[ 41.303802] random: cc1: uninitialized urandom read (8 bytes read) [ 42.071039] IPVS: ftp: loaded support on port[0] = 21 [ 43.178953] can: request_module (can-proto-0) failed. [ 43.189367] can: request_module (can-proto-0) failed. [ 43.362617] audit: type=1400 audit(1583874301.537:37): avc: denied { create } for pid=6871 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.386503] audit: type=1400 audit(1583874301.537:38): avc: denied { create } for pid=6871 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.410334] audit: type=1400 audit(1583874301.537:39): avc: denied { create } for pid=6871 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 43.696756] random: sshd: uninitialized urandom read (32 bytes read) [ 44.421442] random: sshd: uninitialized urandom read (32 bytes read) [ 44.614564] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.27' (ECDSA) to the list of known hosts. 2020/03/10 21:05:09 parsed 1 programs 2020/03/10 21:05:09 executed programs: 0 [ 51.447776] audit: type=1400 audit(1583874309.617:40): avc: denied { map } for pid=6943 comm="syz-execprog" path="/root/syzkaller-shm492046447" dev="sda1" ino=16505 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 51.750893] IPVS: ftp: loaded support on port[0] = 21 [ 52.615514] IPVS: ftp: loaded support on port[0] = 21 [ 52.659434] chnl_net:caif_netlink_parms(): no params data found [ 52.698440] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.705809] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.713239] device bridge_slave_0 entered promiscuous mode [ 52.720389] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.726967] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.733948] device bridge_slave_1 entered promiscuous mode [ 52.751802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.763344] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.772604] IPVS: ftp: loaded support on port[0] = 21 [ 52.782387] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.790382] team0: Port device team_slave_0 added [ 52.817328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.824573] team0: Port device team_slave_1 added [ 52.843181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.857277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.941898] device hsr_slave_0 entered promiscuous mode [ 53.020316] device hsr_slave_1 entered promiscuous mode [ 53.080389] chnl_net:caif_netlink_parms(): no params data found [ 53.088544] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.100179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.123148] IPVS: ftp: loaded support on port[0] = 21 [ 53.125379] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.134850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.141885] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.148280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.172901] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.179345] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.187546] device bridge_slave_0 entered promiscuous mode [ 53.202949] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.209397] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.217422] device bridge_slave_1 entered promiscuous mode [ 53.265970] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.274950] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.297778] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.304914] team0: Port device team_slave_0 added [ 53.313118] chnl_net:caif_netlink_parms(): no params data found [ 53.321875] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.329108] team0: Port device team_slave_1 added [ 53.336624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.353054] IPVS: ftp: loaded support on port[0] = 21 [ 53.367891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.451935] device hsr_slave_0 entered promiscuous mode [ 53.490315] device hsr_slave_1 entered promiscuous mode [ 53.554671] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.575183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.582738] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.589682] device bridge_slave_0 entered promiscuous mode [ 53.604182] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.623665] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.630674] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.637523] device bridge_slave_1 entered promiscuous mode [ 53.663374] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.672611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.687551] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.694733] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.715784] chnl_net:caif_netlink_parms(): no params data found [ 53.725135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.733790] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.741283] team0: Port device team_slave_0 added [ 53.755941] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.763166] team0: Port device team_slave_1 added [ 53.769533] IPVS: ftp: loaded support on port[0] = 21 [ 53.775000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.789504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.797958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.809285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.843871] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.864044] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.870775] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.877812] device bridge_slave_0 entered promiscuous mode [ 53.888792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.896938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.905153] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.911323] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.921080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.952287] device hsr_slave_0 entered promiscuous mode [ 53.990290] device hsr_slave_1 entered promiscuous mode [ 54.043273] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.049635] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.056714] device bridge_slave_1 entered promiscuous mode [ 54.063079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.071049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.078637] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.085280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.094642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.103041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.131016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.138798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.146566] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.152984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.161172] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.171062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.183942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.200848] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.208731] chnl_net:caif_netlink_parms(): no params data found [ 54.225013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.233498] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.246670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.258891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.281900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.289612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.297425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.307336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.316731] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.324252] team0: