Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 30.200365] audit: type=1400 audit(1588894746.251:8): avc: denied { execmem } for pid=6417 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 30.212042] IPVS: ftp: loaded support on port[0] = 21 [ 30.664615] can: request_module (can-proto-0) failed. [ 31.689490] can: request_module (can-proto-0) failed. [ 31.697519] can: request_module (can-proto-0) failed. [ 31.723105] audit: type=1400 audit(1588894747.773:9): avc: denied { create } for pid=6394 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. 2020/05/07 23:39:14 parsed 1 programs 2020/05/07 23:39:15 executed programs: 0 [ 39.524157] audit: type=1400 audit(1588894755.578:10): avc: denied { execmem } for pid=6543 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 39.578733] IPVS: ftp: loaded support on port[0] = 21 [ 39.583460] IPVS: ftp: loaded support on port[0] = 21 [ 39.591232] IPVS: ftp: loaded support on port[0] = 21 [ 39.611429] IPVS: ftp: loaded support on port[0] = 21 [ 39.613497] IPVS: ftp: loaded support on port[0] = 21 [ 39.682381] IPVS: ftp: loaded support on port[0] = 21 [ 39.809962] chnl_net:caif_netlink_parms(): no params data found [ 39.838463] chnl_net:caif_netlink_parms(): no params data found [ 39.953515] chnl_net:caif_netlink_parms(): no params data found [ 40.026450] chnl_net:caif_netlink_parms(): no params data found [ 40.040809] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.047163] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.055121] device bridge_slave_0 entered promiscuous mode [ 40.064141] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.071088] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.078555] device bridge_slave_1 entered promiscuous mode [ 40.084888] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.092070] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.099686] device bridge_slave_0 entered promiscuous mode [ 40.111703] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.118871] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.125620] device bridge_slave_0 entered promiscuous mode [ 40.162709] chnl_net:caif_netlink_parms(): no params data found [ 40.179528] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.185889] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.194548] device bridge_slave_1 entered promiscuous mode [ 40.206847] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.215205] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.223253] device bridge_slave_1 entered promiscuous mode [ 40.254616] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.264923] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.275513] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.298401] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.322515] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.367254] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.375683] team0: Port device team_slave_0 added [ 40.385162] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.393267] team0: Port device team_slave_1 added [ 40.399207] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.406926] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.414423] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.423299] device bridge_slave_0 entered promiscuous mode [ 40.429834] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.436163] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.443433] device bridge_slave_0 entered promiscuous mode [ 40.459796] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.466913] team0: Port device team_slave_0 added [ 40.472786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.480449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.491050] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.497389] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.505335] device bridge_slave_1 entered promiscuous mode [ 40.511765] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.518814] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.525595] device bridge_slave_1 entered promiscuous mode [ 40.537080] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.544556] team0: Port device team_slave_1 added [ 40.550126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.580153] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.593077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.603953] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.611953] team0: Port device team_slave_0 added [ 40.650019] device hsr_slave_0 entered promiscuous mode [ 40.707815] device hsr_slave_1 entered promiscuous mode [ 40.758519] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.766198] chnl_net:caif_netlink_parms(): no params data found [ 40.774639] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.788299] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.796394] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.804554] team0: Port device team_slave_1 added [ 40.810696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.818493] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.825292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.889415] device hsr_slave_0 entered promiscuous mode [ 40.938489] device hsr_slave_1 entered promiscuous mode [ 40.990993] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.003827] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.059399] device hsr_slave_0 entered promiscuous mode [ 41.097475] device hsr_slave_1 entered promiscuous mode [ 41.142219] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.149503] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.156560] team0: Port device team_slave_0 added [ 41.162599] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.169939] team0: Port device team_slave_1 added [ 41.189104] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.195947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.204604] team0: Port device team_slave_0 added [ 41.210223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.219939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.226798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.237772] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.244914] team0: Port device team_slave_1 added [ 41.256576] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.309070] device hsr_slave_0 entered promiscuous mode [ 41.347468] device hsr_slave_1 entered promiscuous mode [ 41.401544] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.408852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.425793] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.432724] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.439957] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.446764] device bridge_slave_0 entered promiscuous mode [ 41.454301] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.461294] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.468815] device bridge_slave_1 entered promiscuous mode [ 41.474975] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.483491] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.505215] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.559741] device hsr_slave_0 entered promiscuous mode [ 41.597308] device hsr_slave_1 entered promiscuous mode [ 41.638091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.645869] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.658803] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.670845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.678914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.713972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.731096] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.738391] team0: Port device team_slave_0 added [ 41.756054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.764362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.774560] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.782295] team0: Port device team_slave_1 added [ 41.790373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.801600] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.808403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.815955] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.823852] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.844366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.852154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.862210] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.869218] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.875906] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.884479] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.896094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.905942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.914034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.949633] device hsr_slave_0 entered promiscuous mode [ 41.987225] device hsr_slave_1 entered promiscuous mode [ 