Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 32.742576] audit: type=1400 audit(1586297648.212:8): avc: denied { execmem } for pid=6437 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.756195] IPVS: ftp: loaded support on port[0] = 21 [ 33.208198] can: request_module (can-proto-0) failed. [ 34.203613] can: request_module (can-proto-0) failed. [ 34.212195] can: request_module (can-proto-0) failed. [ 34.239531] audit: type=1400 audit(1586297649.713:9): avc: denied { create } for pid=6414 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.206' (ECDSA) to the list of known hosts. 2020/04/07 22:14:17 parsed 1 programs 2020/04/07 22:14:17 executed programs: 0 [ 42.267394] audit: type=1400 audit(1586297657.739:10): avc: denied { execmem } for pid=6568 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.376090] IPVS: ftp: loaded support on port[0] = 21 [ 42.377018] IPVS: ftp: loaded support on port[0] = 21 [ 42.419890] IPVS: ftp: loaded support on port[0] = 21 [ 42.423729] IPVS: ftp: loaded support on port[0] = 21 [ 42.494327] IPVS: ftp: loaded support on port[0] = 21 [ 42.494458] IPVS: ftp: loaded support on port[0] = 21 [ 42.558772] chnl_net:caif_netlink_parms(): no params data found [ 42.687424] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.696238] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.703899] device bridge_slave_0 entered promiscuous mode [ 42.784367] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.790920] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.798859] device bridge_slave_1 entered promiscuous mode [ 42.844018] chnl_net:caif_netlink_parms(): no params data found [ 42.867649] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.897982] chnl_net:caif_netlink_parms(): no params data found [ 42.909703] chnl_net:caif_netlink_parms(): no params data found [ 42.918982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.927888] chnl_net:caif_netlink_parms(): no params data found [ 43.060653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.069618] team0: Port device team_slave_0 added [ 43.077254] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.084930] team0: Port device team_slave_1 added [ 43.090038] chnl_net:caif_netlink_parms(): no params data found [ 43.099770] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.107253] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.114557] device bridge_slave_0 entered promiscuous mode [ 43.120804] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.128675] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.137366] device bridge_slave_0 entered promiscuous mode [ 43.147929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.163349] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.169856] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.177789] device bridge_slave_1 entered promiscuous mode [ 43.184504] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.190844] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.199958] device bridge_slave_1 entered promiscuous mode [ 43.210385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.229205] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.236375] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.244386] device bridge_slave_0 entered promiscuous mode [ 43.250658] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.257319] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.264628] device bridge_slave_0 entered promiscuous mode [ 43.271562] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.277925] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.284948] device bridge_slave_1 entered promiscuous mode [ 43.309363] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.318923] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.327350] device bridge_slave_1 entered promiscuous mode [ 43.349008] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.365962] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.378099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.423742] device hsr_slave_0 entered promiscuous mode [ 43.465202] device hsr_slave_1 entered promiscuous mode [ 43.502965] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.511846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.529737] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.536792] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.544142] device bridge_slave_0 entered promiscuous mode [ 43.555286] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.567309] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.576166] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.587021] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.594031] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.601634] device bridge_slave_1 entered promiscuous mode [ 43.608443] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.626305] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.639495] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.648221] team0: Port device team_slave_0 added [ 43.665834] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.675502] team0: Port device team_slave_0 added [ 43.680876] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.688110] team0: Port device team_slave_1 added [ 43.702074] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.718536] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.726839] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.736861] team0: Port device team_slave_0 added [ 43.742874] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.750002] team0: Port device team_slave_1 added [ 43.756135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.763807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.778451] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.786466] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.796723] team0: Port device team_slave_1 added [ 43.803101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.810369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.822053] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.829142] team0: Port device team_slave_0 added [ 43.835324] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.865676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.873229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.881358] team0: Port device team_slave_1 added [ 43.913180] device hsr_slave_0 entered promiscuous mode [ 43.970987] device hsr_slave_1 entered promiscuous mode [ 44.025878] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.033983] team0: Port device team_slave_0 added [ 44.047269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.055364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.063561] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.103252] device hsr_slave_0 entered promiscuous mode [ 44.140808] device hsr_slave_1 entered promiscuous mode [ 44.181072] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.188392] team0: Port device team_slave_1 added [ 44.193976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.242331] device hsr_slave_0 entered promiscuous mode [ 44.280737] device hsr_slave_1 entered promiscuous mode [ 44.321820] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.328650] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.336378] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.348595] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.355865] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.363376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.392790] device