Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.906323] kauditd_printk_skb: 10 callbacks suppressed [ 39.906329] audit: type=1400 audit(1577884108.802:36): avc: denied { map } for pid=7102 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 41.918288] IPVS: ftp: loaded support on port[0] = 21 [ 42.336100] can: request_module (can-proto-0) failed. [ 43.363529] can: request_module (can-proto-0) failed. [ 43.519979] audit: type=1400 audit(1577884112.422:37): avc: denied { create } for pid=7102 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.543960] audit: type=1400 audit(1577884112.422:38): avc: denied { create } for pid=7102 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.567745] audit: type=1400 audit(1577884112.422:39): avc: denied { create } for pid=7102 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts. 2020/01/01 13:08:39 parsed 1 programs 2020/01/01 13:08:40 executed programs: 0 [ 51.585557] IPVS: ftp: loaded support on port[0] = 21 [ 51.591468] IPVS: ftp: loaded support on port[0] = 21 [ 51.596072] IPVS: ftp: loaded support on port[0] = 21 [ 51.652913] IPVS: ftp: loaded support on port[0] = 21 [ 51.668079] IPVS: ftp: loaded support on port[0] = 21 [ 51.684293] IPVS: ftp: loaded support on port[0] = 21 [ 51.755041] chnl_net:caif_netlink_parms(): no params data found [ 51.840268] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.847462] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.854442] device bridge_slave_0 entered promiscuous mode [ 51.880842] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.887341] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.894336] device bridge_slave_1 entered promiscuous mode [ 51.932958] chnl_net:caif_netlink_parms(): no params data found [ 51.941328] chnl_net:caif_netlink_parms(): no params data found [ 51.963442] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.000880] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.071679] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.078250] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.085115] device bridge_slave_0 entered promiscuous mode [ 52.092002] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.098533] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.105547] device bridge_slave_1 entered promiscuous mode [ 52.111713] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.119024] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.126959] device bridge_slave_0 entered promiscuous mode [ 52.139639] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.147231] team0: Port device team_slave_0 added [ 52.162569] chnl_net:caif_netlink_parms(): no params data found [ 52.174749] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.181738] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.188835] device bridge_slave_1 entered promiscuous mode [ 52.195359] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.203271] team0: Port device team_slave_1 added [ 52.210536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.236026] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.244291] chnl_net:caif_netlink_parms(): no params data found [ 52.253185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.279466] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.295099] chnl_net:caif_netlink_parms(): no params data found [ 52.309993] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.333078] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.340508] team0: Port device team_slave_0 added [ 52.398253] device hsr_slave_0 entered promiscuous mode [ 52.467018] device hsr_slave_1 entered promiscuous mode [ 52.517121] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.524905] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.551150] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.558408] team0: Port device team_slave_1 added [ 52.566199] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.574313] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.581273] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.588730] team0: Port device team_slave_0 added [ 52.602839] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.609352] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.616187] device bridge_slave_0 entered promiscuous mode [ 52.623074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.639301] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.647403] team0: Port device team_slave_1 added [ 52.656395] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.663045] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.670296] device bridge_slave_1 entered promiscuous mode [ 52.691915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.699139] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.705488] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.712623] device bridge_slave_0 entered promiscuous mode [ 52.722830] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.729367] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.736352] device bridge_slave_1 entered promiscuous mode [ 52.778361] device hsr_slave_0 entered promiscuous mode [ 52.816936] device hsr_slave_1 entered promiscuous mode [ 52.861679] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.869068] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.876307] device bridge_slave_0 entered promiscuous mode [ 52.883047] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.903863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.915750] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.923233] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.930422] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.936992] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.946190] device bridge_slave_1 entered promiscuous mode [ 53.008053] device hsr_slave_0 entered promiscuous mode [ 53.057080] device hsr_slave_1 entered promiscuous mode [ 53.127630] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.135597] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.143292] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.158319] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.167343] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.184941] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.192776] team0: Port device team_slave_0 added [ 53.200398] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.208996] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.217676] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.234007] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.242093] team0: Port device team_slave_1 added [ 53.257380] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.264579] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.272429] team0: Port device team_slave_0 added [ 53.278548] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.285918] team0: Port device team_slave_1 added [ 53.292496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.305255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.322374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.330475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.339105] team0: Port device team_slave_0 added [ 