Port device team_slave_0 added [ 54.339046] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.347657] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.354712] device bridge_slave_0 entered promiscuous mode [ 54.364229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.371983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.383680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.392635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.399576] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.408212] team0: Port device team_slave_1 added [ 54.414321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.421560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.432737] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.439411] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.446855] device bridge_slave_1 entered promiscuous mode [ 54.464143] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.473121] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.481504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.489032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.501036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.508456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.528422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.592086] device hsr_slave_0 entered promiscuous mode [ 54.640454] device hsr_slave_1 entered promiscuous mode [ 54.681047] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.688310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.702303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.710589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.717920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.725107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.733470] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.739484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.770399] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.783821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.791611] team0: Port device team_slave_0 added [ 54.798107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.805632] team0: Port device team_slave_1 added [ 54.813005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.823999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.832012] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.838221] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.847687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.858423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.865753] chnl_net:caif_netlink_parms(): no params data found [ 54.884252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.892394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.899927] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.906423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.913258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.921501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.929055] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.935431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.943288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.952867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.003520] device hsr_slave_0 entered promiscuous mode [ 55.030449] device hsr_slave_1 entered promiscuous mode [ 55.070585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.077745] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.085484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.094873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.110770] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.128944] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.136169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.148710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.169732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.176871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.187011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.194846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.207311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.214302] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.224094] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.231989] device bridge_slave_0 entered promiscuous mode [ 55.240355] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.250144] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.261386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.268663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.277089] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.284755] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.292274] device bridge_slave_1 entered promiscuous mode [ 55.298496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.305554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.312657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.320506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.329852] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.336295] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.345166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.355148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.376030] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.384734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.393997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.402046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.409739] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.416250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.423354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.431737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.439494] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.446013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.453281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.460843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.468260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.478045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.495311] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.505450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.526264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.541743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.558433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.567425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.576223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.583712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.593105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.602210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.616933] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.623622] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.633019] team0: Port device team_slave_0 added [ 55.649392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.657194] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.663739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.671486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.679044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.686665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.693613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.702442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.712041] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.719679] team0: Port device team_slave_1 added [ 