[ 42.540871] IPVS: ftp: loaded support on port[0] = 21 [ 43.718317] can: request_module (can-proto-0) failed. [ 43.728320] can: request_module (can-proto-0) failed. [ 43.738415] can: request_module (can-proto-0) failed. [ 43.902129] audit: type=1400 audit(1578984468.666:37): avc: denied { create } for pid=6954 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.925819] audit: type=1400 audit(1578984468.666:38): avc: denied { create } for pid=6954 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.949554] audit: type=1400 audit(1578984468.666:39): avc: denied { create } for pid=6954 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 44.113773] random: sshd: uninitialized urandom read (32 bytes read) [ 44.907510] random: sshd: uninitialized urandom read (32 bytes read) [ 45.077661] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. 2020/01/14 06:47:55 parsed 1 programs 2020/01/14 06:47:55 executed programs: 0 [ 50.945456] audit: type=1400 audit(1578984475.706:40): avc: denied { map } for pid=7028 comm="syz-execprog" path="/root/syzkaller-shm200098445" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 51.210874] IPVS: ftp: loaded support on port[0] = 21 [ 51.974835] chnl_net:caif_netlink_parms(): no params data found [ 52.001745] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.008529] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.015608] device bridge_slave_0 entered promiscuous mode [ 52.022798] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.029266] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.036228] device bridge_slave_1 entered promiscuous mode [ 52.049896] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.058746] IPVS: ftp: loaded support on port[0] = 21 [ 52.065192] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.088428] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.095674] team0: Port device team_slave_0 added [ 52.102906] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.109931] team0: Port device team_slave_1 added [ 52.119296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.128593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.212957] device hsr_slave_0 entered promiscuous mode [ 52.290287] device hsr_slave_1 entered promiscuous mode [ 52.372423] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.383827] IPVS: ftp: loaded support on port[0] = 21 [ 52.392283] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.447146] chnl_net:caif_netlink_parms(): no params data found [ 52.494179] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.500883] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.507821] device bridge_slave_0 entered promiscuous mode [ 52.518475] IPVS: ftp: loaded support on port[0] = 21 [ 52.521488] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.530206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.537326] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.543706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.561348] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.567725] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.575541] device bridge_slave_1 entered promiscuous mode [ 52.598668] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.609670] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.663397] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.671484] team0: Port device team_slave_0 added [ 52.679093] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.686428] team0: Port device team_slave_1 added [ 52.698116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.705981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.722162] chnl_net:caif_netlink_parms(): no params data found [ 52.791980] device hsr_slave_0 entered promiscuous mode [ 52.830345] device hsr_slave_1 entered promiscuous mode [ 52.882594] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.903460] IPVS: ftp: loaded support on port[0] = 21 [ 52.914718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.950950] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.958461] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.965985] device bridge_slave_0 entered promiscuous mode [ 52.976890] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.983653] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.991048] device bridge_slave_1 entered promiscuous mode [ 53.016682] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.038081] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.045358] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.055908] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.066011] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.105256] chnl_net:caif_netlink_parms(): no params data found [ 53.128766] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.136850] team0: Port device team_slave_0 added [ 53.143798] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.151346] team0: Port device team_slave_1 added [ 53.158539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.177682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.198297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.205798] IPVS: ftp: loaded support on port[0] = 21 [ 53.212474] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.218900] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.227251] device bridge_slave_0 entered promiscuous mode [ 53.235148] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.241884] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.248696] device bridge_slave_1 entered promiscuous mode [ 53.273075] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.283899] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.293584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.343357] device hsr_slave_0 entered promiscuous mode [ 53.381710] device hsr_slave_1 entered promiscuous mode [ 53.432223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.439283] team0: Port device team_slave_0 added [ 53.446105] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.453371] team0: Port device team_slave_1 added [ 53.458664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.468932] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.478515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.486874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.494608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.508908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.516217] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.529127] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.535450] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.543686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.552683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.622197] device hsr_slave_0 entered promiscuous mode [ 53.670401] device hsr_slave_1 entered promiscuous mode [ 53.710963] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.771852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.780287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.790691] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.801490] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.807826] chnl_net:caif_netlink_parms(): no params data found [ 53.836040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.844293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.852050] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.858388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.865423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.873161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.880644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.887729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.895420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.903370] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.909700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.955867] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.962377] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.970703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.978088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.998065] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.004880] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.012272] device bridge_slave_0 entered promiscuous mode [ 54.038470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.046982] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.053827] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.061019] device bridge_slave_1 entered promiscuous mode [ 54.082391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.090955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.099344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.111017] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.119968] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.126525] chnl_net:caif_netlink_parms(): no