[ 41.640878] IPVS: ftp: loaded support on port[0] = 21 [ 42.758121] can: request_module (can-proto-0) failed. [ 42.767379] can: request_module (can-proto-0) failed. [ 42.776432] can: request_module (can-proto-0) failed. [ 42.942821] audit: type=1400 audit(1582356409.350:38): avc: denied { create } for pid=6945 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 42.966705] audit: type=1400 audit(1582356409.350:39): avc: denied { create } for pid=6945 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.990773] audit: type=1400 audit(1582356409.350:40): avc: denied { create } for pid=6945 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 43.154111] random: sshd: uninitialized urandom read (32 bytes read) [ 43.952178] random: sshd: uninitialized urandom read (32 bytes read) [ 44.157813] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.207' (ECDSA) to the list of known hosts. 2020/02/22 07:26:56 parsed 1 programs 2020/02/22 07:26:56 executed programs: 0 [ 50.300899] IPVS: ftp: loaded support on port[0] = 21 [ 51.115641] IPVS: ftp: loaded support on port[0] = 21 [ 51.145103] chnl_net:caif_netlink_parms(): no params data found [ 51.173126] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.179778] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.187234] device bridge_slave_0 entered promiscuous mode [ 51.194262] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.200934] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.207753] device bridge_slave_1 entered promiscuous mode [ 51.221486] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.230276] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.245468] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.253103] team0: Port device team_slave_0 added [ 51.258701] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.266125] team0: Port device team_slave_1 added [ 51.273292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.280845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.341709] device hsr_slave_0 entered promiscuous mode [ 51.380417] device hsr_slave_1 entered promiscuous mode [ 51.442160] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.454148] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.481402] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.487913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.494844] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.501228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.531237] IPVS: ftp: loaded support on port[0] = 21 [ 51.569335] chnl_net:caif_netlink_parms(): no params data found [ 51.623793] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.630377] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.637386] device bridge_slave_0 entered promiscuous mode [ 51.645021] IPVS: ftp: loaded support on port[0] = 21 [ 51.658276] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.664843] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.672043] device bridge_slave_1 entered promiscuous mode [ 51.712932] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.722229] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.749657] chnl_net:caif_netlink_parms(): no params data found [ 51.764339] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.771665] team0: Port device team_slave_0 added [ 51.779850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.787065] team0: Port device team_slave_1 added [ 51.793287] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.804936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.826575] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 51.832842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.848612] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.856264] IPVS: ftp: loaded support on port[0] = 21 [ 51.921859] device hsr_slave_0 entered promiscuous mode [ 51.960377] device hsr_slave_1 entered promiscuous mode [ 52.033164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.042055] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.049226] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.073477] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.081050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.108268] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.114787] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.122874] device bridge_slave_0 entered promiscuous mode [ 52.129975] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.136101] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.143888] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.177869] chnl_net:caif_netlink_parms(): no params data found [ 52.192369] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.198948] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.206008] device bridge_slave_1 entered promiscuous mode [ 52.214107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.231863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.239821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.247517] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.253927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.269879] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.278726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.297565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.306971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.314682] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.321153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.330833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.340414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.349056] IPVS: ftp: loaded support on port[0] = 21 [ 52.356978] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.370935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.378512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.390142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.398708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.412723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.433153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.440967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.448530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.456879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.464548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.475211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.483669] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.490509] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.497376] device bridge_slave_0 entered promiscuous mode [ 52.504901] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.511353] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.518288] device bridge_slave_1 entered promiscuous mode [ 52.533779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.540906] team0: Port device team_slave_0 added [ 