55.726666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.734279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.743483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.751294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.759976] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.766803] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.773717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.784082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.791689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.802524] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.810893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.820863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.832509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.848167] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.868282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.880868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.889094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.897664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.904993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.914805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.923808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.936266] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.942988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.954352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.002108] device hsr_slave_0 entered promiscuous mode [ 56.030937] device hsr_slave_1 entered promiscuous mode [ 56.072680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.082222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.091261] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.097334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.108385] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.115278] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.123273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.131700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.139406] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.145798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.153405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.163643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.176033] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.185212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.193179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.201979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.210714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.218292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.226182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.235754] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.242195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.249045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.257263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.266889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.275407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.284617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.294202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.306322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.319166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.329483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.337343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.345277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.353371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.361175] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.367669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.377677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.392052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.400637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.408359] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.415809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.426639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.442814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.456239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.466852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.477544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.495099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.502749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.520934] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.527088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.536139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.548029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.556047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.564001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.572131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.584761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.593456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.603736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.622323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.631619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.643393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.651965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.662981] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.669053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.679307] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 2020/03/10 21:05:14 executed programs: 14 [ 56.686407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.694605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.716211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.735737] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.749360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.759796] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.769847] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.778151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.787244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.795286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.804827] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.814710] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.824614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.832917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.841601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.849215] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.855642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.863210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.878061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.889135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.896943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.904927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.916322] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.922759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.931066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.959183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.977578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.986973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.995013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.003589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.011915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.020952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.037376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.045538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.054559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.062404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.070696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.080579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.088971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.099490] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.105587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.113198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.121872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.142819] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.154431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.537477] ================================================================== [ 