[ 39.660879] IPVS: ftp: loaded support on port[0] = 21 [ 40.834441] can: request_module (can-proto-0) failed. [ 40.843482] can: request_module (can-proto-0) failed. [ 40.852119] can: request_module (can-proto-0) failed. [ 41.022134] audit: type=1400 audit(1584171512.152:37): avc: denied { create } for pid=6859 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.045917] audit: type=1400 audit(1584171512.152:38): avc: denied { create } for pid=6859 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.070312] audit: type=1400 audit(1584171512.152:39): avc: denied { create } for pid=6859 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 41.217989] random: sshd: uninitialized urandom read (32 bytes read) [ 42.019376] random: sshd: uninitialized urandom read (32 bytes read) [ 42.199576] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.81' (ECDSA) to the list of known hosts. 2020/03/14 07:38:39 parsed 1 programs 2020/03/14 07:38:39 executed programs: 0 [ 48.039804] audit: type=1400 audit(1584171519.162:40): avc: denied { map } for pid=6933 comm="syz-execprog" path="/root/syzkaller-shm843557509" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 48.087216] IPVS: ftp: loaded support on port[0] = 21 [ 48.896860] IPVS: ftp: loaded support on port[0] = 21 [ 48.938694] chnl_net:caif_netlink_parms(): no params data found [ 48.979636] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.986720] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.994272] device bridge_slave_0 entered promiscuous mode [ 48.994902] IPVS: ftp: loaded support on port[0] = 21 [ 49.001976] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.012262] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.019764] device bridge_slave_1 entered promiscuous mode [ 49.046891] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.065453] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.109223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.116460] team0: Port device team_slave_0 added [ 49.124022] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.131107] team0: Port device team_slave_1 added [ 49.136185] chnl_net:caif_netlink_parms(): no params data found [ 49.150470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.158059] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.181485] IPVS: ftp: loaded support on port[0] = 21 [ 49.261882] device hsr_slave_0 entered promiscuous mode [ 49.300368] device hsr_slave_1 entered promiscuous mode [ 49.344453] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.353516] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.386427] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.393011] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.399824] device bridge_slave_0 entered promiscuous mode [ 49.414489] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.420988] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.427887] device bridge_slave_1 entered promiscuous mode [ 49.434074] chnl_net:caif_netlink_parms(): no params data found [ 49.464939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.474867] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.503006] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.509490] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.516679] device bridge_slave_0 entered promiscuous mode [ 49.523899] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.530347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.537289] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.543654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.557522] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.564881] team0: Port device team_slave_0 added [ 49.571582] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.577910] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.585087] device bridge_slave_1 entered promiscuous mode [ 49.595878] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.603104] team0: Port device team_slave_1 added [ 49.613749] IPVS: ftp: loaded support on port[0] = 21 [ 49.624986] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.637080] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.647774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.668150] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.687560] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.696344] team0: Port device team_slave_0 added [ 49.739595] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.746938] team0: Port device team_slave_1 added [ 49.802791] device hsr_slave_0 entered promiscuous mode [ 49.840304] device hsr_slave_1 entered promiscuous mode [ 49.881082] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.888232] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.902611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.909659] chnl_net:caif_netlink_parms(): no params data found [ 49.941070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.980079] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.980369] IPVS: ftp: loaded support on port[0] = 21 [ 49.986627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.998591] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.004980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.030845] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.037871] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.045344] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.052433] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.062320] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.068765] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.075770] device bridge_slave_0 entered promiscuous mode [ 50.085800] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.092447] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.099349] device bridge_slave_1 entered promiscuous mode [ 50.162341] device hsr_slave_0 entered promiscuous mode [ 50.200368] device hsr_slave_1 entered promiscuous mode [ 50.252520] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.259881] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.278791] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.289109] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.309237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.351457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.358744] team0: Port device team_slave_0 added [ 50.366925] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.391901] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.399130] team0: Port device team_slave_1 added [ 50.404994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.412654] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.431840] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.438225] chnl_net:caif_netlink_parms(): no params data found [ 50.503353] device hsr_slave_0 entered promiscuous mode [ 50.540329] device hsr_slave_1 entered promiscuous mode [ 50.582804] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.589895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.597688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.609693] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.615963] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.622354] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.629558] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.652010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.674873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.683021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.691201] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.697546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.706042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.722481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.731080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.738734] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.745156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.756956] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.769353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.776418] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.784050] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.791045] device bridge_slave_0 entered promiscuous mode [ 50.805737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.813361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.823992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.831244] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.837583] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.845170] device bridge_slave_1 entered promiscuous mode [ 50.881198] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.887736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.897405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.924593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.933898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.941260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.949086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.956949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.964752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.972663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.980150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.987548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.010495] chnl_net:caif_netlink_parms(): no params data found [ 