[ 43.830999] IPVS: ftp: loaded support on port[0] = 21 [ 44.979752] can: request_module (can-proto-0) failed. [ 44.989565] can: request_module (can-proto-0) failed. [ 45.000211] can: request_module (can-proto-0) failed. [ 45.172603] audit: type=1400 audit(1581402947.732:37): avc: denied { create } for pid=7222 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 45.198696] audit: type=1400 audit(1581402947.752:38): avc: denied { create } for pid=7222 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 45.222813] audit: type=1400 audit(1581402947.752:39): avc: denied { create } for pid=7222 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 45.422282] random: sshd: uninitialized urandom read (32 bytes read) [ 46.236853] random: sshd: uninitialized urandom read (32 bytes read) [ 46.435254] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2020/02/11 06:35:54 parsed 1 programs 2020/02/11 06:35:54 executed programs: 0 [ 52.267003] audit: type=1400 audit(1581402954.822:40): avc: denied { map } for pid=7297 comm="syz-execprog" path="/root/syzkaller-shm956548465" dev="sda1" ino=16492 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 52.561021] IPVS: ftp: loaded support on port[0] = 21 [ 53.427301] IPVS: ftp: loaded support on port[0] = 21 [ 53.468392] chnl_net:caif_netlink_parms(): no params data found [ 53.516846] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.523673] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.531326] device bridge_slave_0 entered promiscuous mode [ 53.540007] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.546617] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.553757] device bridge_slave_1 entered promiscuous mode [ 53.574898] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.584739] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.603513] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.612223] IPVS: ftp: loaded support on port[0] = 21 [ 53.617779] team0: Port device team_slave_0 added [ 53.631486] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.638627] team0: Port device team_slave_1 added [ 53.651533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.671143] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.698973] chnl_net:caif_netlink_parms(): no params data found [ 53.781943] IPVS: ftp: loaded support on port[0] = 21 [ 53.784381] device hsr_slave_0 entered promiscuous mode [ 53.840448] device hsr_slave_1 entered promiscuous mode [ 53.902730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.923136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.945377] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.951963] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.959091] device bridge_slave_0 entered promiscuous mode [ 53.966239] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.973318] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.980399] device bridge_slave_1 entered promiscuous mode [ 54.003921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.023306] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.053864] IPVS: ftp: loaded support on port[0] = 21 [ 54.090400] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.097561] team0: Port device team_slave_0 added [ 54.106464] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.114207] team0: Port device team_slave_1 added [ 54.120094] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.126608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.133749] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.140141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.154221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.162084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.212142] device hsr_slave_0 entered promiscuous mode [ 54.250349] device hsr_slave_1 entered promiscuous mode [ 54.290393] chnl_net:caif_netlink_parms(): no params data found [ 54.298783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.313524] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.348662] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.355231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.362033] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.368417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.391573] IPVS: ftp: loaded support on port[0] = 21 [ 54.465418] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.473283] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.480502] device bridge_slave_0 entered promiscuous mode [ 54.487459] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.494287] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.501512] device bridge_slave_1 entered promiscuous mode [ 54.523015] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.530486] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.537805] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.544667] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.585549] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.596276] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.608827] chnl_net:caif_netlink_parms(): no params data found [ 54.617654] chnl_net:caif_netlink_parms(): no params data found [ 54.637174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.663885] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.671104] team0: Port device team_slave_0 added [ 54.678815] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.701441] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.708583] team0: Port device team_slave_1 added [ 54.715108] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.735857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.743617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.753583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.763569] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.769683] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.797701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.805170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.811856] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.819894] device bridge_slave_0 entered promiscuous mode [ 54.828962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.861919] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.868292] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.875915] device bridge_slave_1 entered promiscuous mode [ 54.887961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.898633] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.905137] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.912151] device bridge_slave_0 entered promiscuous mode [ 54.956142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.964333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.972205] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.978556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.986270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.995309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.052243] device hsr_slave_0 entered promiscuous mode [ 55.090346] device hsr_slave_1 entered promiscuous mode [ 55.130337] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.136740] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.145704] device