[ 19.027746] random: 7 urandom warning(s) missed due to ratelimiting Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 34.829015] audit: type=1400 audit(1600678581.689:8): avc: denied { execmem } for pid=6263 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 34.857599] IPVS: ftp: loaded support on port[0] = 21 [ 35.219804] can: request_module (can-proto-0) failed. [ 35.843560] can: request_module (can-proto-0) failed. [ 35.868999] audit: type=1400 audit(1600678582.739:9): avc: denied { create } for pid=6242 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts. 2020/09/21 08:56:30 parsed 1 programs 2020/09/21 08:56:31 executed programs: 0 [ 44.473220] audit: type=1400 audit(1600678591.343:10): avc: denied { execmem } for pid=6383 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 44.543678] IPVS: ftp: loaded support on port[0] = 21 [ 44.546295] IPVS: ftp: loaded support on port[0] = 21 [ 44.552448] IPVS: ftp: loaded support on port[0] = 21 [ 44.596032] IPVS: ftp: loaded support on port[0] = 21 [ 44.605167] IPVS: ftp: loaded support on port[0] = 21 [ 44.615951] IPVS: ftp: loaded support on port[0] = 21 [ 44.798781] chnl_net:caif_netlink_parms(): no params data found [ 44.848672] chnl_net:caif_netlink_parms(): no params data found [ 44.881019] chnl_net:caif_netlink_parms(): no params data found [ 44.972106] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.979029] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.986418] device bridge_slave_0 entered promiscuous mode [ 45.038360] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.044823] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.051657] device bridge_slave_1 entered promiscuous mode [ 45.068390] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.077862] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.084910] device bridge_slave_0 entered promiscuous mode [ 45.092874] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.099791] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.107481] device bridge_slave_1 entered promiscuous mode [ 45.115355] chnl_net:caif_netlink_parms(): no params data found [ 45.127554] chnl_net:caif_netlink_parms(): no params data found [ 45.138195] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.148566] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.171662] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.182590] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.190987] chnl_net:caif_netlink_parms(): no params data found [ 45.209480] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.216075] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.222954] device bridge_slave_0 entered promiscuous mode [ 45.234476] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.241517] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.250555] device bridge_slave_1 entered promiscuous mode [ 45.293808] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.305132] team0: Port device team_slave_0 added [ 45.314450] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.322111] team0: Port device team_slave_0 added [ 45.328509] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.335944] team0: Port device team_slave_1 added [ 45.351218] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.363224] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.371181] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.378603] team0: Port device team_slave_1 added [ 45.388037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.416965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.424084] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.430785] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.439931] device bridge_slave_0 entered promiscuous mode [ 45.446860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.458093] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.465104] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.472062] device bridge_slave_1 entered promiscuous mode [ 45.479175] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.486051] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.492897] device bridge_slave_0 entered promiscuous mode [ 45.503085] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.509559] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.517003] device bridge_slave_1 entered promiscuous mode [ 45.523134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.531200] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.537660] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.544499] device bridge_slave_0 entered promiscuous mode [ 45.555134] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.561480] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.568611] device bridge_slave_1 entered promiscuous mode [ 45.579310] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.586616] team0: Port device team_slave_0 added [ 45.615861] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.623335] team0: Port device team_slave_1 added [ 45.641874] device hsr_slave_0 entered promiscuous mode [ 45.648646] device hsr_slave_1 entered promiscuous mode [ 45.655352] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.663822] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.672091] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.680482] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.690438] device hsr_slave_0 entered promiscuous mode [ 45.696328] device hsr_slave_1 entered promiscuous mode [ 45.702040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.710738] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.718759] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.732060] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.744126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.752248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.760156] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.768318] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.782823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.790371] team0: Port device team_slave_0 added [ 45.812944] device hsr_slave_0 entered promiscuous mode [ 45.819750] device hsr_slave_1 entered promiscuous mode [ 45.833197] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.840383] team0: Port device team_slave_0 added [ 45.846839] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.853936] team0: Port device team_slave_1 added [ 45.863890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.871398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.881789] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.889341] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.896858] team0: Port device team_slave_1 added [ 45.902012] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.909933] team0: Port device team_slave_0 added [ 45.919216] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.939293] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.946080] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.953231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.962391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.970489] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.978774] team0: Port device team_slave_1 added [ 45.984088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.994077] device hsr_slave_0 entered promiscuous mode [ 46.000065] device hsr_slave_1 entered promiscuous mode [ 46.006869] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.018674] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.034020] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.048692] device