Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 32.040722] audit: type=1400 audit(1589727467.154:8): avc: denied { execmem } for pid=6410 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.066188] IPVS: ftp: loaded support on port[0] = 21 [ 32.504184] can: request_module (can-proto-0) failed. [ 33.528622] can: request_module (can-proto-0) failed. [ 33.537682] can: request_module (can-proto-0) failed. [ 33.563403] audit: type=1400 audit(1589727468.675:9): avc: denied { create } for pid=6389 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. 2020/05/17 14:57:55 parsed 1 programs 2020/05/17 14:57:56 executed programs: 0 [ 41.239884] audit: type=1400 audit(1589727476.359:10): avc: denied { execmem } for pid=6536 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.316236] IPVS: ftp: loaded support on port[0] = 21 [ 41.331705] IPVS: ftp: loaded support on port[0] = 21 [ 41.366437] IPVS: ftp: loaded support on port[0] = 21 [ 41.384077] IPVS: ftp: loaded support on port[0] = 21 [ 41.433867] IPVS: ftp: loaded support on port[0] = 21 [ 41.494551] IPVS: ftp: loaded support on port[0] = 21 [ 41.579250] chnl_net:caif_netlink_parms(): no params data found [ 41.620092] chnl_net:caif_netlink_parms(): no params data found [ 41.734327] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.742309] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.752395] device bridge_slave_0 entered promiscuous mode [ 41.762333] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.769166] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.776076] device bridge_slave_1 entered promiscuous mode [ 41.865708] chnl_net:caif_netlink_parms(): no params data found [ 41.875171] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.884672] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.902227] chnl_net:caif_netlink_parms(): no params data found [ 41.912133] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.918814] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.925644] device bridge_slave_0 entered promiscuous mode [ 41.956284] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.965310] team0: Port device team_slave_0 added [ 41.973227] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.981029] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.990057] device bridge_slave_1 entered promiscuous mode [ 42.002431] chnl_net:caif_netlink_parms(): no params data found [ 42.012723] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.020115] team0: Port device team_slave_1 added [ 42.043088] chnl_net:caif_netlink_parms(): no params data found [ 42.058063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.076384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.093970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.118810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.134461] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.141844] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.150310] device bridge_slave_0 entered promiscuous mode [ 42.188260] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.194695] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.203064] device bridge_slave_1 entered promiscuous mode [ 42.220564] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.227029] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.234715] device bridge_slave_0 entered promiscuous mode [ 42.241492] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.248085] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.255107] device bridge_slave_0 entered promiscuous mode [ 42.262354] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.269824] team0: Port device team_slave_0 added [ 42.274844] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.281951] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.289741] device bridge_slave_1 entered promiscuous mode [ 42.339424] device hsr_slave_0 entered promiscuous mode [ 42.378317] device hsr_slave_1 entered promiscuous mode [ 42.437524] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.443877] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.451408] device bridge_slave_1 entered promiscuous mode [ 42.462614] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.470169] team0: Port device team_slave_1 added [ 42.485001] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.492940] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.499464] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.506461] device bridge_slave_0 entered promiscuous mode [ 42.513646] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.525237] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.532898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.541330] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.550307] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.559406] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.567293] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.573622] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.581541] device bridge_slave_1 entered promiscuous mode [ 42.588297] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.600562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.612836] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.637069] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.645614] team0: Port device team_slave_0 added [ 42.709455] device hsr_slave_0 entered promiscuous mode [ 42.738361] device hsr_slave_1 entered promiscuous mode [ 42.803736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.811692] team0: Port device team_slave_0 added [ 42.817044] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.824969] team0: Port device team_slave_1 added [ 42.831045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.843803] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.851485] team0: Port device team_slave_0 added [ 42.856641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.863854] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.872284] team0: Port device team_slave_1 added [ 42.877955] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.885110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.893758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.905627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.913318] team0: Port device team_slave_1 added [ 42.919086] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.925845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.933271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.944260] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.964192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.982303] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.989839] team0: Port device team_slave_0 added [ 43.009362] device hsr_slave_0 entered promiscuous mode [ 43.037490] device hsr_slave_1 entered promiscuous mode [ 43.081150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.139610] device hsr_slave_0 entered promiscuous mode [ 43.177594] device hsr_slave_1 entered promiscuous mode [ 43.217484] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.224683] team0: Port device team_slave_1 added [ 43.235243] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.243339] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.250938] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.261737] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.269077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.276174] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.319302] device hsr_slave_0 entered promiscuous mode [ 43.357485] device hsr_slave_1 entered promiscuous mode [ 43.434816] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.450421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.465147] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.479628] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.515031] device hsr_slave_0 entered promiscuous mode [ 43.557183] device hsr_slave_1 entered promiscuous mode [ 