Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 32.081271] audit: type=1400 audit(1597508576.723:8): avc: denied { execmem } for pid=6414 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.098337] IPVS: ftp: loaded support on port[0] = 21 [ 32.522818] can: request_module (can-proto-0) failed. [ 33.091573] can: request_module (can-proto-0) failed. [ 33.099533] can: request_module (can-proto-0) failed. [ 33.125518] audit: type=1400 audit(1597508577.763:9): avc: denied { create } for pid=6395 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. 2020/08/15 16:23:04 parsed 1 programs 2020/08/15 16:23:05 executed programs: 0 [ 41.047928] audit: type=1400 audit(1597508585.696:10): avc: denied { execmem } for pid=6537 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.090923] IPVS: ftp: loaded support on port[0] = 21 [ 41.102885] IPVS: ftp: loaded support on port[0] = 21 [ 41.114668] IPVS: ftp: loaded support on port[0] = 21 [ 41.176566] IPVS: ftp: loaded support on port[0] = 21 [ 41.215296] IPVS: ftp: loaded support on port[0] = 21 [ 41.222498] IPVS: ftp: loaded support on port[0] = 21 [ 41.393233] chnl_net:caif_netlink_parms(): no params data found [ 41.464100] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.471910] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.479558] device bridge_slave_0 entered promiscuous mode [ 41.503105] chnl_net:caif_netlink_parms(): no params data found [ 41.517879] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.524203] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.532808] device bridge_slave_1 entered promiscuous mode [ 41.556610] chnl_net:caif_netlink_parms(): no params data found [ 41.621814] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.633148] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.710784] chnl_net:caif_netlink_parms(): no params data found [ 41.764395] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.773906] team0: Port device team_slave_0 added [ 41.792871] chnl_net:caif_netlink_parms(): no params data found [ 41.801898] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.810176] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.818017] device bridge_slave_0 entered promiscuous mode [ 41.824165] chnl_net:caif_netlink_parms(): no params data found [ 41.848462] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.855792] team0: Port device team_slave_1 added [ 41.868863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.875910] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.882906] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.889946] device bridge_slave_1 entered promiscuous mode [ 41.904937] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.912303] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.919877] device bridge_slave_0 entered promiscuous mode [ 41.946786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.973628] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.980104] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.987800] device bridge_slave_1 entered promiscuous mode [ 41.998815] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.005156] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.013591] device bridge_slave_0 entered promiscuous mode [ 42.025418] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.032092] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.040040] device bridge_slave_1 entered promiscuous mode [ 42.047723] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.065240] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.072541] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.081250] device bridge_slave_0 entered promiscuous mode [ 42.112962] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.125279] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.131861] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.139290] device bridge_slave_1 entered promiscuous mode [ 42.152899] device hsr_slave_0 entered promiscuous mode [ 42.159142] device hsr_slave_1 entered promiscuous mode [ 42.166025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.175328] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.203176] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.209813] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.217519] device bridge_slave_0 entered promiscuous mode [ 42.223874] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.231482] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.241100] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.258437] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.265849] team0: Port device team_slave_0 added [ 42.274892] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.282688] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.292100] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.299755] device bridge_slave_1 entered promiscuous mode [ 42.305949] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.317973] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.325372] team0: Port device team_slave_0 added [ 42.330984] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.338337] team0: Port device team_slave_1 added [ 42.344380] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.370067] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.377575] team0: Port device team_slave_1 added [ 42.382697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.404655] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.411939] team0: Port device team_slave_0 added [ 42.417658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.424934] team0: Port device team_slave_1 added [ 42.432040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.441163] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.449102] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.457303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.477007] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.484322] team0: Port device team_slave_0 added [ 42.491814] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.499738] team0: Port device team_slave_0 added [ 42.504877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.512531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.520421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.543714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.550982] team0: Port device team_slave_1 added [ 42.556157] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.563725] team0: Port device team_slave_1 added [ 42.583242] device hsr_slave_0 entered promiscuous mode [ 42.589257] device hsr_slave_1 entered promiscuous mode [ 42.599518] device hsr_slave_0 entered promiscuous mode [ 42.605066] device hsr_slave_1 entered promiscuous mode [ 42.611257] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.619971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.628955] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.640791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.653110] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.661168] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.668635] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.678681] device hsr_slave_0 entered promiscuous mode [ 42.684595] device hsr_slave_1 entered promiscuous mode [ 42.691048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.705054] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.723910] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.735705] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.743138] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.759094] device hsr_slave_0 entered promiscuous mode [ 42.765172] device hsr_slave_1 entered promiscuous mode [ 42.784760] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.794355] device hsr_slave_0 entered promiscuous mode [ 42.800282] device hsr_slave_1 entered promiscuous mode [ 42.816715] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.823663] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.834641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.846161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.858983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.872414] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.890574] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.907382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.915519] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.924973] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.948855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.956175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.972463] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.979892] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.002495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.011543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.021252] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.028551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.047794] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 