53.351129] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.358934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.376092] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.383364] team0: Port device team_slave_1 added [ 53.428112] device hsr_slave_0 entered promiscuous mode [ 53.466836] device hsr_slave_1 entered promiscuous mode [ 53.522223] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.541321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.549349] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.609100] device hsr_slave_0 entered promiscuous mode [ 53.666923] device hsr_slave_1 entered promiscuous mode [ 53.707227] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.719693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.735196] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.746434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.789522] device hsr_slave_0 entered promiscuous mode [ 53.826937] device hsr_slave_1 entered promiscuous mode [ 53.887018] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.898764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.907916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.914449] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.929952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.961055] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.968845] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.977911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.984564] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.995187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.002866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.011482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.020800] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.031317] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.040249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.048206] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.057405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.066182] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.072645] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.080181] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.086354] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.096851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.104301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.111834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.118978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.127512] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.133744] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.149578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.158645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.166425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.175935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.186061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.194056] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.201123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.209709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.217937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.225521] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.231914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.239396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.247911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.255601] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.262064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.282221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.291456] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.301284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.308530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.315556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.323663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.332172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.341039] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.347443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.354431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.361703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.378878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.386305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.394862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.403285] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.409736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.418595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.427055] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.433151] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.445174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.453338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.462428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.472752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.481097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.492864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.500646] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.507173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.514122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.522572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.530336] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.536859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.543724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.551541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.559608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.568233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.577361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.585332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.592336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.600417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.608384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.616259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.624658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.635432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.644836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.654986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.663077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.671444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.679257] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.685734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.692781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.700793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.710467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.720053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.728847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.739628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.748304] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.757350] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.763442] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.769911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.778315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.786043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