hsr_slave_0 entered promiscuous mode [ 46.054291] device hsr_slave_1 entered promiscuous mode [ 46.060860] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.078987] device hsr_slave_0 entered promiscuous mode [ 46.085438] device hsr_slave_1 entered promiscuous mode [ 46.091237] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.106094] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.119059] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.133407] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.147438] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.182244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.194344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.202567] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.223960] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.232603] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.241460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.251958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.263606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.274060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.282285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.292427] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.299064] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.319864] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.327060] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.336874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.343938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.352607] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.359160] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.367039] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.381854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.394715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.401553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.409162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.417134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.425089] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.431638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.439098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.450834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.459317] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.466172] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.473995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.482868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.491506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.505738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.513433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.521873] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.528266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.535367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.543096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.550682] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.557078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.563773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.571729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.579515] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.585908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.592975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.600167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.609201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.619482] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.628020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.638517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.647983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.657179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.666478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.674093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.681909] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.688299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.698879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.707338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.717080] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.724575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.732663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.740137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.747350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.755097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.762771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.770406] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.776790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.785951] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.792016] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.801015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.809850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.818921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.827999] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.836161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.846140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.853485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.861474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.869617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.877383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.885136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.892786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.900685] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.907076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.913758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.921745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.929405] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.935780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.942552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.949710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.958505] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.966877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.977881] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.988453] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.996166] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.003350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.010593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.018056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.025853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.032636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.040964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.049743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.057941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.066640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.074906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.081947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.090241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.097941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.105903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.113435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.121218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.129695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.137973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.145628] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.151964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.159086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