[ 39.371600] audit: type=1400 audit(1576659529.728:37): avc: denied { map } for pid=6746 comm="syz-fuzzer" path="/root/syzkaller-shm128335413" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.630853] IPVS: ftp: loaded support on port[0] = 21 [ 40.727892] can: request_module (can-proto-0) failed. [ 40.736977] can: request_module (can-proto-0) failed. [ 40.892237] audit: type=1400 audit(1576659531.248:38): avc: denied { create } for pid=6746 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 40.915951] audit: type=1400 audit(1576659531.248:39): avc: denied { create } for pid=6746 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.939518] audit: type=1400 audit(1576659531.248:40): avc: denied { create } for pid=6746 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 41.108908] random: sshd: uninitialized urandom read (32 bytes read) [ 41.844012] random: sshd: uninitialized urandom read (32 bytes read) [ 42.042292] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.14' (ECDSA) to the list of known hosts. 2019/12/18 08:58:58 parsed 1 programs 2019/12/18 08:58:58 executed programs: 0 [ 48.030950] IPVS: ftp: loaded support on port[0] = 21 [ 48.846119] chnl_net:caif_netlink_parms(): no params data found [ 48.874259] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.881086] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.887973] device bridge_slave_0 entered promiscuous mode [ 48.895005] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.901715] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.908813] device bridge_slave_1 entered promiscuous mode [ 48.909175] IPVS: ftp: loaded support on port[0] = 21 [ 48.934477] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.943297] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.968135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.975314] team0: Port device team_slave_0 added [ 48.982701] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.989698] team0: Port device team_slave_1 added [ 48.995421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.004438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.062056] device hsr_slave_0 entered promiscuous mode [ 49.100311] device hsr_slave_1 entered promiscuous mode [ 49.183580] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.190602] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.220805] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.227261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.234135] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.240492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.261795] IPVS: ftp: loaded support on port[0] = 21 [ 49.267954] chnl_net:caif_netlink_parms(): no params data found [ 49.315558] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.322366] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.329304] device bridge_slave_0 entered promiscuous mode [ 49.338265] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.344684] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.351613] device bridge_slave_1 entered promiscuous mode [ 49.374802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.385882] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.411654] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.418684] team0: Port device team_slave_0 added [ 49.424175] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.431514] team0: Port device team_slave_1 added [ 49.437243] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.445193] IPVS: ftp: loaded support on port[0] = 21 [ 49.459170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.562513] device hsr_slave_0 entered promiscuous mode [ 49.600370] device hsr_slave_1 entered promiscuous mode [ 49.640549] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.663360] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.681922] chnl_net:caif_netlink_parms(): no params data found [ 49.691482] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.697543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.716168] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.722588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.729246] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.735631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.736609] IPVS: ftp: loaded support on port[0] = 21 [ 49.758977] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.771092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.779781] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.797182] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.804664] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.811424] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.832062] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.838158] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.862339] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.876266] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.882865] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.889700] device bridge_slave_0 entered promiscuous mode [ 49.917956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.926328] IPVS: ftp: loaded support on port[0] = 21 [ 49.950545] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.956967] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.964244] device bridge_slave_1 entered promiscuous mode [ 49.986107] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.994876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.002600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.010393] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.016745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.045246] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.064174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.076583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.092135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.099196] team0: Port device team_slave_0 added [ 50.104845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.112791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.120373] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.126701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.133507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.144255] chnl_net:caif_netlink_parms(): no params data found [ 50.178131] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.185892] team0: Port device team_slave_1 added [ 50.191297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.198743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.233102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.246783] chnl_net:caif_netlink_parms(): no params data found [ 50.258446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.313535] device hsr_slave_0 entered promiscuous mode [ 50.371664] device hsr_slave_1 entered promiscuous mode [ 50.430691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.437718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.468173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.492037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.499734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.507646] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.548397] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.555156] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.562547] device bridge_slave_0 entered promiscuous mode [ 50.569803] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.576224] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.583235] device bridge_slave_1 entered promiscuous