[ 18.472839] random: 7 urandom warning(s) missed due to ratelimiting Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 30.690586] audit: type=1400 audit(1588574109.276:8): avc: denied { execmem } for pid=6253 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 30.706628] IPVS: ftp: loaded support on port[0] = 21 [ 31.128444] can: request_module (can-proto-0) failed. [ 32.124212] can: request_module (can-proto-0) failed. [ 32.148936] audit: type=1400 audit(1588574110.738:9): avc: denied { create } for pid=6230 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. 2020/05/04 06:35:18 parsed 1 programs 2020/05/04 06:35:19 executed programs: 0 [ 40.733136] audit: type=1400 audit(1588574119.334:10): avc: denied { execmem } for pid=6375 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.809221] IPVS: ftp: loaded support on port[0] = 21 [ 40.809730] IPVS: ftp: loaded support on port[0] = 21 [ 40.838267] IPVS: ftp: loaded support on port[0] = 21 [ 40.840052] IPVS: ftp: loaded support on port[0] = 21 [ 40.894788] IPVS: ftp: loaded support on port[0] = 21 [ 40.899801] IPVS: ftp: loaded support on port[0] = 21 [ 41.034723] chnl_net:caif_netlink_parms(): no params data found [ 41.069800] chnl_net:caif_netlink_parms(): no params data found [ 41.177318] chnl_net:caif_netlink_parms(): no params data found [ 41.196939] chnl_net:caif_netlink_parms(): no params data found [ 41.302369] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.308745] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.323616] device bridge_slave_0 entered promiscuous mode [ 41.332728] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.339070] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.346216] device bridge_slave_1 entered promiscuous mode [ 41.370314] chnl_net:caif_netlink_parms(): no params data found [ 41.392567] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.398938] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.406854] device bridge_slave_0 entered promiscuous mode [ 41.417450] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.424592] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.432800] device bridge_slave_1 entered promiscuous mode [ 41.446812] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.453640] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.460388] device bridge_slave_0 entered promiscuous mode [ 41.469468] chnl_net:caif_netlink_parms(): no params data found [ 41.478693] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.488781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.513728] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.520074] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.528010] device bridge_slave_1 entered promiscuous mode [ 41.545414] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.584597] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.598501] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.606360] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.615026] device bridge_slave_0 entered promiscuous mode [ 41.625371] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.632601] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.640048] device bridge_slave_1 entered promiscuous mode [ 41.647555] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.656526] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.669409] team0: Port device team_slave_0 added [ 41.678314] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.686292] team0: Port device team_slave_1 added [ 41.707325] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.725169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.736957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.745655] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.759638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.767430] team0: Port device team_slave_0 added [ 41.776883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.785062] team0: Port device team_slave_1 added [ 41.793818] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.801692] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.808114] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.816569] device bridge_slave_0 entered promiscuous mode [ 41.823266] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.830293] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.837821] device bridge_slave_0 entered promiscuous mode [ 41.845706] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.856352] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.863589] team0: Port device team_slave_0 added [ 41.868718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.882363] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.888712] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.896849] device bridge_slave_1 entered promiscuous mode [ 41.903587] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.909917] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.917325] device bridge_slave_1 entered promiscuous mode [ 41.934773] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.942326] team0: Port device team_slave_1 added [ 42.002381] device hsr_slave_0 entered promiscuous mode [ 42.040727] device hsr_slave_1 entered promiscuous mode [ 42.084628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.096859] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.105692] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.114189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.138339] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.145747] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.153500] team0: Port device team_slave_0 added [ 42.159368] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.202717] device hsr_slave_0 entered promiscuous mode [ 42.240600] device hsr_slave_1 entered promiscuous mode [ 42.284038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.294169] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.304165] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.312860] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.319911] team0: Port device team_slave_1 added [ 42.325263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.372050] device hsr_slave_0 entered promiscuous mode [ 42.410428] device hsr_slave_1 entered promiscuous mode [ 42.450554] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.457688] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.473758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.542600] device hsr_slave_0 entered promiscuous mode [ 42.580658] device hsr_slave_1 entered promiscuous mode [ 42.622166] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.629525] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.637273] team0: Port device team_slave_0 added [ 42.643055] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.650657] team0: Port device team_slave_1 added [ 42.655838] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.664399] team0: Port device team_slave_0 added [ 42.669807] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.682020] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.690426] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.699919] team0: Port device team_slave_1 added [ 42.705603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.722977] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.761884] device hsr_slave_0 entered promiscuous mode [ 42.780398] device hsr_slave_1 entered promiscuous mode [ 