.793829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.801624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.809509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.816305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.823844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.830774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.839093] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.846967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.854673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.865147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.873864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.883741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.890887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.898326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.905997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.913782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.921512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.929107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.937152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.944820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.952905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.960469] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.967197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.974356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.981366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.988411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.996354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.006943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.016023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.026343] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.034094] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.042062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.050436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.058189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.065827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.073565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.081265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.090196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.101497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.112367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.120340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.129722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.138078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.145810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.154150] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.160558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.168467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.177086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.184782] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.191165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.199032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.208052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.216389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.226083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.234060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.243226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.250631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.258474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.265948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.273648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.281312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.289395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.296998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.304361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.312144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.319761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.327491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.335226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.342982] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.349485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.358259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.366244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.377548] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.383605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.392530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.403327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.411902] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.418727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.428462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.440317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.448068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.455725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.465702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.473632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.481816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.494763] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.504367] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.513494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.524883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.537494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.546444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.555688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.564407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.572518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.580113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.587943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.595527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.605636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.614197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.628732] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.634759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.644155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.653785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.661558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.669327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.679618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.688395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.703457] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.714749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.722778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.732598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.741896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.752368] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.764277] audit: type=1400 audit(1577884124.662:40): avc: denied { associate } for pid=7199 comm="syz-executor.5" name="syz5" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 