51.025744] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.036538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.044601] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.054138] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.064595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.071532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.083801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.092819] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.100433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.113556] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.119731] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.132861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.140435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.149765] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.160538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.173321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.187620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.194840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.204613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.212034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.220364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.228819] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.235229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.242954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.250812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.258530] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.264932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.271917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.282619] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.288705] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.296024] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 51.303258] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.311185] team0: Port device team_slave_0 added [ 51.334515] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.346608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.354229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.362037] team0: Port device team_slave_1 added [ 51.367239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.374617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.381505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.389360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.397194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.403572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.410534] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.410555] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.411237] device bridge_slave_0 entered promiscuous mode [ 51.430542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.439457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.447471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.455902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.465450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.472551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.481495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.489216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.496894] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.503257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.511082] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.517438] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.524853] device bridge_slave_1 entered promiscuous mode [ 51.541291] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.548080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.555809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.574352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.584702] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.593135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.603247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.610999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.618471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.672133] device hsr_slave_0 entered promiscuous mode [ 51.730602] device hsr_slave_1 entered promiscuous mode [ 51.770929] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.778306] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.787263] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.796593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.811699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.825778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.836316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.850944] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.863540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.871041] team0: Port device team_slave_0 added [ 51.876690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.888179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.896598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.904220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.911571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.918481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.926610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.934630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.948135] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.955086] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.961983] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.969007] team0: Port device team_slave_1 added [ 51.976605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.987665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.996488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.004177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.012795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.020964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.028638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.040371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.050168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.059491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.068477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.077198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.085812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.094229] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.100642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.107546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.115461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.123158] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.129657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.137096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.144912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.153468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.166279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.181303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.189314] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.205040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.227666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.244052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.259769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.268274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.287782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.289576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.290602] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.290634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.292618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.295093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.303695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.303967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.304193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.304529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.304786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.305543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.349940] device hsr_slave_0 entered promiscuous mode [ 52.430707] device hsr_slave_1 entered promiscuous mode [ 52.461919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.462363] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.484356] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.487254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.495995] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.537109] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.554474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.571134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.586649] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.608911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.617295] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.628096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.628170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.628226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.628565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.628867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.628929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.634590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.691288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.715735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.740203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.747875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.765154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.779944] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.787688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.804707] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.814652] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.827626] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.837085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.845627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.858454] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.864838] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.873266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.882161] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.890218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.896933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.909605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.920166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.930305] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.937297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.946018