Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 29.102416] audit: type=1400 audit(1588331416.240:8): avc: denied { execmem } for pid=6279 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 29.373058] IPVS: ftp: loaded support on port[0] = 21 [ 30.530409] can: request_module (can-proto-0) failed. [ 30.539367] can: request_module (can-proto-0) failed. [ 30.548504] can: request_module (can-proto-0) failed. [ 30.574698] audit: type=1400 audit(1588331417.722:9): avc: denied { create } for pid=6256 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. 2020/05/01 11:10:25 parsed 1 programs 2020/05/01 11:10:25 executed programs: 0 [ 38.312631] audit: type=1400 audit(1588331425.458:10): avc: denied { execmem } for pid=6398 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 38.555871] IPVS: ftp: loaded support on port[0] = 21 [ 39.353558] IPVS: ftp: loaded support on port[0] = 21 [ 39.415764] chnl_net:caif_netlink_parms(): no params data found [ 39.449759] IPVS: ftp: loaded support on port[0] = 21 [ 39.467289] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.473914] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.481589] device bridge_slave_0 entered promiscuous mode [ 39.489380] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.496126] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.502868] device bridge_slave_1 entered promiscuous mode [ 39.529255] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.538929] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.569946] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.577422] team0: Port device team_slave_0 added [ 39.584107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.592524] team0: Port device team_slave_1 added [ 39.599829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.645782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.659851] chnl_net:caif_netlink_parms(): no params data found [ 39.667247] IPVS: ftp: loaded support on port[0] = 21 [ 39.736710] device hsr_slave_0 entered promiscuous mode [ 39.774607] device hsr_slave_1 entered promiscuous mode [ 39.814945] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.821964] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.855185] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.861579] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.869238] device bridge_slave_0 entered promiscuous mode [ 39.877600] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.883931] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.892614] device bridge_slave_1 entered promiscuous mode [ 39.957668] chnl_net:caif_netlink_parms(): no params data found [ 39.987840] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.994589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.001522] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.007919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.018858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.029078] IPVS: ftp: loaded support on port[0] = 21 [ 40.084607] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.121409] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.128635] team0: Port device team_slave_0 added [ 40.138088] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.145256] team0: Port device team_slave_1 added [ 40.150657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.159310] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.166709] chnl_net:caif_netlink_parms(): no params data found [ 40.175125] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.181454] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.189523] device bridge_slave_0 entered promiscuous mode [ 40.198149] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.205320] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.212105] device bridge_slave_1 entered promiscuous mode [ 40.234989] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.258928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.297217] device hsr_slave_0 entered promiscuous mode [ 40.334376] device hsr_slave_1 entered promiscuous mode [ 40.392212] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.398843] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.406628] device bridge_slave_0 entered promiscuous mode [ 40.422501] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.433111] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.440621] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.447817] device bridge_slave_1 entered promiscuous mode [ 40.464146] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.471162] team0: Port device team_slave_0 added [ 40.477837] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.485308] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.495750] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.507356] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.515394] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.522381] team0: Port device team_slave_1 added [ 40.528412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.538610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.558399] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.575504] IPVS: ftp: loaded support on port[0] = 21 [ 40.606234] device hsr_slave_0 entered promiscuous mode [ 40.634203] device hsr_slave_1 entered promiscuous mode [ 40.682540] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.693946] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.706939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.713694] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.721315] team0: Port device team_slave_0 added [ 40.737127] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.744916] team0: Port device team_slave_1 added [ 40.750380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.760496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.769117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.817310] chnl_net:caif_netlink_parms(): no params data found [ 40.876625] device hsr_slave_0 entered promiscuous mode [ 40.924687] device hsr_slave_1 entered promiscuous mode [ 40.965312] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.982356] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.992216] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.013109] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.021261] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.034864] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.047422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.055242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.078441] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.085317] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.101787] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.108333] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.115571] device