Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 30.815319] audit: type=1400 audit(1591137599.367:8): avc: denied { execmem } for pid=6307 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 31.078583] IPVS: ftp: loaded support on port[0] = 21 [ 32.277084] can: request_module (can-proto-0) failed. [ 32.286559] can: request_module (can-proto-0) failed. [ 32.296035] can: request_module (can-proto-0) failed. [ 32.327653] audit: type=1400 audit(1591137600.889:9): avc: denied { create } for pid=6288 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. 2020/06/02 22:40:08 parsed 1 programs 2020/06/02 22:40:08 executed programs: 0 [ 39.996923] audit: type=1400 audit(1591137608.563:10): avc: denied { execmem } for pid=6428 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.272845] IPVS: ftp: loaded support on port[0] = 21 [ 41.060191] IPVS: ftp: loaded support on port[0] = 21 [ 41.114883] chnl_net:caif_netlink_parms(): no params data found [ 41.164264] IPVS: ftp: loaded support on port[0] = 21 [ 41.204051] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.211019] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.220345] device bridge_slave_0 entered promiscuous mode [ 41.231362] chnl_net:caif_netlink_parms(): no params data found [ 41.243822] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.250441] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.258273] device bridge_slave_1 entered promiscuous mode [ 41.287505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.313804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.347189] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.355951] team0: Port device team_slave_0 added [ 41.356313] IPVS: ftp: loaded support on port[0] = 21 [ 41.369488] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.376942] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.384135] device bridge_slave_0 entered promiscuous mode [ 41.391111] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.398658] team0: Port device team_slave_1 added [ 41.409946] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.416687] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.424641] device bridge_slave_1 entered promiscuous mode [ 41.433131] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.488950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.501858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.526609] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.593628] device hsr_slave_0 entered promiscuous mode [ 41.631616] device hsr_slave_1 entered promiscuous mode [ 41.671786] chnl_net:caif_netlink_parms(): no params data found [ 41.684965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.692365] team0: Port device team_slave_0 added [ 41.697710] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.707389] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.716592] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.724165] team0: Port device team_slave_1 added [ 41.734896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.751753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.773957] IPVS: ftp: loaded support on port[0] = 21 [ 41.834329] device hsr_slave_0 entered promiscuous mode [ 41.871564] device hsr_slave_1 entered promiscuous mode [ 41.913777] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.931933] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.938472] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.946665] device bridge_slave_0 entered promiscuous mode [ 41.953417] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.960097] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.966762] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.973979] device bridge_slave_1 entered promiscuous mode [ 41.989975] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.996584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.003533] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.009983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.036176] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.057549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.066190] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.072597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.079160] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.085561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.144094] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.151648] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.158720] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.167247] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.188446] IPVS: ftp: loaded support on port[0] = 21 [ 42.197063] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.207533] team0: Port device team_slave_0 added [ 42.213877] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.220941] team0: Port device team_slave_1 added [ 42.227487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.235174] chnl_net:caif_netlink_parms(): no params data found [ 42.256162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.305214] device hsr_slave_0 entered promiscuous mode [ 42.351567] device hsr_slave_1 entered promiscuous mode [ 42.430951] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.440828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.463799] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.474507] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.480859] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.488861] device bridge_slave_0 entered promiscuous mode [ 42.497314] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.504547] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.512116] device bridge_slave_1 entered promiscuous mode [ 42.527476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.555343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.576880] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.605553] chnl_net:caif_netlink_parms(): no params data found [ 42.627308] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.638560] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.662320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.670641] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.726146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.733907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.742866] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.748933] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.755656] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.763608] team0: Port device team_slave_0 added [ 42.769567] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.777605] team0: Port device team_slave_1 added [ 42.783386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.791420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.824125] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.832474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.839453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.859666] chnl_net:caif_netlink_parms(): no params data found [ 42.876205] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.882684] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.889477] device bridge_slave_0 entered promiscuous mode [ 42.900655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.943224] device hsr_slave_0 entered promiscuous mode [ 42.981235] device hsr_slave_1 entered promiscuous mode [ 43.025368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.033837] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.040189] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.047136] device bridge_slave_1 entered promiscuous mode [ 