hsr_slave_0 entered promiscuous mode [ 44.420943] device hsr_slave_1 entered promiscuous mode [ 44.468681] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.485788] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.499192] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.562169] device hsr_slave_0 entered promiscuous mode [ 44.600656] device hsr_slave_1 entered promiscuous mode [ 44.648190] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.664881] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.672700] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.679870] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.696479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.723244] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.731073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.747143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.759439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.768330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.779380] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.788332] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.796080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.804020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.811720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.818670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.827408] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.833727] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.852192] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.858292] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.867507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.881465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.890893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.900050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.908256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.916245] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.922824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.929949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.939143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.946806] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.953228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.960257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.968516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.977506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.988320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.998660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.005312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.013435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.021806] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.028138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.035696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.044032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.058163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.074361] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.083283] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.096836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.105061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.115811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.123337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.130894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.138609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.147421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.158822] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.165618] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.175728] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.183086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.189980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.197855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.205753] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.212179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.226100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.235520] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.244172] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.251687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.266529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.272944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.280790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.288241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.295949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.303746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.313018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.323582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.333705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.344014] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.351538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.359091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.367487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.375493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.383441] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.390113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.397021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.405747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.414961] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.421749] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.429870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.438277] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.446150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.455237] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.464631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.473516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.481607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.488409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.495702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.503720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.511462] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.517802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.524771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.531789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.538727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.547509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.556297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.564820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.574208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.584134] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.590674] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.596807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.604755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.612498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.620212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.627752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.635298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.643117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.651052] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.657661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.664845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.673492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.682125] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.688212] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