bridge_slave_0 entered promiscuous mode [ 41.127847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.138485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.147254] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.154152] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.160975] device bridge_slave_1 entered promiscuous mode [ 41.174050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.181730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.189309] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.195882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.202568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.211154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.218996] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.225368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.245217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.263025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.280912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.290585] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.332616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.342255] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.356071] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.363072] team0: Port device team_slave_0 added [ 41.390520] chnl_net:caif_netlink_parms(): no params data found [ 41.405035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.416113] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.422767] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.429837] team0: Port device team_slave_1 added [ 41.436254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.443830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.461723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.469468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.484892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.498987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.508236] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.515426] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.575827] device hsr_slave_0 entered promiscuous mode [ 41.613646] device hsr_slave_1 entered promiscuous mode [ 41.653678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.661491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.669115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.680988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.689802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.699146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.705799] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.713959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.726401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.734474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.741830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.750747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.758743] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.765124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.772223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.780791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.791292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.798785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.820665] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.827715] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.836109] device bridge_slave_0 entered promiscuous mode [ 41.842570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.851046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.858885] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.865254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.872560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.882162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.893070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 41.900240] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.906839] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.914011] device bridge_slave_1 entered promiscuous mode [ 41.930812] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.940082] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.947815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.957972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.966955] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.973765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.980559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.989040] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.998006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.009285] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.016712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.025021] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.031074] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.044383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.051268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.058830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.065917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.072654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.080213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.089088] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.098261] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.106902] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.120806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.128725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.138452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.151811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.159901] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.167571] team0: Port device team_slave_0 added [ 42.172597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.180294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.187935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.195685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.203850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.211372] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.217731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.226594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.236438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.245333] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.251316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.261167] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.268727] team0: Port device team_slave_1 added [ 