43.597404] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.618293] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.625862] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.653978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.664628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.678721] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.691270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.706086] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.714980] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.728652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.736564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.746518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.753937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.762826] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.769273] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.776188] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.785456] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.792421] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.800250] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.817055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.824821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.832998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.848658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.859549] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.870459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.878490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.886018] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.892503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.899925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.908768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.916251] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.922639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.929738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.938044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.945768] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.953687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.966474] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.972649] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.979882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.988359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.996176] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.002709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.010002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.017002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.024842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.034544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.048511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.057913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.068112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.075378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.082993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.090817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.098978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.106593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.114573] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.121012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.128317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.136051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.143910] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.150323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.158100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.166797] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.173143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.180260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.187710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.195537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.205805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.214601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.221854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.230147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.238756] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.245105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.252388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.260200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.268232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.277139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.285640] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.292239] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.301873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.313942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.322615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.332204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.339196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.347413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.355078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.363075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.371393] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.377791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.384557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.392886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.401936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.411586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.421868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.429700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.438321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.446079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.453971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.461645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.470183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.477839] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.484251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.491320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.499201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.506945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.513833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.522540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.532497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.540590] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.550727] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.558936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.567535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.574962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.582560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.590257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.597476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.605814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.615212] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.622240] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.630472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.640581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.648199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.655692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.663640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.671444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.679091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.688298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.702262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.714453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.723653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.732955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.741247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.748916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.757029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.764573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.773896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.784212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.793021] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.803252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.811248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.819707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.827855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.835362] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.841920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.849816] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.855836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.870077] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.878302] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.884331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.893825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.902732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.909862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.921569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.930227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.938213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.949474] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.955539] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.962764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.971090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.979571] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.985892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.992719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.000591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.008495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.016117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.023977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.032921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.040995] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.047813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.059947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.067887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.075634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.083888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.091739] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.098121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.105432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.114540