Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 35.730622] audit: type=1400 audit(1600311377.324:8): avc: denied { execmem } for pid=6430 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 35.747169] IPVS: ftp: loaded support on port[0] = 21 [ 36.162344] can: request_module (can-proto-0) failed. [ 36.731444] can: request_module (can-proto-0) failed. [ 36.740104] can: request_module (can-proto-0) failed. [ 36.766063] audit: type=1400 audit(1600311378.354:9): avc: denied { create } for pid=6411 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts. 2020/09/17 02:56:25 parsed 1 programs 2020/09/17 02:56:26 executed programs: 0 [ 45.088874] audit: type=1400 audit(1600311386.686:10): avc: denied { execmem } for pid=6554 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 45.161220] IPVS: ftp: loaded support on port[0] = 21 [ 45.205066] IPVS: ftp: loaded support on port[0] = 21 [ 45.222895] IPVS: ftp: loaded support on port[0] = 21 [ 45.232496] IPVS: ftp: loaded support on port[0] = 21 [ 45.259274] IPVS: ftp: loaded support on port[0] = 21 [ 45.329049] IPVS: ftp: loaded support on port[0] = 21 [ 45.518248] chnl_net:caif_netlink_parms(): no params data found [ 45.576170] chnl_net:caif_netlink_parms(): no params data found [ 45.634749] chnl_net:caif_netlink_parms(): no params data found [ 45.661234] chnl_net:caif_netlink_parms(): no params data found [ 45.718483] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.725176] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.732967] device bridge_slave_0 entered promiscuous mode [ 45.745661] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.752215] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.760026] device bridge_slave_1 entered promiscuous mode [ 45.772127] chnl_net:caif_netlink_parms(): no params data found [ 45.842361] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.850944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.859183] device bridge_slave_0 entered promiscuous mode [ 45.872772] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.885178] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.898716] chnl_net:caif_netlink_parms(): no params data found [ 45.907728] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.914073] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.921330] device bridge_slave_1 entered promiscuous mode [ 45.955214] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.964606] team0: Port device team_slave_0 added [ 45.973170] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.981338] team0: Port device team_slave_1 added [ 45.991690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.001331] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.007944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.014766] device bridge_slave_0 entered promiscuous mode [ 46.030991] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.037736] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.044821] device bridge_slave_1 entered promiscuous mode [ 46.061122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.070260] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.082350] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.091131] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.098480] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.105897] device bridge_slave_0 entered promiscuous mode [ 46.122328] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.153089] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.159640] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.167502] device bridge_slave_1 entered promiscuous mode [ 46.181066] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.198675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.206042] team0: Port device team_slave_0 added [ 46.217352] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.223708] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.231867] device bridge_slave_0 entered promiscuous mode [ 46.252512] device hsr_slave_0 entered promiscuous mode [ 46.258515] device hsr_slave_1 entered promiscuous mode [ 46.269677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.277062] team0: Port device team_slave_1 added [ 46.287180] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.293550] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.301358] device bridge_slave_1 entered promiscuous mode [ 46.308883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.317146] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.324665] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.332655] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.340250] team0: Port device team_slave_0 added [ 46.345391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.353026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.369872] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.381827] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.391121] team0: Port device team_slave_1 added [ 46.401303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.408407] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.414740] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.422509] device bridge_slave_0 entered promiscuous mode [ 46.434099] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.441264] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.448672] device bridge_slave_1 entered promiscuous mode [ 46.463209] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.470621] team0: Port device team_slave_0 added [ 46.480712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.488781] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.498250] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.517740] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.525203] team0: Port device team_slave_1 added [ 46.533409] device hsr_slave_0 entered promiscuous mode [ 46.540889] device hsr_slave_1 entered promiscuous mode [ 46.547238] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.570789] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.580463] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.588995] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.603603] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.619306] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.628733] device hsr_slave_0 entered promiscuous mode [ 46.634454] device hsr_slave_1 entered promiscuous mode [ 46.640941] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.648922] team0: Port device team_slave_0 added [ 46.659354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.673387] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.680962] team0: Port device team_slave_0 added [ 46.686144] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.693515] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.702801] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.710396] team0: Port device team_slave_1 added [ 46.716443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.724442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.744442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.752123] team0: Port device team_slave_1 added [ 46.758481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.779967] device hsr_slave_0 entered promiscuous mode [ 46.785880] device hsr_slave_1 entered promiscuous mode [ 46.793127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.810206] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.819903] device hsr_slave_0 entered promiscuous mode [ 46.825792] device hsr_slave_1 entered promiscuous mode [ 46.836608] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.843506] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.856599] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.872182] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.884201] device hsr_slave_0 entered promiscuous mode [ 46.890073] device hsr_slave_1 entered promiscuous mode [ 46.900717] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.919251] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.930791] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.956099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.964441] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.984018] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.003216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.024671] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.045335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.052556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.062351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.070706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.098250] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.119621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.132178] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.138901] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.153562] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.161714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.173824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.180816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.188073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.195806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.203504] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.210016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.219342] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.225777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.235788] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.242983] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.254543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.263726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.272237] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.281304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.289780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.297699] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.304042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.312132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.323424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.332923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.341624] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.352938] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.360190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.368009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.378359] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.384827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.391679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.399913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.407006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.413751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.420746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.429889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.439556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.449142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.458030] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.464099] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.471179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.478639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.486810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.494309] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.500725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.507835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.517741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.525342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.537141] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.544526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.552820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.560752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.568793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.580129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.589366] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.599871] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.605947] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.614612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.624179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.631391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.639126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.646862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.654619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.662488] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.668898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.675631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.683611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.691455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.700529] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.708212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.717509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.727179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.736915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.745047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.754865] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.761294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.768909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.775725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.782702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.789524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.796422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.804057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.811810] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.818204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.825122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.832962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.842579] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.849107] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.856844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.865844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.874820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.883809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.892694] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.902346] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.908965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.918088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.925841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.934053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.942307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.950442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.958374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.965755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.973755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.985599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.994899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.003720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.013921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.023811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.031837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.039852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.047428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.054800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.062277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.070114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.077871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.085789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.093716] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.100557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.108181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.115861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.123524] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.129921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.138817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.150066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.159426] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.165470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.175631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.188258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.197435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.204910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.212670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.220352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.228000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.235353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.243262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.250829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.258395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.266302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.273812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.283984] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.290961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.304701] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 48.314409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.330070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.339490] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.346506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.354862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.362902] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.369281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.376185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.383912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.392049] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.398445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.405174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.412086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.419342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.427388] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.433378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.445217] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 