42.040520] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.046611] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.054493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.064222] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.072272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.081100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.089066] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.095521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.102593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.110510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.117499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.127150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.134392] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.143279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.159775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.170299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.178643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.186171] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.192541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.199581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.207453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.214966] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.221331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.229404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.243893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.252792] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.260230] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.270068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.278754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.286550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.295634] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.302068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.309168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.319099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.326854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.343478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.352363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.361416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.371776] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.382499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.390525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.399198] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.405533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.412441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.420265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.427907] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.434230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.441042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.449451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.456260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.463462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.473021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.483223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.492145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.501760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.518695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.529249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.536379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.545008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.552920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.560809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.568711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.576330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.583368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.600288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.609641] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.619687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.627424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.635185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.646568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.654132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.661889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.670352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.679436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.688990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.695669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.705272] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.713542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.723530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.731410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.739395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.746891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.754294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.762177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.769887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.776808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.783558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.791292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.800352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.810039] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.817558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.828636] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.834643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.843560] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.850013] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.857224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.865037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.872879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.880654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.888315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.897634] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.905865] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.912345] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.924553] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 42.934456] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.940960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.952821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.963299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.970514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.977769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.985179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.994128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.002145] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.010358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.021001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.028889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.036175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.044032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.052540] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.058920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.066556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.073244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.079982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.087935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.095399] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.101835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.109503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.116725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.125871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.136261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.149833] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 43.158709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.168930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.177209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.183923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.192368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.200224] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.206596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.213309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.221153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.228770] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.235092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.241945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.249619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.257326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.264675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.273910] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.282100] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.291130] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.297816] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.306821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.315503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.325576] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.332390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.340595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.351668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.358824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.365545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.