mode [ 50.593298] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.609977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.616994] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.623557] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.631459] device bridge_slave_0 entered promiscuous mode [ 50.643055] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.649453] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.656420] device bridge_slave_1 entered promiscuous mode [ 50.671625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.679212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.688426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.703330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.715623] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.727048] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.741077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.748473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.759296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.768048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.778301] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.784648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.792486] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.800390] chnl_net:caif_netlink_parms(): no params data found [ 50.809364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.822518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.830245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.839217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.863772] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.871188] team0: Port device team_slave_0 added [ 50.876844] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.884250] team0: Port device team_slave_1 added [ 50.889604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.903686] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.910887] team0: Port device team_slave_0 added [ 50.917478] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.924954] team0: Port device team_slave_1 added [ 50.932786] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.939501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.955392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.962866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.972753] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.981479] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.987540] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.016411] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.022992] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.029838] device bridge_slave_0 entered promiscuous mode [ 51.036121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.043164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.064282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.112229] device hsr_slave_0 entered promiscuous mode [ 51.150516] device hsr_slave_1 entered promiscuous mode [ 51.214190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.220973] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.227849] device bridge_slave_1 entered promiscuous mode [ 51.235813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.242188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.249873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.257822] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.264205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.322189] device hsr_slave_0 entered promiscuous mode [ 51.370408] device hsr_slave_1 entered promiscuous mode [ 51.422108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.432842] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.455898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.464255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.472743] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.479086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.486353] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.495005] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.502631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.522138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.528368] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.536620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.545124] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.554360] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.577815] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.596595] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.605363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.614490] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.622958] team0: Port device team_slave_0 added [ 51.628716] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.635814] team0: Port device team_slave_1 added [ 51.643353] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.651114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.659078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.678155] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.686099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.695717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.706108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.713652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.721451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.725861] hrtimer: interrupt took 25407 ns [ 51.741492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.753984] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.760288] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.771275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.804993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.815832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.852128] device hsr_slave_0 entered promiscuous mode [ 51.900569] device hsr_slave_1 entered promiscuous mode [ 51.940413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.948002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.955614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.963460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.971452] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.977807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.985523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.993584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.003321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.011333] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.031623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.039129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.048596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.056520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.065064] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.071457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.080602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.089720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.101320] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.108968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.117004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.125433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.135212] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.141630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.151082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.159085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.167428] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.176384