[ 69.611573] IPVS: ftp: loaded support on port[0] = 21 [ 70.968104] can: request_module (can-proto-0) failed. [ 70.979437] can: request_module (can-proto-0) failed. [ 70.994188] can: request_module (can-proto-0) failed. [ 71.367044] audit: type=1400 audit(1580700031.018:37): avc: denied { create } for pid=8452 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 71.391329] audit: type=1400 audit(1580700031.018:38): avc: denied { create } for pid=8452 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 71.415264] audit: type=1400 audit(1580700031.018:39): avc: denied { create } for pid=8452 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 71.721151] random: sshd: uninitialized urandom read (32 bytes read) [ 73.098756] random: sshd: uninitialized urandom read (32 bytes read) [ 73.331860] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.193' (ECDSA) to the list of known hosts. 2020/02/03 03:20:38 parsed 1 programs 2020/02/03 03:20:39 executed programs: 0 [ 79.482454] audit: type=1400 audit(1580700039.138:40): avc: denied { map } for pid=8526 comm="syz-execprog" path="/root/syzkaller-shm221727126" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 79.810909] IPVS: ftp: loaded support on port[0] = 21 [ 80.609807] IPVS: ftp: loaded support on port[0] = 21 [ 80.662185] chnl_net:caif_netlink_parms(): no params data found [ 80.699793] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.706305] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.713983] device bridge_slave_0 entered promiscuous mode [ 80.733875] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.740817] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.747689] device bridge_slave_1 entered promiscuous mode [ 80.761097] IPVS: ftp: loaded support on port[0] = 21 [ 80.777188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.789347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.856034] chnl_net:caif_netlink_parms(): no params data found [ 80.875672] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.883475] team0: Port device team_slave_0 added [ 80.884182] IPVS: ftp: loaded support on port[0] = 21 [ 80.909531] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.919419] team0: Port device team_slave_1 added [ 80.940212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.948299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.013288] device hsr_slave_0 entered promiscuous mode [ 81.070249] device hsr_slave_1 entered promiscuous mode [ 81.144530] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 81.161565] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.168014] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.176174] device bridge_slave_0 entered promiscuous mode [ 81.195413] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 81.203643] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.209976] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.217133] device bridge_slave_1 entered promiscuous mode [ 81.235581] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.246533] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.323394] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.330617] team0: Port device team_slave_0 added [ 81.336594] chnl_net:caif_netlink_parms(): no params data found [ 81.362756] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.371230] team0: Port device team_slave_1 added [ 81.377236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.397340] IPVS: ftp: loaded support on port[0] = 21 [ 81.407241] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.413898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.421407] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.427903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.442745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.450173] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.456506] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.463538] device bridge_slave_0 entered promiscuous mode [ 81.474231] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.480776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.487800] device bridge_slave_1 entered promiscuous mode [ 81.578176] chnl_net:caif_netlink_parms(): no params data found [ 81.600290] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.652910] device hsr_slave_0 entered promiscuous mode [ 81.700430] device hsr_slave_1 entered promiscuous mode [ 81.772494] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.781469] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.788546] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.796998] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 81.805819] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 81.841063] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.848644] team0: Port device team_slave_0 added [ 81.856487] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.864808] team0: Port device team_slave_1 added [ 81.870300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.878211] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.885398] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.894994] device bridge_slave_0 entered promiscuous mode [ 81.917185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.924909] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.931914] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.939288] device bridge_slave_1 entered promiscuous mode [ 81.959318] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.046218] device hsr_slave_0 entered promiscuous mode [ 82.090190] device hsr_slave_1 entered promiscuous mode [ 82.170656] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 82.178613] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 82.208563] IPVS: ftp: loaded support on port[0] = 21 [ 82.217519] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.227809] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.251284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.289236] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.302177] team0: Port device team_slave_0 added [ 82.329641] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.340470] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 82.346812] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.354996] team0: Port device team_slave_1 added [ 82.367758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.403323] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.411527] chnl_net:caif_netlink_parms(): no params data found [ 82.421330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.428619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.446585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.505633] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 82.511804] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.561945] device hsr_slave_0 entered promiscuous mode [ 82.601009] device hsr_slave_1 entered promiscuous mode [ 82.713845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.720208] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 82.728499] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.735295] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.743230] device bridge_slave_0 entered promiscuous mode [ 82.750720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.767696] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 82.779258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.787854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.795624] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.802027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.809222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.816204] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.824145] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.831011] device bridge_slave_1 entered promiscuous mode [ 82.852226] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.859068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.885118] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.896209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.904741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.913498] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.919956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.933654] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.952540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.959696] team0: Port device team_slave_0 added [ 82.984017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.996792] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.005095] team0: Port device team_slave_1 added [ 83.012363] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.020643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.028323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.035684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.052565] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.065023] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 83.071403] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.079818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.092094] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.100171] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.115946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.131654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 83.153424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.169235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.177023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.185970] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.192417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.200876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.207689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.220636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.303476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.313696] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.364933] device hsr_slave_0 entered promiscuous mode [ 83.410259] device hsr_slave_1 entered promiscuous mode [ 83.451177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 