+0x47/0x4f [ 55.278856] kasan_report.cold.8+0x76/0x2d3 [ 55.283197] __asan_report_load8_noabort+0x14/0x20 [ 55.288161] __lock_acquire+0x32f9/0x4500 [ 55.292296] ? __lock_acquire+0x6a4/0x4500 [ 55.296515] ? preempt_schedule+0x4d/0x60 [ 55.300767] ? preempt_schedule_common+0x1f/0xe0 [ 55.305731] ? release_sock+0x122/0x180 [ 55.309688] ? trace_hardirqs_on+0x10/0x10 [ 55.313964] ? trace_hardirqs_off+0x10/0x10 [ 55.318270] ? trace_hardirqs_off+0x10/0x10 [ 55.322617] ? _raw_spin_unlock_bh+0x30/0x40 [ 55.327020] ? release_sock+0x122/0x180 [ 55.330973] ? __lock_is_held+0xb5/0x140 [ 55.335046] lock_acquire+0x173/0x400 [ 55.338950] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.343523] _raw_spin_lock_bh+0x31/0x40 [ 55.347575] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.352138] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 55.356606] tipc_receive_from_sock+0x290/0x570 [ 55.361283] ? tipc_send_work+0x5e0/0x5e0 [ 55.365425] ? trace_hardirqs_off+0x10/0x10 [ 55.369742] ? __lock_is_held+0xb5/0x140 [ 55.373819] tipc_recv_work+0x78/0xd0 [ 55.377625] process_one_work+0x7a3/0x16c0 [ 55.382290] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 55.386943] worker_thread+0xcc/0xee0 [ 55.390736] kthread+0x33b/0x410 [ 55.394095] ? process_one_work+0x16c0/0x16c0 [ 55.398583] ? kthread_create_on_node+0xa0/0xa0 [ 55.403247] ret_from_fork+0x3a/0x50 [ 55.407680] Kernel Offset: disabled [ 55.411304] Rebooting in 86400 seconds..