Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 31.791534] audit: type=1400 audit(1588241934.940:8): avc: denied { execmem } for pid=6403 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 31.818689] IPVS: ftp: loaded support on port[0] = 21 [ 32.274652] can: request_module (can-proto-0) failed. [ 33.318716] can: request_module (can-proto-0) failed. [ 33.327226] can: request_module (can-proto-0) failed. [ 33.354092] audit: type=1400 audit(1588241936.510:9): avc: denied { create } for pid=6382 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. 2020/04/30 10:19:03 parsed 1 programs 2020/04/30 10:19:04 executed programs: 0 [ 41.181401] audit: type=1400 audit(1588241944.343:10): avc: denied { execmem } for pid=6528 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.234985] IPVS: ftp: loaded support on port[0] = 21 [ 41.284057] IPVS: ftp: loaded support on port[0] = 21 [ 41.308955] IPVS: ftp: loaded support on port[0] = 21 [ 41.332928] IPVS: ftp: loaded support on port[0] = 21 [ 41.358346] IPVS: ftp: loaded support on port[0] = 21 [ 41.358348] IPVS: ftp: loaded support on port[0] = 21 [ 41.481915] chnl_net:caif_netlink_parms(): no params data found [ 41.572602] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.578986] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.587546] device bridge_slave_0 entered promiscuous mode [ 41.675300] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.683545] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.692706] device bridge_slave_1 entered promiscuous mode [ 41.753893] chnl_net:caif_netlink_parms(): no params data found [ 41.764400] chnl_net:caif_netlink_parms(): no params data found [ 41.775391] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.784526] chnl_net:caif_netlink_parms(): no params data found [ 41.797766] chnl_net:caif_netlink_parms(): no params data found [ 41.815452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.848605] chnl_net:caif_netlink_parms(): no params data found [ 41.863221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.871474] team0: Port device team_slave_0 added [ 41.915896] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.923380] team0: Port device team_slave_1 added [ 41.955111] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.963660] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.971000] device bridge_slave_0 entered promiscuous mode [ 41.977475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.998351] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.005361] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.013217] device bridge_slave_0 entered promiscuous mode [ 42.025557] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.032405] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.040942] device bridge_slave_1 entered promiscuous mode [ 42.047198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.054612] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.061071] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.068002] device bridge_slave_0 entered promiscuous mode [ 42.074646] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.081767] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.088769] device bridge_slave_0 entered promiscuous mode [ 42.095299] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.104476] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.111985] device bridge_slave_1 entered promiscuous mode [ 42.130121] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.136515] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.145170] device bridge_slave_1 entered promiscuous mode [ 42.151913] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.158273] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.167776] device bridge_slave_1 entered promiscuous mode [ 42.190004] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.241865] device hsr_slave_0 entered promiscuous mode [ 42.279853] device hsr_slave_1 entered promiscuous mode [ 42.323295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.330315] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.336649] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.344319] device bridge_slave_0 entered promiscuous mode [ 42.351645] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.358012] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.365333] device bridge_slave_1 entered promiscuous mode [ 42.373824] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.382906] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.392904] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.408584] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.436069] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.445925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.455370] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.473576] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.488092] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.497022] team0: Port device team_slave_0 added [ 42.503306] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.511572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.518785] team0: Port device team_slave_0 added [ 42.528842] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.543824] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.552790] team0: Port device team_slave_1 added [ 42.563805] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.572780] team0: Port device team_slave_1 added [ 42.577959] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.586328] team0: Port device team_slave_0 added [ 42.592128] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.599282] team0: Port device team_slave_1 added [ 42.613861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.624807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.632920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.640828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.648008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.657214] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.664992] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.672553] team0: Port device team_slave_0 added [ 42.681900] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.689215] team0: Port device team_slave_1 added [ 42.695126] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.702698] team0: Port device team_slave_0 added [ 42.707860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.771723] device hsr_slave_0 entered promiscuous mode [ 42.819596] device hsr_slave_1 entered promiscuous mode [ 42.859909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.867074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.876709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.884362] team0: Port device team_slave_1 added [ 42.890396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.941800] device hsr_slave_0 entered promiscuous mode [ 42.959801] device hsr_slave_1 entered promiscuous mode [ 43.000047] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.006928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.014298] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.024754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.081728] device hsr_slave_0 entered promiscuous mode [ 43.119819] device hsr_slave_1 entered promiscuous mode [ 43.162026] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.168933] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.222280] device hsr_slave_0 entered promiscuous mode [ 43.269619] device hsr_slave_1 entered promiscuous mode [ 