[ 35.157048][ T27] audit: type=1800 audit(1578470327.535:29): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 35.189432][ T27] audit: type=1800 audit(1578470327.535:30): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.951190][ T7922] IPVS: ftp: loaded support on port[0] = 21 [ 48.221716][ T204] tipc: TX() has been purged, node left! [ 48.500889][ T7919] can: request_module (can-proto-0) failed. [ 51.273473][ T7919] can: request_module (can-proto-0) failed. [ 51.284635][ T7919] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.147' (ECDSA) to the list of known hosts. 2020/01/08 07:59:10 parsed 1 programs 2020/01/08 07:59:11 executed programs: 0 [ 59.126754][ T8008] IPVS: ftp: loaded support on port[0] = 21 [ 59.134633][ T8005] IPVS: ftp: loaded support on port[0] = 21 [ 59.157874][ T8004] IPVS: ftp: loaded support on port[0] = 21 [ 59.175911][ T8011] IPVS: ftp: loaded support on port[0] = 21 [ 59.195241][ T8013] IPVS: ftp: loaded support on port[0] = 21 [ 59.209119][ T8012] IPVS: ftp: loaded support on port[0] = 21 [ 59.343832][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 59.435683][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.443738][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.451931][ T8008] device bridge_slave_0 entered promiscuous mode [ 59.460344][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.467475][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.475446][ T8008] device bridge_slave_1 entered promiscuous mode [ 59.495048][ T8004] chnl_net:caif_netlink_parms(): no params data found [ 59.517145][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 59.547010][ T8013] chnl_net:caif_netlink_parms(): no params data found [ 59.591454][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.606573][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.659843][ T8012] chnl_net:caif_netlink_parms(): no params data found [ 59.693809][ T8008] team0: Port device team_slave_0 added [ 59.707062][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.714966][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.722998][ T8004] device bridge_slave_0 entered promiscuous mode [ 59.738125][ T8008] team0: Port device team_slave_1 added [ 59.748427][ T8005] chnl_net:caif_netlink_parms(): no params data found [ 59.757663][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.765277][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.773357][ T8004] device bridge_slave_1 entered promiscuous mode [ 59.785188][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.793123][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.800720][ T8011] device bridge_slave_0 entered promiscuous mode [ 59.819357][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.826650][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.834810][ T8013] device bridge_slave_0 entered promiscuous mode [ 59.847430][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.855009][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.862968][ T8013] device bridge_slave_1 entered promiscuous mode [ 59.872511][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.879558][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.891854][ T8011] device bridge_slave_1 entered promiscuous mode [ 59.935686][ T8004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.950597][ T8004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.962325][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.024378][ T8008] device hsr_slave_0 entered promiscuous mode [ 60.081929][ T8008] device hsr_slave_1 entered promiscuous mode [ 60.130419][ T8013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.144328][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.162985][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.171092][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.178843][ T8012] device bridge_slave_0 entered promiscuous mode [ 60.187327][ T8013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.215527][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.222815][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.230415][ T8005] device bridge_slave_0 entered promiscuous mode [ 60.245635][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.252891][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.260385][ T8012] device bridge_slave_1 entered promiscuous mode [ 60.269299][ T8004] team0: Port device team_slave_0 added [ 60.277083][ T8013] team0: Port device team_slave_0 added [ 60.283137][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.290168][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.297832][ T8005] device bridge_slave_1 entered promiscuous mode [ 60.306335][ T8011] team0: Port device team_slave_0 added [ 60.313880][ T8011] team0: Port device team_slave_1 added [ 60.331408][ T8004] team0: Port device team_slave_1 added [ 60.339288][ T8013] team0: Port device team_slave_1 added [ 60.383413][ T8005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.393860][ T8012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.404778][ T8012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.464129][ T8011] device hsr_slave_0 entered promiscuous mode [ 60.524587][ T8011] device hsr_slave_1 entered promiscuous mode [ 60.581789][ T8011] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.594467][ T8005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.684198][ T8013] device hsr_slave_0 entered promiscuous mode [ 60.741949][ T8013] device hsr_slave_1 entered promiscuous mode [ 60.811629][ T8013] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.848851][ T8012] team0: Port device team_slave_0 added [ 60.856264][ T8005] team0: Port device team_slave_0 added [ 60.864706][ T8005] team0: Port device team_slave_1 added [ 60.903510][ T8004] device hsr_slave_0 entered promiscuous mode [ 60.952583][ T8004] device hsr_slave_1 entered promiscuous mode [ 61.021630][ T8004] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.043463][ T8012] team0: Port device team_slave_1 added [ 61.123330][ T8005] device hsr_slave_0 entered promiscuous mode [ 61.162749][ T8005] device hsr_slave_1 entered promiscuous mode [ 61.201748][ T8005] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.214285][ T8008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.293768][ T8008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.335117][ T8008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.395764][ T8008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.504248][ T8012] device hsr_slave_0 entered promiscuous mode [ 61.551973][ T8012] device hsr_slave_1 entered promiscuous mode [ 61.601637][ T8012] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.680790][ T8011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.738823][ T8011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.783660][ T8011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.848673][ T8011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.953769][ T8004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.008573][ T8004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.078209][ T8013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.138154][ T8013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.193668][ T8005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.223120][ T8005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.274464][ T8005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.333708][ T8004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.386130][ T8004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.436488][ T8013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.493990][ T8013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.554505][ T8005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.633964][ T8012] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.663918][ T8012] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.713226][ T8012] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.756838][ T8012] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.911175][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.950338][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.968510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.977713][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.989605][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.002164][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.009801][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.023898][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.035179][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.053910][ T8012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.063900][ T8013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.080402][ T8013] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.087557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.096407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.105663][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.112992][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.120916][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.130716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.139292][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.146509][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.154762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.163632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.171250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.179528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.192499][ T8012] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.202617][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.232953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.240639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.248943][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.258918][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.268535][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.275719][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.283495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.292852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.301156][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.308317][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.315887][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.324969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.333614][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.340675][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.348366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.357435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.366243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.374997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.383505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.392980][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.401236][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.408332][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.416110][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.425161][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.433850][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.440964][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.448739][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.457653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.466409][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.475009][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.483537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.492201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.502036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.509866][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.517820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.526004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.534950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.546908][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.563248][ T8005] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.580153][ T8008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.592855][ T8008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.612568][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.620212][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.628858][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.639270][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.647665][ T2746] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.654720][ T2746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.662771][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.671085][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.679580][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.688098][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.696609][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.705385][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.713939][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.722307][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.730455][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.739053][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.747505][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.756278][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.764708][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.773319][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.781575][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.789965][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.798754][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.808317][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.818043][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.825877][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.833848][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.857524][ T8011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.868974][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.876957][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.886918][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.895426][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.903962][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.920530][ T8013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.940324][ T8004] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.951246][ T8012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.964409][ T8012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.977080][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.985998][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.995959][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.003151][ T8017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.011049][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.019697][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.028187][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.035278][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.043057][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.051462][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.060025][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.068644][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.076954][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.085309][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.095516][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.103035][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.110432][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.118910][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.127913][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.135818][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.149323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.163766][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.190494][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.208352][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.217233][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.226187][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.235273][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.243359][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.250746][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.258422][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.265884][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.273672][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.281076][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.289597][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.299624][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.307360][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.316238][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.325107][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.332201][ T8021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.343789][ T8013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.365127][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.373290][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.383608][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.392430][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.400722][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.414479][ T8008] device veth0_vlan entered promiscuous mode [ 64.445052][ T8005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.456467][ T8005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.465576][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.474824][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.484046][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.492998][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.502033][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.510458][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.518991][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.526115][ T8021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.533698][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.542416][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.550713][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.559223][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.567676][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.576411][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.584831][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.593299][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.602131][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.609744][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.617333][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.627736][ T8012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.638535][ T8011] device veth0_vlan entered promiscuous mode [ 64.658728][ T8004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.669970][ T8004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.689799][ T8008] device veth1_vlan entered promiscuous mode [ 64.698407][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.707356][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.716152][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.724691][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.733333][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.741729][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.749905][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.759129][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.766879][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.775025][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.809458][ T8011] device veth1_vlan entered promiscuous mode [ 64.817419][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.827217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.835499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.843206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.850573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.858240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.873953][ T8005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.891455][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.923279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.931228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.940805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.978745][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.987797][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.996433][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.006152][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.019214][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.028330][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.047729][ T8013] device veth0_vlan entered promiscuous mode [ 65.076586][ T8012] device veth0_vlan entered promiscuous mode [ 65.084943][ T8037] ================================================================== [ 65.093139][ T8037] BUG: KASAN: null-ptr-deref in video_usercopy+0x30f/0xd80 [ 65.100319][ T8037] Write of size 512 at addr 0000000000000000 by task syz-executor.0/8037 [ 65.108705][ T8037] [ 65.108716][ T8037] CPU: 1 PID: 8037 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 65.108719][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.108722][ T8037] Call Trace: [ 65.108734][ T8037] dump_stack+0x12d/0x187 [ 65.108743][ T8037] ? video_usercopy+0x30f/0xd80 [ 65.108752][ T8037] __kasan_report.cold.11+0x5/0x3a [ 65.108755][ T8037] ? video_usercopy+0x30f/0xd80 [ 65.108762][ T8037] ? video_usercopy+0x30f/0xd80 [ 65.108768][ T8037] kasan_report+0x12/0x20 [ 65.108774][ T8037] check_memory_region+0x153/0x1d0 [ 65.108779][ T8037] memset+0x23/0x40 [ 65.108784][ T8037] video_usercopy+0x30f/0xd80 [ 65.108790][ T8037] ? v4l_s_fmt+0x960/0x960 [ 65.108797][ T8037] ? v4l_enumstd+0x60/0x60 [ 65.108806][ T8037] ? tomoyo_path_number_perm+0x213/0x4c0 [ 65.108814][ T8037] ? tomoyo_execute_permission+0x460/0x460 [ 65.108823][ T8037] ? find_held_lock+0x36/0x1d0 [ 65.108834][ T8037] video_ioctl2+0x10/0x12 [ 65.108840][ T8037] v4l2_ioctl+0x191/0x210 [ 65.108849][ T8037] do_vfs_ioctl+0x196/0x1190 [ 65.108858][ T8037] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 65.108866][ T8037] ? __fget+0x2ac/0x410 [ 65.108877][ T8037] ? ksys_dup3+0x2e0/0x2e0 [ 65.108883][ T8037] ? put_timespec64+0xa9/0x100 [ 65.108888][ T8037] ? nsecs_to_jiffies+0x20/0x20 [ 65.108897][ T8037] ? tomoyo_file_ioctl+0x14/0x20 [ 65.108905][ T8037] ksys_ioctl+0x62/0x90 [ 65.108911][ T8037] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 65.108917][ T8037] __x64_sys_ioctl+0x6e/0xb0 [ 65.108925][ T8037] do_syscall_64+0xca/0x5f0 [ 65.108933][ T8037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.108938][ T8037] RIP: 0033:0x45af49 [ 65.108944][ T8037] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.108947][ T8037] RSP: 002b:00007f76a7a27c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.108952][ T8037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 65.108955][ T8037] RDX: 0000000000000000 RSI: 0000001002008914 RDI: 0000000000000003 [ 65.108958][ T8037] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 65.108961][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76a7a286d4 [ 65.108964][ T8037] R13: 00000000004c2837 R14: 00000000004d8b30 R15: 00000000ffffffff [ 65.108977][ T8037] ================================================================== [ 65.108980][ T8037] Disabling lock debugging due to kernel taint [ 65.112072][ T8037] Kernel panic - not syncing: panic_on_warn set ... [ 65.120244][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.129965][ T8037] CPU: 1 PID: 8037 Comm: syz-executor.0 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 65.129968][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.129970][ T8037] Call Trace: [ 65.129980][ T8037] dump_stack+0x12d/0x187 [ 65.129986][ T8037] ? video_usercopy+0x2e0/0xd80 [ 65.129994][ T8037] panic+0x22a/0x4e3 [ 65.143195][ T8039] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 65.147489][ T8037] ? add_taint.cold.7+0x11/0x11 [ 65.152313][ T8039] #PF: supervisor write access in kernel mode [ 65.157136][ T8037] ? ___preempt_schedule+0x16/0x18 [ 65.161431][ T8039] #PF: error_code(0x0002) - not-present page [ 65.166512][ T8037] ? video_usercopy+0x30f/0xd80 [ 65.170283][ T8039] PGD a05ba067 P4D a05ba067 PUD 93fad067 PMD 0 [ 65.174931][ T8037] end_report+0x47/0x4f [ 65.179313][ T8039] Oops: 0002 [#1] PREEMPT SMP KASAN [ 65.183699][ T8037] __kasan_report.cold.11+0xe/0x3a [ 65.189308][ T8039] CPU: 0 PID: 8039 Comm: syz-executor.1 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 65.195080][ T8037] ? video_usercopy+0x30f/0xd80 [ 65.199819][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.204133][ T8037] ? video_usercopy+0x30f/0xd80 [ 65.204142][ T8037] kasan_report+0x12/0x20 [ 65.208466][ T8039] RIP: 0010:memset_erms+0x9/0x10 [ 65.213030][ T8037] check_memory_region+0x153/0x1d0 [ 65.218714][ T8039] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 65.222866][ T8037] memset+0x23/0x40 [ 65.227253][ T8039] RSP: 0018:ffffc90002a17b28 EFLAGS: 00010246 [ 65.231993][ T8037] video_usercopy+0x30f/0xd80 [ 65.237246][ T8039] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000200 [ 65.242159][ T8037] ? v4l_s_fmt+0x960/0x960 [ 65.246283][ T8039] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.251542][ T8037] ? v4l_enumstd+0x60/0x60 [ 65.256120][ T8039] RBP: ffffc90002a17b48 R08: ffffed1042c90a25 R09: 0000000000000000 [ 65.260643][ T8037] ? tomoyo_path_number_perm+0x213/0x4c0 [ 65.266521][ T8039] R10: ffffed1042c90a24 R11: ffff888216485127 R12: 0000000000000200 [ 65.270400][ T8037] ? tomoyo_execute_permission+0x460/0x460 [ 65.289986][ T8039] R13: 0000000000000000 R14: 0000000002008914 R15: 0000000000000000 [ 65.289995][ T8039] FS: 00007f08b00ba700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 65.298415][ T8037] ? find_held_lock+0x36/0x1d0 [ 65.306488][ T8039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.306495][ T8039] CR2: 0000000000000000 CR3: 000000009f822000 CR4: 00000000001406f0 [ 65.314484][ T8037] video_ioctl2+0x10/0x12 [ 65.322449][ T8039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.330432][ T8037] v4l2_ioctl+0x191/0x210 [ 65.338388][ T8039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.338394][ T8039] Call Trace: [ 65.346461][ T8037] do_vfs_ioctl+0x196/0x1190 [ 65.352611][ T8039] ? memset+0x31/0x40 [ 65.359184][ T8037] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 65.366785][ T8039] video_usercopy+0x30f/0xd80 [ 65.376875][ T8037] ? __fget+0x2ac/0x410 [ 65.386953][ T8039] ? trace_hardirqs_on+0x28/0x1a0 [ 65.390235][ T8037] ? ksys_dup3+0x2e0/0x2e0 [ 65.394536][ T8039] ? v4l_s_fmt+0x960/0x960 [ 65.399353][ T8037] ? put_timespec64+0xa9/0x100 [ 65.399358][ T8037] ? nsecs_to_jiffies+0x20/0x20 [ 65.403231][ T8039] ? v4l_enumstd+0x60/0x60 [ 65.411028][ T8037] ? tomoyo_file_ioctl+0x14/0x20 [ 65.415868][ T8039] ? tomoyo_path_number_perm+0x213/0x4c0 [ 65.421906][ T8037] ksys_ioctl+0x62/0x90 [ 65.426996][ T8039] ? tomoyo_execute_permission+0x460/0x460 [ 65.432966][ T8037] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 65.437796][ T8039] ? __kasan_check_read+0x11/0x20 [ 65.444009][ T8037] __x64_sys_ioctl+0x6e/0xb0 [ 65.448277][ T8039] video_ioctl2+0x10/0x12 [ 65.453459][ T8037] do_syscall_64+0xca/0x5f0 [ 65.458564][ T8039] v4l2_ioctl+0x191/0x210 [ 65.468531][ T8037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.474228][ T8039] do_vfs_ioctl+0x196/0x1190 [ 65.484279][ T8037] RIP: 0033:0x45af49 [ 65.489158][ T8039] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 65.493482][ T8037] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.498410][ T8039] ? __fget+0x2ac/0x410 [ 65.503499][ T8037] RSP: 002b:00007f76a7a27c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.523194][ T8039] ? ksys_dup3+0x2e0/0x2e0 [ 65.526989][ T8037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 65.533041][ T8039] ? put_timespec64+0xa9/0x100 [ 65.537693][ T8037] RDX: 0000000000000000 RSI: 0000001002008914 RDI: 0000000000000003 [ 65.545790][ T8039] ? nsecs_to_jiffies+0x20/0x20 [ 65.550183][ T8037] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 65.558138][ T8039] ? tomoyo_file_ioctl+0x14/0x20 [ 65.562544][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76a7a286d4 [ 65.570523][ T8039] ksys_ioctl+0x62/0x90 [ 65.576134][ T8037] R13: 00000000004c2837 R14: 00000000004d8b30 R15: 00000000ffffffff [ 65.584112][ T8039] ? trace_hardirqs_off_caller+0x49/0x190 [ 65.584129][ T8039] __x64_sys_ioctl+0x6e/0xb0 [ 65.878827][ T8039] do_syscall_64+0xca/0x5f0 [ 65.883311][ T8039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.889226][ T8039] RIP: 0033:0x45af49 [ 65.893113][ T8039] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.912799][ T8039] RSP: 002b:00007f08b00b9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.921200][ T8039] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 65.929147][ T8039] RDX: 0000000000000000 RSI: 0000001002008914 RDI: 0000000000000003 [ 65.937092][ T8039] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 65.945037][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f08b00ba6d4 [ 65.952994][ T8039] R13: 00000000004c2837 R14: 00000000004d8b30 R15: 00000000ffffffff [ 65.961064][ T8039] Modules linked in: [ 65.964952][ T8039] CR2: 0000000000000000 [ 65.970493][ T8037] Kernel Offset: disabled [ 65.974816][ T8037] Rebooting in 86400 seconds..