Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 41.146493][ T26] audit: type=1400 audit(1586378640.284:8): avc: denied { execmem } for pid=6907 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.159093][ T6908] IPVS: ftp: loaded support on port[0] = 21 [ 41.488613][ T65] tipc: TX() has been purged, node left! [ 41.823659][ T6932] can: request_module (can-proto-0) failed. [ 44.710920][ T6932] can: request_module (can-proto-0) failed. [ 44.721403][ T6932] can: request_module (can-proto-0) failed. [ 44.759103][ T26] audit: type=1400 audit(1586378643.905:9): avc: denied { create } for pid=6884 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.207' (ECDSA) to the list of known hosts. 2020/04/08 20:44:11 parsed 1 programs 2020/04/08 20:44:12 executed programs: 0 [ 53.165262][ T26] audit: type=1400 audit(1586378652.318:10): avc: denied { execmem } for pid=7026 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 53.258298][ T7027] IPVS: ftp: loaded support on port[0] = 21 [ 53.275501][ T7031] IPVS: ftp: loaded support on port[0] = 21 [ 53.294589][ T7034] IPVS: ftp: loaded support on port[0] = 21 [ 53.304939][ T7037] IPVS: ftp: loaded support on port[0] = 21 [ 53.336433][ T7036] IPVS: ftp: loaded support on port[0] = 21 [ 53.368738][ T7033] IPVS: ftp: loaded support on port[0] = 21 [ 53.639509][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 53.689537][ T7037] chnl_net:caif_netlink_parms(): no params data found [ 53.786062][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 53.825386][ T7027] chnl_net:caif_netlink_parms(): no params data found [ 53.838774][ T7034] chnl_net:caif_netlink_parms(): no params data found [ 53.852545][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.861779][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.870746][ T7037] device bridge_slave_0 entered promiscuous mode [ 53.882800][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.890885][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.900033][ T7037] device bridge_slave_1 entered promiscuous mode [ 53.908685][ T7031] chnl_net:caif_netlink_parms(): no params data found [ 53.926436][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.936031][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.946475][ T7036] device bridge_slave_0 entered promiscuous mode [ 53.985654][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.993494][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.004111][ T7036] device bridge_slave_1 entered promiscuous mode [ 54.013271][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.029262][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.100818][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.120174][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.132440][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.141740][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.154922][ T7033] device bridge_slave_0 entered promiscuous mode [ 54.168732][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.178935][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.187869][ T7033] device bridge_slave_1 entered promiscuous mode [ 54.200225][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.209936][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.219497][ T7034] device bridge_slave_0 entered promiscuous mode [ 54.228929][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.237311][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.245883][ T7027] device bridge_slave_0 entered promiscuous mode [ 54.268534][ T7037] team0: Port device team_slave_0 added [ 54.289297][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.296640][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.305647][ T7034] device bridge_slave_1 entered promiscuous mode [ 54.313440][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.320783][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.329388][ T7027] device bridge_slave_1 entered promiscuous mode [ 54.339047][ T7036] team0: Port device team_slave_0 added [ 54.346537][ T7037] team0: Port device team_slave_1 added [ 54.353429][ T7036] team0: Port device team_slave_1 added [ 54.364772][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.372723][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.381594][ T7031] device bridge_slave_0 entered promiscuous mode [ 54.446253][ T7037] device hsr_slave_0 entered promiscuous mode [ 54.484170][ T7037] device hsr_slave_1 entered promiscuous mode [ 54.545634][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.555514][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.562870][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.571314][ T7031] device bridge_slave_1 entered promiscuous mode [ 54.598478][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.633668][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.646117][ T7033] team0: Port device team_slave_0 added [ 54.656336][ T7033] team0: Port device team_slave_1 added [ 54.664238][ T7034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.688743][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.702217][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.714108][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.746842][ T7036] device hsr_slave_0 entered promiscuous mode [ 54.813999][ T7036] device hsr_slave_1 entered promiscuous mode [ 54.874204][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.882244][ T7036] Cannot create hsr debugfs directory [ 54.898487][ T7034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.006936][ T7033] device hsr_slave_0 entered promiscuous mode [ 55.053866][ T7033] device hsr_slave_1 entered promiscuous mode [ 55.103599][ T7033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.116495][ T7033] Cannot create hsr debugfs directory [ 55.127484][ T7031] team0: Port device team_slave_0 added [ 55.136969][ T7027] team0: Port device team_slave_0 added [ 55.150431][ T7031] team0: Port device team_slave_1 added [ 55.159636][ T7034] team0: Port device team_slave_0 added [ 55.174277][ T7034] team0: Port device team_slave_1 added [ 55.180743][ T7037] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.228780][ T7027] team0: Port device team_slave_1 added [ 55.255425][ T7037] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.298380][ T7037] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.350806][ T7037] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.466383][ T7031] device hsr_slave_0 entered promiscuous mode [ 55.513933][ T7031] device hsr_slave_1 entered promiscuous mode [ 55.553599][ T7031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.561195][ T7031] Cannot create hsr debugfs directory [ 55.656234][ T7034] device hsr_slave_0 entered promiscuous mode [ 55.704163][ T7034] device hsr_slave_1 entered promiscuous mode [ 55.783382][ T7034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.791402][ T7034] Cannot create hsr debugfs directory [ 55.813573][ T7036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.875332][ T7036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.986496][ T7027] device hsr_slave_0 entered promiscuous mode [ 56.053680][ T7027] device hsr_slave_1 entered promiscuous mode [ 56.093467][ T7027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.101342][ T7027] Cannot create hsr debugfs directory [ 56.115774][ T7036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.158248][ T7036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.209763][ T7033] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.244785][ T7033] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.306169][ T7033] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.368142][ T7033] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.485088][ T7031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.525897][ T7031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.616290][ T7034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.669479][ T7031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.705772][ T7031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.763444][ T7034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.814330][ T7027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.855908][ T7034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.929832][ T7034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.977769][ T7027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.016231][ T7027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.075804][ T7027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.175252][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.220788][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.242446][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.265760][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.278496][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.302098][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.315039][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.323943][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.332775][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.342239][ T3913] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.350082][ T3913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.358521][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.368083][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.376764][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.384175][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.393994][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.432286][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.458996][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.472646][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.481670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.491079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.499777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.508526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.519694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.528346][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.536591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.546136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.555467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.564672][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.571748][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.580415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.596462][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.620928][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.629817][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.642359][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.649750][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.658410][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.668333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.677465][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.684706][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.692201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.700963][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.709786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.718628][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.727448][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.736328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.746071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.762718][ T7037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.774386][ T7037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.814630][ T7034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.824480][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.834052][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.842657][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.857392][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.866235][ T2662] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.873360][ T2662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.881286][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.890165][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.898636][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.908644][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.917645][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.924917][ T2662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.932684][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.942683][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.952526][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.959677][ T2662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.967624][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.976369][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.985314][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.994161][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.002627][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.011407][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.027300][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.036637][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.045880][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.054086][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.062577][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.079606][ T7031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.093163][ T7031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.115734][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.139635][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.149067][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.162096][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.170995][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.180846][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.188849][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.196797][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.206207][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.215816][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.224979][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.236226][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.245278][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.255223][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.264843][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.274080][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.282518][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.291268][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.299762][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.319976][ T7036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.333957][ T7036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.350570][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.369645][ T7034] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.381427][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.395779][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.404967][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.414650][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.424261][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.432512][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.445590][ T7027] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.471627][ T7033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.483374][ T7033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.497954][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.506523][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.515493][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.524431][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.534125][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.543425][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.551794][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.561211][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.569256][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.577468][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.597842][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.631038][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.639621][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.655452][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.666664][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.673955][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.683695][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.692301][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.701393][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.708672][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.716849][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.725905][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.735258][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.742325][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.750076][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.759321][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.767308][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.799857][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.832341][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.846373][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.876149][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.903471][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.910927][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.927175][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.939011][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.952350][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.961290][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.969914][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.977087][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.996044][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.003812][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.012332][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.022902][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.031488][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.040218][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 2020/04/08 20:44:18 executed programs: 6 [ 59.076110][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.087305][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.102475][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.143993][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.163464][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.174462][ T7997] ================================================================== [ 59.182716][ T7997] BUG: KASAN: global-out-of-bounds in precalculate_color+0x1d50/0x22f0 [ 59.190961][ T7997] Read of size 1 at addr ffffffff882d4359 by task vivid-000-vid-c/7997 [ 59.199223][ T7997] [ 59.201560][ T7997] CPU: 0 PID: 7997 Comm: vivid-000-vid-c Not tainted 5.6.0-syzkaller #0 [ 59.209880][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.219941][ T7997] Call Trace: [ 59.223234][ T7997] dump_stack+0x12d/0x187 [ 59.227578][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.233128][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.238624][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.244003][ T7997] print_address_description.constprop.8.cold.10+0x58/0x31d [ 59.251393][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.256855][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.262478][ T7997] __kasan_report.cold.11+0x37/0x4e [ 59.267817][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.273196][ T7997] kasan_report+0x38/0x50 [ 59.277522][ T7997] __asan_report_load1_noabort+0x14/0x20 [ 59.283143][ T7997] precalculate_color+0x1d50/0x22f0 [ 59.288429][ T7997] ? color_to_ycbcr.isra.6+0x5b0/0x5b0 [ 59.293891][ T7997] tpg_recalc+0x3fc/0x2460 [ 59.298284][ T7997] ? __kasan_check_read+0x11/0x20 [ 59.303298][ T7997] ? mark_lock+0xc2/0x770 [ 59.307859][ T7997] ? __kasan_check_read+0x11/0x20 [ 59.312889][ T7997] ? mark_lock+0xc2/0x770 [ 59.317301][ T7997] ? tpg_get_color.isra.10+0x260/0x260 [ 59.322739][ T7997] ? hlock_class+0x52/0x120 [ 59.327241][ T7997] ? __lock_acquire+0xd2a/0x3ae0 [ 59.332254][ T7997] tpg_calc_text_basep+0x97/0x2a0 [ 59.337273][ T7997] vivid_fillbuff+0x1856/0x41c0 [ 59.342109][ T7997] ? mark_lock+0xc2/0x770 [ 59.346429][ T7997] ? hlock_class+0x52/0x120 [ 59.350950][ T7997] ? vivid_grab_controls+0x350/0x350 [ 59.356234][ T7997] ? vivid_thread_vid_cap_tick+0xa11/0x1e10 [ 59.362120][ T7997] ? lock_downgrade+0x960/0x960 [ 59.367050][ T7997] ? __kasan_check_write+0x14/0x20 [ 59.372140][ T7997] ? do_raw_spin_lock+0x132/0x2e0 [ 59.377162][ T7997] ? rwlock_bug.part.0+0x90/0x90 [ 59.382087][ T7997] vivid_thread_vid_cap_tick+0xb33/0x1e10 [ 59.388741][ T7997] ? vivid_thread_vid_cap_tick+0xb33/0x1e10 [ 59.394817][ T7997] ? lock_release+0x960/0x960 [ 59.399539][ T7997] ? do_raw_spin_lock+0x132/0x2e0 [ 59.404571][ T7997] vivid_thread_vid_cap+0x50f/0x9e0 [ 59.409762][ T7997] ? __kthread_parkme+0x37/0x1c0 [ 59.414788][ T7997] kthread+0x354/0x420 [ 59.418979][ T7997] ? vivid_thread_vid_cap_tick+0x1e10/0x1e10 [ 59.424951][ T7997] ? kthread_mod_delayed_work+0x190/0x190 [ 59.430746][ T7997] ret_from_fork+0x24/0x30 [ 59.435144][ T7997] [ 59.437451][ T7997] The buggy address belongs to the variable: [ 59.443411][ T7997] rc_dev_rw_protocol_attr_grp+0x119/0x8a0 [ 59.449202][ T7997] [ 59.451552][ T7997] Memory state around the buggy address: [ 59.457194][ T7997] ffffffff882d4200: 00 fa fa fa fa fa fa fa 00 00 00 00 00 fa fa fa [ 59.465328][ T7997] ffffffff882d4280: fa fa fa fa 00 00 03 fa fa fa fa fa 00 06 fa fa [ 59.473386][ T7997] >ffffffff882d4300: fa fa fa fa 00 04 fa fa fa fa fa fa 07 fa fa fa [ 59.481454][ T7997] ^ [ 59.488398][ T7997] ffffffff882d4380: fa fa fa fa 00 00 01 fa fa fa fa fa 00 02 fa fa [ 59.496455][ T7997] ffffffff882d4400: fa fa fa fa 06 fa fa fa fa fa fa fa 00 fa fa fa [ 59.504645][ T7997] ================================================================== [ 59.512705][ T7997] Disabling lock debugging due to kernel taint [ 59.521470][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.530547][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.539044][ T7997] Kernel panic - not syncing: panic_on_warn set ... [ 59.541315][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.545648][ T7997] CPU: 1 PID: 7997 Comm: vivid-000-vid-c Tainted: G B 5.6.0-syzkaller #0 [ 59.545650][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.545652][ T7997] Call Trace: [ 59.545664][ T7997] dump_stack+0x12d/0x187 [ 59.545672][ T7997] ? precalculate_color+0x1d00/0x22f0 [ 59.545675][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.545682][ T7997] panic+0x22a/0x4e3 [ 59.545686][ T7997] ? add_taint.cold.7+0x11/0x11 [ 59.545693][ T7997] ? preempt_schedule_thunk+0x16/0x18 [ 59.545699][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.545702][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.545707][ T7997] end_report+0x51/0x59 [ 59.545711][ T7997] __kasan_report.cold.11+0xe/0x4e [ 59.545716][ T7997] ? precalculate_color+0x1d50/0x22f0 [ 59.545720][ T7997] kasan_report+0x38/0x50 [ 59.545726][ T7997] __asan_report_load1_noabort+0x14/0x20 [ 59.545729][ T7997] precalculate_color+0x1d50/0x22f0 [ 59.545736][ T7997] ? color_to_ycbcr.isra.6+0x5b0/0x5b0 [ 59.545755][ T7997] tpg_recalc+0x3fc/0x2460 [ 59.545760][ T7997] ? __kasan_check_read+0x11/0x20 [ 59.545766][ T7997] ? mark_lock+0xc2/0x770 [ 59.545771][ T7997] ? __kasan_check_read+0x11/0x20 [ 59.545774][ T7997] ? mark_lock+0xc2/0x770 [ 59.545780][ T7997] ? tpg_get_color.isra.10+0x260/0x260 [ 59.545784][ T7997] ? hlock_class+0x52/0x120 [ 59.545788][ T7997] ? __lock_acquire+0xd2a/0x3ae0 [ 59.545795][ T7997] tpg_calc_text_basep+0x97/0x2a0 [ 59.545802][ T7997] vivid_fillbuff+0x1856/0x41c0 [ 59.545806][ T7997] ? mark_lock+0xc2/0x770 [ 59.545809][ T7997] ? hlock_class+0x52/0x120 [ 59.545825][ T7997] ? vivid_grab_controls+0x350/0x350 [ 59.545832][ T7997] ? vivid_thread_vid_cap_tick+0xa11/0x1e10 [ 59.545836][ T7997] ? lock_downgrade+0x960/0x960 [ 59.545840][ T7997] ? __kasan_check_write+0x14/0x20 [ 59.545843][ T7997] ? do_raw_spin_lock+0x132/0x2e0 [ 59.545847][ T7997] ? rwlock_bug.part.0+0x90/0x90 [ 59.545857][ T7997] vivid_thread_vid_cap_tick+0xb33/0x1e10 [ 59.545861][ T7997] ? vivid_thread_vid_cap_tick+0xb33/0x1e10 [ 59.545866][ T7997] ? lock_release+0x960/0x960 [ 59.545869][ T7997] ? do_raw_spin_lock+0x132/0x2e0 [ 59.545881][ T7997] vivid_thread_vid_cap+0x50f/0x9e0 [ 59.568806][ T7034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.573060][ T7997] ? __kthread_parkme+0x37/0x1c0 [ 59.573068][ T7997] kthread+0x354/0x420 [ 59.573074][ T7997] ? vivid_thread_vid_cap_tick+0x1e10/0x1e10 [ 59.573077][ T7997] ? kthread_mod_delayed_work+0x190/0x190 [ 59.573083][ T7997] ret_from_fork+0x24/0x30 [ 59.574565][ T7997] Kernel Offset: disabled [ 59.805509][ T7997] Rebooting in 86400 seconds..