bridge_slave_1 entered promiscuous mode [ 55.153230] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.175710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.184215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.191902] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.198255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.207276] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.213789] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.225754] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.233974] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.249699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.257500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.264518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.271470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.281584] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.287673] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.307488] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.315459] team0: Port device team_slave_0 added [ 55.325125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.332600] team0: Port device team_slave_1 added [ 55.338619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.346236] chnl_net:caif_netlink_parms(): no params data found [ 55.365343] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.375075] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.383539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.392010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.422233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.472251] device hsr_slave_0 entered promiscuous mode [ 55.510863] device hsr_slave_1 entered promiscuous mode [ 55.561865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.569569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.577558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.585203] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.591588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.602163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.612958] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.629780] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.636918] team0: Port device team_slave_0 added [ 55.645107] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.652893] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.659587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.669444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.679210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.686525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.693746] team0: Port device team_slave_1 added [ 55.699327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.712931] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.719370] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.726420] device bridge_slave_0 entered promiscuous mode [ 55.736738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.744057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.751862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.759539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.767332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.775149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.783079] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.789505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.799145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.806506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.824494] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.831610] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.838752] device bridge_slave_1 entered promiscuous mode [ 55.860984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.868660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.885060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.898222] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.908386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.919005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.973704] device hsr_slave_0 entered promiscuous mode [ 56.020576] device hsr_slave_1 entered promiscuous mode [ 56.061065] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.071857] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.079294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.096117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.105582] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.114269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.125013] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.131485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.144036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.152004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.159471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.168289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.186332] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.194022] team0: Port device team_slave_0 added [ 56.205139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.213009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.225503] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.236186] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.243932] team0: Port device team_slave_1 added [ 56.249558] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.260909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.272722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.281230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.288039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.295267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.303322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.310919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.318398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.330147] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.337236] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.345735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.412276] device hsr_slave_0 entered promiscuous mode [ 56.450381] device hsr_slave_1 entered promiscuous mode [ 