374971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.381924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.389874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.397505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.405078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.412786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.420764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.429590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.441877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.451828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.459496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.469371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.477137] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.483466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.490292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.498067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.505379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.516828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.527645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.544547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.552277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.560183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.568549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.576024] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.582435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.589738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.597784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.606651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.612899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.625168] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 43.633440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.644127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.657256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.668360] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.678091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.685691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.694387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.703530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.711730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.719488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.726524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.734579] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.740920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.752541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.765795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.775106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.802079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.828967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.867102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.882046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.893662] ================================================================== [ 43.901187] BUG: KASAN: slab-out-of-bounds in bacpy+0xe/0x10 [ 43.906976] Read of size 6 at addr ffff888092204488 by task kworker/u5:0/1206 [ 43.914233] [ 43.915852] CPU: 1 PID: 1206 Comm: kworker/u5:0 Not tainted 4.19.121-syzkaller #0 [ 43.923461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.932902] Workqueue: hci0 hci_rx_work [ 43.936868] Call Trace: [ 43.939457] dump_stack+0x123/0x177 [ 43.943081] print_address_description.cold.8+0x9/0x1ff [ 43.948449] kasan_report.cold.9+0x242/0x309 [ 43.952906] ? bacpy+0xe/0x10 [ 43.953849] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 43.956001] check_memory_region+0x13e/0x1b0 [ 43.956012] memcpy+0x23/0x50 [ 43.956019] bacpy+0xe/0x10 [ 43.956025] hci_event_packet+0x38ce/0x9bfe [ 43.956037] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 43.956044] ? __save_stack_trace+0x30/0x100 [ 43.956053] ? ret_from_fork+0x24/0x30 [ 43.956062] ? add_lock_to_list.isra.26+0x193/0x340 [ 43.956065] ? save_trace+0xe0/0x290 [ 43.956073] ? __lock_acquire+0x26bc/0x4980 [ 43.979931] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.981813] ? mark_held_locks+0x130/0x130 [ 43.999393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.003071] ? __lock_acquire+0x26bc/0x4980 [ 44.023763] ? debug_object_destroy+0x2b0/0x2b0 [ 44.028549] ? find_held_lock+0x36/0x1d0 [ 44.032614] ? mark_held_locks+0xc7/0x130 [ 44.036760] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 44.041858] ? skb_dequeue+0x11d/0x1b0 [ 44.047476] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 44.052575] ? trace_hardirqs_on+0x28/0x190 [ 44.056897] hci_rx_work+0x363/0x8f0 [ 44.060601] ? hci_rx_work+0x363/0x8f0 [ 44.064487] process_one_work+0x830/0x1670 [ 44.068730] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 44.073396] ? kasan_check_write+0x14/0x20 [ 44.077636] ? do_raw_spin_lock+0xd0/0x240 [ 44.081869] worker_thread+0x85/0xb60 [ 44.085660] ? __kthread_parkme+0x47/0x190 [ 44.089886] kthread+0x324/0x3e0 [ 44.093241] ? process_one_work+0x1670/0x1670 [ 44.097734] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 44.103248] ret_from_fork+0x24/0x30 [ 44.106954] [ 44.108554] Allocated by task 7492: [ 44.112155] save_stack+0x43/0xd0 [ 44.115581] kasan_kmalloc+0xc7/0xe0 [ 44.119270] __kmalloc_node_track_caller+0x50/0x70 [ 44.124176] __kmalloc_reserve.isra.41+0x2c/0xc0 [ 44.128911] __alloc_skb+0xd7/0x580 [ 44.132603] vhci_write+0xa8/0x3f0 [ 44.136114] __vfs_write+0x443/0x890 [ 44.139801] vfs_write+0x150/0x4d0 [ 44.143312] ksys_write+0x103/0x260 [ 44.146909] __x64_sys_write+0x6e/0xb0 [ 44.150770] do_syscall_64+0xd0/0x4e0 [ 44.154541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.159700] [ 44.161303] Freed by task 0: [ 44.164290] (stack is not available) [ 44.167984] [ 44.169586] The buggy address belongs to the object at ffff888092204280 [ 44.169586] which belongs to the cache kmalloc-512 of size 512 [ 44.182225] The buggy address is located 8 bytes to the right of [ 44.182225] 512-byte region [ffff888092204280, ffff888092204480) [ 44.194417] The buggy address belongs to the page: [ 44.199327] page:ffffea0002488100 count:1 mapcount:0 mapping:ffff88812c29c940 index:0x0 [ 44.207440] flags: 0xfffe0000000100(slab) [ 44.211569] raw: 00fffe0000000100 ffffea0002461608 ffffea000245c9c8 ffff88812c29c940 [ 44.219419] raw: 0000000000000000 ffff888092204000 0000000100000006 0000000000000000 [ 44.227270] page dumped because: kasan: bad access detected [ 44.232970] [ 44.234571] Memory state around the buggy address: [ 44.239480] ffff888092204380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.247766] ffff888092204400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.255095] >ffff888092204480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.262426] ^ [ 44.266024] ffff888092204500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.273355] ffff888092204580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.280706] ================================================================== [ 44.288035] Disabling lock debugging due to kernel taint [ 44.296675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.304886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.312177] Kernel panic - not syncing: panic_on_warn set ... [ 44.312177] [ 44.319538] CPU: 1 PID: 1206 Comm: kworker/u5:0 Tainted: G B 4.19.121-syzkaller #0 [ 44.328532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.337879] Workqueue: hci0 hci_rx_work [ 44.341927] Call Trace: [ 44.344503] dump_stack+0x123/0x177 [ 44.348117] panic+0x1cd/0x375 [ 44.351296] ? __warn_printk+0xd6/0xd6 [ 44.355173] ? ___preempt_schedule+0x16/0x18 [ 44.359575] kasan_end_report+0x47/0x4f [ 44.363539] kasan_report.cold.9+0x76/0x309 [ 44.367857] ? bacpy+0xe/0x10 [ 44.370953] check_memory_region+0x13e/0x1b0 [ 44.375355] memcpy+0x23/0x50 [ 44.378451] bacpy+0xe/0x10 [ 44.381370] hci_event_packet+0x38ce/0x9bfe [ 44.385677] ? hci_cmd_complete_evt+0xaab0/0xaab0 [ 44.390494] ? __save_stack_trace+0x30/0x100 [ 44.394886] ? ret_from_fork+0x24/0x30 [ 44.398758] ? add_lock_to_list.isra.26+0x193/0x340 [ 44.403743] ? save_trace+0xe0/0x290 [ 44.407435] ? __lock_acquire+0x26bc/0x4980 [ 44.411728] ? mark_held_locks+0x130/0x130 [ 44.415934] ? __lock_acquire+0x26bc/0x4980 [ 44.420231] ? debug_object_destroy+0x2b0/0x2b0 [ 44.424873] ? find_held_lock+0x36/0x1d0 [ 44.428905] ? mark_held_locks+0xc7/0x130 [ 44.433024] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 44.438724] ? skb_dequeue+0x11d/0x1b0 [ 44.442583] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 44.447659] ? trace_hardirqs_on+0x28/0x190 [ 44.451953] hci_rx_work+0x363/0x8f0 [ 44.455637] ? hci_rx_work+0x363/0x8f0 [ 44.459497] process_one_work+0x830/0x1670 [ 44.463703] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 44.468343] ? kasan_check_write+0x14/0x20 [ 44.472548] ? do_raw_spin_lock+0xd0/0x240 [ 44.476755] worker_thread+0x85/0xb60 [ 44.480525] ? __kthread_parkme+0x47/0x190 [ 44.484734] kthread+0x324/0x3e0 [ 44.488084] ? process_one_work+0x1670/0x1670 [ 44.492558] ? kthread_cancel_delayed_work_sync+0x10/0x10 [ 44.498076] ret_from_fork+0x24/0x30 [ 44.502530] Kernel Offset: disabled [ 44.506239] Rebooting in 86400 seconds..