.166116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.174810] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.180868] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.188616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.199703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.209409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.219195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.227086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.235230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.242828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.251223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.258997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.267357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.276089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.285090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.292840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.302014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.309522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.317523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.325557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.333056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.340708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.348486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.356090] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.362411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.369251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.378225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.387738] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.393746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.403796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.412527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.422290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.430937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.439332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.447602] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.453939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.461043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.468613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.476163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.483705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.492244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.501014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.510926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.520233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.530437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.538450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.547080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.555666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.563055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.571228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.579461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.586908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.595348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.603416] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.609723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.618631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.631609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.639595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.647686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.656391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.667951] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.676699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.689567] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.697850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.706978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.715437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.722878] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.729253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.736352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.743798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.751375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.759155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.768561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.778276] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.789078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.797440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.805585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.813016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.821913] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.828170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.842867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.851063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.859315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.871069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.879434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.887342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.896346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.903651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.913079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.922493] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.933090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.942164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.950855] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.957679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.968478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.975511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.983242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.991225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.999617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.007492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.015949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.027356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.048395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.067103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.079557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.104051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.113811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.124327] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.130401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.149469] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.158361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.166415] audit: type=1400 audit(1600678595.044:11): avc: denied { write } for pid=7284 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 48.179612] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.195266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.202746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.212629] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.219219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.229723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.242207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.268619] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.311817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.858773] ================================================================== [ 48.866163] BUG: KASAN: use-after-free in __lock_acquire+0x3426/0x4980 [ 48.872817] Read of size 8 at addr