[ 32.596465] audit: type=1800 audit(1576382587.783:33): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.624339] audit: type=1800 audit(1576382587.783:34): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.485082] random: sshd: uninitialized urandom read (32 bytes read) [ 35.853570] audit: type=1400 audit(1576382591.043:35): avc: denied { map } for pid=7104 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 35.936158] random: sshd: uninitialized urandom read (32 bytes read) [ 36.532557] random: sshd: uninitialized urandom read (32 bytes read) [ 36.785967] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. [ 42.377319] random: sshd: uninitialized urandom read (32 bytes read) [ 42.557480] audit: type=1400 audit(1576382597.743:36): avc: denied { map } for pid=7116 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/12/15 04:03:17 parsed 1 programs [ 43.461173] random: cc1: uninitialized urandom read (8 bytes read) 2019/12/15 04:03:19 executed programs: 0 [ 44.345395] audit: type=1400 audit(1576382599.533:37): avc: denied { map } for pid=7116 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1090 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 44.390743] audit: type=1400 audit(1576382599.573:39): avc: denied { map } for pid=7116 comm="syz-execprog" path="/root/syzkaller-shm824490072" dev="sda1" ino=16485 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 44.417116] audit: type=1400 audit(1576382599.573:38): avc: denied { map } for pid=7116 comm="syz-execprog" path="/root/syzkaller-shm863382429" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 44.701120] IPVS: ftp: loaded support on port[0] = 21 [ 45.544998] chnl_net:caif_netlink_parms(): no params data found [ 45.552872] IPVS: ftp: loaded support on port[0] = 21 [ 45.605214] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.612150] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.619517] device bridge_slave_0 entered promiscuous mode [ 45.629084] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.635756] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.642861] device bridge_slave_1 entered promiscuous mode [ 45.655685] IPVS: ftp: loaded support on port[0] = 21 [ 45.674876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.684948] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.705930] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.715422] team0: Port device team_slave_0 added [ 45.723226] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.730656] team0: Port device team_slave_1 added [ 45.742925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.753372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.842466] device hsr_slave_0 entered promiscuous mode [ 45.880567] device hsr_slave_1 entered promiscuous mode [ 45.932895] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.942712] chnl_net:caif_netlink_parms(): no params data found [ 45.952092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.972726] IPVS: ftp: loaded support on port[0] = 21 [ 45.977780] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.984572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.991606] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.998000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.047634] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.054459] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.061872] device bridge_slave_0 entered promiscuous mode [ 46.079912] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.087203] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.095363] device bridge_slave_1 entered promiscuous mode [ 46.142102] chnl_net:caif_netlink_parms(): no params data found [ 46.161166] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.175487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.202514] IPVS: ftp: loaded support on port[0] = 21 [ 46.229187] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.237020] team0: Port device team_slave_0 added [ 46.243263] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.251537] team0: Port device team_slave_1 added [ 46.258801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.274870] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.281928] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.289430] device bridge_slave_0 entered promiscuous mode [ 46.298289] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.305131] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.312787] device bridge_slave_1 entered promiscuous mode [ 46.323877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.375541] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.422470] device hsr_slave_0 entered promiscuous mode [ 46.450585] device hsr_slave_1 entered promiscuous mode [ 46.527116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.543785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.554247] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.581101] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.598529] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.612857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.623997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.633258] team0: Port device team_slave_0 added [ 46.654509] IPVS: ftp: loaded support on port[0] = 21 [ 46.655817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.666949] chnl_net:caif_netlink_parms(): no params data found [ 46.679681] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.687278] team0: Port device team_slave_1 added [ 46.692924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.702395] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.746433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.762339] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.771021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.778505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.862388] device hsr_slave_0 entered promiscuous mode [ 46.900449] device hsr_slave_1 entered promiscuous mode [ 46.950966] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.958168] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.984919] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.991457] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.998487] device bridge_slave_0 entered promiscuous mode [ 47.006864] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.013243] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.022213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.036219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.046141] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.053392] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.061691] device bridge_slave_1 entered promiscuous mode [ 47.073258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.081564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.089094] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.095492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.102342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.109996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.118288] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.124703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.132245] chnl_net:caif_netlink_parms(): no params data found [ 47.154686] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.167918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.178426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.187615] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.200441] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.234160] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.241715] team0: Port device team_slave_0 added [ 47.257647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.267269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.274834] team0: Port device team_slave_1 added [ 47.284339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.312151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.319856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.356503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.363905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.372055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.379578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.387413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.395090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.402242] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.408784] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.416419] device bridge_slave_0 entered promiscuous mode [ 47.423693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.439070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.448651] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.455476] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.462284] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.469234] device bridge_slave_1 entered promiscuous mode [ 47.491301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.509905] chnl_net:caif_netlink_parms(): no params data found [ 47.519412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.527176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.536520] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.547325] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.557290] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.602665] device hsr_slave_0 entered promiscuous mode [ 47.640367] device hsr_slave_1 entered promiscuous mode [ 