48.453846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.462900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.473152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.483995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.496544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.504320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.512227] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.518626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.525564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.533787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.541727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.551612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.560682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.570982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.578985] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.587164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.594676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.602674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.610957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.619576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.626571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.633208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.641039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.650547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.661308] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 48.671415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.679357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.689066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.695840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.704132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.713314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.722484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.735086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.743876] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.755302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.763449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.771452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.780240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.787015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.793666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.801219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.810876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.827186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.835240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.851817] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.858386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.866596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.873575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.881866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.891849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.899573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.907295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.915015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.922615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.930839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.945186] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 48.957104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.970042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.978699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.991041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.999355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.008244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.015626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.023449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.030952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.039806] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.064976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.073916] ================================================================== [ 49.073945] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x298/0x6a0 [ 49.073950] Read of size 32 at addr ffffffff876954a0 by task syz-executor.2/7484 [ 49.073952] [ 49.073958] CPU: 1 PID: 7484 Comm: syz-executor.2 Not tainted 4.19.145-syzkaller #0 [ 49.073962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.073965] Call Trace: [ 49.073975] dump_stack+0x123/0x177 [ 49.073986] print_address_description.cold.8+0x58/0x1ff [ 49.073993] kasan_report.cold.9+0x242/0x309 [ 49.073998] ? fbcon_get_font+0x298/0x6a0 [ 49.074008] check_memory_region+0x13e/0x1b0 [ 49.074015] memcpy+0x23/0x50 [ 49.074022] fbcon_get_font+0x298/0x6a0 [ 49.074034] con_font_op+0x3a4/0x11f0 [ 49.074042] ? __lock_acquire+0x792/0x4980 [ 49.074048] ? con_write+0x80/0x80 [ 49.074059] ? selinux_capable+0x1b/0x20 [ 49.074065] ? security_capable+0x58/0xa0 [ 49.074074] ? ns_capable_common+0x5e/0xd0 [ 49.074082] vt_ioctl+0xdce/0x23f0 [ 49.074088] ? get_futex_key+0xa5f/0x1190 [ 49.074096] ? complete_change_console+0x300/0x300 [ 49.074103] ? find_held_lock+0x36/0x1d0 [ 49.074124] ? avc_has_extended_perms+0x4c5/0x1170 [ 49.074130] ? lock_downgrade+0x860/0x860 [ 49.074148] tty_ioctl+0x452/0x1290 [ 49.074154] ? tty_vhangup+0x20/0x20 [ 49.074160] ? avc_ss_reset+0x130/0x130 [ 49.074171] ? mark_held_locks+0x130/0x130 [ 49.074176] ? mark_held_locks+0x130/0x130 [ 49.074200] do_vfs_ioctl+0x196/0x10c0 [ 49.074209] ? ioctl_preallocate+0x1c0/0x1c0 [ 49.074216] ? selinux_file_mprotect+0x5f0/0x5f0 [ 49.074229] ? ksys_dup3+0x2e0/0x2e0 [ 49.074235] ? put_timespec64+0xa9/0x100 [ 49.074240] ? nsecs_to_jiffies+0x20/0x20 [ 49.074250] ? security_file_ioctl+0x4a/0x90 [ 49.074254] ? __fget_light+0x174/0x1e0 [ 49.074262] ksys_ioctl+0x62/0x90 [ 49.074267] ? lockdep_hardirqs_on+0x421/0x5c0 [ 49.074274] __x64_sys_ioctl+0x6e/0xb0 [ 49.074283] do_syscall_64+0xd0/0x4e0 [ 49.074293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.074299] RIP: 0033:0x45aa69 [ 49.074306] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.074309] RSP: 002b:00007f7085ae8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.074315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045aa69 [ 49.074319] RDX: 0000000020000200 RSI: 0000000000004b60 RDI: 0000000000000004 [ 49.074322] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 49.074326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7085ae96d4 [ 49.074329] R13: 00000000004c5c48 R14: 00000000004dc270 R15: 00000000ffffffff [ 49.074343] [ 49.074345] The buggy address belongs to the variable: [ 49.074352] fontdata_8x16+0x1000/0x1120 [ 49.074365] [ 49.074367] Memory state around the buggy address: [ 49.074373] ffffffff87695380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.074377] ffffffff87695400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.074381] >ffffffff87695480: 00 00 00 00 fa fa fa fa 06 fa fa fa fa fa fa fa [ 49.074384] ^ [ 49.074388] ffffffff87695500: 05 fa fa fa fa fa fa fa 06 fa fa fa fa fa fa fa [ 49.074391] ffffffff87695580: 00 00 03 fa fa fa fa fa 00 00 00 00 00 00 00 00 [ 49.074393] ================================================================== [ 49.074396] Disabling lock debugging due to kernel taint [ 49.074441] Kernel panic - not syncing: panic_on_warn set ... [ 49.074441] [ 49.074447] CPU: 1 PID: 7484 Comm: syz-executor.2 Tainted: G B 4.19.145-syzkaller #0 [ 49.074449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.074451] Call Trace: [ 49.074457] dump_stack+0x123/0x177 [ 49.074463] panic+0x1cd/0x375 [ 49.074467] ? __warn_printk+0xd6/0xd6 [ 49.074474] ? ___preempt_schedule+0x16/0x18 [ 49.074481] kasan_end_report+0x47/0x4f [ 49.074485] kasan_report.cold.9+0x76/0x309 [ 49.074490] ? fbcon_get_font+0x298/0x6a0 [ 49.074496] check_memory_region+0x13e/0x1b0 [ 49.074501] memcpy+0x23/0x50 [ 49.074505] fbcon_get_font+0x298/0x6a0 [ 49.074513] con_font_op+0x3a4/0x11f0 [ 49.074519] ? __lock_acquire+0x792/0x4980 [ 49.074523] ? con_write+0x80/0x80 [ 49.074529] ? selinux_capable+0x1b/0x20 [ 49.074533] ? security_capable+0x58/0xa0 [ 49.074539] ? ns_capable_common+0x5e/0xd0 [ 49.074544] vt_ioctl+0xdce/0x23f0 [ 49.074548] ? get_futex_key+0xa5f/0x1190 [ 49.074553] ? complete_change_console+0x300/0x300 [ 49.074558] ? find_held_lock+0x36/0x1d0 [ 49.074565] ? avc_has_extended_perms+0x4c5/0x1170 [ 49.074569] ? lock_downgrade+0x860/0x860 [ 49.074580] tty_ioctl+0x452/0x1290 [ 49.074585] ? tty_vhangup+0x20/0x20 [ 49.074589] ? avc_ss_reset+0x130/0x130 [ 49.074596] ? mark_held_locks+0x130/0x130 [ 49.074599] ? mark_held_locks+0x130/0x130 [ 49.074612] do_vfs_ioctl+0x196/0x10c0 [ 49.074618] ? ioctl_preallocate+0x1c0/0x1c0 [ 49.074623] ? selinux_file_mprotect+0x5f0/0x5f0 [ 49.074630] ? ksys_dup3+0x2e0/0x2e0 [ 49.074634] ? put_timespec64+0xa9/0x100 [ 49.074639] ? nsecs_to_jiffies+0x20/0x20 [ 49.074645] ? security_file_ioctl+0x4a/0x90 [ 49.074648] ? __fget_light+0x174/0x1e0 [ 49.074654] ksys_ioctl+0x62/0x90 [ 49.074658] ? lockdep_hardirqs_on+0x421/0x5c0 [ 49.074662] __x64_sys_ioctl+0x6e/0xb0 [ 49.074668] do_syscall_64+0xd0/0x4e0 [ 49.074673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.074677] RIP: 0033:0x45aa69 [ 49.074681] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.074683] RSP: 002b:00007f7085ae8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.074688] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045aa69 [ 49.074690] RDX: 0000000020000200 RSI: 0000000000004b60 RDI: 0000000000000004 [ 49.074692] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 49.074695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7085ae96d4 [ 49.074697] R13: 00000000004c5c48 R14: 00000000004dc270 R15: 00000000ffffffff [ 49.075807] Kernel Offset: disabled [ 49.669309] Rebooting in 86400 seconds..