ffff88809312f420 by task syz-executor.0/7287 [ 48.880232] [ 48.881836] CPU: 1 PID: 7287 Comm: syz-executor.0 Not tainted 4.19.146-syzkaller #0 [ 48.889599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.898943] Call Trace: [ 48.901508] dump_stack+0x123/0x177 [ 48.905130] print_address_description.cold.8+0x9/0x1ff [ 48.910470] kasan_report.cold.9+0x242/0x309 [ 48.914852] ? __lock_acquire+0x3426/0x4980 [ 48.919201] __asan_report_load8_noabort+0x14/0x20 [ 48.924118] __lock_acquire+0x3426/0x4980 [ 48.928359] ? _raw_spin_unlock+0x2c/0x50 [ 48.932502] ? free_one_page+0x985/0xf30 [ 48.936535] ? __free_pages_ok+0x633/0xd90 [ 48.940746] ? __free_pages+0x7f/0xb0 [ 48.944525] ? lockdep_hardirqs_on+0x421/0x5c0 [ 48.949087] ? __free_pages_ok+0x633/0xd90 [ 48.953295] ? mark_held_locks+0x130/0x130 [ 48.957525] ? kasan_check_write+0x14/0x20 [ 48.961735] ? __free_pages+0x7f/0xb0 [ 48.965534] ? kasan_check_write+0x14/0x20 [ 48.969759] ? finish_task_switch+0x4c8/0x720 [ 48.974354] lock_acquire+0x173/0x3d0 [ 48.978191] ? lock_sock_nested+0x3a/0x100 [ 48.982408] _raw_spin_lock_bh+0x31/0x40 [ 48.986546] ? lock_sock_nested+0x3a/0x100 [ 48.991448] lock_sock_nested+0x3a/0x100 [ 48.995496] nr_accept+0x4a8/0x640 [ 48.999006] ? nr_ioctl+0x2e0/0x2e0 [ 49.002605] ? finish_wait+0x290/0x290 [ 49.006474] __sys_accept4+0x32b/0x6b0 [ 49.010335] ? __ia32_sys_listen+0x70/0x70 [ 49.014545] ? kasan_check_read+0x11/0x20 [ 49.018664] ? _copy_to_user+0x91/0xb0 [ 49.022559] ? put_timespec64+0xa9/0x100 [ 49.026591] ? nsecs_to_jiffies+0x20/0x20 [ 49.030735] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.035462] ? do_syscall_64+0x21/0x4e0 [ 49.039414] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.044756] __x64_sys_accept+0x70/0xb0 [ 49.048701] do_syscall_64+0xd0/0x4e0 [ 49.052479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.057641] RIP: 0033:0x4598f9 [ 49.060818] Code: 7d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 4b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.079704] RSP: 002b:00007f3a809d9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 49.087390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598f9 [ 49.094652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.101909] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 49.109169] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a809da6d4 [ 49.116437] R13: 00000000004bf7c9 R14: 00000000004d11a0 R15: 00000000ffffffff [ 49.123695] [ 49.125298] Allocated by task 7280: [ 49.128906] save_stack+0x43/0xd0 [ 49.132329] kasan_kmalloc+0xc7/0xe0 [ 49.136025] __kmalloc+0x15b/0x770 [ 49.139554] sk_prot_alloc+0x148/0x240 [ 49.143430] sk_alloc+0x30/0xca0 [ 49.146784] nr_create+0x7e/0x5a0 [ 49.150220] __sock_create+0x262/0x540 [ 49.154095] __sys_socket+0xd7/0x1d0 [ 49.157823] __x64_sys_socket+0x6e/0xb0 [ 49.161784] do_syscall_64+0xd0/0x4e0 [ 49.165577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.170749] [ 49.172355] Freed by task 7279: [ 49.175628] save_stack+0x43/0xd0 [ 49.179056] __kasan_slab_free+0x102/0x150 [ 49.183267] kasan_slab_free+0xe/0x10 [ 49.187038] kfree+0xcf/0x220 [ 49.190117] __sk_destruct+0x3b0/0x540 [ 49.193989] sk_destruct+0x83/0xb0 [ 49.197504] __sk_free+0x9e/0x230 [ 49.200931] sk_free+0x23/0x30 [ 49.204098] nr_release+0x2a8/0x330 [ 49.207716] __sock_release+0xc2/0x290 [ 49.211576] sock_close+0x10/0x20 [ 49.215003] __fput+0x249/0x7f0 [ 49.218260] ____fput+0x9/0x10 [ 49.221432] task_work_run+0x108/0x180 [ 49.225291] exit_to_usermode_loop+0x1a9/0x200 [ 49.229848] do_syscall_64+0x413/0x4e0 [ 49.233711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.238869] [ 49.240468] The buggy address belongs to the object at ffff88809312f380 [ 49.240468] which belongs to the cache kmalloc-2048 of size 2048 [ 49.253387] The buggy address is located 160 bytes inside of [ 49.253387] 2048-byte region [ffff88809312f380, ffff88809312fb80) [ 49.265456] The buggy address belongs to the page: [ 49.270362] page:ffffea00024c4b80 count:1 mapcount:0 mapping:ffff88812c31ec40 index:0x0 compound_mapcount: 0 [ 49.280298] flags: 0x1fffc0000008100(slab|head) [ 49.284939] raw: 01fffc0000008100 ffffea00024ddc08 ffffea00024b2608 ffff88812c31ec40 [ 49.292833] raw: 0000000000000000 ffff88809312e280 0000000100000003 0000000000000000 [ 49.300899] page dumped because: kasan: bad access detected [ 49.306631] [ 49.308249] Memory state around the buggy address: [ 49.313151] ffff88809312f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.320657] ffff88809312f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.328040] >ffff88809312f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.335396] ^ [ 49.339781] ffff88809312f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.347129] ffff88809312f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.354465] ================================================================== [ 49.361802] Disabling lock debugging due to kernel taint [ 49.367232] Kernel panic - not syncing: panic_on_warn set ... [ 49.367232] [ 49.374564] CPU: 1 PID: 7287 Comm: syz-executor.0 Tainted: G B 4.19.146-syzkaller #0 [ 49.383729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.393792] Call Trace: [ 49.396377] dump_stack+0x123/0x177 [ 49.400042] panic+0x1cd/0x375 [ 49.403221] ? __warn_printk+0xd6/0xd6 [ 49.407096] ? lock_downgrade+0x860/0x860 [ 49.411217] ? _raw_spin_unlock_irqrestore+0x63/0xd0 [ 49.417659] kasan_end_report+0x47/0x4f [ 49.421610] kasan_report.cold.9+0x76/0x309 [ 49.425930] ? __lock_acquire+0x3426/0x4980 [ 49.430397] __asan_report_load8_noabort+0x14/0x20 [ 49.435304] __lock_acquire+0x3426/0x4980 [ 49.439429] ? _raw_spin_unlock+0x2c/0x50 [ 49.443552] ? free_one_page+0x985/0xf30 [ 49.447592] ? __free_pages_ok+0x633/0xd90 [ 49.451797] ? __free_pages+0x7f/0xb0 [ 49.455570] ? lockdep_hardirqs_on+0x421/0x5c0 [ 49.460124] ? __free_pages_ok+0x633/0xd90 [ 49.464354] ? mark_held_locks+0x130/0x130 [ 49.468571] ? kasan_check_write+0x14/0x20 [ 49.472792] ? __free_pages+0x7f/0xb0 [ 49.476570] ? kasan_check_write+0x14/0x20 [ 49.480783] ? finish_task_switch+0x4c8/0x720 [ 49.485252] lock_acquire+0x173/0x3d0 [ 49.489028] ? lock_sock_nested+0x3a/0x100 [ 49.493234] _raw_spin_lock_bh+0x31/0x40 [ 49.497275] ? lock_sock_nested+0x3a/0x100 [ 49.501483] lock_sock_nested+0x3a/0x100 [ 49.505513] nr_accept+0x4a8/0x640 [ 49.509024] ? nr_ioctl+0x2e0/0x2e0 [ 49.512630] ? finish_wait+0x290/0x290 [ 49.516495] __sys_accept4+0x32b/0x6b0 [ 49.520361] ? __ia32_sys_listen+0x70/0x70 [ 49.524565] ? kasan_check_read+0x11/0x20 [ 49.528792] ? _copy_to_user+0x91/0xb0 [ 49.532661] ? put_timespec64+0xa9/0x100 [ 49.536701] ? nsecs_to_jiffies+0x20/0x20 [ 49.540850] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.545584] ? do_syscall_64+0x21/0x4e0 [ 49.549541] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.554876] __x64_sys_accept+0x70/0xb0 [ 49.558821] do_syscall_64+0xd0/0x4e0 [ 49.562593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.567751] RIP: 0033:0x4598f9 [ 49.570913] Code: 7d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 4b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.589786] RSP: 002b:00007f3a809d9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 49.597476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598f9 [ 49.604717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.611957] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 49.619206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a809da6d4 [ 49.626446] R13: 00000000004bf7c9 R14: 00000000004d11a0 R15: 00000000ffffffff [ 49.634881] Kernel Offset: disabled [ 49.638501] Rebooting in 86400 seconds..