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.128446] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.135914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.146934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.154000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.162523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.170722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.179014] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.185342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.192471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.200383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.208563] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.215403] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.222923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.232179] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.242466] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.249055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.257284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.264766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.272082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.278940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.285608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.292615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.301374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.314716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.322825] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.333059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.340766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.349344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.357089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.364676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.372536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.379575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.387179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.394187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.406673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.415793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.429188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.451513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.466068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.480680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.490436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.508959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.520722] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.529230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.536172] hrtimer: interrupt took 34762 ns [ 45.563164] ================================================================== [ 45.570756] BUG: KASAN: use-after-free in eth_type_trans+0x5c1/0x6e0 [ 45.577234] Read of size 8 at addr ffff888073ff0040 by task syz-executor.2/7436 [ 45.584666] [ 45.585311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.586279] CPU: 0 PID: 7436 Comm: syz-executor.2 Not tainted 4.19.123-syzkaller #0 [ 45.586285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.586288] Call Trace: [ 45.586298] dump_stack+0x123/0x177 [ 45.586310] print_address_description.cold.8+0x9/0x1ff [ 45.586318] kasan_report.cold.9+0x242/0x309 [ 45.586325] ? eth_type_trans+0x5c1/0x6e0 [ 45.586332] __asan_report_load8_noabort+0x14/0x20 [ 45.586337] eth_type_trans+0x5c1/0x6e0 [ 45.586342] ? eth_gro_receive+0x960/0x960 [ 45.586353] napi_gro_frags+0x546/0x8e0 [ 45.586365] tun_get_user+0x2738/0x4750 [ 45.586373] ? firmware_map_remove+0x171/0x171 [ 45.586388] ? tun_build_skb.isra.53+0x14c0/0x14c0 [ 45.586398] ? mark_held_locks+0x130/0x130 [ 45.586407] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.586414] ? find_held_lock+0x36/0x1d0 [ 45.586424] ? tun_get+0xf3/0x1d0 [ 45.586427] ? lock_downgrade+0x860/0x860 [ 45.586434] ? kasan_check_read+0x11/0x20 [ 45.586443] tun_chr_write_iter+0xaf/0x150 [ 45.586451] do_iter_readv_writev+0x4ae/0x960 [ 45.586458] ? vfs_dedupe_file_range+0x5a0/0x5a0 [ 45.586466] ? rw_verify_area+0xb8/0x2b0 [ 45.586474] do_iter_write+0x12a/0x510 [ 45.586481] ? dup_iter+0x250/0x250 [ 45.586491] vfs_writev+0x16f/0x2d0 [ 45.586497] ? __fget+0x278/0x400 [ 45.586503] ? vfs_iter_write+0xb0/0xb0 [ 45.586511] ? kasan_check_read+0x11/0x20 [ 45.586518] ? __fget+0x295/0x400 [ 45.586527] ? ksys_dup3+0x2e0/0x2e0 [ 45.586533] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.586543] ? __fget_light+0x174/0x1e0 [ 45.586551] do_writev+0x110/0x330 [ 45.586557] ? vfs_writev+0x2d0/0x2d0 [ 45.586569] __x64_sys_writev+0x70/0xb0 [ 45.586576] do_syscall_64+0xd0/0x4e0 [ 45.586584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.586590] RIP: 0033:0x45a7d1 [ 45.586595] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 45.586599] RSP: 002b:00007f6c19a36ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 45.586605] RAX: ffffffffffffffda RBX: 0000000000207843 RCX: 000000000045a7d1 [ 45.586608] RDX: 0000000000000001 RSI: 00007f6c19a36c00 RDI: 00000000000000f0 [ 45.586612] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 45.586615] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f6c19a376d4 [ 45.586618] R13: 00000000004cab1f R14: 00000000004e4040 R15: 00000000ffffffff [ 45.586631] [ 45.586634] The buggy address belongs to the page: [ 45.586639] page:ffffea0001cffc00 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 45.586644] flags: 0xfffe0000000000() [ 45.586651] raw: 00fffe0000000000 ffffea0001cffc08 ffffea0001cffc08 0000000000000000 [ 45.586655] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 45.586658] page dumped because: kasan: bad access detected [ 45.586660] [ 45.586662] Memory state around the buggy address: [ 45.586667] ffff888073feff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.586671] ffff888073feff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.586675] >ffff888073ff0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.586678] ^ [ 45.586681] ffff888073ff0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.586684] ffff888073ff0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.586687] ================================================================== [ 45.586689] Disabling lock debugging due to kernel taint [ 45.586719] Kernel panic - not syncing: panic_on_warn set ... [ 45.586719] [ 45.586728] CPU: 0 PID: 7436 Comm: syz-executor.2 Tainted: G B 4.19.123-syzkaller #0 [ 45.586731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.586732] Call Trace: [ 45.586738] dump_stack+0x123/0x177 [ 45.586743] panic+0x1cd/0x375 [ 45.586747] ? __warn_printk+0xd6/0xd6 [ 45.586753] ? do_raw_spin_unlock+0x54/0x260 [ 45.586759] kasan_end_report+0x47/0x4f [ 45.586763] kasan_report.cold.9+0x76/0x309 [ 45.586767] ? eth_type_trans+0x5c1/0x6e0 [ 45.586772] __asan_report_load8_noabort+0x14/0x20 [ 45.586777] eth_type_trans+0x5c1/0x6e0 [ 45.601065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.601304] ? eth_gro_receive+0x960/0x960 [ 45.635039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.635861] napi_gro_frags+0x546/0x8e0 [ 45.635871] tun_get_user+0x2738/0x4750 [ 45.644453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.647996] ? firmware_map_remove+0x171/0x171 [ 45.648007] ? tun_build_skb.isra.53+0x14c0/0x14c0 [ 45.648014] ? mark_held_locks+0x130/0x130 [ 45.648020] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.648025] ? find_held_lock+0x36/0x1d0 [ 45.648031] ? tun_get+0xf3/0x1d0 [ 45.648034] ? lock_downgrade+0x860/0x860 [ 45.648042] ? kasan_check_read+0x11/0x20 [ 45.655501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.656575] tun_chr_write_iter+0xaf/0x150 [ 45.656582] do_iter_readv_writev+0x4ae/0x960 [ 45.656588] ? vfs_dedupe_file_range+0x5a0/0x5a0 [ 45.656593] ? rw_verify_area+0xb8/0x2b0 [ 45.656599] do_iter_write+0x12a/0x510 [ 45.656605] ? dup_iter+0x250/0x250 [ 45.656611] vfs_writev+0x16f/0x2d0 [ 45.656616] ? __fget+0x278/0x400 [ 45.656620] ? vfs_iter_write+0xb0/0xb0 [ 45.656626] ? kasan_check_read+0x11/0x20 [ 45.656632] ? __fget+0x295/0x400 [ 45.664719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.665759] ? ksys_dup3+0x2e0/0x2e0 [ 45.665766] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.665779] ? __fget_light+0x174/0x1e0 [ 45.673024] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.674548] do_writev+0x110/0x330 [ 45.674554] ? vfs_writev+0x2d0/0x2d0 [ 45.674561] __x64_sys_writev+0x70/0xb0 [ 45.683625] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.686267] do_syscall_64+0xd0/0x4e0 [ 45.686275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.686279] RIP: 0033:0x45a7d1 [ 45.686284] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 45.686286] RSP: 002b:00007f6c19a36ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 45.686290] RAX: ffffffffffffffda RBX: 0000000000207843 RCX: 000000000045a7d1 [ 45.686293] RDX: 0000000000000001 RSI: 00007f6c19a36c00 RDI: 00000000000000f0 [ 45.686295] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 45.686297] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f6c19a376d4 [ 45.686299] R13: 00000000004cab1f R14: 00000000004e4040 R15: 00000000ffffffff [ 45.687697] Kernel Offset: disabled [ 46.239413] Rebooting in 86400 seconds..