58.545175] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 58.552366] Read of size 4 at addr ffff88809f1ffe5c by task syz-executor.0/7124 [ 58.559811] [ 58.561436] CPU: 0 PID: 7124 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 58.569219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.578559] Call Trace: [ 58.581140] dump_stack+0xf7/0x13b [ 58.584676] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.589518] print_address_description.cold.7+0x9/0x1c9 [ 58.594882] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.599707] kasan_report.cold.8+0x11a/0x2d3 [ 58.604121] __asan_report_load4_noabort+0x14/0x20 [ 58.609080] __vb2_perform_fileio+0x10fd/0x12b0 [ 58.613750] ? vb2_core_poll+0x730/0x730 [ 58.617862] vb2_read+0xf/0x20 [ 58.621046] vb2_fop_read+0x1b6/0x390 [ 58.624925] ? vb2_fop_write+0x390/0x390 [ 58.628980] v4l2_read+0x133/0x240 [ 58.632520] do_iter_read+0x35e/0x570 [ 58.637121] ? dup_iter+0x250/0x250 [ 58.640744] vfs_readv+0xb6/0x110 [ 58.644210] ? compat_rw_copy_check_uvector+0x310/0x310 [ 58.649624] ? __fget+0x1ad/0x2f0 [ 58.653090] ? lock_downgrade+0x7f0/0x7f0 [ 58.657221] ? __fget+0x1ca/0x2f0 [ 58.660660] ? do_preadv+0x250/0x250 [ 58.664371] ? __fget_light+0x166/0x200 [ 58.668337] do_readv+0x10d/0x320 [ 58.671778] ? vfs_readv+0x110/0x110 [ 58.675530] ? do_syscall_64+0x4c/0x5b0 [ 58.679486] ? do_preadv+0x250/0x250 [ 58.683184] SyS_readv+0xb/0x10 [ 58.686451] do_syscall_64+0x1c7/0x5b0 [ 58.690324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 58.695175] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.700361] RIP: 0033:0x459829 [ 58.703587] RSP: 002b:00007f74c6b25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 58.711330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 58.718700] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 58.725957] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 58.733216] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f74c6b266d4 [ 58.740598] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 00000000ffffffff [ 58.747975] [ 58.749583] Allocated by task 7124: [ 58.753195] save_stack_trace+0x16/0x20 [ 58.757174] save_stack+0x43/0xd0 [ 58.760695] kasan_kmalloc+0xc7/0xe0 [ 58.764398] kmem_cache_alloc_trace+0x152/0x7a0 [ 58.769069] __vb2_init_fileio+0x160/0xaf0 [ 58.773421] __vb2_perform_fileio+0xa9f/0x12b0 [ 58.778003] vb2_read+0xf/0x20 [ 58.781201] vb2_fop_read+0x1b6/0x390 [ 58.784996] v4l2_read+0x133/0x240 [ 58.788563] do_iter_read+0x35e/0x570 [ 58.792614] vfs_readv+0xb6/0x110 [ 58.796055] do_readv+0x10d/0x320 [ 58.799500] SyS_readv+0xb/0x10 [ 58.802796] do_syscall_64+0x1c7/0x5b0 [ 58.806680] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.811863] [ 58.813493] Freed by task 7118: [ 58.816760] save_stack_trace+0x16/0x20 [ 58.820735] save_stack+0x43/0xd0 [ 58.824184] kasan_slab_free+0x71/0xc0 [ 58.828104] kfree+0xcc/0x270 [ 58.831358] __vb2_cleanup_fileio+0xee/0x140 [ 58.835750] vb2_core_queue_release+0xf/0x70 [ 58.840176] _vb2_fop_release+0x1ac/0x280 [ 58.844325] vb2_fop_release+0x66/0xd0 [ 58.848196] vivid_fop_release+0x15f/0x3a0 [ 58.852420] v4l2_release+0xeb/0x1a0 [ 58.856117] __fput+0x232/0x750 [ 58.859377] ____fput+0x9/0x10 [ 58.862551] task_work_run+0xe5/0x170 [ 58.866337] exit_to_usermode_loop+0x16a/0x1b0 [ 58.870907] do_syscall_64+0x416/0x5b0 [ 58.874783] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.879963] [ 58.881584] The buggy address belongs to the object at ffff88809f1ffb40 [ 58.881584] which belongs to the cache kmalloc-1024 of size 1024 [ 58.894405] The buggy address is located 796 bytes inside of [ 58.894405] 1024-byte region [ffff88809f1ffb40, ffff88809f1fff40) [ 58.906356] The buggy address belongs to the page: [ 58.911275] page:ffffea00027c7f80 count:1 mapcount:0 mapping:ffff88809f1fe040 index:0x0 compound_mapcount: 0 [ 58.921240] flags: 0x1fffc0000008100(slab|head) [ 58.926094] raw: 01fffc0000008100 ffff88809f1fe040 0000000000000000 0000000100000007 [ 58.933970] raw: ffffea0002786b20 ffffea0001e1e3a0 ffff8880aa800ac0 0000000000000000 [ 58.941836] page dumped because: kasan: bad access detected [ 58.947619] [ 58.949222] Memory state around the buggy address: [ 58.954132] ffff88809f1ffd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.961480] ffff88809f1ffd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.968835] >ffff88809f1ffe00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.976272] ^ [ 58.982507] ffff88809f1ffe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.990066] ffff88809f1fff00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.997416] ================================================================== [ 59.004763] Disabling lock debugging due to kernel taint [ 59.019520] Kernel panic - not syncing: panic_on_warn set ... [ 59.019520] [ 59.026906] CPU: 0 PID: 7124 Comm: syz-executor.0 Tainted: G B 4.14.172-syzkaller #0 [ 59.035900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.045256] Call Trace: [ 59.047832] dump_stack+0xf7/0x13b [ 59.051361] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 59.056179] panic+0x1b0/0x358 [ 59.059348] ? add_taint.cold.5+0x11/0x11 [ 59.063487] ? ___preempt_schedule+0x16/0x18 [ 59.067874] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 59.072698] kasan_end_report+0x47/0x4f [ 59.076651] kasan_report.cold.8+0x76/0x2d3 [ 59.080958] __asan_report_load4_noabort+0x14/0x20 [ 59.085871] __vb2_perform_fileio+0x10fd/0x12b0 [ 59.090521] ? vb2_core_poll+0x730/0x730 [ 59.094572] vb2_read+0xf/0x20 [ 59.097743] vb2_fop_read+0x1b6/0x390 [ 59.102481] ? vb2_fop_write+0x390/0x390 [ 59.106534] v4l2_read+0x133/0x240 [ 59.110064] do_iter_read+0x35e/0x570 [ 59.113856] ? dup_iter+0x250/0x250 [ 59.117461] vfs_readv+0xb6/0x110 [ 59.120907] ? compat_rw_copy_check_uvector+0x310/0x310 [ 59.126269] ? __fget+0x1ad/0x2f0 [ 59.129714] ? lock_downgrade+0x7f0/0x7f0 [ 59.133862] ? __fget+0x1ca/0x2f0 [ 59.137296] ? do_preadv+0x250/0x250 [ 59.140999] ? __fget_light+0x166/0x200 [ 59.144966] do_readv+0x10d/0x320 [ 59.148400] ? vfs_readv+0x110/0x110 [ 59.152094] ? do_syscall_64+0x4c/0x5b0 [ 59.156059] ? do_preadv+0x250/0x250 [ 59.159761] SyS_readv+0xb/0x10 [ 59.163114] do_syscall_64+0x1c7/0x5b0 [ 59.166978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.171913] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 59.177097] RIP: 0033:0x459829 [ 59.180271] RSP: 002b:00007f74c6b25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 59.187971] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 59.195308] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 59.202646] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 59.210074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f74c6b266d4 [ 59.217762] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 00000000ffffffff [ 59.226585] Kernel Offset: disabled [ 59.230210] Rebooting in 86400 seconds..