43.062898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.071310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.079424] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.086072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.094108] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.102863] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.110661] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.117275] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.124366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.140627] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.150493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.158289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.166310] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.172755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.180355] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.195809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.205463] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.213489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.235464] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.242002] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.248824] device bridge_slave_0 entered promiscuous mode [ 43.257177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.276603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.287665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.296170] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.302994] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.309800] device bridge_slave_1 entered promiscuous mode [ 43.317070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.325253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.333279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.341435] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.347778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.355227] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.364947] team0: Port device team_slave_0 added [ 43.371003] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.378036] team0: Port device team_slave_1 added [ 43.384143] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.392301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.401422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.414908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.425044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.432182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.439069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.447053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.454940] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.461358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.468325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.476413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.484328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.501972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.511156] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.517235] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.529355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.538976] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.546248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.555107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.566974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.574443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.584298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.594330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.663034] device hsr_slave_0 entered promiscuous mode [ 43.702192] device hsr_slave_1 entered promiscuous mode [ 43.753530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.761030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.768592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.778848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.786832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.795470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.803552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.811816] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.818473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.826207] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.836549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.846917] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.854860] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.863059] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.870401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.879051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.886601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.899307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.908316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.919249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.936523] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.944565] team0: Port device team_slave_0 added [ 43.950127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.958476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.966601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.974395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.982091] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.988422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.997616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.006085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.014047] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.023521] team0: Port device team_slave_1 added [ 44.029332] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.037183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.045375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.053240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.060929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.068285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.075299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.084201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.093974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.103641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.112251] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.120656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.128073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.135784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.143880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.153378] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.159480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.169787] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.178719] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.186985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.195155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.202838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.211122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.219006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.235664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.258041] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.264553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.276106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.284416] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.290834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.302090] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.310097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.320706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.353542] device hsr_slave_0 entered promiscuous mode [ 44.400637] device hsr_slave_1 