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.196115] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.204651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.213600] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.220967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.228534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.236056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.243747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.252835] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.260760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.268332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.275928] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.285659] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.291981] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.299994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.308839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.321145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.328236] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.337240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.349159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.357620] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.364034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.374992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.382901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.395605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.402809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.412073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.424417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.431689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.439425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.447313] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.453702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.462486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.475311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.488900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.497147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.505612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.513195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.522328] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.528387] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.538701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.548358] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.554644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.563536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.573896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.587180] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.595339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.606012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.614099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.625637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.634506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.642310] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.648641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.655956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.664153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.672007] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.678346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.687686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.698697] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.705625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.713895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.722642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.730738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.738854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.748229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.756589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.770622] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.777989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.786279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.796568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.804804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.811800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.819346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.829204] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.835526] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.845797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.856588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 2019/12/18 08:59:03 executed programs: 9 [ 52.905894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.918068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.925652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.935575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.944750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.955378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.968000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.976260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.984099] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.990478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.998113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.006241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.014157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.021712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.031485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.041215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.048813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.060533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.068667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.076007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.083897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.091886] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.098234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.114824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.122531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.130161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.138706] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.145073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.155391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.163968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.173294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.214286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.223040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.240240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.247853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.255672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.265246] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.274582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.282702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.290597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.298098] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.307761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.316340] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.322648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.334042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.342592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.350583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.364648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.375186] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.383153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.395581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.405496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.417511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.425297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.464533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.483990] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.506975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.529485] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.545346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.633517] ================================================================== [ 