52.546404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.554695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.565157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.588202] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.595592] team0: Port device team_slave_1 added [ 52.601319] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.608550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.616330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.629966] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.642355] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.676266] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.682436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.695557] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.736435] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.773167] device hsr_slave_0 entered promiscuous mode [ 52.810317] device hsr_slave_1 entered promiscuous mode [ 52.852502] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.867677] chnl_net:caif_netlink_parms(): no params data found [ 52.895850] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.903504] team0: Port device team_slave_0 added [ 52.908758] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.919314] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.934515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.941530] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.948665] team0: Port device team_slave_1 added [ 52.954898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.962288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.975472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.989194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.998968] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.018382] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.028459] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.036901] device bridge_slave_0 entered promiscuous mode [ 53.043753] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.050489] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.057357] device bridge_slave_1 entered promiscuous mode [ 53.064467] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.076855] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.132218] device hsr_slave_0 entered promiscuous mode [ 53.170349] device hsr_slave_1 entered promiscuous mode [ 53.210800] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.218112] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.231038] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.247378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.254464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.272269] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.278369] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.285806] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.302351] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.334649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.355062] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.366178] ================================================================== [ 53.366995] team0: Port device team_slave_0 added [ 53.373669] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x378/0x480 [ 53.373675] Read of size 43 at addr (null) by task syz-executor.0/7072 [ 53.373677] [ 53.373682] CPU: 1 PID: 7072 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 53.373685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.373688] Call Trace: [ 53.373695] dump_stack+0xf7/0x13b [ 53.373701] ? llcp_sock_getname+0x378/0x480 [ 53.373708] kasan_report.cold.8+0x6d/0x2d3 [ 53.373715] check_memory_region+0x13e/0x1b0 [ 53.373721] memcpy+0x23/0x50 [ 53.373726] llcp_sock_getname+0x378/0x480 [ 53.373734] SYSC_getpeername+0x122/0x250 [ 53.373740] ? SYSC_getsockname+0x200/0x200 [ 53.373751] ? _copy_to_user+0x91/0xb0 [ 53.397795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.402246] ? nsecs_to_jiffies+0x20/0x20 [ 53.402257] ? SyS_clock_settime+0x1a0/0x1a0 [ 53.402265] ? do_syscall_64+0x4c/0x5b0 [ 53.402273] ? SyS_getsockname+0x10/0x10 [ 53.402278] SyS_getpeername+0x9/0x10 [ 53.402286] do_syscall_64+0x1c7/0x5b0 [ 53.417598] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.417746] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.425065] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.426477] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.426484] RIP: 0033:0x45a6f9 [ 53.426487] RSP: 002b:00007fee3033cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 53.426494] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 53.436796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.438187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 53.438191] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 53.438194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee3033d6d4 [ 53.438197] R13: 00000000004c1430 R14: 00000000004d5658 R15: 00000000ffffffff [ 53.438210] ================================================================== [ 53.442460] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.446647] Disabling lock debugging due to kernel taint [ 53.524289] Kernel panic - not syncing: panic_on_warn set ... [ 53.524289] [ 53.586754] CPU: 1 PID: 7072 Comm: syz-executor.0 Tainted: G B 4.14.171-syzkaller #0 [ 53.595953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.605341] Call Trace: [ 53.607913] dump_stack+0xf7/0x13b [ 53.611504] ? llcp_sock_getname+0x378/0x480 [ 53.615902] panic+0x1b0/0x358 [ 53.619086] ? add_taint.cold.5+0x11/0x11 [ 53.623233] ? ___preempt_schedule+0x16/0x18 [ 53.627700] ? llcp_sock_getname+0x378/0x480 [ 53.632796] kasan_end_report+0x47/0x4f [ 53.636757] kasan_report.cold.8+0x76/0x2d3 [ 53.641067] check_memory_region+0x13e/0x1b0 [ 53.645524] memcpy+0x23/0x50 [ 53.648629] llcp_sock_getname+0x378/0x480 [ 53.652849] SYSC_getpeername+0x122/0x250 [ 53.657062] ? SYSC_getsockname+0x200/0x200 [ 53.661676] ? _copy_to_user+0x91/0xb0 [ 53.665646] ? nsecs_to_jiffies+0x20/0x20 [ 53.669837] ? SyS_clock_settime+0x1a0/0x1a0 [ 53.674278] ? do_syscall_64+0x4c/0x5b0 [ 53.678238] ? SyS_getsockname+0x10/0x10 [ 53.682284] SyS_getpeername+0x9/0x10 [ 53.686078] do_syscall_64+0x1c7/0x5b0 [ 53.689945] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.694773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.699939] RIP: 0033:0x45a6f9 [ 53.703110] RSP: 002b:00007fee3033cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 53.710800] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 53.718063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 53.725585] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 53.732839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee3033d6d4 [ 53.740091] R13: 00000000004c1430 R14: 00000000004d5658 R15: 00000000ffffffff [ 53.748750] Kernel Offset: disabled [ 53.752370] Rebooting in 86400 seconds..