[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 32.469966] audit: type=1400 audit(1603898162.213:8): avc: denied { execmem } for pid=6101 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.494772] IPVS: ftp: loaded support on port[0] = 21 [ 32.877376] can: request_module (can-proto-0) failed. [ 33.441097] can: request_module (can-proto-0) failed. [ 33.467924] audit: type=1400 audit(1603898163.214:9): avc: denied { create } for pid=6083 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.69' (ECDSA) to the list of known hosts. 2020/10/28 15:16:10 parsed 1 programs 2020/10/28 15:16:11 executed programs: 0 [ 41.869634] audit: type=1400 audit(1603898171.616:10): avc: denied { execmem } for pid=6222 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.924735] IPVS: ftp: loaded support on port[0] = 21 [ 41.924738] IPVS: ftp: loaded support on port[0] = 21 [ 41.944618] IPVS: ftp: loaded support on port[0] = 21 [ 41.946766] IPVS: ftp: loaded support on port[0] = 21 [ 41.978517] IPVS: ftp: loaded support on port[0] = 21 [ 42.035069] IPVS: ftp: loaded support on port[0] = 21 [ 42.185926] chnl_net:caif_netlink_parms(): no params data found [ 42.238070] chnl_net:caif_netlink_parms(): no params data found [ 42.294405] chnl_net:caif_netlink_parms(): no params data found [ 42.327211] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.336378] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.343850] device bridge_slave_0 entered promiscuous mode [ 42.350834] chnl_net:caif_netlink_parms(): no params data found [ 42.397483] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.405771] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.413715] device bridge_slave_1 entered promiscuous mode [ 42.438395] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.446766] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.455388] device bridge_slave_0 entered promiscuous mode [ 42.464967] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.472848] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.479737] device bridge_slave_1 entered promiscuous mode [ 42.503607] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.543799] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.553265] chnl_net:caif_netlink_parms(): no params data found [ 42.567387] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.574243] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.582168] device bridge_slave_0 entered promiscuous mode [ 42.597164] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.626254] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.632982] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.639845] device bridge_slave_1 entered promiscuous mode [ 42.651172] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.667192] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.673779] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.680586] device bridge_slave_0 entered promiscuous mode [ 42.690397] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.697829] team0: Port device team_slave_0 added [ 42.713947] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.734631] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.741211] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.747996] device bridge_slave_1 entered promiscuous mode [ 42.758860] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.767541] team0: Port device team_slave_1 added [ 42.773283] chnl_net:caif_netlink_parms(): no params data found [ 42.783158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.799540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.807045] team0: Port device team_slave_0 added [ 42.817224] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.825521] team0: Port device team_slave_1 added [ 42.831519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.850742] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.857230] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.865002] device bridge_slave_0 entered promiscuous mode [ 42.873176] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.880787] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.887276] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.895605] device bridge_slave_1 entered promiscuous mode [ 42.903164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.910311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.922236] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.929432] team0: Port device team_slave_0 added [ 42.943470] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.961739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.978222] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.986090] team0: Port device team_slave_0 added [ 42.993203] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.000423] team0: Port device team_slave_1 added [ 43.010125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.035096] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.042561] team0: Port device team_slave_1 added [ 43.047774] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.054731] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.063014] device bridge_slave_0 entered promiscuous mode [ 43.069422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.077510] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.088347] device hsr_slave_0 entered promiscuous mode [ 43.094541] device hsr_slave_1 entered promiscuous mode [ 43.102892] device hsr_slave_0 entered promiscuous mode [ 43.108482] device hsr_slave_1 entered promiscuous mode [ 43.114618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.122388] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.128749] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.136503] device bridge_slave_1 entered promiscuous mode [ 43.150547] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.163833] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.171180] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.177979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.197568] device hsr_slave_0 entered promiscuous mode [ 43.203383] device hsr_slave_1 entered promiscuous mode [ 43.213225] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.220104] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.233139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.240659] team0: Port device team_slave_0 added [ 43.253973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.261904] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.269877] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.284617] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.292552] team0: Port device team_slave_1 added [ 43.298175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.306595] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.321901] device hsr_slave_0 entered promiscuous mode [ 43.327667] device hsr_slave_1 entered promiscuous mode [ 43.338512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.346497] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.355182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.379735] device hsr_slave_0 entered promiscuous mode [ 43.385511] device hsr_slave_1 entered promiscuous mode [ 43.399773] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.407895] team0: Port device team_slave_0 added [ 43.414854] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.422937] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.431379] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.445236] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.451998] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.459164] team0: Port device team_slave_1 added [ 43.464900] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.478282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.487350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.512026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.529185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.555659] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.565676] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.574423] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.588884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.600540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.609053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.618898] device