43.054630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.063206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.071334] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.077789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.085313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.104437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.111542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.120440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.128367] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.139095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.147483] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.154748] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.161181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.168612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.175398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.183786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.191472] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.197868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.204680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.211637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.227132] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.233178] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.242450] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.254232] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.260481] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.269430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.276181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.285689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.294279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.302662] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.309443] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.319380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.329705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.338019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.345472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.353841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.361632] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.368072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.374935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.383200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.390827] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.397204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.403867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.411791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.419430] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.425765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.432756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.440846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.447978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.458133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.471355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.481796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.492477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.500706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.510073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.518622] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.524943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.532108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.540325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.549156] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.556003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.562848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.570749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.579957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.591691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.601411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.609840] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.617293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.624541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.635804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.643755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.651924] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.658307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.665930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.676634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.683491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.693726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.703849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.713545] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.722351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.730728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.739378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.747737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.755107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.763124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.770861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.778058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.784813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.792924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.800721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.808002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.814899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.824134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.833140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.843064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.853905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.860572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.869178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.877141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.884494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.892414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.902017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.914293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.922603] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.932519] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.941356] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.951273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.959753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.969036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.977104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.984051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.992911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.005757] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.012590] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.020780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.028475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.037309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.045176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.055850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.065215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.076768] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.082936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.091001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.100469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.108052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.115876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.123749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.131372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.139145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.148641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.157091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.164903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.177346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.195456] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.202652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.211065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.218680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.226462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.233916] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.240284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.247487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.255033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.262571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.270524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.278149] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.284471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.291307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