params data found [ 54.138604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.148105] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.154319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.162396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.169885] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.176387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.183301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.191259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.198794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.207308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.215263] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.234966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.249234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.262109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.271024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.278542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.287033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.294962] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.301479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.319255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.332008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.340210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.349487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.357307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.366269] team0: Port device team_slave_0 added [ 54.372048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.379639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.389418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.396293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.403761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.411548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.433312] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.442622] team0: Port device team_slave_1 added [ 54.447968] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.454924] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.462567] device bridge_slave_0 entered promiscuous mode [ 54.469576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.478687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.489056] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.495128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.502912] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.508987] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.517826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.526020] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.533564] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.539901] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.547199] device bridge_slave_1 entered promiscuous mode [ 54.553683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.561476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.568784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.576449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.583978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.595440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.608601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.625016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.635395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.649245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.657987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.665833] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.672212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.679259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.687314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.694920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.702490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.710507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.724149] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.732472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.792317] device hsr_slave_0 entered promiscuous mode [ 54.830279] device hsr_slave_1 entered promiscuous mode [ 54.870840] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.877942] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.888284] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.897909] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.906843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.914337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.922617] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.930460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.937319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.945213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.953215] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.959395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.982219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.994168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.002424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.010410] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.016769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.025645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.041153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.048407] team0: Port device team_slave_0 added [ 55.058204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.069193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.081045] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.088139] team0: Port device team_slave_1 added [ 55.093940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.101624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.110980] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.118486] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.128746] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.136760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.147246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.154869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.161914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.175757] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.186312] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.194464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.219787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.227351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.237380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.246766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.256275] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.263632] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.272225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.325336] device hsr_slave_0 entered promiscuous mode [ 55.360757] device hsr_slave_1 entered promiscuous mode [ 55.380606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.389439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.399421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.413636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.427700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.437307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.438386] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.439305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.449455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.449837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.450120] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.450152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.450428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.450696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.451005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.463628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.533895] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.544359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.549003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.579328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.589468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.589726] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.589758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.590362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.590881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.594330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.595945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.596441] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.596458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.614063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.698773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.706782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.724223] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 