hsr_slave_0 entered promiscuous mode [ 43.625472] device hsr_slave_1 entered promiscuous mode [ 43.631867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.640690] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.649949] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.659048] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.671408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.678385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.687512] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.693949] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.702946] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.709011] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.724100] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.736036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.749338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.757896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.766193] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.773197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.781466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.789381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.801180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.810099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.824288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.832778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.840478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.850470] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.856943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.864720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.872712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.888270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.895083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.903759] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.910576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.923111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.931231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.938974] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.945455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.952767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.960432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.968310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.975625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.986874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.001726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.009782] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.017943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.028010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.035352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.043625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.051670] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.058012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.064829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.071887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.078789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.086589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.094686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.102315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.117126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.124553] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.131629] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.140859] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.146930] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.155876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.164016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.171974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.179012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.187288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.195107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.204349] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.212346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.221974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.233220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.248547] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.256153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.265437] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.272400] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.279465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.287483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.295542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.303475] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.309862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.316848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.325037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.332995] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.339436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.346877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.355719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.367418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.377060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.385082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.395128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.403627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.411633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.419061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.427141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.434779] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.441186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.448249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.455251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.465268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.472766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.480240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.489320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.497945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.509282] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.518197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.525553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.533805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.544009] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.550085] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.559040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.569183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.580311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.587867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.596474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.604652] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.611580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.618315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.626153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.636716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.645332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.653809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.665440] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.671820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.679512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.688908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.697303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.705512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.713353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.721889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.729519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.738591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.747248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.757013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.769359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.776809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.784221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.792139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.799606] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.806016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.813242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.821134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.828630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.836744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.844406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.851540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.862910] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.872471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.884717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.895701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.917289] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.925680] ================================================================== [ 