.298627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.309331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.318256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.337127] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.344453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.352009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.360679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.369156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.377657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.385220] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.391636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.399500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.406801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.413489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.421659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.431310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.440114] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.448736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.460505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.472513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.480760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.488864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.497039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.504492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.512834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.521702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.530058] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.536479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.545007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.564080] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.573084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.583502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.591079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.599872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.608213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.615878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.630472] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.641691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.650239] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.668245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.683773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.710069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.712511] ================================================================== [ 44.719712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.724271] BUG: KASAN: use-after-free in eth_type_trans+0x5c1/0x6e0 [ 44.724277] Read of size 8 at addr ffff888073ff0040 by task syz-executor.3/7437 [ 44.724279] [ 44.724286] CPU: 0 PID: 7437 Comm: syz-executor.3 Not tainted 4.19.139-syzkaller #0 [ 44.724292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.733266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.737455] Call Trace: [ 44.737471] dump_stack+0x123/0x177 [ 44.737481] print_address_description.cold.8+0x9/0x1ff [ 44.737487] kasan_report.cold.9+0x242/0x309 [ 44.737494] ? eth_type_trans+0x5c1/0x6e0 [ 44.737503] __asan_report_load8_noabort+0x14/0x20 [ 44.737507] eth_type_trans+0x5c1/0x6e0 [ 44.737513] ? eth_gro_receive+0x960/0x960 [ 44.737528] napi_gro_frags+0x546/0x8e0 [ 44.737538] tun_get_user+0x277b/0x48a0 [ 44.745422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.746658] ? firmware_map_remove+0x177/0x177 [ 44.746675] ? tun_build_skb.isra.53+0x14c0/0x14c0 [ 44.746685] ? mark_held_locks+0x130/0x130 [ 44.746695] ? find_held_lock+0x36/0x1d0 [ 44.746706] ? tun_get+0xf3/0x1d0 [ 44.746711] ? lock_downgrade+0x860/0x860 [ 44.746720] ? kasan_check_read+0x11/0x20 [ 44.746730] tun_chr_write_iter+0xaf/0x150 [ 44.755490] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.763884] do_iter_readv_writev+0x4ae/0x960 [ 44.763893] ? vfs_dedupe_file_range+0x5a0/0x5a0 [ 44.763906] do_iter_write+0x12a/0x510 [ 44.763914] ? dup_iter+0x250/0x250 [ 44.763925] vfs_writev+0x16f/0x2d0 [ 44.763931] ? __fget+0x278/0x400 [ 44.763937] ? vfs_iter_write+0xb0/0xb0 [ 44.763946] ? kasan_check_read+0x11/0x20 [ 44.763956] ? __fget+0x295/0x400 [ 44.783125] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.785120] ? ksys_dup3+0x2e0/0x2e0 [ 44.785131] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 44.785141] ? __fget_light+0x174/0x1e0 [ 44.791528] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.793687] do_writev+0x110/0x330 [ 44.793697] ? vfs_writev+0x2d0/0x2d0 [ 44.793710] __x64_sys_writev+0x70/0xb0 [ 44.793718] ? do_syscall_64+0x51/0x4e0 [ 44.804068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.806831] do_syscall_64+0xd0/0x4e0 [ 44.806843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.806849] RIP: 0033:0x45a851 [ 44.806855] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 44.806858] RSP: 002b:00007fc711c66ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 44.806864] RAX: ffffffffffffffda RBX: 0000000000207843 RCX: 000000000045a851 [ 44.806868] RDX: 0000000000000001 RSI: 00007fc711c66c00 RDI: 00000000000000f0 [ 44.806871] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 44.806873] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fc711c676d4 [ 44.806877] R13: 00000000004cab9f R14: 00000000004e40c0 R15: 00000000ffffffff [ 44.806890] [ 44.855905] hrtimer: interrupt took 66701 ns [ 44.858213] The buggy address belongs to the page: [ 45.031860] page:ffffea0001cffc00 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 45.039997] flags: 0xfffe0000000000() [ 45.043782] raw: 00fffe0000000000 ffffea0001cffc08 ffffea0001cffc08 0000000000000000 [ 45.051676] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 45.059545] page dumped because: kasan: bad access detected [ 45.065260] [ 45.066869] Memory state around the buggy address: [ 45.071797] ffff888073feff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.079140] ffff888073feff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.086482] >ffff888073ff0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.093825] ^ [ 45.099273] ffff888073ff0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.106622] ffff888073ff0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.115109] ================================================================== [ 45.122484] Disabling lock debugging due to kernel taint [ 45.127974] Kernel panic - not syncing: panic_on_warn set ... [ 45.127974] [ 45.135336] CPU: 0 PID: 7437 Comm: syz-executor.3 Tainted: G B 4.19.139-syzkaller #0 [ 45.144504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.153856] Call Trace: [ 45.156443] dump_stack+0x123/0x177 [ 45.160185] panic+0x1cd/0x375 [ 45.163378] ? __warn_printk+0xd6/0xd6 [ 45.167271] ? do_raw_spin_unlock+0x54/0x260 [ 45.171690] kasan_end_report+0x47/0x4f [ 45.175666] kasan_report.cold.9+0x76/0x309 [ 45.179987] ? eth_type_trans+0x5c1/0x6e0 [ 45.184141] __asan_report_load8_noabort+0x14/0x20 [ 45.189073] eth_type_trans+0x5c1/0x6e0 [ 45.193050] ? eth_gro_receive+0x960/0x960 [ 45.197300] napi_gro_frags+0x546/0x8e0 [ 45.201296] tun_get_user+0x277b/0x48a0 [ 45.205286] ? firmware_map_remove+0x177/0x177 [ 45.209872] ? tun_build_skb.isra.53+0x14c0/0x14c0 [ 45.214806] ? mark_held_locks+0x130/0x130 [ 45.219043] ? find_held_lock+0x36/0x1d0 [ 45.223098] ? tun_get+0xf3/0x1d0 [ 45.226544] ? lock_downgrade+0x860/0x860 [ 45.230702] ? kasan_check_read+0x11/0x20 [ 45.234888] tun_chr_write_iter+0xaf/0x150 [ 45.239125] do_iter_readv_writev+0x4ae/0x960 [ 45.244593] ? vfs_dedupe_file_range+0x5a0/0x5a0 [ 45.249363] do_iter_write+0x12a/0x510 [ 45.253257] ? dup_iter+0x250/0x250 [ 45.256884] vfs_writev+0x16f/0x2d0 [ 45.260503] ? __fget+0x278/0x400 [ 45.263949] ? vfs_iter_write+0xb0/0xb0 [ 45.267950] ? kasan_check_read+0x11/0x20 [ 45.272713] ? __fget+0x295/0x400 [ 45.276161] ? ksys_dup3+0x2e0/0x2e0 [ 45.279872] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 45.284632] ? __fget_light+0x174/0x1e0 [ 45.288613] do_writev+0x110/0x330 [ 45.292160] ? vfs_writev+0x2d0/0x2d0 [ 45.295970] __x64_sys_writev+0x70/0xb0 [ 45.299941] ? do_syscall_64+0x51/0x4e0 [ 45.303923] do_syscall_64+0xd0/0x4e0 [ 45.307730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.312917] RIP: 0033:0x45a851 [ 45.316102] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 45.335022] RSP: 002b:00007fc711c66ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 45.342730] RAX: ffffffffffffffda RBX: 0000000000207843 RCX: 000000000045a851 [ 45.349999] RDX: 0000000000000001 RSI: 00007fc711c66c00 RDI: 00000000000000f0 [ 45.357270] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 45.364579] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fc711c676d4 [ 45.371845] R13: 00000000004cab9f R14: 00000000004e40c0 R15: 00000000ffffffff [ 45.380164] Kernel Offset: disabled [ 45.383783] Rebooting in 86400 seconds..