[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 35.546456] audit: type=1400 audit(1589061947.545:8): avc: denied { execmem } for pid=6119 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 35.804923] IPVS: ftp: loaded support on port[0] = 21 [ 36.903412] can: request_module (can-proto-0) failed. [ 36.913221] can: request_module (can-proto-0) failed. [ 36.937296] audit: type=1400 audit(1589061948.935:9): avc: denied { create } for pid=6096 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. 2020/05/09 22:05:57 parsed 1 programs 2020/05/09 22:05:57 executed programs: 0 [ 45.464359] audit: type=1400 audit(1589061957.467:10): avc: denied { execmem } for pid=6236 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 45.507348] audit: type=1400 audit(1589061957.487:11): avc: denied { execmem } for pid=6234 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 45.732467] IPVS: ftp: loaded support on port[0] = 21 [ 46.560422] IPVS: ftp: loaded support on port[0] = 21 [ 46.615941] chnl_net:caif_netlink_parms(): no params data found [ 46.655808] IPVS: ftp: loaded support on port[0] = 21 [ 46.658837] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.669151] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.676279] device bridge_slave_0 entered promiscuous mode [ 46.684060] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.690434] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.698334] device bridge_slave_1 entered promiscuous mode [ 46.715940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.724881] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.745858] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.753927] team0: Port device team_slave_0 added [ 46.765931] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.773437] team0: Port device team_slave_1 added [ 46.780190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.787484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.831785] chnl_net:caif_netlink_parms(): no params data found [ 46.855127] IPVS: ftp: loaded support on port[0] = 21 [ 46.885149] device hsr_slave_0 entered promiscuous mode [ 46.921850] device hsr_slave_1 entered promiscuous mode [ 46.977978] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.985249] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.073706] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.080135] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.089644] device bridge_slave_0 entered promiscuous mode [ 47.098168] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.104981] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.112327] device bridge_slave_1 entered promiscuous mode [ 47.122000] chnl_net:caif_netlink_parms(): no params data found [ 47.137042] IPVS: ftp: loaded support on port[0] = 21 [ 47.158365] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.170131] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.180435] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.187063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.194037] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.200472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.243372] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.249761] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.257716] device bridge_slave_0 entered promiscuous mode [ 47.266461] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.273018] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.279866] device bridge_slave_1 entered promiscuous mode [ 47.304828] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.327812] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.335139] team0: Port device team_slave_0 added [ 47.348703] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.375136] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.382511] team0: Port device team_slave_1 added [ 47.389519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.418104] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.426461] team0: Port device team_slave_0 added [ 47.434598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.446395] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.453121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.459166] chnl_net:caif_netlink_parms(): no params data found [ 47.468111] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.475408] team0: Port device team_slave_1 added [ 47.487505] IPVS: ftp: loaded support on port[0] = 21 [ 47.494954] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.511566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.532564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.540874] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.559281] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.573890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.614718] device hsr_slave_0 entered promiscuous mode [ 47.662018] device hsr_slave_1 entered promiscuous mode [ 47.701916] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.763822] device hsr_slave_0 entered promiscuous mode [ 47.811813] device hsr_slave_1 entered promiscuous mode [ 47.852566] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.858643] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.865887] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.873578] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.922772] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.933860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.941853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.949473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.958324] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.964705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.981173] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.992278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.000456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.007802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.015731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.023311] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.029637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.037560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.053024] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.059372] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.066856] device bridge_slave_0 entered promiscuous mode [ 48.073519] chnl_net:caif_netlink_parms(): no params data found [ 48.084116] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.090446] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.097750] device bridge_slave_1 entered promiscuous mode [ 48.105718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.120609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.139940] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.158004] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.165828] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.175243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.184350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.196835] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.205411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.213326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.220697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.228356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.236111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.255671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.276151] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.283082] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.290129] device