43.310042] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.317135] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.326979] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.372222] device hsr_slave_0 entered promiscuous mode [ 43.399551] device hsr_slave_1 entered promiscuous mode [ 43.443050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.452732] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.467051] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.485832] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.495909] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.516605] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.523965] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.552984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.562963] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.581060] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.607193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.615964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.624101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.634052] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.640708] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.654786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.667022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.676902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.685382] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.691913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.703335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.718536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.732139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.741013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.748443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.757458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.765101] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.771502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.781054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.789004] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.796909] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.807567] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.815340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.823388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.831601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.840134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.847774] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.858412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.871203] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.877286] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.884791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.893762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.901610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.910491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.918762] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.926774] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.933899] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.944369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.954880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.962998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.971351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.979850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.987739] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.994216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.001773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.008837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.017033] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.025625] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.035091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.044390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.056222] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.066069] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.072966] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.079879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.086979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.094520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.102562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.111001] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.117664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.124936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.133382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.141195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.148151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.157006] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.163716] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.172015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.181780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.191801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.201889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.208913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.217136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.225647] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.232280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.239620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.247265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.255120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.263042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.270746] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.277085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.284202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.292886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.300573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.308215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.318760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.327757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.336483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.345305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.353258] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.359744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.366587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.374524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.382354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.390159] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.396640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.403960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.411734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.419193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.428666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.438235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.447504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.458175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.466134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.476827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.484632] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.491034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.497856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.506729] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.517538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.526771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.536869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.546528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