56.491000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.497908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.510740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.522830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.541915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.548287] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.556385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.564933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.579658] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.586749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.596447] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.605581] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.616052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.623746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.637022] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.655822] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.670484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.676662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.686116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.694957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.704655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.715301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.733027] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.739991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.750446] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.757188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.771087] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.779774] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.791634] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.801583] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.809753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.821036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.821405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.821703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.825517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.826021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.826349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.826548] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.826592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.826909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.830466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.832743] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.832750] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.833382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.833722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.833944] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.833962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.835394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.837098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.838634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.847959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.850544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.858768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.859727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.860182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.860467] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.860490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.860821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.861219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.861539] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.861565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.862023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.862471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.862925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.863347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.863730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.864256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.864515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.866391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.868601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.875105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.884157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.886380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.888380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.893177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.893239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.893718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.894085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.894398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.894735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.895038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.895300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.895537] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.895561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.895805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.896058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.896270] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.896291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.896688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.897133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.897583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.897960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.905314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.905635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.906078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.915714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.394189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.394598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.402970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.405148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.407563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.414124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.415467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.415818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.416119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.416964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.417805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.418291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.418757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.419041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.422556] ================================================================== [ 57.422589] BUG: KASAN: use-after-free in soft_cursor+0x430/0xc70 [ 57.422594] Read of size 9 at addr ffff88809b7fc451 by task syz-executor.2/7356 [ 57.422596] [ 57.422603] CPU: 0 PID: 7356 Comm: syz-executor.2 Not tainted 4.14.170-syzkaller #0 [ 57.422606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.422618] Call Trace: [ 57.422628] dump_stack+0xf7/0x13b [ 57.422634] ? soft_cursor+0x430/0xc70 [ 57.422644] print_address_description.cold.7+0x9/0x1c9 [ 57.422649] ? soft_cursor+0x430/0xc70 [ 57.422655] kasan_report.cold.8+0x11a/0x2d3 [ 57.422664] check_memory_region+0x13e/0x1b0 [ 57.422670] memcpy+0x23/0x50 [ 57.422676] soft_cursor+0x430/0xc70 [ 57.422681] ? kfree+0x104/0x270 [ 57.422686] ? bit_cursor+0xa0c/0x1ce0 [ 57.422697] bit_cursor+0xe3b/0x1ce0 [ 57.422708] ? bit_clear+0x610/0x610 [ 57.422723] ? fb_get_color_depth+0x49/0x60 [ 57.422729] ? get_color+0x30/0x340 [ 57.422733] ? bit_clear+0x610/0x610 [ 57.422739] fbcon_cursor+0x3d8/0x6c0 [ 57.422750] hide_cursor+0x95/0x2e0 [ 57.422757] redraw_screen+0x272/0x7f0 [ 57.422766] ? con_flush_chars+0x60/0x60 [ 57.422776] ? mutex_unlock+0xd/0x10 [ 57.422782] ? tty_do_resize+0x39/0x140 [ 57.422790] vc_do_resize+0xc95/0x1010 [ 57.422804] ? vt_console_print+0x1110/0x1110 [ 57.422816] ? lock_acquire+0x173/0x400 [ 57.422823] ? vt_ioctl+0xee0/0x21d0 [ 57.422834] vc_resize+0x3d/0x60 [ 57.422840] ? console_lock+0x41/0x70 [ 57.422846] vt_ioctl+0xfc1/0x21d0 [ 57.422853] ? find_held_lock+0x36/0x1d0 [ 