entered promiscuous mode [ 44.441054] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.448126] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.457333] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.464097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.471912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.479615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.487850] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.494328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.501954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.509651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.516610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.524478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.535263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.542759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.555665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.563530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.571821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.579311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.589622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.599569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.610670] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.624414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.632592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.642093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.649680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.657495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.666631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.676407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.687813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.704270] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.714623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.727537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.736057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.746578] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.753189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.775606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.791416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.799003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.825539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.842804] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.855883] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.865391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.878283] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.885800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.894888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.902549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.909460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.918683] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.928448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.942221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.948928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.956050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.963678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.976322] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.982671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.991897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.011482] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.018660] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.037624] 8021q: adding VLAN 0 to HW filter on device team0 2020/06/02 22:40:13 executed programs: 6 [ 45.059620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.081466] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.115012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.123177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.145749] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.167946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.184149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.198614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.222095] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.228588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.247752] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.255100] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.266684] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.278006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.293101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.301950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.308712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.328587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.354073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.365955] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.372499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.382981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.394094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.409269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.432098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.443403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.456369] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.462844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.471501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.483161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.497544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.506491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.514797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.528776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.544054] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.550643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.557611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.569481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.581945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.595350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.608023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.616634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.625924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.639815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.648393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.656868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.681846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.700637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.723454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.731909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.745981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.757584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.770498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.780794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.793689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.804802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.814182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.827513] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.836513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.849284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.859591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.871919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.886790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.906230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.925150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.946282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.967195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.982221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.991076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.010938] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.018937] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.039576] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.049534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.061393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.069252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.086736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.100085] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.108268] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.115858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.125376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.136148] 