.556231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.564502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.573614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.581415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.589008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.596495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.604339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.612124] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.618442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.626639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.635177] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.641829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.651093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.660302] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.667207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.679190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.686201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.693447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.701224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.708825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.716857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.724064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.738482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.747576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.757222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.766888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.780349] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.786443] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.793682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.803191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.811228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.818872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.826411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.835889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.845339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.856113] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.865419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.873901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.882431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.890956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.898412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.906044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.913647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.921476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.929158] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.935485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.942447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.950245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.957783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.964887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.974425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.982982] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.991844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.001803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.012767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.020033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.027749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.038374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.046122] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.052602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.060213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.067914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.076244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.085731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.096413] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.103250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.112011] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.119272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.128163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.137596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.147781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.155372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.163801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.171455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.178186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.185006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.192905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.200574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.208250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.216419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.224098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.231875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.244609] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.255101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.267712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.274993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.283378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.292750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.300427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.309127] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.317639] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.325382] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.332504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.342166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.354381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.361554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.368199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.378090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.386368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.394981] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.402845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.412438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.421350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.432477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.439503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.446254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.454632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.462767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.470472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.482370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.491186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.503722] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.504919] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.511424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.512898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.540431] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.540464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.545816] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.546778] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.566391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.566957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.567378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.567447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.567503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.567568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.571170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.573121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.573716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.574022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.574259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.574479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.575643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.588447] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.588490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.602452] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.615407] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.624164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.624284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.632752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.852964] ================================================================== [ 