bridge_slave_0 entered promiscuous mode [ 48.298248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.305959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.318832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.326375] team0: Port device team_slave_0 added [ 48.366223] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.373071] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.380050] device bridge_slave_1 entered promiscuous mode [ 48.393152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.400801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.411452] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.417490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.424805] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.433823] team0: Port device team_slave_1 added [ 48.457136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.464586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.479518] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.489254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.496568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.510371] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.536523] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.543731] team0: Port device team_slave_0 added [ 48.549734] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.557644] team0: Port device team_slave_1 added [ 48.568199] chnl_net:caif_netlink_parms(): no params data found [ 48.582603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.623646] device hsr_slave_0 entered promiscuous mode [ 48.661559] device hsr_slave_1 entered promiscuous mode [ 48.711816] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.719117] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.733937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.768975] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.783911] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.790250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.796929] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.803513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.820344] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.826711] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.834614] device bridge_slave_0 entered promiscuous mode [ 48.848574] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.856363] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.863495] device bridge_slave_1 entered promiscuous mode [ 48.875527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.924501] device hsr_slave_0 entered promiscuous mode [ 48.971650] device hsr_slave_1 entered promiscuous mode [ 49.021757] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.028721] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.038333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.045215] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.052117] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.069027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.078488] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.095319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.109764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.118746] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.132935] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.140005] team0: Port device team_slave_0 added [ 49.146772] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.154234] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.162344] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.168411] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.176337] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.183544] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.190711] team0: Port device team_slave_1 added [ 49.196259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.204929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.212294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.219407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.226770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.236022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.248275] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.255193] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.262585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.270652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.278741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.286675] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.293093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.301757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.310637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.356546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.364441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.373693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.382517] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.388987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.396249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.406198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.453433] device hsr_slave_0 entered promiscuous mode [ 49.491291] device hsr_slave_1 entered promiscuous mode [ 49.533211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.540866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.551344] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.557994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.571670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.592536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.600195] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.608513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.616845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.626956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.634886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.642856] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.649187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.656294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.665767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.673464] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.680249] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.689045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.699301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.708180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.718575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.728421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.736593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.744580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.752920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.760447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.770497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.779049] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.787487] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.795051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.805220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.813389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.823428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.833125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.840728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.848748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.856029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.863650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.870444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.881097] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.887172] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.894795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.904627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.913662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.923202] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.929281] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.937806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.946190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.956439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.965642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.974298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.983643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.991453] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.997963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.004874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.012377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.019650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.027147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.034587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.042374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.049945] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.056366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.076302] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.084421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.096808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.107355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.115090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.122873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.130338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.138141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.145964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.154315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.162561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.170043] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.176429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.186114] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.192428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.199680] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.205877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.214291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.224058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.243021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.250809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.259170] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.265633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.274372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.283778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.300308] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.310768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.326343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.335419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.345480] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.353361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.363060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.370837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.381826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.393095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.402966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.412128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.428190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.437154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.449042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.465598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.473683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.482531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.490230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 2020/05/09 22:06:02 executed programs: 10 [ 50.500334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.518140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.542017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.551394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.558131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.587409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.595517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.605892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.620666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.630862] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.639163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.649841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.659927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.671989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.680578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.695614] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.701922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.709158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.720720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.728856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.741724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.750642] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.757754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.766578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.778356] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.786673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.794997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.828123] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.843337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.861005] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.867097] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.887250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.904242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.916990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.925328] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.931953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.939503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.949825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.957343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.965469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.973930] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.980277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.989713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.998618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.013589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.026645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.034301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.045927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.054052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.062204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.069721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.080483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.088184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.096191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.105682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.114366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.123205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.134222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.142806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.153780] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.159797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.167274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.175303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.189544] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.198810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.886762] vivid-003: kernel_thread() failed 2020/05/09 22:06:07 executed programs: 118 [ 55.931456] vivid-003: kernel_thread() failed [ 55.960048] vivid-003: kernel_thread() failed [ 57.185727] vivid-003: kernel_thread() failed [ 57.196560] vivid-003: kernel_thread() failed [ 57.673037] ================================================================== [ 57.680623] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 57.687821] Read of size 4 at addr ffff888093182c5c by task syz-executor.1/7830 [ 57.695287] [ 57.696901] CPU: 0 PID: 7830 Comm: syz-executor.1 Not tainted 4.14.179-syzkaller #0 [ 57.704712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.714045] Call Trace: [ 57.716624] dump_stack+0xf7/0x13b [ 57.720156] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 57.724975] print_address_description.cold.7+0x9/0x1c9 [ 57.730320] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 57.735194] kasan_report.cold.8+0x11a/0x2d3 [ 57.739691] __asan_report_load4_noabort+0x14/0x20 [ 57.744604] __vb2_perform_fileio+0x10fd/0x12b0 [ 57.749267] ? vb2_core_poll+0x730/0x730 [ 57.753320] vb2_read+0xf/0x20 [ 57.756493] vb2_fop_read+0x1b6/0x390 [ 57.760272] ? vb2_fop_write+0x390/0x390 [ 57.764330] v4l2_read+0x133/0x240 [ 57.767858] do_iter_read+0x35e/0x570 [ 57.771640] ? dup_iter+0x250/0x250 [ 57.775274] vfs_readv+0xb6/0x110 [ 57.778715] ? compat_rw_copy_check_uvector+0x310/0x310 [ 57.784059] ? __fget+0x1ad/0x2f0 [ 57.787500] ? lock_downgrade+0x7f0/0x7f0 [ 57.791632] ? __fget+0x1ca/0x2f0 [ 57.795084] ? do_preadv+0x250/0x250 [ 57.798782] ? __fget_light+0x166/0x200 [ 57.802749] do_readv+0x10d/0x320 [ 57.806184] ? vfs_readv+0x110/0x110 [ 57.809880] ? do_syscall_64+0x4c/0x5b0 [ 57.813836] ? do_preadv+0x250/0x250 [ 57.817561] SyS_readv+0xb/0x10 [ 57.820815] do_syscall_64+0x1c7/0x5b0 [ 57.824676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.829510] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.834691] RIP: 0033:0x459829 [ 57.837868] RSP: 002b:00007f8e6bb1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 57.845638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 57.852893] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 57.860159] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 57.867403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e6bb1b6d4 [ 57.874650] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 00000000ffffffff [ 57.881919] [ 57.883549] Allocated by task 7826: [ 57.887169] save_stack_trace+0x16/0x20 [ 57.891125] save_stack+0x43/0xd0 [ 57.894571] kasan_kmalloc+0xc7/0xe0 [ 57.898274] kmem_cache_alloc_trace+0x152/0x7a0 [ 57.902922] __vb2_init_fileio+0x160/0xaf0 [ 57.907137] __vb2_perform_fileio+0xa9f/0x12b0 [ 57.911697] vb2_read+0xf/0x20 [ 57.914871] vb2_fop_read+0x1b6/0x390 [ 57.918662] v4l2_read+0x133/0x240 [ 57.922178] do_iter_read+0x35e/0x570 [ 57.925949] vfs_readv+0xb6/0x110 [ 57.929374] do_readv+0x10d/0x320 [ 57.932813] SyS_readv+0xb/0x10 [ 57.936075] do_syscall_64+0x1c7/0x5b0 [ 57.939948] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 57.945134] [ 57.946739] Freed by task 7821: [ 57.949998] save_stack_trace+0x16/0x20 [ 57.954054] save_stack+0x43/0xd0 [ 57.957484] kasan_slab_free+0x71/0xc0 [ 57.961372] kfree+0xcc/0x270 [ 57.964473] __vb2_cleanup_fileio+0xee/0x140 [ 57.968869] vb2_core_queue_release+0xf/0x70 [ 57.973270] _vb2_fop_release+0x1ac/0x280 [ 57.977488] vb2_fop_release+0x66/0xd0 [ 57.981371] vivid_fop_release+0x15f/0x3a0 [ 57.985587] v4l2_release+0xeb/0x1a0 [ 57.989301] __fput+0x232/0x750 [ 57.992561] ____fput+0x9/0x10 [ 57.995735] task_work_run+0xe5/0x170 [ 57.999619] exit_to_usermode_loop+0x16a/0x1b0 [ 58.004183] do_syscall_64+0x416/0x5b0 [ 58.008306] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.013676] [ 58.015313] The buggy address belongs to the object at ffff888093182940 [ 58.015313] which belongs to the cache kmalloc-1024 of size 1024 [ 58.028326] The buggy address is located 796 bytes inside of [ 58.028326] 1024-byte region [ffff888093182940, ffff888093182d40) [ 58.040376] The buggy address belongs to the page: [ 58.045372] page:ffffea00024c6080 count:1 mapcount:0 mapping:ffff888093182040 index:0x0 compound_mapcount: 0 [ 58.055345] flags: 0x1fffc0000008100(slab|head) [ 58.060080] raw: 01fffc0000008100 ffff888093182040 0000000000000000 0000000100000007 [ 58.068034] raw: ffffea00021f8b20 ffffea00024a14a0 ffff8880aa800ac0 0000000000000000 [ 58.075933] page dumped because: kasan: bad access detected [ 58.081638] [ 58.083259] Memory state around the buggy address: [ 58.088173] ffff888093182b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.095992] ffff888093182b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.103513] >ffff888093182c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.110865] ^ [ 58.117086] ffff888093182c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.124424] ffff888093182d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.131771] ================================================================== [ 58.139236] Disabling lock debugging due to kernel taint [ 58.148322] Kernel panic - not syncing: panic_on_warn set ... [ 58.148322] [ 58.155701] CPU: 1 PID: 7830 Comm: syz-executor.1 Tainted: G B 4.14.179-syzkaller #0 [ 58.164696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.174042] Call Trace: [ 58.176608] dump_stack+0xf7/0x13b [ 58.180136] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.185074] panic+0x1b0/0x358 [ 58.188325] ? add_taint.cold.5+0x11/0x11 [ 58.192706] ? ___preempt_schedule+0x16/0x18 [ 58.197725] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 58.202658] kasan_end_report+0x47/0x4f [ 58.206692] kasan_report.cold.8+0x76/0x2d3 [ 58.211011] __asan_report_load4_noabort+0x14/0x20 [ 58.215928] __vb2_perform_fileio+0x10fd/0x12b0 [ 58.220588] ? vb2_core_poll+0x730/0x730 [ 58.224749] vb2_read+0xf/0x20 [ 58.227929] vb2_fop_read+0x1b6/0x390 [ 58.231703] ? vb2_fop_write+0x390/0x390 [ 58.235736] v4l2_read+0x133/0x240 [ 58.239263] do_iter_read+0x35e/0x570 [ 58.243068] ? dup_iter+0x250/0x250 [ 58.246677] vfs_readv+0xb6/0x110 [ 58.250543] ? compat_rw_copy_check_uvector+0x310/0x310 [ 58.255914] ? __fget+0x1ad/0x2f0 [ 58.259370] ? lock_downgrade+0x7f0/0x7f0 [ 58.263494] ? __fget+0x1ca/0x2f0 [ 58.267033] ? do_preadv+0x250/0x250 [ 58.270737] ? __fget_light+0x166/0x200 [ 58.274685] do_readv+0x10d/0x320 [ 58.278111] ? vfs_readv+0x110/0x110 [ 58.281810] ? do_syscall_64+0x4c/0x5b0 [ 58.285885] ? do_preadv+0x250/0x250 [ 58.289575] SyS_readv+0xb/0x10 [ 58.292856] do_syscall_64+0x1c7/0x5b0 [ 58.296723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 58.301551] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 58.306742] RIP: 0033:0x459829 [ 58.309908] RSP: 002b:00007f8e6bb1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 58.317597] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 58.324861] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 58.332124] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 58.339470] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e6bb1b6d4 [ 58.346732] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 00000000ffffffff [ 58.355470] Kernel Offset: disabled [ 58.359088] Rebooting in 86400 seconds..