8021q: adding VLAN 0 to HW filter on device batadv0 2020/06/02 22:40:18 executed programs: 143 2020/06/02 22:40:23 executed programs: 368 2020/06/02 22:40:28 executed programs: 588 [ 63.494426] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -9 2020/06/02 22:40:33 executed programs: 804 [ 65.596049] ================================================================== [ 65.603782] BUG: KASAN: use-after-free in inet_shutdown+0x287/0x300 [ 65.610281] Read of size 4 at addr ffff88807a9395c0 by task syz-executor.3/14037 [ 65.617899] [ 65.619557] CPU: 1 PID: 14037 Comm: syz-executor.3 Not tainted 4.14.182-syzkaller #0 [ 65.627639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.637110] Call Trace: [ 65.639718] dump_stack+0xf7/0x13b [ 65.643360] ? inet_shutdown+0x287/0x300 [ 65.648274] print_address_description.cold.7+0x9/0x1c9 [ 65.654478] ? inet_shutdown+0x287/0x300 [ 65.659053] kasan_report.cold.8+0x11a/0x2d3 [ 65.663561] __asan_report_load4_noabort+0x14/0x20 [ 65.669227] inet_shutdown+0x287/0x300 [ 65.673842] pppol2tp_session_close+0x71/0xa0 [ 65.678339] l2tp_tunnel_closeall+0x1df/0x2f0 [ 65.682846] l2tp_udp_encap_destroy+0x79/0xb0 [ 65.688481] udpv6_destroy_sock+0x89/0xb0 [ 65.692638] sk_common_release+0x5e/0x2c0 [ 65.696966] udp_lib_close+0x9/0x10 [ 65.700766] inet_release+0xd9/0x1c0 [ 65.704663] inet6_release+0x46/0x60 [ 65.708471] __sock_release+0xc2/0x2a0 [ 65.712358] sock_close+0x10/0x20 [ 65.715809] __fput+0x232/0x750 [ 65.719082] ? _raw_spin_unlock_irq+0x27/0x80 [ 65.723673] ____fput+0x9/0x10 [ 65.726859] task_work_run+0xe5/0x170 [ 65.730726] exit_to_usermode_loop+0x16a/0x1b0 [ 65.735303] do_syscall_64+0x416/0x5b0 [ 65.739183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 65.744330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 65.749683] RIP: 0033:0x4144b1 [ 65.752974] RSP: 002b:00007fff631633b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 65.760769] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004144b1 [ 65.768018] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 65.775299] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 65.782887] R10: 00007fff63163490 R11: 0000000000000293 R12: 000000000075bfc8 [ 65.790160] R13: 000000000001005d R14: 0000000000760858 R15: 000000000075bfd4 [ 65.797674] [ 65.799338] Allocated by task 14063: [ 65.803045] save_stack_trace+0x16/0x20 [ 65.807076] save_stack+0x43/0xd0 [ 65.810733] kasan_kmalloc+0xc7/0xe0 [ 65.814435] kasan_slab_alloc+0x12/0x20 [ 65.818451] kmem_cache_alloc+0x12e/0x790 [ 65.822733] sock_alloc_inode+0x18/0x230 [ 65.827022] alloc_inode+0x56/0x150 [ 65.830757] new_inode_pseudo+0xc/0xd0 [ 65.834911] sock_alloc+0x3c/0x280 [ 65.838439] __sock_create+0x7a/0x540 [ 65.842307] SyS_socket+0xc6/0x1a0 [ 65.846074] do_syscall_64+0x1c7/0x5b0 [ 65.849953] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 65.855204] [ 65.858050] Freed by task 14044: [ 65.861477] save_stack_trace+0x16/0x20 [ 65.865632] save_stack+0x43/0xd0 [ 65.869445] kasan_slab_free+0x71/0xc0 [ 65.873345] kmem_cache_free+0x80/0x2d0 [ 65.877419] sock_destroy_inode+0x50/0x60 [ 65.881559] destroy_inode+0xb3/0x100 [ 65.885355] evict+0x36f/0x590 [ 65.888546] iput+0x3ac/0x810 [ 65.891634] dentry_unlink_inode+0x23e/0x2f0 [ 65.896209] __dentry_kill+0x2d2/0x540 [ 65.900226] dput.part.27+0x49a/0x610 [ 65.904018] dput+0xe/0x20 [ 65.906839] __fput+0x3f7/0x750 [ 65.910156] ____fput+0x9/0x10 [ 65.913531] task_work_run+0xe5/0x170 [ 65.917565] exit_to_usermode_loop+0x16a/0x1b0 [ 65.922131] do_syscall_64+0x416/0x5b0 [ 65.926017] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 65.931184] [ 65.933052] The buggy address belongs to the object at ffff88807a9395c0 [ 65.933052] which belongs to the cache sock_inode_cache of size 1000 [ 65.946235] The buggy address is located 0 bytes inside of [ 65.946235] 1000-byte region [ffff88807a9395c0, ffff88807a9399a8) [ 65.958245] The buggy address belongs to the page: [ 65.963156] page:ffffea0001ea4e40 count:1 mapcount:0 mapping:ffff88807a939140 index:0xffff88807a939ffd [ 65.972604] flags: 0xfffe0000000100(slab) [ 65.976898] raw: 00fffe0000000100 ffff88807a939140 ffff88807a939ffd 0000000100000003 [ 65.984889] raw: ffffea0001ea4ba0 ffffea0001ea4f20 ffff88821b7d2240 0000000000000000 [ 65.992882] page dumped because: kasan: bad access detected [ 65.998577] [ 66.000200] Memory state around the buggy address: [ 66.005220] ffff88807a939480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.012585] ffff88807a939500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 66.019982] >ffff88807a939580: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 66.027347] ^ [ 66.032809] ffff88807a939600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.040374] ffff88807a939680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 66.047788] ================================================================== [ 66.056251] Disabling lock debugging due to kernel taint [ 66.142098] Kernel panic - not syncing: panic_on_warn set ... [ 66.142098] [ 66.149494] CPU: 1 PID: 14037 Comm: syz-executor.3 Tainted: G B 4.14.182-syzkaller #0 [ 66.158598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.167948] Call Trace: [ 66.170635] dump_stack+0xf7/0x13b [ 66.174169] ? inet_shutdown+0x287/0x300 [ 66.178242] panic+0x1b0/0x358 [ 66.181429] ? add_taint.cold.5+0x11/0x11 [ 66.185571] ? ___preempt_schedule+0x16/0x18 [ 66.190016] ? inet_shutdown+0x287/0x300 [ 66.194074] kasan_end_report+0x47/0x4f [ 66.198111] kasan_report.cold.8+0x76/0x2d3 [ 66.202447] __asan_report_load4_noabort+0x14/0x20 [ 66.207430] inet_shutdown+0x287/0x300 [ 66.211407] pppol2tp_session_close+0x71/0xa0 [ 66.215909] l2tp_tunnel_closeall+0x1df/0x2f0 [ 66.220407] l2tp_udp_encap_destroy+0x79/0xb0 [ 66.224900] udpv6_destroy_sock+0x89/0xb0 [ 66.229046] sk_common_release+0x5e/0x2c0 [ 66.233191] udp_lib_close+0x9/0x10 [ 66.236884] inet_release+0xd9/0x1c0 [ 66.240708] inet6_release+0x46/0x60 [ 66.244436] __sock_release+0xc2/0x2a0 [ 66.248319] sock_close+0x10/0x20 [ 66.251844] __fput+0x232/0x750 [ 66.255112] ? _raw_spin_unlock_irq+0x27/0x80 [ 66.259595] ____fput+0x9/0x10 [ 66.262980] task_work_run+0xe5/0x170 [ 66.266782] exit_to_usermode_loop+0x16a/0x1b0 [ 66.271592] do_syscall_64+0x416/0x5b0 [ 66.275480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 66.280320] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 66.285517] RIP: 0033:0x4144b1 [ 66.288743] RSP: 002b:00007fff631633b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 66.296656] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004144b1 [ 66.303913] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 66.311189] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 66.318444] R10: 00007fff63163490 R11: 0000000000000293 R12: 000000000075bfc8 [ 66.325980] R13: 000000000001005d R14: 0000000000760858 R15: 000000000075bfd4 [ 66.335218] Kernel Offset: disabled [ 66.339368] Rebooting in 86400 seconds..