Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts. [ 41.899696] random: sshd: uninitialized urandom read (32 bytes read) 2019/12/15 06:03:37 parsed 1 programs [ 42.106159] audit: type=1400 audit(1576389817.552:36): avc: denied { map } for pid=6990 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 42.585815] random: cc1: uninitialized urandom read (8 bytes read) [ 43.312393] audit: type=1400 audit(1576389818.762:37): avc: denied { map } for pid=6990 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=44 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/12/15 06:03:38 executed programs: 0 [ 43.358468] audit: type=1400 audit(1576389818.802:38): avc: denied { map } for pid=6990 comm="syz-execprog" path="/root/syzkaller-shm603425999" dev="sda1" ino=16485 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.385088] audit: type=1400 audit(1576389818.802:39): avc: denied { map } for pid=6990 comm="syz-execprog" path="/root/syzkaller-shm292048354" dev="sda1" ino=16486 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.437745] IPVS: ftp: loaded support on port[0] = 21 [ 44.210696] IPVS: ftp: loaded support on port[0] = 21 [ 44.267638] chnl_net:caif_netlink_parms(): no params data found [ 44.294783] IPVS: ftp: loaded support on port[0] = 21 [ 44.321539] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.327995] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.335350] device bridge_slave_0 entered promiscuous mode [ 44.353717] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.360609] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.367726] device bridge_slave_1 entered promiscuous mode [ 44.417644] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.442582] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.464867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.472576] team0: Port device team_slave_0 added [ 44.479828] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.487087] team0: Port device team_slave_1 added [ 44.492320] chnl_net:caif_netlink_parms(): no params data found [ 44.507752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.515495] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.551802] IPVS: ftp: loaded support on port[0] = 21 [ 44.572201] device hsr_slave_0 entered promiscuous mode [ 44.600500] device hsr_slave_1 entered promiscuous mode [ 44.683048] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.695323] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.702030] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.709075] device bridge_slave_0 entered promiscuous mode [ 44.715733] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.730207] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.736650] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.744549] device bridge_slave_1 entered promiscuous mode [ 44.794310] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.809429] chnl_net:caif_netlink_parms(): no params data found [ 44.819543] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.833545] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.839989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.846924] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.853365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.876598] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.883992] team0: Port device team_slave_0 added [ 44.889998] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.897389] team0: Port device team_slave_1 added [ 44.907307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.916862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.935797] IPVS: ftp: loaded support on port[0] = 21 [ 44.982310] device hsr_slave_0 entered promiscuous mode [ 45.020465] device hsr_slave_1 entered promiscuous mode [ 45.082585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.089929] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.136749] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.143314] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.150576] device bridge_slave_0 entered promiscuous mode [ 45.159216] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.165676] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.173555] device bridge_slave_1 entered promiscuous mode [ 45.208622] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.216401] chnl_net:caif_netlink_parms(): no params data found [ 45.234240] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.240648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.247266] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.253658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.262662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.293869] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 45.301340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.314304] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.321961] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.329088] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 45.337566] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.344427] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.357516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.365387] team0: Port device team_slave_0 added [ 45.372721] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.399993] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.408034] team0: Port device team_slave_1 added [ 45.416209] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.423568] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.429935] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.439655] device bridge_slave_0 entered promiscuous mode [ 45.446662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.454295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.462214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.462396] IPVS: ftp: loaded support on port[0] = 21 [ 45.469911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.521149] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.527537] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.534802] device bridge_slave_1 entered promiscuous mode [ 45.552414] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.558527] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.592245] chnl_net:caif_netlink_parms(): no