45.852984] BUG: KASAN: global-out-of-bounds in fb_pad_aligned_buffer+0xd3/0x130 [ 45.852987] Read of size 1 at addr ffffffff87693976 by task syz-executor.3/7430 [ 45.852988] [ 45.852993] CPU: 0 PID: 7430 Comm: syz-executor.3 Not tainted 4.19.119-syzkaller #0 [ 45.852995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.852997] Call Trace: [ 45.853007] dump_stack+0x123/0x177 [ 45.853016] print_address_description.cold.8+0x58/0x1ff [ 45.853021] kasan_report.cold.9+0x242/0x309 [ 45.853023] ? fb_pad_aligned_buffer+0xd3/0x130 [ 45.853028] __asan_report_load1_noabort+0x14/0x20 [ 45.853031] fb_pad_aligned_buffer+0xd3/0x130 [ 45.853036] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.853044] bit_putcs+0x81e/0xf00 [ 45.853055] ? bit_cursor+0x22e0/0x22e0 [ 45.853061] ? fb_get_color_depth+0x49/0x60 [ 45.853073] fbcon_putcs+0x2fb/0x5b0 [ 45.853078] ? bit_cursor+0x22e0/0x22e0 [ 45.853084] do_update_region+0x30c/0x640 [ 45.853087] ? fb_set_cmap+0x34e/0x550 [ 45.853093] ? con_get_trans_old+0x220/0x220 [ 45.853102] redraw_screen+0x515/0x820 [ 45.853106] ? bit_bmove+0x210/0x210 [ 45.853112] ? con_flush_chars+0x60/0x60 [ 45.853123] fbcon_do_set_font+0x656/0xa20 [ 45.853133] ? lock_acquire+0x173/0x3d0 [ 45.853141] fbcon_copy_font+0x116/0x1a0 [ 45.853149] con_font_op+0x228/0x11f0 [ 45.853159] ? con_write+0x80/0x80 [ 45.853163] ? lock_downgrade+0x860/0x860 [ 45.853175] ? kasan_check_write+0x14/0x20 [ 45.853184] vt_ioctl+0xa4e/0x2380 [ 45.853193] ? complete_change_console+0x300/0x300 [ 45.853200] ? find_held_lock+0x36/0x1d0 [ 45.853212] ? avc_has_extended_perms+0x4c5/0x1170 [ 45.853217] ? lock_downgrade+0x860/0x860 [ 45.853234] tty_ioctl+0x452/0x1290 [ 45.853241] ? tty_vhangup+0x20/0x20 [ 45.853246] ? avc_ss_reset+0x130/0x130 [ 45.853257] ? mark_held_locks+0x130/0x130 [ 45.853262] ? mark_held_locks+0x130/0x130 [ 45.853287] do_vfs_ioctl+0x196/0x10c0 [ 45.853296] ? ioctl_preallocate+0x1c0/0x1c0 [ 45.853304] ? selinux_file_mprotect+0x5f0/0x5f0 [ 45.853316] ? ksys_dup3+0x2e0/0x2e0 [ 45.853324] ? put_timespec64+0xa9/0x100 [ 45.853330] ? nsecs_to_jiffies+0x20/0x20 [ 45.853341] ? security_file_ioctl+0x4a/0x90 [ 45.853346] ? __fget_light+0x174/0x1e0 [ 45.853353] ksys_ioctl+0x62/0x90 [ 45.853358] ? lockdep_hardirqs_on+0x421/0x5c0 [ 45.853365] __x64_sys_ioctl+0x6e/0xb0 [ 45.853372] do_syscall_64+0xd0/0x4e0 [ 45.853382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.853387] RIP: 0033:0x45a6f9 [ 45.853393] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 45.853397] RSP: 002b:00007f70ef4b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.853402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 45.853406] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000004 [ 45.853409] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 45.853412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f70ef4b76d4 [ 45.853416] R13: 00000000004c382b R14: 00000000004d8d78 R15: 00000000ffffffff [ 45.853430] [ 45.853432] The buggy address belongs to the variable: [ 45.853441] oid_index+0x76/0xa60 [ 45.853443] [ 45.853445] Memory state around the buggy address: [ 45.853458] ffffffff87693800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.853462] ffffffff87693880: 00 00 00 00 00 00 00 00 00 00 00 05 fa fa fa fa [ 45.853465] >ffffffff87693900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 fa [ 45.853468] ^ [ 45.853472] ffffffff87693980: fa fa fa fa 00 02 fa fa fa fa fa fa 00 01 fa fa [ 45.853476] ffffffff87693a00: fa fa fa fa 00 00 02 fa fa fa fa fa 00 03 fa fa [ 45.853478] ================================================================== [ 45.853480] Disabling lock debugging due to kernel taint [ 45.853483] Kernel panic - not syncing: panic_on_warn set ... [ 45.853483] [ 45.853487] CPU: 0 PID: 7430 Comm: syz-executor.3 Tainted: G B 4.19.119-syzkaller #0 [ 45.853490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.853492] Call Trace: [ 45.853496] dump_stack+0x123/0x177 [ 45.853503] panic+0x1cd/0x375 [ 45.853506] ? __warn_printk+0xd6/0xd6 [ 45.853509] ? lock_downgrade+0x860/0x860 [ 45.853513] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 45.853517] kasan_end_report+0x47/0x4f [ 45.853520] kasan_report.cold.9+0x76/0x309 [ 45.853522] ? fb_pad_aligned_buffer+0xd3/0x130 [ 45.853526] __asan_report_load1_noabort+0x14/0x20 [ 45.853528] fb_pad_aligned_buffer+0xd3/0x130 [ 45.853530] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.853534] bit_putcs+0x81e/0xf00 [ 45.853541] ? bit_cursor+0x22e0/0x22e0 [ 45.853544] ? fb_get_color_depth+0x49/0x60 [ 45.853548] fbcon_putcs+0x2fb/0x5b0 [ 45.853551] ? bit_cursor+0x22e0/0x22e0 [ 45.853555] do_update_region+0x30c/0x640 [ 45.853557] ? fb_set_cmap+0x34e/0x550 [ 45.853560] ? con_get_trans_old+0x220/0x220 [ 45.853566] redraw_screen+0x515/0x820 [ 45.853568] ? bit_bmove+0x210/0x210 [ 45.853571] ? con_flush_chars+0x60/0x60 [ 45.853576] fbcon_do_set_font+0x656/0xa20 [ 45.853578] ? lock_acquire+0x173/0x3d0 [ 45.853582] fbcon_copy_font+0x116/0x1a0 [ 45.853585] con_font_op+0x228/0x11f0 [ 45.853589] ? con_write+0x80/0x80 [ 45.853591] ? lock_downgrade+0x860/0x860 [ 45.853596] ? kasan_check_write+0x14/0x20 [ 45.853599] vt_ioctl+0xa4e/0x2380 [ 45.853603] ? complete_change_console+0x300/0x300 [ 45.853606] ? find_held_lock+0x36/0x1d0 [ 45.853610] ? avc_has_extended_perms+0x4c5/0x1170 [ 45.853612] ? lock_downgrade+0x860/0x860 [ 45.853617] tty_ioctl+0x452/0x1290 [ 45.853620] ? tty_vhangup+0x20/0x20 [ 45.853622] ? avc_ss_reset+0x130/0x130 [ 45.853626] ? mark_held_locks+0x130/0x130 [ 45.853629] ? mark_held_locks+0x130/0x130 [ 45.853636] do_vfs_ioctl+0x196/0x10c0 [ 45.853639] ? ioctl_preallocate+0x1c0/0x1c0 [ 45.853642] ? selinux_file_mprotect+0x5f0/0x5f0 [ 45.853646] ? ksys_dup3+0x2e0/0x2e0 [ 45.853649] ? put_timespec64+0xa9/0x100 [ 45.853651] ? nsecs_to_jiffies+0x20/0x20 [ 45.853655] ? security_file_ioctl+0x4a/0x90 [ 45.853658] ? __fget_light+0x174/0x1e0 [ 45.853661] ksys_ioctl+0x62/0x90 [ 45.853663] ? lockdep_hardirqs_on+0x421/0x5c0 [ 45.853666] __x64_sys_ioctl+0x6e/0xb0 [ 45.853669] do_syscall_64+0xd0/0x4e0 [ 45.853672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.853674] RIP: 0033:0x45a6f9 [ 45.853677] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 45.853678] RSP: 002b:00007f70ef4b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.853681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 45.853682] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000004 [ 45.853684] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 45.853685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f70ef4b76d4 [ 45.853686] R13: 00000000004c382b R14: 00000000004d8d78 R15: 00000000ffffffff [ 45.854511] Kernel Offset: disabled