.695767] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.703824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.715685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.727053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.735526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.743426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.752372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.760947] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.767555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.774968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.785231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.797488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.806214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.816591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.824856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.835029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.843778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.852111] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.858469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.866598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.875170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.883608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.891583] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.898045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.906423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.915164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.923256] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.929928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.937409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.945960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.954191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.965678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.974628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.986356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.995949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.006421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.015928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.024761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.032915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.041320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.049320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.057534] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.064122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.072213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.086583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.096279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.104882] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.113336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.124047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.136350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.143948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.153177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.161050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.168841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.176759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.184474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.193294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.202762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.215731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.224950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.233262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.241405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.249010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.257313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.267012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.275445] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.283976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.293239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.301903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.311048] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.317476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.324918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.332296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.341090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.348562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.356420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.364050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.371890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.379482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.387559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.394419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.403294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.418369] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.425424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.434340] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.442977] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.451352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.458917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.466762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.473599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.482980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.494065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.507325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.517536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.526029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.534700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.543911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.552971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.563391] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.572242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.578938] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.588449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.603774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.611564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.618313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.626111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.635302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.644561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.655624] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.663123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.672141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.685219] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.691465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.698578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.707504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.716123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.724276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.739524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.752262] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.759196] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.770410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.777110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.792265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.801486] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.808750] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.821384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.835023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.842100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.848817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.857918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.868745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.887266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.910327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.919973] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.926174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.960624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.012614] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 