42.274150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.281076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.288635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.296091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.304160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.311626] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.317991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.325474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.346933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.354218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.362568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.376947] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 42.383568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.392123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.400930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.409148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.416766] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.423156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.429901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.438201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.445929] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.452273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.459083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.466842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.475569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.482722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.492392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.511409] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.518645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.528462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.535538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.543954] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.550660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.559273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.615178] device hsr_slave_0 entered promiscuous mode [ 42.653197] device hsr_slave_1 entered promiscuous mode [ 42.693686] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.701682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.709664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.716867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.724891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.734582] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.740646] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.752171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.760321] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.770427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.778352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.788339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.797003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.807028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.823366] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 42.830149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.839902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.853899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.862708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.871611] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.883933] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.891077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.898434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.906472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.914499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.922551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.930803] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.937201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.944496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.952253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.959953] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.966347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.973233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.980180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.987463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.995774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.004024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.004387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.011345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.013542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.041417] ================================================================== [ 43.041444] BUG: KASAN: global-out-of-bounds in fb_pad_aligned_buffer+0xd3/0x130 [ 43.041448] Read of size 1 at addr ffffffff87060d36 by task syz-executor.0/7289 [ 43.041450] [ 43.041457] CPU: 0 PID: 7289 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 [ 43.041459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.041461] Call Trace: [ 43.041469] dump_stack+0xf7/0x13b [ 43.041474] ? fb_pad_aligned_buffer+0xd3/0x130 [ 43.041483] print_address_description.cold.7+0x135/0x1c9 [ 43.041488] ? fb_pad_aligned_buffer+0xd3/0x130 [ 43.041492] kasan_report.cold.8+0x11a/0x2d3 [ 43.041500] __asan_report_load1_noabort+0x14/0x20 [ 43.041505] fb_pad_aligned_buffer+0xd3/0x130 [ 43.041512] ? parse_no_kvmclock_vsyscall+0x10/0x10 [ 43.041521] bit_putcs+0x7fd/0xee0 [ 43.041527] ? vga16fb_imageblit+0x9f5/0x2380 [ 43.041542] ? update_attr.isra.1+0x170/0x170 [ 43.041552] ? fb_get_color_depth+0x49/0x60 [ 43.041560] fbcon_putcs+0x2fb/0x5b0 [ 43.041567] ? update_attr.isra.1+0x170/0x170 [ 43.041575] do_update_region+0x304/0x630 [ 43.041580] ? fb_set_cmap+0x34e/0x550 [ 43.041588] ? con_get_trans_old+0x200/0x200 [ 43.041602] redraw_screen+0x50d/0x7f0 [ 43.041607] ? bit_bmove+0x200/0x200 [ 43.041614] ? con_flush_chars+0x60/0x60 [ 43.041624] fbcon_do_set_font+0x656/0xa20 [ 43.041632] ? lock_acquire+0x173/0x400 [ 43.041640] fbcon_copy_font+0x116/0x1a0 [ 43.041647] con_font_op+0x219/0x1020 [ 43.041653] ? __might_fault+0xf1/0x1b0 [ 43.041658] ? lock_downgrade+0x7f0/0x7f0 [ 43.041663] ? con_write+0x80/0x80 [ 43.041673] ? kasan_check_write+0x14/0x20 [ 43.041680] vt_ioctl+0x9da/0x21f0 [ 43.041685] ? find_held_lock+0x36/0x1d0 [ 43.041691] ? complete_change_console+0x300/0x300 [ 43.041701] ? avc_has_extended_perms+0x477/0x1100 [ 43.041706] ? lock_downgrade+0x7f0/0x7f0 [ 43.041721] ? do_futex+0x56d/0x17f0 [ 43.041727] tty_ioctl+0x434/0x1260 [ 43.041731] ? avc_ss_reset+0xd0/0xd0 [ 43.041735] ? tty_vhangup+0x20/0x20 [ 43.041739] ? __lock_acquire+0x6a4/0x4500 [ 43.041743] ? trace_hardirqs_on+0x10/0x10 [ 43.041748] ? trace_hardirqs_off+0x10/0x10 [ 43.041764] ? __might_sleep+0x93/0xb0 [ 43.041773] do_vfs_ioctl+0x180/0xfb0 [ 43.041778] ? __fget+0x1ad/0x2f0 [ 43.041785] ? ioctl_preallocate+0x1a0/0x1a0 [ 43.041794] ? __fget+0x1ca/0x2f0 [ 43.041803] ? security_file_ioctl+0x6a/0xa0 [ 43.041807] ? SyS_clock_settime+0x1a0/0x1a0 [ 43.041811] ? security_file_ioctl+0x6a/0xa0 [ 43.041818] SyS_ioctl+0x74/0x80 [ 