params data found [ 45.616982] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.662448] device hsr_slave_0 entered promiscuous mode [ 45.700431] device hsr_slave_1 entered promiscuous mode [ 45.744519] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.755410] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.763156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.776403] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.787657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.796295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.804187] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.810604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.862956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.873210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.884305] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.893681] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.901086] team0: Port device team_slave_0 added [ 45.906449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.915792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.923435] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.929860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.937312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.945458] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.952847] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.959782] device bridge_slave_0 entered promiscuous mode [ 45.967015] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.973586] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.981126] device bridge_slave_1 entered promiscuous mode [ 45.996974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.004232] team0: Port device team_slave_1 added [ 46.021367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.035661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.044834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.053167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.067369] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.082087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.090632] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.098189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.119260] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.141794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.150630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.158759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.202183] device hsr_slave_0 entered promiscuous mode [ 46.240416] device hsr_slave_1 entered promiscuous mode [ 46.321091] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.328260] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.351583] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.358962] team0: Port device team_slave_0 added [ 46.365014] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.375864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.383977] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.391855] team0: Port device team_slave_1 added [ 46.397408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.405281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.414195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.421603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.429309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.442210] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.448519] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.457733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.466737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.474146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.489648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.497680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.507874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.562221] device hsr_slave_0 entered promiscuous mode [ 46.620398] device hsr_slave_1 entered promiscuous mode [ 46.683942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.690839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.698886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.708593] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.715135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.722875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.730792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.740525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.749731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.757941] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.771680] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.796398] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.802938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.809938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.818018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.826051] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.832546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.839942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.851438] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.858352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.865891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.874609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.887832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.895183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.902403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.913237] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.919318] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.932868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.939824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.948318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.959813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.968117] chnl_net:caif_netlink_parms(): no params data found [ 46.982090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.989219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.996459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.004817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.012496] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.018846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.025968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.033694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.049101] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 