42.822167] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.829100] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.838873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.846840] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.857322] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.864290] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.873422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.882655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.941728] device hsr_slave_0 entered promiscuous mode [ 42.990622] device hsr_slave_1 entered promiscuous mode [ 43.040516] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.047703] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.061882] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.098024] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.108150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.128610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.136614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.156713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.164118] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.175795] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.184456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.195451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.203439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.210561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.217417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.226591] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.232775] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.249668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.257905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.264958] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.272113] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.280844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.288461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.297097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.305154] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.311634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.318951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.327956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.335871] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.342245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.351915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.364983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.375636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.383004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.393080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.400462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.408300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.416511] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.424996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.434256] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.444156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.453857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.461039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.468089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.476433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.484434] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.490848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.502080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.510019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.525924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.532924] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.539453] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.550238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.558129] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.570608] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.576710] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.586876] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.594223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.603068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.611150] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.617476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.624577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.631944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.639028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.646815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.654456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.663597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.673706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.683397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.692362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.701696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.707697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.717551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.725703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.733981] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.740400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.747598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.755858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.763945] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.770376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.777606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.785533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.794465] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.804776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.814124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.823989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.832991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.840955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.847918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.856442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.864328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.872942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.881026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.888966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.897170] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.903708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.911922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.920413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.929246] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.936088] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.945084] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.955266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.971183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.979260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.987553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.995870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.006911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.015618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.026112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.037153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.044926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.053289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.060949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.068668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.080723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.092212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.102042] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.110495