[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 32.603174] audit: type=1400 audit(1592224872.696:8): avc: denied { execmem } for pid=6133 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.881487] IPVS: ftp: loaded support on port[0] = 21 [ 34.050145] can: request_module (can-proto-0) failed. [ 34.058876] can: request_module (can-proto-0) failed. [ 34.086255] audit: type=1400 audit(1592224874.166:9): avc: denied { create } for pid=6112 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.209' (ECDSA) to the list of known hosts. 2020/06/15 12:41:21 parsed 1 programs 2020/06/15 12:41:22 executed programs: 0 [ 42.106425] audit: type=1400 audit(1592224882.189:10): avc: denied { execmem } for pid=6247 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.408429] IPVS: ftp: loaded support on port[0] = 21 [ 43.156630] IPVS: ftp: loaded support on port[0] = 21 [ 43.225470] chnl_net:caif_netlink_parms(): no params data found [ 43.280164] IPVS: ftp: loaded support on port[0] = 21 [ 43.313483] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.320159] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.326962] device bridge_slave_0 entered promiscuous mode [ 43.336545] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.343509] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.351278] device bridge_slave_1 entered promiscuous mode [ 43.359970] chnl_net:caif_netlink_parms(): no params data found [ 43.400525] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.410954] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.441278] IPVS: ftp: loaded support on port[0] = 21 [ 43.446945] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.455360] team0: Port device team_slave_0 added [ 43.460939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.468086] team0: Port device team_slave_1 added [ 43.473232] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.481779] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.489043] device bridge_slave_0 entered promiscuous mode [ 43.497201] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.505408] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.512355] device bridge_slave_1 entered promiscuous mode [ 43.528914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.537037] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.547828] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.567328] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.580484] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.587953] team0: Port device team_slave_0 added [ 43.606942] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.614736] team0: Port device team_slave_1 added [ 43.680270] device hsr_slave_0 entered promiscuous mode [ 43.727715] device hsr_slave_1 entered promiscuous mode [ 43.769556] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.791786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.801496] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.823988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.854593] IPVS: ftp: loaded support on port[0] = 21 [ 43.879526] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.886059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.892969] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.899341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.909220] chnl_net:caif_netlink_parms(): no params data found [ 44.010548] device hsr_slave_0 entered promiscuous mode [ 44.047872] device hsr_slave_1 entered promiscuous mode [ 44.088254] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.109375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.142786] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.149629] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.156430] device bridge_slave_0 entered promiscuous mode [ 44.163870] chnl_net:caif_netlink_parms(): no params data found [ 44.181300] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.187838] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.194746] device bridge_slave_1 entered promiscuous mode [ 44.220119] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.226476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.233172] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.239575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.254920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.282006] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.301195] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.309812] IPVS: ftp: loaded support on port[0] = 21 [ 44.317238] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.324517] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.337076] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.352894] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.359444] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.366266] device bridge_slave_0 entered promiscuous mode [ 44.373448] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.380332] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.387236] device bridge_slave_1 entered promiscuous mode [ 44.424325] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.432367] team0: Port device team_slave_0 added [ 44.438885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.445933] team0: Port device team_slave_1 added [ 44.464203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.471384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.480525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.492577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.500954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.573295] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.602041] device hsr_slave_0 entered promiscuous mode [ 44.648500] device hsr_slave_1 entered promiscuous mode [ 44.697861] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.704905] team0: Port device team_slave_0 added [ 44.713081] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.720754] team0: Port device team_slave_1 added [ 44.729737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.737015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.746920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.756203] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.810554] device hsr_slave_0 entered promiscuous mode [ 44.857498] device hsr_slave_1 entered promiscuous mode [ 44.897908] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.905208] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.915783] chnl_net:caif_netlink_parms(): no params data found [ 44.932357] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.952716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.961778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.972121] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.979074] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.003101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.011777] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.022029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.038793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.049156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.056912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.064697] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.071325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.082963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.094649] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.101697] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.109808] device