54.641004] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 54.648191] Read of size 4 at addr ffff88808e70831c by task syz-executor.5/6988 [ 54.655631] [ 54.657253] CPU: 1 PID: 6988 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 54.665035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.674385] Call Trace: [ 54.676977] dump_stack+0xf7/0x13b [ 54.680507] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 54.685346] print_address_description.cold.7+0x9/0x1c9 [ 54.690696] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 54.695525] kasan_report.cold.8+0x11a/0x2d3 [ 54.699931] __asan_report_load4_noabort+0x14/0x20 [ 54.704870] __vb2_perform_fileio+0x10fd/0x12b0 [ 54.709539] ? vb2_core_poll+0x730/0x730 [ 54.713593] vb2_read+0xf/0x20 [ 54.716781] vb2_fop_read+0x1b6/0x390 [ 54.720676] ? vb2_fop_write+0x390/0x390 [ 54.724736] v4l2_read+0x133/0x240 [ 54.728278] do_iter_read+0x35e/0x570 [ 54.732416] ? dup_iter+0x250/0x250 [ 54.736044] ? trace_hardirqs_off+0x10/0x10 [ 54.740371] vfs_readv+0xb6/0x110 [ 54.743817] ? find_held_lock+0x36/0x1d0 [ 54.747879] ? compat_rw_copy_check_uvector+0x310/0x310 [ 54.753238] ? __fget+0x1ad/0x2f0 [ 54.756709] ? __fget_light+0x166/0x200 [ 54.760685] do_preadv+0x158/0x250 [ 54.764231] ? do_readv+0x320/0x320 [ 54.767844] ? do_syscall_64+0x4c/0x5b0 [ 54.771809] ? SyS_writev+0x10/0x10 [ 54.775427] SyS_preadv+0xc/0x10 [ 54.778784] do_syscall_64+0x1c7/0x5b0 [ 54.782764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.787595] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 54.792776] RIP: 0033:0x459a29 [ 54.795954] RSP: 002b:00007f18dd796c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 54.803660] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 54.810916] RDX: 0000000000000006 RSI: 00000000200018c0 RDI: 0000000000000004 [ 54.818172] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 54.825422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18dd7976d4 [ 54.832685] R13: 00000000004c6d3d R14: 00000000004dc0b8 R15: 00000000ffffffff [ 54.839950] [ 54.841571] Allocated by task 6985: [ 54.845192] save_stack_trace+0x16/0x20 [ 54.849155] save_stack+0x43/0xd0 [ 54.852597] kasan_kmalloc+0xc7/0xe0 [ 54.856297] kmem_cache_alloc_trace+0x152/0x7a0 [ 54.860956] __vb2_init_fileio+0x160/0xaf0 [ 54.865171] __vb2_perform_fileio+0xa9f/0x12b0 [ 54.869734] vb2_read+0xf/0x20 [ 54.872921] vb2_fop_read+0x1b6/0x390 [ 54.876713] v4l2_read+0x133/0x240 [ 54.880238] do_iter_read+0x35e/0x570 [ 54.884244] vfs_readv+0xb6/0x110 [ 54.887688] do_preadv+0x158/0x250 [ 54.891225] SyS_preadv+0xc/0x10 [ 54.894588] do_syscall_64+0x1c7/0x5b0 [ 54.898460] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 54.903636] [ 54.905249] Freed by task 6983: [ 54.908517] save_stack_trace+0x16/0x20 [ 54.912475] save_stack+0x43/0xd0 [ 54.915910] kasan_slab_free+0x71/0xc0 [ 54.922226] kfree+0xcc/0x270 [ 54.925314] __vb2_cleanup_fileio+0xee/0x140 [ 54.929702] vb2_core_queue_release+0xf/0x70 [ 54.934092] _vb2_fop_release+0x1ac/0x280 [ 54.938220] vb2_fop_release+0x66/0xd0 [ 54.942091] vivid_fop_release+0x15f/0x3a0 [ 54.946308] v4l2_release+0xeb/0x1a0 [ 54.950004] __fput+0x232/0x750 [ 54.953275] ____fput+0x9/0x10 [ 54.956456] task_work_run+0xe5/0x170 [ 54.960241] exit_to_usermode_loop+0x16a/0x1b0 [ 54.964808] do_syscall_64+0x416/0x5b0 [ 54.968688] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 54.973859] [ 54.975470] The buggy address belongs to the object at ffff88808e708000 [ 54.975470] which belongs to the cache kmalloc-1024 of size 1024 [ 54.988314] The buggy address is located 796 bytes inside of [ 54.988314] 1024-byte region [ffff88808e708000, ffff88808e708400) [ 55.000297] The buggy address belongs to the page: [ 55.005221] page:ffffea000239c200 count:1 mapcount:0 mapping:ffff88808e708000 index:0x0 compound_mapcount: 0 [ 55.015177] flags: 0x1fffc0000008100(slab|head) [ 55.019834] raw: 01fffc0000008100 ffff88808e708000 0000000000000000 0000000100000007 [ 55.027700] raw: ffffea0002a5f720 ffffea000251aa20 ffff8880aa800ac0 0000000000000000 [ 55.035566] page dumped because: kasan: bad access detected [ 55.041263] [ 55.042878] Memory state around the buggy address: [ 55.047786] ffff88808e708200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.055142] ffff88808e708280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.062488] >ffff88808e708300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.069920] ^ [ 55.074051] ffff88808e708380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.081398] ffff88808e708400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.088734] ================================================================== [ 55.096163] Disabling lock debugging due to kernel taint [ 55.115312] Kernel panic - not syncing: panic_on_warn set ... [ 55.115312] [ 55.122695] CPU: 0 PID: 6988 Comm: syz-executor.5 Tainted: G B 4.14.159-syzkaller #0 [ 55.131818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.141199] Call Trace: [ 55.143766] dump_stack+0xf7/0x13b [ 55.147348] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 55.152187] panic+0x1b0/0x358 [ 55.155360] ? add_taint.cold.5+0x11/0x11 [ 55.159549] ? ___preempt_schedule+0x16/0x18 [ 55.163967] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 55.168797] kasan_end_report+0x47/0x4f [ 55.172785] kasan_report.cold.8+0x76/0x2d3 [ 55.177085] __asan_report_load4_noabort+0x14/0x20 [ 55.181995] __vb2_perform_fileio+0x10fd/0x12b0 [ 55.186645] ? vb2_core_poll+0x730/0x730 [ 55.190687] vb2_read+0xf/0x20 [ 55.193855] vb2_fop_read+0x1b6/0x390 [ 55.197718] ? vb2_fop_write+0x390/0x390 [ 55.201760] v4l2_read+0x133/0x240 [ 55.205326] do_iter_read+0x35e/0x570 [ 55.209102] ? dup_iter+0x250/0x250 [ 55.212704] ? trace_hardirqs_off+0x10/0x10 [ 55.217008] vfs_readv+0xb6/0x110 [ 55.220447] ? find_held_lock+0x36/0x1d0 [ 55.224485] ? compat_rw_copy_check_uvector+0x310/0x310 [ 55.229821] ? __fget+0x1ad/0x2f0 [ 55.233250] ? __fget_light+0x166/0x200 [ 55.237199] do_preadv+0x158/0x250 [ 55.240725] ? do_readv+0x320/0x320 [ 55.244327] ? do_syscall_64+0x4c/0x5b0 [ 55.248278] ? SyS_writev+0x10/0x10 [ 55.251879] SyS_preadv+0xc/0x10 [ 55.255224] do_syscall_64+0x1c7/0x5b0 [ 55.259100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 55.263922] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 55.269084] RIP: 0033:0x459a29 [ 55.272248] RSP: 002b:00007f18dd796c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 55.279948] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 55.287195] RDX: 0000000000000006 RSI: 00000000200018c0 RDI: 0000000000000004 [ 55.294538] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 55.301783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18dd7976d4 [ 55.309028] R13: 00000000004c6d3d R14: 00000000004dc0b8 R15: 00000000ffffffff [ 55.317591] Kernel Offset: disabled [ 55.321207] Rebooting in 86400 seconds..