47.684575] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.692214] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.700861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.707719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.716836] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.723433] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.730445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.757961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.766700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.775368] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.781745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.789462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.797152] team0: Port device team_slave_0 added [ 47.808448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.817796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.829135] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.836687] team0: Port device team_slave_1 added [ 47.843198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.851229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.859171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.866879] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.873360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.880434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.904845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.917619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.926552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.947087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.955765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.963366] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.969896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.976920] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.986109] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.993473] device bridge_slave_0 entered promiscuous mode [ 48.000821] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.007169] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.014150] device bridge_slave_1 entered promiscuous mode [ 48.022241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.092151] device hsr_slave_0 entered promiscuous mode [ 48.130338] device hsr_slave_1 entered promiscuous mode [ 48.185453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.196612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.206032] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 48.219710] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.226813] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.239142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.247897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.255002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.262683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.270437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.279211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.291693] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.299892] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.312167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.319733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.327520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.335312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.343976] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.353024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.361103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.368743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.387159] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.396722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.406903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.414708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.421900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.436733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.448520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.459200] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.465343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.473821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.481584] team0: Port device team_slave_0 added [ 48.486959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.494793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.507587] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.514119] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.526111] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.534175] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.542407] team0: Port device team_slave_1 added [ 48.552262] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 48.559918] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.568999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.583490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.590624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.597324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.606183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.614129] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.620518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.627497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.635133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.645702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.672127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.680455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.727018] device hsr_slave_0 entered promiscuous mode [ 48.760468] device hsr_slave_1 entered promiscuous mode [ 48.810894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.818087] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.833309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.842172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.849887] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.849925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.853187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.855532] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.857592] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.859808] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.859815] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.862094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.865183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.867160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.948725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.957019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.957415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.957737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.958195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.958628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.959001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.959444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.960006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.964681] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.964705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.965084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.965386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.972934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.067990] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.081928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.091469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.091752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.091930] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.091949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.092174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.092447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.099424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.110837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.164564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.177325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.193365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.195809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.197229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.197268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.197841] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.204260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.204770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.205077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.205521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.205801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.206274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.300343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.314174] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.324583] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 49.326245] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.334821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.335266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.335570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.335628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.336082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.337151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.339708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.344701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.355221] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.358987] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.358997] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.362694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.363174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.363573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.363851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.472595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.472885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.475370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.476711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 