83.458393] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 83.469813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.477776] chnl_net:caif_netlink_parms(): no params data found [ 83.487523] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.510519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.516603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.525254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.533637] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.540097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.547260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.555709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.563283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.570304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.577397] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 83.585550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 83.599108] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 83.605519] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.615453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 83.633424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.641120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.648504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.667232] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.675446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 83.692342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 83.699863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.708972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.717174] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.723772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.734227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.741995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.749897] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.760333] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 83.768297] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.778951] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 83.787383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.804313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.811620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.819384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.826595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.835019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.847075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 83.878935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.886603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.896437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.904681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.913729] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.920357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.927739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.937929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.961976] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 83.968452] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.976187] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.985400] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.995000] device bridge_slave_0 entered promiscuous mode [ 84.006278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.016173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.033340] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 84.041407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 84.050313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.057608] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.064730] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.072461] device bridge_slave_1 entered promiscuous mode [ 84.079276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 84.090823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.098691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.106610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.114389] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.120807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.127665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.136327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.146474] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 84.164788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.199585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 84.206961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.215568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.222619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.229300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.238491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.246544] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.253129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.260687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.268568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.278479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 84.309971] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 84.319023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.327133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.338133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 84.353864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.361959] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 84.380455] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 84.388650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.397512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.406041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.413905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.428887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 84.439652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.476387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.486515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.495455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.506222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.514358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.525503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.534021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.544959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.552735] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 84.571220] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 84.578321] team0: Port device team_slave_0 added [ 84.588101] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 84.596345] team0: Port device team_slave_1 added [ 84.602623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.613574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.622040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.647779] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 84.657167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 84.667182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.682155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 84.689766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.707372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.725017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.732915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.740440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.748263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.760945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 84.769706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.782337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.806703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.816130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.824453] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 84.830997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.842929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 84.850606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.858513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.904127] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 84.913877] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 84.919900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.934377] 8021q: adding VLAN 0 to HW filter on device bond0 2020/02/03 03:20:44 executed programs: 6 [ 84.986456] device hsr_slave_0 entered promiscuous mode [ 85.040965] device hsr_slave_1 entered promiscuous mode [ 85.073492] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 85.099974] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 85.115637] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.149282] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 85.163414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.163518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.168052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.181471] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.182383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.183038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.186786] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 85.304648] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 85.339328] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.352944] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.354204] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 85.358282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 85.376692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 85.381027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.381124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.381182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.381518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.382186] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.382282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.383126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.384006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.384769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.384843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.396671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.399657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.426120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.426830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.443480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 