bridge_slave_0 entered promiscuous mode [ 45.116434] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.123824] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.131437] device bridge_slave_1 entered promiscuous mode [ 45.139106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.145438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.153651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.161361] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.167772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.241403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.250233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.258728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.265629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.272857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.295556] chnl_net:caif_netlink_parms(): no params data found [ 45.311065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.320961] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.331737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.340753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.355531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.373060] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.379839] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.386128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.395969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.404347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.417998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.425507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.454052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.462608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.473570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.481804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.489977] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.496312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.503900] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.511674] team0: Port device team_slave_0 added [ 45.518125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.525169] team0: Port device team_slave_1 added [ 45.532745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.543748] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.550211] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.558381] device bridge_slave_0 entered promiscuous mode [ 45.565824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.575010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.583796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.592978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.601339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.609390] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.615737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.622811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.630443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.641902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.649703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.657345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.665104] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.671580] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.678687] device bridge_slave_1 entered promiscuous mode [ 45.771711] device hsr_slave_0 entered promiscuous mode [ 45.827560] device hsr_slave_1 entered promiscuous mode [ 45.868696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.878207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.886091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.895232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.904171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.912243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.919998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.927499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.934852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.942373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.949474] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.957964] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.966477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.975870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.985391] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.994591] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.001292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.009095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.018790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.029715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.036768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.044365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.052305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.059792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.067384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.074903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.097988] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.104009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.115928] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.126282] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.133745] team0: Port device team_slave_0 added [ 46.140739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.150750] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.157190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.163961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.174232] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.183564] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.191040] team0: Port device team_slave_1 added [ 46.196701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.204617] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.216235] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.223050] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.234436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.300011] device hsr_slave_0 entered promiscuous mode [ 46.337425] device hsr_slave_1 entered promiscuous mode [ 46.378920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.386103] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.395881] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.403417] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.411887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.419929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.428056] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.434402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.442267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.449507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.456715] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.477247] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.483789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.491969] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.499272] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.514423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.529323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.536402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.545067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.555307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.564083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.572251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.580272] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.586654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.593795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.602533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.610372] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.616750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.623662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.631986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.639602] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.645944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.655891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.666535] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.681024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.696808] hrtimer: interrupt took 34646 ns [ 46.731708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.741279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.759073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.768315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.776632] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.789453] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.795615] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.807256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.814987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.822400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.830560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.839406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.851102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.858854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.866352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.876021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.888024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.908366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.918925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.931242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.939153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.946970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.954487] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.960916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.968531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.975364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.987743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.005628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.015377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.023843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.032291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.087645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.095267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.103645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.111630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.120970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.129007] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.135449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.144625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.153874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.167369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.176280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.183975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.193785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.201666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.209192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.216518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.224746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.232891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.241872] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.253719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.261913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.271632] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.278927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.288173] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.297824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.305337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.313523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.321731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.329694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.338612] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.344618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.354911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.361953] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.371132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.383715] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.392063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.400183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.408409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.415999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.427931] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.434433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.442868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.451315] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.457817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.465147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.473708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.482009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.492118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.510137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.516651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.524387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 2020/06/15 12:41:27 executed programs: 7 [ 47.541106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.576267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.597086] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.603449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.615681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.625664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.640224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.648763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.664119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.680641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.692141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.704578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.713203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.721452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.732465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.750525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.772953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.791528] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.803737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.817842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.833987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.844088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.853119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.871671] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.885198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.893531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.905584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.913544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.921372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.984512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.012084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.051154] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.062696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.098036] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.109214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.590271] vivid-000: kernel_thread() failed [ 51.795710] ================================================================== [ 51.803314] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 51.810533] Read of size 4 at addr ffff888092e2631c by task syz-executor.1/7554 [ 51.817985] [ 51.819607] CPU: 1 PID: 7554 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 51.827393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.836751] Call Trace: [ 51.839341] dump_stack+0xf7/0x13b [ 51.843110] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 51.848413] print_address_description.cold.7+0x9/0x1c9 [ 51.853942] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 51.860779] kasan_report.cold.8+0x11a/0x2d3 [ 51.866125] __asan_report_load4_noabort+0x14/0x20 [ 51.873229] __vb2_perform_fileio+0x10fd/0x12b0 [ 51.879875] ? vb2_core_poll+0x730/0x730 [ 51.884537] vb2_read+0xf/0x20 [ 51.887903] vb2_fop_read+0x1b6/0x390 [ 51.891907] ? vb2_fop_write+0x390/0x390 [ 51.897280] v4l2_read+0x133/0x240 [ 51.900797] do_iter_read+0x35e/0x570 [ 51.904749] ? dup_iter+0x250/0x250 [ 51.908354] ? trace_hardirqs_off+0x10/0x10 [ 51.912651] vfs_readv+0xb6/0x110 [ 51.916085] ? find_held_lock+0x36/0x1d0 [ 51.920122] ? compat_rw_copy_check_uvector+0x310/0x310 [ 51.925460] ? __fget+0x1ad/0x2f0 [ 51.932993] ? __fget_light+0x166/0x200 [ 51.936941] do_preadv+0x158/0x250 [ 51.940455] ? do_readv+0x320/0x320 [ 51.944056] ? do_syscall_64+0x4c/0x5b0 [ 51.948005] ? SyS_writev+0x10/0x10 [ 51.951603] SyS_preadv+0xc/0x10 [ 51.954942] do_syscall_64+0x1c7/0x5b0 [ 51.958802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.963621] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 51.968784] RIP: 0033:0x459a29 [ 51.971946] RSP: 002b:00007f2ba0e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 51.979635] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 51.986879] RDX: 0000000000000006 RSI: 00000000200018c0 RDI: 0000000000000004 [ 51.994221] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 52.001468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ba0e856d4 [ 52.008713] R13: 00000000004c6d3d R14: 00000000004dc0b8 R15: 00000000ffffffff [ 52.016049] [ 52.017658] Allocated by task 7554: [ 52.021279] save_stack_trace+0x16/0x20 [ 52.025243] save_stack+0x43/0xd0 [ 52.028679] kasan_kmalloc+0xc7/0xe0 [ 52.032372] kmem_cache_alloc_trace+0x152/0x7a0 [ 52.037014] __vb2_init_fileio+0x160/0xaf0 [ 52.041223] __vb2_perform_fileio+0xa9f/0x12b0 [ 52.045776] vb2_read+0xf/0x20 [ 52.049040] vb2_fop_read+0x1b6/0x390 [ 52.054030] v4l2_read+0x133/0x240 [ 52.057543] do_iter_read+0x35e/0x570 [ 52.061315] vfs_readv+0xb6/0x110 [ 52.064740] do_preadv+0x158/0x250 [ 52.068265] SyS_preadv+0xc/0x10 [ 52.071603] do_syscall_64+0x1c7/0x5b0 [ 52.075461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 52.080625] [ 52.082228] Freed by task 7528: [ 52.085484] save_stack_trace+0x16/0x20 [ 52.089541] save_stack+0x43/0xd0 [ 52.092967] kasan_slab_free+0x71/0xc0 [ 52.096827] kfree+0xcc/0x270 [ 52.099904] __vb2_cleanup_fileio+0xee/0x140 [ 52.104285] vb2_core_queue_release+0xf/0x70 [ 52.108678] _vb2_fop_release+0x1ac/0x280 [ 52.112798] vb2_fop_release+0x66/0xd0 [ 52.116659] vivid_fop_release+0x15f/0x3a0 [ 52.120867] v4l2_release+0xeb/0x1a0 [ 52.124564] __fput+0x232/0x750 [ 52.127816] ____fput+0x9/0x10 [ 52.130983] task_work_run+0xe5/0x170 [ 52.134766] exit_to_usermode_loop+0x16a/0x1b0 [ 52.139319] do_syscall_64+0x416/0x5b0 [ 52.143190] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 52.148350] [ 52.149959] The buggy address belongs to the object at ffff888092e26000 [ 52.149959] which belongs to the cache kmalloc-1024 of size 1024 [ 52.162766] The buggy address is located 796 bytes inside of [ 52.162766] 1024-byte region [ffff888092e26000, ffff888092e26400) [ 52.174723] The buggy address belongs to the page: [ 52.179637] page:ffffea00024b8980 count:1 mapcount:0 mapping:ffff888092e26000 index:0x0 compound_mapcount: 0 [ 52.189729] flags: 0x1fffc0000008100(slab|head) [ 52.194379] raw: 01fffc0000008100 ffff888092e26000 0000000000000000 0000000100000007 [ 52.202251] raw: ffffea0002477420 ffffea00024a5420 ffff8880aa800ac0 0000000000000000 [ 52.210105] page dumped because: kasan: bad access detected [ 52.215787] [ 52.217404] Memory state around the buggy address: [ 52.222303] ffff888092e26200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.229635] ffff888092e26280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.236980] >ffff888092e26300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.244320] ^ [ 52.248463] ffff888092e26380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.255793] ffff888092e26400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.263136] ================================================================== [ 52.270466] Disabling lock debugging due to kernel taint [ 52.308301] Kernel panic - not syncing: panic_on_warn set ... [ 52.308301] [ 52.315677] CPU: 1 PID: 7554 Comm: syz-executor.1 Tainted: G B 4.14.184-syzkaller #0 [ 52.324775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.334105] Call Trace: [ 52.336720] dump_stack+0xf7/0x13b [ 52.340237] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 52.345056] panic+0x1b0/0x358 [ 52.348225] ? add_taint.cold.5+0x11/0x11 [ 52.352349] ? ___preempt_schedule+0x16/0x18 [ 52.356754] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 52.361568] kasan_end_report+0x47/0x4f [ 52.365515] kasan_report.cold.8+0x76/0x2d3 [ 52.369833] __asan_report_load4_noabort+0x14/0x20 [ 52.374734] __vb2_perform_fileio+0x10fd/0x12b0 [ 52.379387] ? vb2_core_poll+0x730/0x730 [ 52.383433] vb2_read+0xf/0x20 [ 52.386596] vb2_fop_read+0x1b6/0x390 [ 52.390367] ? vb2_fop_write+0x390/0x390 [ 52.394397] v4l2_read+0x133/0x240 [ 52.397910] do_iter_read+0x35e/0x570 [ 52.401693] ? dup_iter+0x250/0x250 [ 52.405312] ? trace_hardirqs_off+0x10/0x10 [ 52.409706] vfs_readv+0xb6/0x110 [ 52.413143] ? find_held_lock+0x36/0x1d0 [ 52.417175] ? compat_rw_copy_check_uvector+0x310/0x310 [ 52.422511] ? __fget+0x1ad/0x2f0 [ 52.425942] ? __fget_light+0x166/0x200 [ 52.429898] do_preadv+0x158/0x250 [ 52.434458] ? do_readv+0x320/0x320 [ 52.438064] ? do_syscall_64+0x4c/0x5b0 [ 52.442112] ? SyS_writev+0x10/0x10 [ 52.445711] SyS_preadv+0xc/0x10 [ 52.449071] do_syscall_64+0x1c7/0x5b0 [ 52.452929] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.457852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 52.463026] RIP: 0033:0x459a29 [ 52.466188] RSP: 002b:00007f2ba0e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 52.473882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 52.481143] RDX: 0000000000000006 RSI: 00000000200018c0 RDI: 0000000000000004 [ 52.488399] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 52.495650] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ba0e856d4 [ 52.502907] R13: 00000000004c6d3d R14: 00000000004dc0b8 R15: 00000000ffffffff [ 52.510908] Kernel Offset: disabled [ 52.514557] Rebooting in 86400 seconds..