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.118057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.126822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.135409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.144030] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.150591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.158141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.166468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.174636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.182006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.188975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.197773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.205956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.214789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.224488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.236448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.246293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.255718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.264449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.272994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.281051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.288881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.297402] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.304296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.311808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.321215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.328868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.336945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.346637] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.353766] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.365001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.375169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.384048] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.391165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.399825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.414028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.422772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.432592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.442231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.451056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.459047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.469743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.478849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.489678] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.498685] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.506514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.514063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.523591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.531517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.539578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.547384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.556840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.565094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.577791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.585458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.594608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.603426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.611064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.618914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.626638] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.633037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.642254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.658013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.666260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.673457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.684103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.691910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.700527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.708081] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.714461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.722353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.735051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.742400] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.748567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.758630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.767168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.774883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.783204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.791496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.799451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.806983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.820226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.828200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.839433] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.845670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.856443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.880950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.887930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.896227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.904323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.920355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.929189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.945809] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.957581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.967657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.978009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.988835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.000223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.008157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.016717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.027690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.034510] audit: type=1400 audit(1588574123.626:11): avc: denied { write } for pid=7274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 45.037594] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.067319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.077774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.088316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.098112] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.113716] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.122242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.135879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.148117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.162783] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.171747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.181102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.190841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.198515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.212134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.221062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.229910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.243052] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.261477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.277019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.289638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.717577] ================================================================== [ 