85.444743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.463146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 85.464000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.464432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.465078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.474783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 85.483676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.484089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.501245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 85.504562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 85.506626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.507086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.507566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.507872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.517401] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 85.517423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.529408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.539194] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 85.541368] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 85.541424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.541489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.570454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.575536] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.588625] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.588690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.589235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.601346] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 85.879711] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.932213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 85.966236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.967000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.967614] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.967667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.969850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.011893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 86.012842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.013422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.013759] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.013792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.049089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 86.061072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.071360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 86.071572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.104835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 86.105044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.105478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.105851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.118608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 86.118683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.119251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.151944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 86.152016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.152457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.170985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 86.171030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.171314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.175193] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 86.175231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.221150] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 86.431024] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 86.435189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.439273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.439342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.503576] ================================================================== [ 86.503624] BUG: KASAN: use-after-free in con_shutdown+0x76/0x80 [ 86.503629] Write of size 8 at addr ffff88808ccd93c8 by task syz-executor.2/8631 [ 86.503632] [ 86.503638] CPU: 0 PID: 8631 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 86.503641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.503644] Call Trace: [ 86.503652] dump_stack+0xf7/0x13b [ 86.503658] ? con_shutdown+0x76/0x80 [ 86.503667] print_address_description.cold.7+0x9/0x1c9 [ 86.503672] ? con_shutdown+0x76/0x80 [ 86.503678] kasan_report.cold.8+0x11a/0x2d3 [ 86.503687] __asan_report_store8_noabort+0x17/0x20 [ 86.503691] con_shutdown+0x76/0x80 [ 86.503698] release_tty+0xab/0x760 [ 86.503706] tty_release_struct+0x33/0x50 [ 86.503711] tty_release+0x97e/0xc60 [ 86.503724] __fput+0x232/0x750 [ 86.503729] ? _raw_spin_unlock_irq+0x27/0x80 [ 86.503739] ____fput+0x9/0x10 [ 86.503747] task_work_run+0xe5/0x170 [ 86.503758] exit_to_usermode_loop+0x16a/0x1b0 [ 86.503767] do_syscall_64+0x416/0x5b0 [ 86.503772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 86.503782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 86.503787] RIP: 0033:0x414211 [ 86.503790] RSP: 002b:00007fff9b17d790 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 86.503797] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000414211 [ 86.503800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 86.503803] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 86.503806] R10: 00007fff9b17d870 R11: 0000000000000293 R12: 000000000075c9a0 [ 86.503809] R13: 000000000075c9a0 R14: 0000000000760140 R15: 000000000075bfd4 [ 86.503823] [ 86.503826] Allocated by task 8641: [ 86.503833] save_stack_trace+0x16/0x20 [ 86.503837] save_stack+0x43/0xd0 [ 86.503840] kasan_kmalloc+0xc7/0xe0 [ 86.503847] kmem_cache_alloc_trace+0x152/0x7a0 [ 86.503851] vc_allocate+0x145/0x590 [ 86.503856] con_install+0x4d/0x410 [ 86.503859] tty_init_dev+0xdb/0x350 [ 86.503863] tty_open+0x50a/0x970 [ 86.503867] chrdev_open+0x1e9/0x5b0 [ 86.503872] do_dentry_open+0x620/0xdb0 [ 86.503876] vfs_open+0xfc/0x240 [ 86.503881] path_openat+0xe09/0x3d60 [ 86.503885] do_filp_open+0x16b/0x220 [ 86.503888] do_sys_open+0x1c2/0x340 [ 86.503892] SyS_open+0x19/0x20 [ 86.503896] do_syscall_64+0x1c7/0x5b0 [ 86.503900] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 86.503902] [ 86.503904] Freed by task 8639: [ 86.503908] save_stack_trace+0x16/0x20 [ 86.503911] save_stack+0x43/0xd0 [ 86.503915] kasan_slab_free+0x71/0xc0 [ 86.503918] kfree+0xcc/0x270 [ 86.503924] vt_disallocate_all+0x23b/0x3c0 [ 86.503928] vt_ioctl+0x1a1f/0x21d0 [ 86.503932] tty_ioctl+0x434/0x1260 [ 86.503937] do_vfs_ioctl+0x180/0xfb0 [ 86.503941] SyS_ioctl+0x74/0x80 [ 86.503945] do_syscall_64+0x1c7/0x5b0 [ 86.503948] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 86.503950] [ 86.503953] The buggy address belongs to the object at ffff88808ccd92c0 [ 86.503953] which belongs to the cache kmalloc-2048 of size 2048 [ 86.503957] The buggy address is located 264 bytes inside of [ 86.503957] 2048-byte region [ffff88808ccd92c0, ffff88808ccd9ac0) [ 86.503959] The buggy address belongs to the page: [ 86.503963] page:ffffea0002333600 count:1 mapcount:0 mapping:ffff88808ccd81c0 index:0x0 compound_mapcount: 0 [ 86.503971] flags: 0xfffe0000008100(slab|head) [ 86.503977] raw: 00fffe0000008100 ffff88808ccd81c0 0000000000000000 0000000100000003 [ 86.503982] raw: ffffea00023425a0 ffffea0002340520 ffff8880aa800c40 0000000000000000 [ 86.503985] page dumped because: kasan: bad access detected [ 86.503987] [ 86.503989] Memory state around the buggy address: [ 86.503993] ffff88808ccd9280: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 86.503997] ffff88808ccd9300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.504001] >ffff88808ccd9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.504004] ^ [ 86.504007] ffff88808ccd9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.504010] ffff88808ccd9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.504013] ================================================================== [ 86.504015] Disabling lock debugging due to kernel taint [ 86.504018] Kernel panic - not syncing: panic_on_warn set ... [ 86.504018] [ 86.504022] CPU: 0 PID: 8631 Comm: syz-executor.2 Tainted: G B 4.14.169-syzkaller #0 [ 86.504025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.504026] Call Trace: [ 86.504049] dump_stack+0xf7/0x13b [ 86.504054] ? con_shutdown+0x76/0x80 [ 86.504059] panic+0x1b0/0x358 [ 86.504063] ? add_taint.cold.5+0x11/0x11 [ 86.504069] ? lock_downgrade+0x7f0/0x7f0 [ 86.504076] ? con_shutdown+0x76/0x80 [ 86.504081] kasan_end_report+0x47/0x4f [ 86.504085] kasan_report.cold.8+0x76/0x2d3 [ 86.504091] __asan_report_store8_noabort+0x17/0x20 [ 86.504095] con_shutdown+0x76/0x80 [ 86.504099] release_tty+0xab/0x760 [ 86.504104] tty_release_struct+0x33/0x50 [ 86.504108] tty_release+0x97e/0xc60 [ 86.504116] __fput+0x232/0x750 [ 86.504119] ? _raw_spin_unlock_irq+0x27/0x80 [ 86.504125] ____fput+0x9/0x10 [ 86.504130] task_work_run+0xe5/0x170 [ 86.504137] exit_to_usermode_loop+0x16a/0x1b0 [ 86.504142] do_syscall_64+0x416/0x5b0 [ 86.504146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 86.504153] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 86.504156] RIP: 0033:0x414211 [ 86.504158] RSP: 002b:00007fff9b17d790 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 86.504163] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000414211 [ 86.504165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 86.504168] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 86.504171] R10: 00007fff9b17d870 R11: 0000000000000293 R12: 000000000075c9a0 [ 86.504173] R13: 000000000075c9a0 R14: 0000000000760140 R15: 000000000075bfd4 [ 86.506725] Kernel Offset: disabled [ 87.081927] Rebooting in 86400 seconds..