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.957989] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.964851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.972743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.982322] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.991883] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.997972] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.004829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.013163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.029866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.032074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.033405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.034728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.036653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.037363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.039154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.039846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.053102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.054130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.054409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.054607] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.054640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.054842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.055058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.055233] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.055249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.055487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.055781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.055967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.056125] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.056141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.056327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.056616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.056913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.057166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.057398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.057664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.057907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.065582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.067646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.068035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.068363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.068740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.069508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.074529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.328508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.339607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 2020/03/14 07:38:44 executed programs: 14 [ 53.349707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.351455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.351860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.356628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.406832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.425926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.426303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.426608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.426884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.432014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.433374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.433782] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.433798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.439197] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.450702] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.523044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.524671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.524923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.525658] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.535876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.568563] ================================================================== [ 53.568590] BUG: KASAN: use-after-free in con_shutdown+0x76/0x80 [ 53.568594] Write of size 8 at addr ffff88809e8dd6c8 by task syz-executor.0/7059 [ 53.568596] [ 53.568602] CPU: 1 PID: 7059 Comm: syz-executor.0 Not tainted 4.14.173-syzkaller #0 [ 53.568605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.568608] Call Trace: [ 53.568618] dump_stack+0xf7/0x13b [ 53.568624] ? con_shutdown+0x76/0x80 [ 53.568633] print_address_description.cold.7+0x9/0x1c9 [ 53.568638] ? con_shutdown+0x76/0x80 [ 53.568644] kasan_report.cold.8+0x11a/0x2d3 [ 53.568652] __asan_report_store8_noabort+0x17/0x20 [ 53.568657] con_shutdown+0x76/0x80 [ 53.568663] release_tty+0xab/0x760 [ 53.568670] tty_release_struct+0x33/0x50 [ 53.568676] tty_release+0x97e/0xc60 [ 53.568684] ? mutex_unlock+0xd/0x10 [ 53.568694] __fput+0x232/0x750 [ 53.568698] ? _raw_spin_unlock_irq+0x27/0x80 [ 53.568708] ____fput+0x9/0x10 [ 53.568715] task_work_run+0xe5/0x170 [ 53.568725] exit_to_usermode_loop+0x16a/0x1b0 [ 53.568734] do_syscall_64+0x416/0x5b0 [ 53.568738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.568748] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.568753] RIP: 0033:0x414411 [ 53.568756] RSP: 002b:00007f922ba007a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 53.568763] RAX: ffffffffffffffea RBX: 6666666666666667 RCX: 0000000000414411 [ 53.568766] RDX: 0000000000000000 RSI: 0000000000127200 RDI: 00007f922ba00850 [ 53.568769] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 53.568772] R10: 00007f922ba019d0 R11: 0000000000000293 R12: 00007f922ba016d4 [ 53.568775] R13: 00000000004cae23 R14: 00000000004e4318 R15: 00000000ffffffff [ 53.568788] [ 53.568791] Allocated by task 7059: [ 53.568798] save_stack_trace+0x16/0x20 [ 53.568802] save_stack+0x43/0xd0 [ 53.568806] kasan_kmalloc+0xc7/0xe0 [ 53.568810] kmem_cache_alloc_trace+0x152/0x7a0 [ 53.568814] vc_allocate+0x145/0x590 [ 53.568818] con_install+0x4d/0x410 [ 53.568822] tty_init_dev+0xdb/0x350 [ 53.568826] tty_open+0x50a/0x970 [ 53.568830] chrdev_open+0x1e9/0x5b0 [ 53.568835] do_dentry_open+0x620/0xdb0 [ 53.568839] vfs_open+0xfc/0x240 [ 53.568844] path_openat+0xdde/0x3bd0 [ 53.568847] do_filp_open+0x16b/0x220 [ 53.568851] do_sys_open+0x1c2/0x340 [ 53.568855] SyS_open+0x19/0x20 [ 53.568859] do_syscall_64+0x1c7/0x5b0 [ 53.568863] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.568865] [ 53.568868] Freed by task 7056: [ 53.568872] save_stack_trace+0x16/0x20 [ 53.568875] save_stack+0x43/0xd0 [ 53.568879] kasan_slab_free+0x71/0xc0 [ 53.568882] kfree+0xcc/0x270 [ 53.568888] vt_disallocate_all+0x23b/0x3c0 [ 53.568892] vt_ioctl+0x17ab/0x2090 [ 53.568895] tty_ioctl+0x434/0x1260 [ 53.568900] do_vfs_ioctl+0x180/0xfb0 [ 53.568904] SyS_ioctl+0x74/0x80 [ 53.568908] do_syscall_64+0x1c7/0x5b0 [ 53.568912] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.568914] [ 53.568918] The buggy address belongs to the object at ffff88809e8dd5c0 [ 53.568918] which belongs to the cache kmalloc-2048 of size 2048 [ 53.568922] The buggy address is located 264 bytes inside of [ 53.568922] 2048-byte region [ffff88809e8dd5c0, ffff88809e8dddc0) [ 53.568924] The buggy address belongs to the page: [ 53.568929] page:ffffea00027a3700 count:1 mapcount:0 mapping:ffff88809e8dc4c0 index:0x0 compound_mapcount: 0 [ 53.568937] flags: 0xfffe0000008100(slab|head) [ 53.568944] raw: 00fffe0000008100 ffff88809e8dc4c0 0000000000000000 0000000100000003 [ 53.568949] raw: ffffea000276f0a0 ffffea00027da6a0 ffff8880aa800c40 0000000000000000 [ 53.568951] page dumped because: kasan: bad access detected [ 53.568953] [ 53.568955] Memory state around the buggy address: [ 53.568960] ffff88809e8dd580: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 53.568964] ffff88809e8dd600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.568967] >ffff88809e8dd680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.568970] ^ [ 53.568974] ffff88809e8dd700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.568977] ffff88809e8dd780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.568980] ================================================================== [ 53.568983] Disabling lock debugging due to kernel taint [ 53.568996] Kernel panic - not syncing: panic_on_warn set ... [ 53.568996] [ 53.569000] CPU: 1 PID: 7059 Comm: syz-executor.0 Tainted: G B 4.14.173-syzkaller #0 [ 53.569002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.569004] Call Trace: [ 53.569008] dump_stack+0xf7/0x13b [ 53.569012] ? con_shutdown+0x76/0x80 [ 53.569017] panic+0x1b0/0x358 [ 53.569021] ? add_taint.cold.5+0x11/0x11 [ 53.569028] ? con_shutdown+0x76/0x80 [ 53.569032] kasan_end_report+0x47/0x4f [ 53.569035] kasan_report.cold.8+0x76/0x2d3 [ 53.569041] __asan_report_store8_noabort+0x17/0x20 [ 53.569044] con_shutdown+0x76/0x80 [ 53.569048] release_tty+0xab/0x760 [ 53.569053] tty_release_struct+0x33/0x50 [ 53.569057] tty_release+0x97e/0xc60 [ 53.569061] ? mutex_unlock+0xd/0x10 [ 53.569066] __fput+0x232/0x750 [ 53.569069] ? _raw_spin_unlock_irq+0x27/0x80 [ 53.569075] ____fput+0x9/0x10 [ 53.569079] task_work_run+0xe5/0x170 [ 53.569084] exit_to_usermode_loop+0x16a/0x1b0 [ 53.569090] do_syscall_64+0x416/0x5b0 [ 53.569093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.569099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.569107] RIP: 0033:0x414411 [ 53.569109] RSP: 002b:00007f922ba007a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 53.569114] RAX: ffffffffffffffea RBX: 6666666666666667 RCX: 0000000000414411 [ 53.569116] RDX: 0000000000000000 RSI: 0000000000127200 RDI: 00007f922ba00850 [ 53.569118] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 53.569120] R10: 00007f922ba019d0 R11: 0000000000000293 R12: 00007f922ba016d4 [ 53.569123] R13: 00000000004cae23 R14: 00000000004e4318 R15: 00000000ffffffff [ 53.570538] Kernel Offset: disabled [ 54.147217] Rebooting in 86400 seconds..