55.787205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.799544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.810985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.822361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.830627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.842461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.852057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.860054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.873638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.885030] ================================================================== [ 55.892596] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x114/0x120 [ 55.892863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.899086] Read of size 8 at addr ffff8880808bade0 by task syz-executor.5/7216 [ 55.899090] [ 55.899097] CPU: 1 PID: 7216 Comm: syz-executor.5 Not tainted 4.19.92-syzkaller #0 [ 55.899099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.899103] Call Trace: [ 55.899115] dump_stack+0x123/0x177 [ 55.899125] print_address_description.cold.8+0x9/0x1ff [ 55.899131] kasan_report.cold.9+0x242/0x309 [ 55.899136] ? v4l2_ctrl_grab+0x114/0x120 [ 55.899143] __asan_report_load8_noabort+0x14/0x20 [ 55.899147] v4l2_ctrl_grab+0x114/0x120 [ 55.899155] vicodec_stop_streaming+0xfc/0x130 [ 55.899161] __vb2_queue_cancel+0x99/0x6f0 [ 55.899166] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 55.899173] ? kasan_check_read+0x11/0x20 [ 55.899183] vb2_core_queue_release+0x1e/0x70 [ 55.899189] vb2_queue_release+0x9/0x10 [ 55.899194] v4l2_m2m_ctx_release+0x22/0x30 [ 55.899198] vicodec_release+0xb5/0x120 [ 55.899205] v4l2_release+0xee/0x1a0 [ 55.899213] __fput+0x24c/0x7f0 [ 55.899222] ____fput+0x9/0x10 [ 55.899229] task_work_run+0x10e/0x190 [ 55.899239] exit_to_usermode_loop+0x1a9/0x200 [ 55.899246] do_syscall_64+0x419/0x4e0 [ 55.899254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.899258] RIP: 0033:0x4120b1 [ 55.899264] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 55.899267] RSP: 002b:00007ffcd51aa820 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 55.899271] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 55.899274] RDX: 0000001b2d920000 RSI: 0000000000740490 RDI: 0000000000000003 [ 55.899277] RBP: 000000000073c900 R08: 000000000000da1e R09: 000000000000da1e [ 55.899280] R10: 00007ffcd51aa8f0 R11: 0000000000000293 R12: ffffffffffffffff [ 55.899283] R13: 000000000000da28 R14: 00000000000003e8 R15: 000000000073bf0c [ 55.899296] [ 55.899300] Allocated by task 7218: [ 55.899306] save_stack+0x43/0xd0 [ 55.899310] kasan_kmalloc+0xc7/0xe0 [ 55.899314] __kmalloc_node+0x50/0x70 [ 55.899320] kvmalloc_node+0x68/0x70 [ 55.899324] v4l2_ctrl_new.part.9+0x22a/0x12b0 [ 55.899328] v4l2_ctrl_new_std+0x1c9/0x2d0 [ 55.899332] vicodec_open+0x18d/0xa90 [ 55.899336] v4l2_open+0x17d/0x2d0 [ 55.899340] chrdev_open+0x1f0/0x5c0 [ 55.899345] do_dentry_open+0x3f4/0x1010 [ 55.899348] vfs_open+0x9a/0xc0 [ 55.899352] path_openat+0x691/0x3c00 [ 55.899357] do_filp_open+0x177/0x250 [ 55.899360] do_sys_open+0x1dd/0x350 [ 55.899364] __x64_sys_openat+0x98/0xf0 [ 55.899368] do_syscall_64+0xd6/0x4e0 [ 55.899373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.899375] [ 55.899378] Freed by task 7216: [ 55.899382] save_stack+0x43/0xd0 [ 55.899386] __kasan_slab_free+0x102/0x150 [ 55.899390] kasan_slab_free+0xe/0x10 [ 55.899393] kfree+0xcf/0x230 [ 55.899397] kvfree+0x2c/0x30 [ 55.899402] v4l2_ctrl_handler_free+0x421/0x7e0 [ 55.899405] vicodec_release+0x61/0x120 [ 55.899409] v4l2_release+0xee/0x1a0 [ 55.899413] __fput+0x24c/0x7f0 [ 55.899417] ____fput+0x9/0x10 [ 55.899421] task_work_run+0x10e/0x190 [ 55.899425] exit_to_usermode_loop+0x1a9/0x200 [ 55.899429] do_syscall_64+0x419/0x4e0 [ 55.899433] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.899436] [ 55.908592] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.914065] The buggy address belongs to the object at ffff8880808badc0 [ 55.914065] which belongs to the cache kmalloc-256 of size 256 [ 55.914071] The buggy address is located 32 bytes inside of [ 55.914071] 256-byte region [ffff8880808badc0, ffff8880808baec0) [ 55.916027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.923654] The buggy address belongs to the page: [ 55.923660] page:ffffea0002022e80 count:1 mapcount:0 mapping:ffff88812c35e7c0 index:0x0 [ 55.923664] flags: 0x1fffc0000000100(slab) [ 55.923670] raw: 01fffc0000000100 ffffea0002335488 ffff88812c35c648 ffff88812c35e7c0 [ 55.923674] raw: 0000000000000000 ffff8880808ba000 000000010000000c 0000000000000000 [ 55.923676] page dumped because: kasan: bad access detected [ 55.923678] [ 55.923680] Memory state around the buggy address: [ 55.923683] ffff8880808bac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.923686] ffff8880808bad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.923689] >ffff8880808bad80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 55.923692] ^ [ 55.923694] ffff8880808bae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.923697] ffff8880808bae80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 55.923699] ================================================================== [ 55.923701] Disabling lock debugging due to kernel taint [ 55.924658] Kernel panic - not syncing: panic_on_warn set ... [ 55.924658] [ 55.941950] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.945087] CPU: 1 PID: 7216 Comm: syz-executor.5 Tainted: G B 4.19.92-syzkaller #0 [ 55.945092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.953713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.958562] Call Trace: [ 55.958574] dump_stack+0x123/0x177 [ 55.958585] panic+0x1cd/0x387 [ 55.958589] ? __warn_printk+0xd6/0xd6 [ 55.958596] ? ___preempt_schedule+0x16/0x18 [ 55.958603] kasan_end_report+0x47/0x4f [ 55.958607] kasan_report.cold.9+0x76/0x309 [ 55.958613] ? v4l2_ctrl_grab+0x114/0x120 [ 55.958618] __asan_report_load8_noabort+0x14/0x20 [ 55.958622] v4l2_ctrl_grab+0x114/0x120 [ 55.958628] vicodec_stop_streaming+0xfc/0x130 [ 55.958632] __vb2_queue_cancel+0x99/0x6f0 [ 55.958636] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 55.958641] ? kasan_check_read+0x11/0x20 [ 55.958646] vb2_core_queue_release+0x1e/0x70 [ 55.958650] vb2_queue_release+0x9/0x10 [ 55.958654] v4l2_m2m_ctx_release+0x22/0x30 [ 55.958658] vicodec_release+0xb5/0x120 [ 55.958663] v4l2_release+0xee/0x1a0 [ 55.958670] __fput+0x24c/0x7f0 [ 55.958675] ____fput+0x9/0x10 [ 55.958681] task_work_run+0x10e/0x190 [ 55.958687] exit_to_usermode_loop+0x1a9/0x200 [ 55.962906] kobject: 'vlan0' (000000009ae00fd4): kobject_add_internal: parent: 'mesh', set: '' [ 55.967333] do_syscall_64+0x419/0x4e0 [ 55.967341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.967345] RIP: 0033:0x4120b1 [ 55.967350] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 55.967352] RSP: 002b:00007ffcd51aa820 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 55.967356] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 55.967358] RDX: 0000001b2d920000 RSI: 0000000000740490 RDI: 0000000000000003 [ 55.967361] RBP: 000000000073c900 R08: 000000000000da1e R09: 000000000000da1e [ 55.967363] R10: 00007ffcd51aa8f0 R11: 0000000000000293 R12: ffffffffffffffff [ 55.967365] R13: 000000000000da28 R14: 00000000000003e8 R15: 000000000073bf0c [ 55.969001] Kernel Offset: disabled [ 56.588639] Rebooting in 86400 seconds..