43.041824] ? do_vfs_ioctl+0xfb0/0xfb0 [ 43.041830] do_syscall_64+0x1c7/0x5b0 [ 43.041835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.041845] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 43.041850] RIP: 0033:0x45a6f9 [ 43.041852] RSP: 002b:00007f9b3acb4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.041859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 43.041862] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000004 [ 43.041865] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 43.041868] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b3acb56d4 [ 43.041871] R13: 00000000004c382b R14: 00000000004d8d78 R15: 00000000ffffffff [ 43.041883] [ 43.041885] The buggy address belongs to the variable: [ 43.041890] oid_index+0x76/0x9a0 [ 43.041892] [ 43.041894] Memory state around the buggy address: [ 43.041899] ffffffff87060c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.041903] ffffffff87060c80: 00 00 00 05 fa fa fa fa 00 00 00 00 00 00 00 00 [ 43.041906] >ffffffff87060d00: 00 00 00 00 00 00 06 fa fa fa fa fa 00 02 fa fa [ 43.041908] ^ [ 43.041912] ffffffff87060d80: fa fa fa fa 00 01 fa fa fa fa fa fa 00 00 02 fa [ 43.041916] ffffffff87060e00: fa fa fa fa 00 03 fa fa fa fa fa fa 07 fa fa fa [ 43.041918] ================================================================== [ 43.041920] Disabling lock debugging due to kernel taint [ 43.042889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.044152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.045327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.046272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.047868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.049706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.051722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.064590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.064863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.065069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.065217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.065404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.065638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.065853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.066058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.066270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.066962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.067177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.067338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.067520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.067690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.068825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.069758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.070627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.071013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.071401] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.071410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.072093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.072096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.072470] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.075539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.075798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.076021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.076370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.076609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.076849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.077063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.077348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.079380] Kernel panic - not syncing: panic_on_warn set ... [ 43.079380] [ 43.079387] CPU: 1 PID: 7289 Comm: syz-executor.0 Tainted: G B 4.14.177-syzkaller #0 [ 43.079389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.079391] Call Trace: [ 43.079401] dump_stack+0xf7/0x13b [ 43.079408] ? fb_pad_aligned_buffer+0xd3/0x130 [ 43.079414] panic+0x1b0/0x358 [ 43.079417] ? add_taint.cold.5+0x11/0x11 [ 43.079424] ? ___preempt_schedule+0x16/0x18 [ 43.079430] ? fb_pad_aligned_buffer+0xd3/0x130 [ 43.079435] kasan_end_report+0x47/0x4f [ 43.079439] kasan_report.cold.8+0x76/0x2d3 [ 43.079444] __asan_report_load1_noabort+0x14/0x20 [ 43.079447] fb_pad_aligned_buffer+0xd3/0x130 [ 43.079454] ? parse_no_kvmclock_vsyscall+0x10/0x10 [ 43.079461] bit_putcs+0x7fd/0xee0 [ 43.079466] ? vga16fb_imageblit+0x9f5/0x2380 [ 43.079475] ? update_attr.isra.1+0x170/0x170 [ 43.079482] ? fb_get_color_depth+0x49/0x60 [ 43.079487] fbcon_putcs+0x2fb/0x5b0 [ 43.079491] ? update_attr.isra.1+0x170/0x170 [ 43.079496] do_update_region+0x304/0x630 [ 43.079499] ? fb_set_cmap+0x34e/0x550 [ 43.079505] ? con_get_trans_old+0x200/0x200 [ 43.079512] redraw_screen+0x50d/0x7f0 [ 43.079516] ? bit_bmove+0x200/0x200 [ 43.079521] ? con_flush_chars+0x60/0x60 [ 43.079528] fbcon_do_set_font+0x656/0xa20 [ 43.079535] ? lock_acquire+0x173/0x400 [ 43.079540] fbcon_copy_font+0x116/0x1a0 [ 43.079545] con_font_op+0x219/0x1020 [ 43.079549] ? __might_fault+0xf1/0x1b0 [ 43.079553] ? lock_downgrade+0x7f0/0x7f0 [ 43.079556] ? con_write+0x80/0x80 [ 43.079575] ? kasan_check_write+0x14/0x20 [ 43.079580] vt_ioctl+0x9da/0x21f0 [ 43.079584] ? find_held_lock+0x36/0x1d0 [ 43.079588] ? complete_change_console+0x300/0x300 [ 43.079596] ? avc_has_extended_perms+0x477/0x1100 [ 43.079600] ? lock_downgrade+0x7f0/0x7f0 [ 43.079610] ? do_futex+0x56d/0x17f0 [ 43.079616] tty_ioctl+0x434/0x1260 [ 43.079619] ? avc_ss_reset+0xd0/0xd0 [ 43.079623] ? tty_vhangup+0x20/0x20 [ 43.079627] ? __lock_acquire+0x6a4/0x4500 [ 43.079632] ? trace_hardirqs_on+0x10/0x10 [ 43.079636] ? trace_hardirqs_off+0x10/0x10 [ 43.079648] ? __might_sleep+0x93/0xb0 [ 43.079654] do_vfs_ioctl+0x180/0xfb0 [ 43.079658] ? __fget+0x1ad/0x2f0 [ 43.079663] ? ioctl_preallocate+0x1a0/0x1a0 [ 43.079669] ? __fget+0x1ca/0x2f0 [ 43.079675] ? security_file_ioctl+0x6a/0xa0 [ 43.079678] ? SyS_clock_settime+0x1a0/0x1a0 [ 43.079681] ? security_file_ioctl+0x6a/0xa0 [ 43.079686] SyS_ioctl+0x74/0x80 [ 43.079691] ? do_vfs_ioctl+0xfb0/0xfb0 [ 43.079695] do_syscall_64+0x1c7/0x5b0 [ 43.079699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.079706] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 43.079710] RIP: 0033:0x45a6f9 [ 43.079712] RSP: 002b:00007f9b3acb4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.079718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 43.079720] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000004 [ 43.079722] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 43.079724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b3acb56d4 [ 43.079726] R13: 00000000004c382b R14: 00000000004d8d78 R15: 00000000ffffffff [ 43.081060] Kernel Offset: disabled [ 44.042536] Rebooting in 86400 seconds..