2019/12/15 04:03:24 executed programs: 9 [ 49.477236] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.477260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.480219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.531083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.547012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.549746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.562612] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 49.563929] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.568813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.572377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.584993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.622767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.631463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.631740] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.631767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.632076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.661856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.662141] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.662166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.662495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.662576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.662637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.663082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.664614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.669883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.676914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.678914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.681212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.683474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.684822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.684828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.685414] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.692892] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.699132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.701804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.702242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.702635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.703008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.703400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.703692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.704147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.704438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.704779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.705075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.705466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.705810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.717749] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 49.720660] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.720718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.720797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.732542] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.732554] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.745768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.756228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.756718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.757104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.757366] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.757391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.757962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.762788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.762835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.763160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.763415] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.763437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.772978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.104724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.112063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.119795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.142542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.144834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.149481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.154618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.155187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.155637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.156134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.156559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.156875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.157528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.176297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.177571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.177901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.192916] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.192993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.235538] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 50.344295] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.348629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.353985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.354073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 2019/12/15 04:03:29 executed programs: 122 [ 56.938508] kobject: 'loop1' (ffff8880a41073e0): kobject_uevent_env [ 56.938539] kobject: 'loop1' (ffff8880a41073e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 56.958162] kobject: 'loop4' (ffff8880a41e2420): kobject_uevent_env [ 56.958200] kobject: 'loop4' (ffff8880a41e2420): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 56.980976] ================================================================== [ 56.981016] BUG: KASAN: use-after-free in fbcon_cursor+0x5c6/0x6f0 [ 56.981022] Read of size 2 at addr ffff8880a14f580c by task syz-executor.3/8047 [ 56.981024] [ 56.981035] CPU: 1 PID: 8047 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 56.981039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.981043] Call Trace: [ 56.981055] dump_stack+0x142/0x197 [ 56.981064] ? fbcon_cursor+0x5c6/0x6f0 [ 56.981076] print_address_description.cold+0x7c/0x1dc [ 56.981083] ? fbcon_cursor+0x5c6/0x6f0 [ 56.981088] kasan_report.cold+0xa9/0x2af [ 56.981095] __asan_report_load2_noabort+0x14/0x20 [ 56.981101] fbcon_cursor+0x5c6/0x6f0 [ 56.981111] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 56.981120] fbcon_scrolldelta+0x5a4/0x1100 [ 56.981135] ? mark_held_locks+0xb1/0x100 [ 56.981142] ? quarantine_put+0xfa/0x1a0 [ 56.981152] fbcon_set_origin+0x39/0x50 [ 56.981158] ? fbcon_scrolldelta+0x1100/0x1100 [ 56.981169] set_origin+0x2d8/0x3c0 [ 56.981178] vc_do_resize+0x686/0xec0 [ 56.981191] ? vt_console_print+0xf70/0xf70 [ 56.981198] ? lock_acquire+0x16f/0x430 [ 56.981205] ? vt_ioctl+0x122d/0x2170 [ 56.981216] vc_resize+0x4d/0x60 [ 56.981222] vt_ioctl+0x1282/0x2170 [ 56.981232] ? avc_has_extended_perms+0x8ec/0xe40 [ 56.981239] ? futex_wake+0x134/0x430 [ 56.981247] ? complete_change_console+0x360/0x360 [ 56.981255] ? avc_ss_reset+0x110/0x110 [ 56.981266] ? __lock_acquire+0x5f7/0x4620 [ 56.981280] ? find_held_lock+0x35/0x130 [ 56.981291] ? tty_jobctrl_ioctl+0x44/0xc10 [ 56.981298] ? complete_change_console+0x360/0x360 [ 56.981309] tty_ioctl+0x841/0x1320 [ 56.981318] ? tty_vhangup+0x30/0x30 [ 56.981328] ? __might_fault+0x110/0x1d0 [ 56.981340] ? __might_sleep+0x93/0xb0 [ 56.981349] ? __fget+0x210/0x370 [ 56.981360] ? tty_vhangup+0x30/0x30 [ 56.981370] do_vfs_ioctl+0x7ae/0x1060 [ 56.981380] ? selinux_file_mprotect+0x5d0/0x5d0 [ 56.981386] ? lock_downgrade+0x740/0x740 [ 56.981395] ? ioctl_preallocate+0x1c0/0x1c0 [ 56.981405] ? __fget+0x237/0x370 [ 56.981418] ? security_file_ioctl+0x7d/0xb0 [ 56.981430] ? security_file_ioctl+0x89/0xb0 [ 56.981438] SyS_ioctl+0x8f/0xc0 [ 56.981444] ? do_vfs_ioctl+0x1060/0x1060 [ 56.981455] do_syscall_64+0x1e8/0x640 [ 56.981462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.981472] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.981479] RIP: 0033:0x45a909 [ 56.981484] RSP: 002b:00007f0b23d9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.981493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 56.981497] RDX: 0000000020000000 RSI: 0000000000005609 RDI: 0000000000000003 [ 56.981500] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 56.981505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0b23d9b6d4 [ 56.981509] R13: 00000000004c7009 R14: 00000000004dd670 R15: 00000000ffffffff [ 56.981522] [ 56.981526] Allocated by task 7985: [ 56.981538] save_stack_trace+0x16/0x20 [ 56.981543] save_stack+0x45/0xd0 [ 56.981548] kasan_kmalloc+0xce/0xf0 [ 56.981554] __kmalloc+0x15d/0x7a0 [ 56.981559] vc_do_resize+0x1da/0xec0 [ 56.981563] vc_resize+0x4d/0x60 [ 56.981569] vt_ioctl+0x1282/0x2170 [ 56.981574] tty_ioctl+0x841/0x1320 [ 56.981580] do