45.725241] BUG: KASAN: use-after-free in __lock_acquire+0x3426/0x4980 [ 45.732504] Read of size 8 at addr ffff888093e7ece0 by task syz-executor.3/7282 [ 45.740232] [ 45.741864] CPU: 1 PID: 7282 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 45.749732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.759098] Call Trace: [ 45.761689] dump_stack+0x123/0x177 [ 45.765583] print_address_description.cold.8+0x9/0x1ff [ 45.771029] kasan_report.cold.9+0x242/0x309 [ 45.775429] ? __lock_acquire+0x3426/0x4980 [ 45.779775] __asan_report_load8_noabort+0x14/0x20 [ 45.784825] __lock_acquire+0x3426/0x4980 [ 45.789134] ? _raw_spin_unlock+0x2c/0x50 [ 45.793934] ? free_one_page+0x985/0xf30 [ 45.798142] ? __free_pages_ok+0x633/0xd90 [ 45.803188] ? __free_pages+0x7f/0xb0 [ 45.807399] ? lockdep_hardirqs_on+0x421/0x5c0 [ 45.812306] ? __free_pages_ok+0x633/0xd90 [ 45.817519] ? mark_held_locks+0x130/0x130 [ 45.822235] ? kasan_check_write+0x14/0x20 [ 45.827602] ? __free_pages+0x7f/0xb0 [ 45.832128] ? kasan_check_write+0x14/0x20 [ 45.836764] ? finish_task_switch+0x4c8/0x720 [ 45.841422] lock_acquire+0x173/0x3d0 [ 45.845696] ? lock_sock_nested+0x3a/0x100 [ 45.849930] _raw_spin_lock_bh+0x31/0x40 [ 45.854217] ? lock_sock_nested+0x3a/0x100 [ 45.858458] lock_sock_nested+0x3a/0x100 [ 45.862699] nr_accept+0x4d7/0x690 [ 45.866476] ? nr_ioctl+0x2e0/0x2e0 [ 45.870161] ? finish_wait+0x290/0x290 [ 45.874283] __sys_accept4+0x32b/0x6b0 [ 45.878618] ? __ia32_sys_listen+0x70/0x70 [ 45.883386] ? kasan_check_read+0x11/0x20 [ 45.887742] ? _copy_to_user+0x91/0xb0 [ 45.892746] ? put_timespec64+0xa9/0x100 [ 45.897101] ? nsecs_to_jiffies+0x20/0x20 [ 45.901542] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.908764] ? do_syscall_64+0x21/0x4e0 [ 45.913201] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.919092] __x64_sys_accept+0x70/0xb0 [ 45.923463] do_syscall_64+0xd0/0x4e0 [ 45.927585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.933311] RIP: 0033:0x459829 [ 45.936615] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 45.957376] RSP: 002b:00007f7e6727bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 45.965511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 45.974585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 45.982333] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 45.990518] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e6727c6d4 [ 45.998002] R13: 00000000004bf6e9 R14: 00000000004d0f80 R15: 00000000ffffffff [ 46.005755] [ 46.007544] Allocated by task 7273: [ 46.011305] save_stack+0x43/0xd0 [ 46.014977] kasan_kmalloc+0xc7/0xe0 [ 46.018772] __kmalloc+0x15b/0x770 [ 46.022536] sk_prot_alloc+0x148/0x240 [ 46.026697] sk_alloc+0x30/0xc60 [ 46.030350] nr_create+0x7e/0x5a0 [ 46.033791] __sock_create+0x262/0x540 [ 46.037660] __sys_socket+0xd7/0x1d0 [ 46.041365] __x64_sys_socket+0x6e/0xb0 [ 46.045335] do_syscall_64+0xd0/0x4e0 [ 46.049368] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.054747] [ 46.056480] Freed by task 7272: [ 46.059751] save_stack+0x43/0xd0 [ 46.063355] __kasan_slab_free+0x102/0x150 [ 46.068105] kasan_slab_free+0xe/0x10 [ 46.072252] kfree+0xcf/0x220 [ 46.075526] __sk_destruct+0x3b0/0x540 [ 46.079403] sk_destruct+0x83/0xb0 [ 46.083183] __sk_free+0x9e/0x230 [ 46.086625] sk_free+0x23/0x30 [ 46.090041] nr_release+0x2d6/0x360 [ 46.093655] __sock_release+0xc2/0x290 [ 46.097527] sock_close+0x10/0x20 [ 46.100977] __fput+0x249/0x7f0 [ 46.104475] ____fput+0x9/0x10 [ 46.107650] task_work_run+0x108/0x180 [ 46.111523] exit_to_usermode_loop+0x1a9/0x200 [ 46.116267] do_syscall_64+0x413/0x4e0 [ 46.120288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.125774] [ 46.127385] The buggy address belongs to the object at ffff888093e7ec40 [ 46.127385] which belongs to the cache kmalloc-2048 of size 2048 [ 46.141134] The buggy address is located 160 bytes inside of [ 46.141134] 2048-byte region [ffff888093e7ec40, ffff888093e7f440) [ 46.154984] The buggy address belongs to the page: [ 46.160045] page:ffffea00024f9f80 count:1 mapcount:0 mapping:ffff88812c31ec40 index:0x0 compound_mapcount: 0 [ 46.170283] flags: 0x1fffc0000008100(slab|head) [ 46.175656] raw: 01fffc0000008100 ffffea000250ea88 ffffea00024e7588 ffff88812c31ec40 [ 46.184109] raw: 0000000000000000 ffff888093e7e3c0 0000000100000003 0000000000000000 [ 46.192029] page dumped because: kasan: bad access detected [ 46.198219] [ 46.200042] Memory state around the buggy address: [ 46.205609] ffff888093e7eb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 46.214919] ffff888093e7ec00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 46.222903] >ffff888093e7ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.230354] ^ [ 46.238567] ffff888093e7ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.245967] ffff888093e7ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.253439] ================================================================== [ 46.261078] Disabling lock debugging due to kernel taint [ 46.270138] Kernel panic - not syncing: panic_on_warn set ... [ 46.270138] [ 46.277985] CPU: 1 PID: 7282 Comm: syz-executor.3 Tainted: G B 4.19.120-syzkaller #0 [ 46.288541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.298648] Call Trace: [ 46.301250] dump_stack+0x123/0x177 [ 46.305752] panic+0x1cd/0x375 [ 46.308944] ? __warn_printk+0xd6/0xd6 [ 46.313163] ? lock_downgrade+0x860/0x860 [ 46.317934] ? _raw_spin_unlock_irqrestore+0x63/0xd0 [ 46.323588] kasan_end_report+0x47/0x4f [ 46.327894] kasan_report.cold.9+0x76/0x309 [ 46.332581] ? __lock_acquire+0x3426/0x4980 [ 46.336945] __asan_report_load8_noabort+0x14/0x20 [ 46.342120] __lock_acquire+0x3426/0x4980 [ 46.346858] ? _raw_spin_unlock+0x2c/0x50 [ 46.351028] ? free_one_page+0x985/0xf30 [ 46.355151] ? __free_pages_ok+0x633/0xd90 [ 46.359498] ? __free_pages+0x7f/0xb0 [ 46.364081] ? lockdep_hardirqs_on+0x421/0x5c0 [ 46.368655] ? __free_pages_ok+0x633/0xd90 [ 46.373180] ? mark_held_locks+0x130/0x130 [ 46.377420] ? kasan_check_write+0x14/0x20 [ 46.381724] ? __free_pages+0x7f/0xb0 [ 46.385753] ? kasan_check_write+0x14/0x20 [ 46.390198] ? finish_task_switch+0x4c8/0x720 [ 46.395085] lock_acquire+0x173/0x3d0 [ 46.398894] ? lock_sock_nested+0x3a/0x100 [ 46.403585] _raw_spin_lock_bh+0x31/0x40 [ 46.407807] ? lock_sock_nested+0x3a/0x100 [ 46.412036] lock_sock_nested+0x3a/0x100 [ 46.416086] nr_accept+0x4d7/0x690 [ 46.419802] ? nr_ioctl+0x2e0/0x2e0 [ 46.423776] ? finish_wait+0x290/0x290 [ 46.428104] __sys_accept4+0x32b/0x6b0 [ 46.432205] ? __ia32_sys_listen+0x70/0x70 [ 46.436802] ? kasan_check_read+0x11/0x20 [ 46.441029] ? _copy_to_user+0x91/0xb0 [ 46.445030] ? put_timespec64+0xa9/0x100 [ 46.449465] ? nsecs_to_jiffies+0x20/0x20 [ 46.454091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 46.458926] ? do_syscall_64+0x21/0x4e0 [ 46.463156] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.468717] __x64_sys_accept+0x70/0xb0 [ 46.472826] do_syscall_64+0xd0/0x4e0 [ 46.476621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.482052] RIP: 0033:0x459829 [ 46.485229] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.504360] RSP: 002b:00007f7e6727bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 46.512094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 46.519521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 46.526816] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 46.534068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e6727c6d4 [ 46.541875] R13: 00000000004bf6e9 R14: 00000000004d0f80 R15: 00000000ffffffff [ 46.550726] Kernel Offset: disabled [ 46.554676] Rebooting in 86400 seconds..