44.933214] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x114/0x120 [ 44.939705] Read of size 8 at addr ffff888094360a60 by task syz-executor.0/7119 [ 44.944534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.947136] [ 44.947150] CPU: 1 PID: 7119 Comm: syz-executor.0 Not tainted 4.19.152-syzkaller #0 [ 44.957100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.958095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.958100] Call Trace: [ 44.969744] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.973138] dump_stack+0x123/0x177 [ 44.973149] print_address_description.cold.8+0x9/0x1ff [ 44.973156] kasan_report.cold.9+0x242/0x309 [ 44.973162] ? v4l2_ctrl_grab+0x114/0x120 [ 44.973170] __asan_report_load8_noabort+0x14/0x20 [ 44.973175] v4l2_ctrl_grab+0x114/0x120 [ 44.973182] vicodec_stop_streaming+0xfc/0x130 [ 44.973188] __vb2_queue_cancel+0x99/0x6f0 [ 44.973195] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 44.983024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.985546] ? kasan_check_read+0x11/0x20 [ 44.996749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.001334] vb2_core_queue_release+0x1e/0x70 [ 45.001339] vb2_queue_release+0x9/0x10 [ 45.001345] v4l2_m2m_ctx_release+0x22/0x30 [ 45.001352] vicodec_release+0xb5/0x120 [ 45.001358] v4l2_release+0xee/0x1a0 [ 45.001367] __fput+0x24c/0x7f0 [ 45.001375] ____fput+0x9/0x10 [ 45.001381] task_work_run+0x10e/0x190 [ 45.001392] exit_to_usermode_loop+0x1a9/0x200 [ 45.010260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.014844] do_syscall_64+0x419/0x4e0 [ 45.014853] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.014859] RIP: 0033:0x4120b1 [ 45.014865] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 45.014869] RSP: 002b:00007ffc02a9bc70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 45.014874] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 45.014878] RDX: 0000001b30b20000 RSI: 0000000000740490 RDI: 0000000000000003 [ 45.014880] RBP: 000000000073c900 R08: 000000000000af73 R09: 000000000000af73 [ 45.014883] R10: 00007ffc02a9bd40 R11: 0000000000000293 R12: ffffffffffffffff [ 45.014886] R13: 000000000000af75 R14: 00000000000003e8 R15: 000000000073bf0c [ 45.014898] [ 45.025066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.028708] Allocated by task 7120: [ 45.034643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.039751] save_stack+0x43/0xd0 [ 45.046640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.050976] kasan_kmalloc+0xc7/0xe0 [ 45.050982] __kmalloc_node+0x50/0x70 [ 45.050987] kvmalloc_node+0x68/0x70 [ 45.050993] v4l2_ctrl_new.part.9+0x22a/0x11c0 [ 45.050997] v4l2_ctrl_new_std+0x1c9/0x2d0 [ 45.051002] vicodec_open+0x18d/0xa90 [ 45.051007] v4l2_open+0x17d/0x2d0 [ 45.051012] chrdev_open+0x1f0/0x5c0 [ 45.051016] do_dentry_open+0x3f4/0x1010 [ 45.051019] vfs_open+0x9a/0xc0 [ 45.051024] path_openat+0x6fa/0x3c60 [ 45.051027] do_filp_open+0x177/0x250 [ 45.051032] do_sys_open+0x1dd/0x350 [ 45.063734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.063956] __x64_sys_openat+0x98/0xf0 [ 45.073605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.074875] do_syscall_64+0xd6/0x4e0 [ 45.074882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.086182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.086515] [ 45.117431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.124718] Freed by task 7119: [ 45.124730] save_stack+0x43/0xd0 [ 45.124734] __kasan_slab_free+0x102/0x150 [ 45.124737] kasan_slab_free+0xe/0x10 [ 45.124742] kfree+0xcf/0x230 [ 45.124749] kvfree+0x2c/0x30 [ 45.124755] v4l2_ctrl_handler_free+0x421/0x7e0 [ 45.124760] vicodec_release+0x61/0x120 [ 45.124764] v4l2_release+0xee/0x1a0 [ 45.124769] __fput+0x24c/0x7f0 [ 45.124772] ____fput+0x9/0x10 [ 45.124777] task_work_run+0x10e/0x190 [ 45.124785] exit_to_usermode_loop+0x1a9/0x200 [ 45.153468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.154976] do_syscall_64+0x419/0x4e0 [ 45.154983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.154987] [ 45.166692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.169594] The buggy address belongs to the object at ffff888094360a40 [ 45.169594] which belongs to the cache kmalloc-256 of size 256 [ 45.169600] The buggy address is located 32 bytes inside of [ 45.169600] 256-byte region [ffff888094360a40, ffff888094360b40) [ 45.169602] The buggy address belongs to the page: [ 45.169608] page:ffffea000250d800 count:1 mapcount:0 mapping:ffff88813bf1e7c0 index:0x0 [ 45.169613] flags: 0x1fffc0000000100(slab) [ 45.169620] raw: 01fffc0000000100 ffffea0002502988 ffffea0002c91dc8 ffff88813bf1e7c0 [ 45.176953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.178321] raw: 0000000000000000 ffff888094360040 000000010000000c 0000000000000000 [ 45.178325] page dumped because: kasan: bad access detected [ 45.178327] [ 45.178330] Memory state around the buggy address: [ 45.178335] ffff888094360900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.178339] ffff888094360980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.178342] >ffff888094360a00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 45.178344] ^ [ 45.178349] ffff888094360a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.186299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.188958] ffff888094360b00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 45.188962] ================================================================== [ 45.188964] Disabling lock debugging due to kernel taint [ 45.469421] Kernel panic - not syncing: panic_on_warn set ... [ 45.469421] [ 45.475104] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.481101] CPU: 1 PID: 7119 Comm: syz-executor.0 Tainted: G B 4.19.152-syzkaller #0 [ 45.481103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.481106] Call Trace: [ 45.481117] dump_stack+0x123/0x177 [ 45.481125] panic+0x1cd/0x387 [ 45.481129] ? __warn_printk+0xd6/0xd6 [ 45.481135] ? ___preempt_schedule+0x16/0x18 [ 45.481143] kasan_end_report+0x47/0x4f [ 45.564958] kasan_report.cold.9+0x76/0x309 [ 45.569256] ? v4l2_ctrl_grab+0x114/0x120 [ 45.573393] __asan_report_load8_noabort+0x14/0x20 [ 45.578297] v4l2_ctrl_grab+0x114/0x120 [ 45.582269] vicodec_stop_streaming+0xfc/0x130 [ 45.586827] __vb2_queue_cancel+0x99/0x6f0 [ 45.591060] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 45.595616] ? kasan_check_read+0x11/0x20 [ 45.599744] vb2_core_queue_release+0x1e/0x70 [ 45.604235] vb2_queue_release+0x9/0x10 [ 45.608204] v4l2_m2m_ctx_release+0x22/0x30 [ 45.612676] vicodec_release+0xb5/0x120 [ 45.616642] v4l2_release+0xee/0x1a0 [ 45.620339] __fput+0x24c/0x7f0 [ 45.623595] ____fput+0x9/0x10 [ 45.626764] task_work_run+0x10e/0x190 [ 45.630628] exit_to_usermode_loop+0x1a9/0x200 [ 45.635208] do_syscall_64+0x419/0x4e0 [ 45.639165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.644445] RIP: 0033:0x4120b1 [ 45.647618] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 45.666507] RSP: 002b:00007ffc02a9bc70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 45.674195] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 45.681492] RDX: 0000001b30b20000 RSI: 0000000000740490 RDI: 0000000000000003 [ 45.688740] RBP: 000000000073c900 R08: 000000000000af73 R09: 000000000000af73 [ 45.695989] R10: 00007ffc02a9bd40 R11: 0000000000000293 R12: ffffffffffffffff [ 45.703236] R13: 000000000000af75 R14: 00000000000003e8 R15: 000000000073bf0c [ 45.712016] Kernel Offset: disabled [ 45.715644] Rebooting in 86400 seconds..