57.422860] ? complete_change_console+0x300/0x300 [ 57.422872] ? avc_has_extended_perms+0x477/0x1100 [ 57.422878] ? lock_downgrade+0x7f0/0x7f0 [ 57.422890] ? avc_has_extended_perms+0x494/0x1100 [ 57.422895] ? __lock_acquire+0x6a4/0x4500 [ 57.422904] ? do_futex+0x597/0x1760 [ 57.422912] tty_ioctl+0x434/0x1260 [ 57.422917] ? avc_ss_reset+0xd0/0xd0 [ 57.422924] ? tty_vhangup+0x20/0x20 [ 57.422929] ? __lock_acquire+0x6a4/0x4500 [ 57.422935] ? trace_hardirqs_on+0x10/0x10 [ 57.422951] ? trace_hardirqs_off+0x10/0x10 [ 57.422974] ? __might_sleep+0x93/0xb0 [ 57.422989] do_vfs_ioctl+0x180/0xfb0 [ 57.422994] ? __fget+0x1ad/0x2f0 [ 57.423002] ? ioctl_preallocate+0x1a0/0x1a0 [ 57.423012] ? __fget+0x1ca/0x2f0 [ 57.423023] ? security_file_ioctl+0x6a/0xa0 [ 57.423029] ? SyS_clock_settime+0x1a0/0x1a0 [ 57.423034] ? security_file_ioctl+0x6a/0xa0 [ 57.423042] SyS_ioctl+0x74/0x80 [ 57.423049] ? do_vfs_ioctl+0xfb0/0xfb0 [ 57.423056] do_syscall_64+0x1c7/0x5b0 [ 57.423061] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.423071] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.423077] RIP: 0033:0x45a679 [ 57.423081] RSP: 002b:00007f5d69222c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.423088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 57.423091] RDX: 00000000200002c0 RSI: 000000000000560a RDI: 0000000000000004 [ 57.423094] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 57.423097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d692236d4 [ 57.423100] R13: 00000000004c6ce2 R14: 00000000004dd2d0 R15: 00000000ffffffff [ 57.423113] [ 57.423123] Allocated by task 7324: [ 57.423131] save_stack_trace+0x16/0x20 [ 57.423136] save_stack+0x43/0xd0 [ 57.423139] kasan_kmalloc+0xc7/0xe0 [ 57.423143] __kmalloc_node_track_caller+0x50/0x70 [ 57.423150] __kmalloc_reserve.isra.38+0x2c/0xc0 [ 57.423153] __alloc_skb+0xc1/0x500 [ 57.423160] netlink_sendmsg+0x7c4/0xbd0 [ 57.423166] sock_sendmsg+0xb5/0xf0 [ 57.423171] SYSC_sendto+0x1e3/0x2c0 [ 57.423176] SyS_sendto+0x9/0x10 [ 57.423180] do_syscall_64+0x1c7/0x5b0 [ 57.423184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.423186] [ 57.423189] Freed by task 7324: [ 57.423194] save_stack_trace+0x16/0x20 [ 57.423198] save_stack+0x43/0xd0 [ 57.423201] kasan_slab_free+0x71/0xc0 [ 57.423205] kfree+0xcc/0x270 [ 57.423209] skb_free_head+0x74/0x90 [ 57.423213] skb_release_data+0x4d3/0x860 [ 57.423217] skb_release_all+0x3d/0x50 [ 57.423221] consume_skb+0x84/0x2a0 [ 57.423226] netlink_unicast+0x413/0x600 [ 57.423230] netlink_sendmsg+0x730/0xbd0 [ 57.423234] sock_sendmsg+0xb5/0xf0 [ 57.423238] SYSC_sendto+0x1e3/0x2c0 [ 57.423242] SyS_sendto+0x9/0x10 [ 57.423246] do_syscall_64+0x1c7/0x5b0 [ 57.423250] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.423252] [ 57.423256] The buggy address belongs to the object at ffff88809b7fc280 [ 57.423256] which belongs to the cache kmalloc-512 of size 512 [ 57.423261] The buggy address is located 465 bytes inside of [ 57.423261] 512-byte region [ffff88809b7fc280, ffff88809b7fc480) [ 57.423264] The buggy address belongs to the page: [ 57.423269] page:ffffea00026dff00 count:1 mapcount:0 mapping:ffff88809b7fc000 index:0x0 [ 57.423276] flags: 0xfffe0000000100(slab) [ 57.423282] raw: 00fffe0000000100 ffff88809b7fc000 0000000000000000 0000000100000006 [ 57.423288] raw: ffffea000263eea0 ffffea00025b7120 ffff8880aa800940 0000000000000000 [ 57.423290] page dumped because: kasan: bad access detected [ 57.423293] [ 57.423295] Memory state around the buggy address: [ 57.423300] ffff88809b7fc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.423303] ffff88809b7fc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.423307] >ffff88809b7fc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.423309] ^ [ 57.423313] ffff88809b7fc480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.423317] ffff88809b7fc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.423320] ================================================================== [ 57.423323] Disabling lock debugging due to kernel taint [ 57.423327] Kernel panic - not syncing: panic_on_warn set ... [ 57.423327] [ 57.423331] CPU: 0 PID: 7356 Comm: syz-executor.2 Tainted: G B 4.14.170-syzkaller #0 [ 57.423334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.423335] Call Trace: [ 57.423342] dump_stack+0xf7/0x13b [ 57.423348] ? soft_cursor+0x430/0xc70 [ 57.423353] panic+0x1b0/0x358 [ 57.423357] ? add_taint.cold.5+0x11/0x11 [ 57.423361] ? lock_downgrade+0x7f0/0x7f0 [ 57.423369] ? soft_cursor+0x430/0xc70 [ 57.423373] kasan_end_report+0x47/0x4f [ 57.423377] kasan_report.cold.8+0x76/0x2d3 [ 57.423383] check_memory_region+0x13e/0x1b0 [ 57.423387] memcpy+0x23/0x50 [ 57.423392] soft_cursor+0x430/0xc70 [ 57.423395] ? kfree+0x104/0x270 [ 57.423399] ? bit_cursor+0xa0c/0x1ce0 [ 57.423406] bit_cursor+0xe3b/0x1ce0 [ 57.423413] ? bit_clear+0x610/0x610 [ 57.423422] ? fb_get_color_depth+0x49/0x60 [ 57.423426] ? get_color+0x30/0x340 [ 57.423427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.423430] ? bit_clear+0x610/0x610 [ 57.423434] fbcon_cursor+0x3d8/0x6c0 [ 57.423442] hide_cursor+0x95/0x2e0 [ 57.423447] redraw_screen+0x272/0x7f0 [ 57.423453] ? con_flush_chars+0x60/0x60 [ 57.423459] ? mutex_unlock+0xd/0x10 [ 57.423463] ? tty_do_resize+0x39/0x140 [ 57.423469] vc_do_resize+0xc95/0x1010 [ 57.423478] ? vt_console_print+0x1110/0x1110 [ 57.423484] ? lock_acquire+0x173/0x400 [ 57.423490] ? vt_ioctl+0xee0/0x21d0 [ 57.423496] vc_resize+0x3d/0x60 [ 57.423500] ? console_lock+0x41/0x70 [ 57.423504] vt_ioctl+0xfc1/0x21d0 [ 57.423509] ? find_held_lock+0x36/0x1d0 [ 57.423514] ? complete_change_console+0x300/0x300 [ 57.423520] ? avc_has_extended_perms+0x477/0x1100 [ 57.423525] ? lock_downgrade+0x7f0/0x7f0 [ 57.423533] ? avc_has_extended_perms+0x494/0x1100 [ 57.423537] ? __lock_acquire+0x6a4/0x4500 [ 57.423543] ? do_futex+0x597/0x1760 [ 57.423548] tty_ioctl+0x434/0x1260 [ 57.423552] ? avc_ss_reset+0xd0/0xd0 [ 57.423557] ? tty_vhangup+0x20/0x20 [ 57.423561] ? __lock_acquire+0x6a4/0x4500 [ 57.423566] ? trace_hardirqs_on+0x10/0x10 [ 57.423571] ? trace_hardirqs_off+0x10/0x10 [ 57.423583] ? __might_sleep+0x93/0xb0 [ 57.423591] do_vfs_ioctl+0x180/0xfb0 [ 57.423595] ? __fget+0x1ad/0x2f0 [ 57.423601] ? ioctl_preallocate+0x1a0/0x1a0 [ 57.423607] ? __fget+0x1ca/0x2f0 [ 57.423614] ? security_file_ioctl+0x6a/0xa0 [ 57.423619] ? SyS_clock_settime+0x1a0/0x1a0 [ 57.423623] ? security_file_ioctl+0x6a/0xa0 [ 57.423628] SyS_ioctl+0x74/0x80 [ 57.423633] ? do_vfs_ioctl+0xfb0/0xfb0 [ 57.423637] do_syscall_64+0x1c7/0x5b0 [ 57.423641] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.423648] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.423651] RIP: 0033:0x45a679 [ 57.423654] RSP: 002b:00007f5d69222c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.423659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 57.423662] RDX: 00000000200002c0 RSI: 000000000000560a RDI: 0000000000000004 [ 57.423664] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 57.423667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d692236d4 [ 57.423669] R13: 00000000004c6ce2 R14: 00000000004dd2d0 R15: 00000000ffffffff [ 57.425315] Kernel Offset: disabled [ 58.388472] Rebooting in 86400 seconds..