47.040386] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.041273] ================================================================== [ 47.054103] BUG: KASAN: slab-out-of-bounds in bacpy+0xe/0x10 [ 47.059993] Read of size 6 at addr ffff888092369288 by task kworker/u5:0/1205 [ 47.063883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.067269] [ 47.067279] CPU: 0 PID: 1205 Comm: kworker/u5:0 Not tainted 4.19.114-syzkaller #0 [ 47.067282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.067293] Workqueue: hci0 hci_rx_work [ 47.067297] Call Trace: [ 47.067308] dump_stack+0x123/0x177 [ 47.067320] print_address_description.cold.8+0x9/0x1ff [ 47.086724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.092712] kasan_report.cold.9+0x242/0x309 [ 47.092720] ? bacpy+0xe/0x10 [ 47.092727] check_memory_region+0x13e/0x1b0 [ 47.092732] memcpy+0x23/0x50 [ 47.092738] bacpy+0xe/0x10 [ 47.092744] hci_event_packet+0x38ce/0x9bfe [ 47.092757] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 47.092764] ? save_stack_address+0x60/0x60 [ 47.092773] ? ret_from_fork+0x24/0x30 [ 47.092783] ? add_lock_to_list.isra.26+0x193/0x340 [ 47.106376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.108300] ? save_trace+0xe0/0x290 [ 47.108311] ? __lock_acquire+0x26bc/0x4980 [ 47.169279] ? mark_held_locks+0x130/0x130 [ 47.173528] ? __lock_acquire+0x26bc/0x4980 [ 47.177861] ? find_held_lock+0x36/0x1d0 [ 47.181944] ? mark_held_locks+0xc7/0x130 [ 47.186102] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 47.191207] ? skb_dequeue+0x11d/0x1b0 [ 47.195134] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 47.200235] ? trace_hardirqs_on+0x28/0x190 [ 47.204563] hci_rx_work+0x363/0x8f0 [ 47.208278] ? hci_rx_work+0x363/0x8f0 [ 47.212188] process_one_work+0x830/0x1670 [ 47.216449] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 47.221116] ? lock_acquire+0x173/0x3d0 [ 47.225119] ? kasan_check_write+0x14/0x20 [ 47.229361] ? do_raw_spin_lock+0xd0/0x240 [ 47.233612] worker_thread+0x85/0xb60 [ 47.237415] ? __kthread_parkme+0x47/0x190 [ 47.241786] kthread+0x324/0x3e0 [ 47.245154] ? process_one_work+0x1670/0x1670 [ 47.249648] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 47.255198] ret_from_fork+0x24/0x30 [ 47.258916] 2020/04/07 22:14:22 executed programs: 13 [ 47.260542] Allocated by task 7523: [ 47.264166] save_stack+0x43/0xd0 [ 47.267615] kasan_kmalloc+0xc7/0xe0 [ 47.271415] __kmalloc_node_track_caller+0x50/0x70 [ 47.276357] __kmalloc_reserve.isra.41+0x2c/0xc0 [ 47.281120] __alloc_skb+0xd7/0x580 [ 47.284748] vhci_write+0xa8/0x3f0 [ 47.288295] __vfs_write+0x443/0x890 [ 47.292014] vfs_write+0x150/0x4d0 [ 47.295556] ksys_write+0x103/0x260 [ 47.299182] __x64_sys_write+0x6e/0xb0 [ 47.303094] do_syscall_64+0xd0/0x4e0 [ 47.307004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.312179] [ 47.313837] Freed by task 3670: [ 47.317116] save_stack+0x43/0xd0 [ 47.320566] __kasan_slab_free+0x102/0x150 [ 47.324821] kasan_slab_free+0xe/0x10 [ 47.328703] kfree+0xcf/0x220 [ 47.331807] skb_free_head+0x74/0x90 [ 47.335514] skb_release_data+0x50e/0x790 [ 47.339660] skb_release_all+0x3d/0x50 [ 47.343559] consume_skb+0x91/0x270 [ 47.347619] skb_free_datagram+0x12/0xc0 [ 47.351676] unix_dgram_recvmsg+0x78e/0xe90 [ 47.355981] sock_recvmsg+0xb7/0xf0 [ 47.359592] ___sys_recvmsg+0x219/0x500 [ 47.363547] __sys_recvmsg+0xd6/0x180 [ 47.367338] __x64_sys_recvmsg+0x73/0xb0 [ 47.371416] do_syscall_64+0xd0/0x4e0 [ 47.375214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.380389] [ 47.382000] The buggy address belongs to the object at ffff888092369080 [ 47.382000] which belongs to the cache kmalloc-512 of size 512 [ 47.394821] The buggy address is located 8 bytes to the right of [ 47.394821] 512-byte region [ffff888092369080, ffff888092369280) [ 47.407044] The buggy address belongs to the page: [ 47.411977] page:ffffea000248da40 count:1 mapcount:0 mapping:ffff88812c29c940 index:0x0 [ 47.420123] flags: 0xfffe0000000100(slab) [ 47.424254] raw: 00fffe0000000100 ffffea00028f5288 ffffea00024cb8c8 ffff88812c29c940 [ 47.432127] raw: 0000000000000000 ffff888092369080 0000000100000006 0000000000000000 [ 47.439993] page dumped because: kasan: bad access detected [ 47.445927] [ 47.447541] Memory state around the buggy address: [ 47.452454] ffff888092369180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.459806] ffff888092369200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.467153] >ffff888092369280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.474581] ^ [ 47.478189] ffff888092369300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.485541] ffff888092369380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.493311] ================================================================== [ 47.500648] Disabling lock debugging due to kernel taint [ 47.522149] Kernel panic - not syncing: panic_on_warn set ... [ 47.522149] [ 47.529561] CPU: 0 PID: 1205 Comm: kworker/u5:0 Tainted: G B 4.19.114-syzkaller #0 [ 47.538574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.547929] Workqueue: hci0 hci_rx_work [ 47.551906] Call Trace: [ 47.554475] dump_stack+0x123/0x177 [ 47.558082] panic+0x1cd/0x375 [ 47.561259] ? __warn_printk+0xd6/0xd6 [ 47.565124] ? ___preempt_schedule+0x16/0x18 [ 47.569515] kasan_end_report+0x47/0x4f [ 47.573471] kasan_report.cold.9+0x76/0x309 [ 47.577771] ? bacpy+0xe/0x10 [ 47.580858] check_memory_region+0x13e/0x1b0 [ 47.585246] memcpy+0x23/0x50 [ 47.588447] bacpy+0xe/0x10 [ 47.591376] hci_event_packet+0x38ce/0x9bfe [ 47.595686] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 47.600535] ? save_stack_address+0x60/0x60 [ 47.604850] ? ret_from_fork+0x24/0x30 [ 47.608723] ? add_lock_to_list.isra.26+0x193/0x340 [ 47.613822] ? save_trace+0xe0/0x290 [ 47.617514] ? __lock_acquire+0x26bc/0x4980 [ 47.621821] ? mark_held_locks+0x130/0x130 [ 47.626049] ? __lock_acquire+0x26bc/0x4980 [ 47.630351] ? find_held_lock+0x36/0x1d0 [ 47.634393] ? mark_held_locks+0xc7/0x130 [ 47.638518] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 47.643599] ? skb_dequeue+0x11d/0x1b0 [ 47.647464] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 47.652543] ? trace_hardirqs_on+0x28/0x190 [ 47.656848] hci_rx_work+0x363/0x8f0 [ 47.660543] ? hci_rx_work+0x363/0x8f0 [ 47.664426] process_one_work+0x830/0x1670 [ 47.668638] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 47.673282] ? lock_acquire+0x173/0x3d0 [ 47.677235] ? kasan_check_write+0x14/0x20 [ 47.681458] ? do_raw_spin_lock+0xd0/0x240 [ 47.685671] worker_thread+0x85/0xb60 [ 47.689447] ? __kthread_parkme+0x47/0x190 [ 47.693677] kthread+0x324/0x3e0 [ 47.697035] ? process_one_work+0x1670/0x1670 [ 47.702035] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 47.707552] ret_from_fork+0x24/0x30 [ 47.712621] Kernel Offset: disabled [ 47.716291] Rebooting in 86400 seconds..