55.734078] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.743950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.745891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.747362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.748664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.749473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.749476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.749872] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.751339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.751657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.751896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.752148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.752424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.752627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.752920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.753112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.753502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.753792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.758351] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.760128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.760261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.771114] 8021q: adding VLAN 0 to HW filter on device batadv0 2020/01/14 06:48:00 executed programs: 11 [ 55.921789] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.929816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.965022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.976782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.003134] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.003140] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.005439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.007550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.009594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.016608] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 56.055114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.055454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.055707] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.055733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.056011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.056286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.056520] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.056544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.056810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.057491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.063055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.139531] ================================================================== [ 56.139660] BUG: KASAN: use-after-free in con_shutdown+0x76/0x80 [ 56.139668] Write of size 8 at addr ffff88807d4e04c8 by task syz-executor.2/7120 [ 56.139669] [ 56.139675] CPU: 1 PID: 7120 Comm: syz-executor.2 Not tainted 4.14.164-syzkaller #0 [ 56.139678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.139681] Call Trace: [ 56.139692] dump_stack+0xf7/0x13b [ 56.139699] ? con_shutdown+0x76/0x80 [ 56.139707] print_address_description.cold.7+0x9/0x1c9 [ 56.139712] ? con_shutdown+0x76/0x80 [ 56.139724] kasan_report.cold.8+0x11a/0x2d3 [ 56.139730] __asan_report_store8_noabort+0x17/0x20 [ 56.139734] con_shutdown+0x76/0x80 [ 56.139740] release_tty+0xab/0x760 [ 56.139747] tty_release_struct+0x33/0x50 [ 56.139753] tty_release+0x97e/0xc60 [ 56.139760] ? mutex_unlock+0xd/0x10 [ 56.139769] __fput+0x232/0x750 [ 56.139775] ? _raw_spin_unlock_irq+0x27/0x80 [ 56.139781] ____fput+0x9/0x10 [ 56.139787] task_work_run+0xe5/0x170 [ 56.139795] exit_to_usermode_loop+0x16a/0x1b0 [ 56.139803] do_syscall_64+0x416/0x5b0 [ 56.139833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.139842] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.139847] RIP: 0033:0x414411 [ 56.139850] RSP: 002b:00007fdbfa8057a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 56.139856] RAX: ffffffffffffffea RBX: 6666666666666667 RCX: 0000000000414411 [ 56.139860] RDX: 0000000000000000 RSI: 0000000000127200 RDI: 00007fdbfa805850 [ 56.139863] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 56.139866] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fdbfa8066d4 [ 56.139869] R13: 00000000004cae23 R14: 00000000004e4318 R15: 00000000ffffffff [ 56.139881] [ 56.139884] Allocated by task 7120: [ 56.139890] save_stack_trace+0x16/0x20 [ 56.139894] save_stack+0x43/0xd0 [ 56.139896] kasan_kmalloc+0xc7/0xe0 [ 56.139902] kmem_cache_alloc_trace+0x152/0x7a0 [ 56.139905] vc_allocate+0x145/0x590 [ 56.139908] con_install+0x4d/0x410 [ 56.139911] tty_init_dev+0xdb/0x350 [ 56.139915] tty_open+0x50a/0x970 [ 56.139919] chrdev_open+0x1e9/0x5b0 [ 56.139923] do_dentry_open+0x620/0xdb0 [ 56.139927] vfs_open+0xfc/0x240 [ 56.139931] path_openat+0xe6d/0x3b50 [ 56.139935] do_filp_open+0x16b/0x220 [ 56.139938] do_sys_open+0x1c2/0x340 [ 56.139942] SyS_open+0x19/0x20 [ 56.139946] do_syscall_64+0x1c7/0x5b0 [ 56.139950] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.139952] [ 56.139954] Freed by task 7118: [ 56.139958] save_stack_trace+0x16/0x20 [ 56.139962] save_stack+0x43/0xd0 [ 56.139965] kasan_slab_free+0x71/0xc0 [ 56.139969] kfree+0xcc/0x270 [ 56.139973] vt_disallocate_all+0x23b/0x3c0 [ 56.139977] vt_ioctl+0x1a1f/0x21d0 [ 56.139980] tty_ioctl+0x434/0x1260 [ 56.139985] do_vfs_ioctl+0x180/0xfb0 [ 56.139989] SyS_ioctl+0x74/0x80 [ 56.139993] do_syscall_64+0x1c7/0x5b0 [ 56.139997] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.139999] [ 56.140002] The buggy address belongs to the object at ffff88807d4e03c0 [ 56.140002] which belongs to the cache kmalloc-2048 of size 2048 [ 56.140006] The buggy address is located 264 bytes inside of [ 56.140006] 2048-byte region [ffff88807d4e03c0, ffff88807d4e0bc0) [ 56.140007] The buggy address belongs to the page: [ 56.140011] page:ffffea0001f53800 count:1 mapcount:0 mapping:ffff88807d4e03c0 index:0x0 compound_mapcount: 0 [ 56.140018] flags: 0xfffe0000008100(slab|head) [ 56.140024] raw: 00fffe0000008100 ffff88807d4e03c0 0000000000000000 0000000100000003 [ 56.140028] raw: ffffea0001f55220 ffffea0002901220 ffff8880aa800c40 0000000000000000 [ 56.140030] page dumped because: kasan: bad access detected [ 56.140031] [ 56.140033] Memory state around the buggy address: [ 56.140037] ffff88807d4e0380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 56.140040] ffff88807d4e0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.140043] >ffff88807d4e0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.140046] ^ [ 56.140049] ffff88807d4e0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.140052] ffff88807d4e0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.140054] ================================================================== [ 56.140056] Disabling lock debugging due to kernel taint [ 56.140316] Kernel panic - not syncing: panic_on_warn set ... [ 56.140316] [ 56.140321] CPU: 1 PID: 7120 Comm: syz-executor.2 Tainted: G B 4.14.164-syzkaller #0 [ 56.140323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.140324] Call Trace: [ 56.140331] dump_stack+0xf7/0x13b [ 56.140335] ? con_shutdown+0x76/0x80 [ 56.140340] panic+0x1b0/0x358 [ 56.140342] ? add_taint.cold.5+0x11/0x11 [ 56.140348] ? con_shutdown+0x76/0x80 [ 56.140352] kasan_end_report+0x47/0x4f [ 56.140355] kasan_report.cold.8+0x76/0x2d3 [ 56.140360] __asan_report_store8_noabort+0x17/0x20 [ 56.140363] con_shutdown+0x76/0x80 [ 56.140367] release_tty+0xab/0x760 [ 56.140372] tty_release_struct+0x33/0x50 [ 56.140376] tty_release+0x97e/0xc60 [ 56.140381] ? mutex_unlock+0xd/0x10 [ 56.140387] __fput+0x232/0x750 [ 56.140391] ? _raw_spin_unlock_irq+0x27/0x80 [ 56.140397] ____fput+0x9/0x10 [ 56.140401] task_work_run+0xe5/0x170 [ 56.140407] exit_to_usermode_loop+0x16a/0x1b0 [ 56.140412] do_syscall_64+0x416/0x5b0 [ 56.140415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.140420] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.140423] RIP: 0033:0x414411 [ 56.140425] RSP: 002b:00007fdbfa8057a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 56.140430] RAX: ffffffffffffffea RBX: 6666666666666667 RCX: 0000000000414411 [ 56.140433] RDX: 0000000000000000 RSI: 0000000000127200 RDI: 00007fdbfa805850 [ 56.140435] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 56.140437] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fdbfa8066d4 [ 56.140440] R13: 00000000004cae23 R14: 00000000004e4318 R15: 00000000ffffffff [ 56.142055] Kernel Offset: disabled [ 56.724970] Rebooting in 86400 seconds..