47.057691] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.075485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.087319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.094288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.104663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.111517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.118192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.126156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.133983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.141873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.151404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.176108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.184857] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.191269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.198385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.207361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.215259] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.221795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.229683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.238789] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.259283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.274910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.295031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.306670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.318055] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 47.326929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.336865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.346247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.357868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.367572] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.377993] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.385749] device bridge_slave_0 entered promiscuous mode [ 47.395518] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.406549] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.416905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.423914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.431693] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.438042] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.445414] device bridge_slave_1 entered promiscuous mode [ 47.452377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.466367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.475055] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.487218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.496011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.504301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.512155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.522164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.543339] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.549466] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.557304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.566014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.583529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.592091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.606872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.615348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.624567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.635507] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.659158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.669773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.685018] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.691950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.722386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.724754] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.776810] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.787457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.837387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.847211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.898732] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.899308] team0: Port device team_slave_0 added [ 47.901169] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.901642] team0: Port device team_slave_1 added [ 47.902275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.902864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.947870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.956785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.957098] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.957127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.959176] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.995091] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 48.002579] ================================================================== [ 48.010172] BUG: KASAN: use-after-free in tty_open+0x995/0xa10 [ 48.016145] Read of size 8 at addr ffff8880a03bce80 by task syz-executor.5/7082 [ 48.023594] [ 48.025220] CPU: 0 PID: 7082 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 48.033029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.033037] Call Trace: [ 48.033052] dump_stack+0x142/0x197 [ 48.033067] ? tty_open+0x995/0xa10 [ 48.033080] print_address_description.cold+0x7c/0x1dc [ 48.033087] ? tty_open+0x995/0xa10 [ 48.033093] kasan_report.cold+0xa9/0x2af [ 48.033102] __asan_report_load8_noabort+0x14/0x20 [ 48.033109] tty_open+0x995/0xa10 [ 48.033121] ? tty_init_dev+0x3a0/0x3a0 [ 48.033131] ? do_raw_spin_unlock+0x16b/0x260 [ 48.033139] ? tty_init_dev+0x3a0/0x3a0 [ 48.033148] chrdev_open+0x207/0x590 [ 48.033157] ? cdev_put.part.0+0x50/0x50 [ 48.033167] ? security_file_open+0x89/0x190 [ 48.033178] do_dentry_open+0x73b/0xeb0 [ 48.033186] ? cdev_put.part.0+0x50/0x50 [ 48.033195] vfs_open+0x105/0x220 [ 48.033204] path_openat+0x8bd/0x3f70 [ 48.033216] ? trace_hardirqs_on+0x10/0x10 [ 48.033229] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 48.033236] ? find_held_lock+0x35/0x130 [ 48.033249] ? __alloc_fd+0x1d4/0x4a0 [ 48.033259] do_filp_open+0x18e/0x250 [ 48.033266] ? may_open_dev+0xe0/0xe0 [ 48.033282] ? _raw_spin_unlock+0x2d/0x50 [ 48.033289] ? __alloc_fd+0x1d4/0x4a0 [ 48.033304] do_sys_open+0x2c5/0x430 [ 48.033314] ? filp_open+0x70/0x70 [ 48.033324] ? SyS_clock_gettime+0xf8/0x180 [ 48.033335] SyS_open+0x2d/0x40 [ 48.033340] ? do_sys_open+0x430/0x430 [ 48.033352] do_syscall_64+0x1e8/0x640 [ 48.033359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.033371] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 48.033379] RIP: 0033:0x4146a1 [ 48.033384] RSP: 002b:00007fa6833907a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 48.033393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004146a1 [ 48.033398] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fa6833907d0 [ 48.033401] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000d [ 48.033406] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fa6833916d4 [ 48.033409] R13: 00000000004cb17d R14: 00000000004e4738 R15: 00000000ffffffff [ 48.033422] [ 48.033427] Allocated by task 6965: [ 48.033437] save_stack_trace+0x16/0x20 [ 48.033443] save_stack+0x45/0xd0 [ 48.033448] kasan_kmalloc+0xce/0xf0 [ 48.033454] kmem_cache_alloc_trace+0x152/0x790 [ 48.033460] vc_allocate+0x148/0x580 [ 48.033466] con_install+0x52/0x400 [ 48.033481] tty_init_dev+0xea/0x3a0 [ 48.033486] tty_open+0x414/0xa10 [ 48.033492] chrdev_open+0x207/0x590 [ 48.033499] do_dentry_open+0x73b/0xeb0 [ 48.033505] vfs_open+0x105/0x220 [ 48.033510] path_openat+0x8bd/0x3f70 [ 48.033516] do_filp_open+0x18e/0x250 [ 48.033522] do_sys_open+0x2c5/0x430 [ 48.033528] SyS_open+0x2d/0x40 [ 48.033534] do_syscall_64+0x1e8/0x640 [ 48.033540] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 48.033542] [ 48.033545] Freed by task 7080: [ 48.033551] save_stack_trace+0x16/0x20 [ 48.033557] save_stack+0x45/0xd0 [ 48.033563] kasan_slab_free+0x75/0xc0 [ 48.033569] kfree+0xcc/0x270 [ 48.033576] vt_disallocate_all+0x286/0x380 [ 48.033581] vt_ioctl+0x76b/0x2170 [ 48.033587] tty_ioctl+0x841/0x1320 [ 48.033595] do_vfs_ioctl+0x7ae/0x1060 [ 48.033601] SyS_ioctl+0x8f/0xc0 [ 48.033608] do_syscall_64+0x1e8/0x640 [ 48.033613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 48.033615] [ 48.033620] The buggy address belongs to the object at ffff8880a03bcc80 [ 48.033620] which belongs to the cache kmalloc-2048 of size 2048 [ 48.033627] The buggy address is located 512 bytes inside of [ 48.033627] 2048-byte region [ffff8880a03bcc80, ffff8880a03bd480) [ 48.033629] The buggy address belongs to the page: [ 48.033635] page:ffffea000280ef00 count:1 mapcount:0 mapping:ffff8880a03bc400 index:0x0 compound_mapcount: 0 [ 48.033644] flags: 0xfffe0000008100(slab|head) [ 48.033655] raw: 00fffe0000008100 ffff8880a03bc400 0000000000000000 0000000100000003 [ 48.033663] raw: ffffea00027f7da0 ffffea00020d80a0 ffff8880aa800c40 0000000000000000 [ 48.033666] page dumped because: kasan: bad access detected [ 48.033668] [ 48.033670] Memory state around the buggy address: [ 48.033676] ffff8880a03bcd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.033682] ffff8880a03bce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.033687] >ffff8880a03bce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.033690] ^ [ 48.033696] ffff8880a03bcf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.033702] ffff8880a03bcf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.033705] ================================================================== [ 48.033708] Disabling lock debugging due to kernel taint [ 48.060087] Kernel panic - not syncing: panic_on_warn set ... [ 48.060087] [ 48.068853] kobject: 'veth1_to_hsr' (ffff8880956987b0): fill_kobj_path: path = '/devices/virtual/net/veth1_to_hsr' [ 48.071258] CPU: 0 PID: 7082 Comm: syz-executor.5 Tainted: G B 4.14.158-syzkaller #0 [ 48.071262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.071265] Call Trace: [ 48.071278] dump_stack+0x142/0x197 [ 48.071290] ? tty_open+0x995/0xa10 [ 48.071298] panic+0x1f9/0x42d [ 48.071303] ? add_taint.cold+0x16/0x16 [ 48.071313] ? ___preempt_schedule+0x16/0x18 [ 48.071326] kasan_end_report+0x47/0x4f [ 48.071333] kasan_report.cold+0x130/0x2af [ 48.071340] __asan_report_load8_noabort+0x14/0x20 [ 48.071345] tty_open+0x995/0xa10 [ 48.071354] ? tty_init_dev+0x3a0/0x3a0 [ 48.071363] ? do_raw_spin_unlock+0x16b/0x260 [ 48.071369] ? tty_init_dev+0x3a0/0x3a0 [ 48.071377] chrdev_open+0x207/0x590 [ 48.071382] ? cdev_put.part.0+0x50/0x50 [ 48.071392] ? security_file_open+0x89/0x190 [ 48.071400] do_dentry_open+0x73b/0xeb0 [ 48.071406] ? cdev_put.part.0+0x50/0x50 [ 48.071412] vfs_open+0x105/0x220 [ 48.071421] path_openat+0x8bd/0x3f70 [ 48.071430] ? trace_hardirqs_on+0x10/0x10 [ 48.071440] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 48.071446] ? find_held_lock+0x35/0x130 [ 48.071457] ? __alloc_fd+0x1d4/0x4a0 [ 48.071464] do_filp_open+0x18e/0x250 [ 48.071470] ? may_open_dev+0xe0/0xe0 [ 48.071482] ? _raw_spin_unlock+0x2d/0x50 [ 48.071489] ? __alloc_fd+0x1d4/0x4a0 [ 48.071500] do_sys_open+0x2c5/0x430 [ 48.071507] ? filp_open+0x70/0x70 [ 48.071515] ? SyS_clock_gettime+0xf8/0x180 [ 48.071522] SyS_open+0x2d/0x40 [ 48.071530] ? do_sys_open+0x430/0x430 [ 48.075298] kobject: 'queues' (ffff8880952fb648): kobject_add_internal: parent: 'veth1_to_hsr', set: '' [ 48.078933] do_syscall_64+0x1e8/0x640 [ 48.078941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.078952] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 48.086039] kobject: 'queues' (ffff8880952fb648): kobject_uevent_env [ 48.087378] RIP: 0033:0x4146a1 [ 48.087383] RSP: 002b:00007fa6833907a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 48.087392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004146a1 [ 48.091348] kobject: 'queues' (ffff8880952fb648): kobject_uevent_env: filter function caused the event to drop! [ 48.095139] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fa6833907d0 [ 48.095143] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000d [ 48.095147] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fa6833916d4 [ 48.095150] R13: 00000000004cb17d R14: 00000000004e4738 R15: 00000000ffffffff [ 48.100929] Kernel Offset: disabled [ 48.729847] Rebooting in 86400 seconds..