[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 33.422333] audit: type=1400 audit(1588258293.803:8): avc: denied { execmem } for pid=6114 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 33.432022] IPVS: ftp: loaded support on port[0] = 21 [ 33.908824] can: request_module (can-proto-0) failed. [ 34.895707] can: request_module (can-proto-0) failed. [ 34.923218] audit: type=1400 audit(1588258295.294:9): avc: denied { create } for pid=6094 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts. 2020/04/30 14:51:43 parsed 1 programs 2020/04/30 14:51:44 executed programs: 0 [ 43.674194] audit: type=1400 audit(1588258304.048:10): avc: denied { execmem } for pid=6234 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 43.759957] IPVS: ftp: loaded support on port[0] = 21 [ 43.807700] IPVS: ftp: loaded support on port[0] = 21 [ 43.850307] IPVS: ftp: loaded support on port[0] = 21 [ 43.857928] IPVS: ftp: loaded support on port[0] = 21 [ 43.880464] IPVS: ftp: loaded support on port[0] = 21 [ 43.882577] IPVS: ftp: loaded support on port[0] = 21 [ 44.025352] chnl_net:caif_netlink_parms(): no params data found [ 44.108747] chnl_net:caif_netlink_parms(): no params data found [ 44.185179] chnl_net:caif_netlink_parms(): no params data found [ 44.233571] chnl_net:caif_netlink_parms(): no params data found [ 44.247752] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.254102] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.262202] device bridge_slave_0 entered promiscuous mode [ 44.273756] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.281396] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.289002] device bridge_slave_1 entered promiscuous mode [ 44.334675] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.342461] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.350395] device bridge_slave_0 entered promiscuous mode [ 44.360620] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.367563] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.374507] device bridge_slave_1 entered promiscuous mode [ 44.394977] chnl_net:caif_netlink_parms(): no params data found [ 44.403270] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.410023] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.417151] device bridge_slave_0 entered promiscuous mode [ 44.444447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.458966] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.465309] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.473557] device bridge_slave_1 entered promiscuous mode [ 44.497879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.508374] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.514718] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.522386] device bridge_slave_0 entered promiscuous mode [ 44.530088] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.553061] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.561746] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.570842] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.578574] device bridge_slave_1 entered promiscuous mode [ 44.593087] chnl_net:caif_netlink_parms(): no params data found [ 44.602263] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.633065] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.640978] team0: Port device team_slave_0 added [ 44.651088] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.658778] team0: Port device team_slave_1 added [ 44.664463] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.678239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.690700] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.703492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.711391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.722468] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.730413] team0: Port device team_slave_0 added [ 44.736198] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.742560] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.750305] device bridge_slave_0 entered promiscuous mode [ 44.760346] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.767549] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.774347] device bridge_slave_1 entered promiscuous mode [ 44.794627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.802342] team0: Port device team_slave_1 added [ 44.815285] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.823839] team0: Port device team_slave_0 added [ 44.833502] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.841799] team0: Port device team_slave_1 added [ 44.852002] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.860135] team0: Port device team_slave_0 added [ 44.865281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.881536] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.890315] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.927650] device hsr_slave_0 entered promiscuous mode [ 44.965855] device hsr_slave_1 entered promiscuous mode [ 45.016015] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.023210] team0: Port device team_slave_1 added [ 45.032092] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.044561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.052743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.061758] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.069049] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.076590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.083724] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.090689] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.097693] device bridge_slave_0 entered promiscuous mode [ 45.149232] device hsr_slave_0 entered promiscuous mode [ 45.186901] device hsr_slave_1 entered promiscuous mode [ 45.226227] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.233280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.249344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.265539] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.272002] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.279196] device bridge_slave_1 entered promiscuous mode [ 45.304181] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.367972] device hsr_slave_0 entered promiscuous mode [ 45.386013] device hsr_slave_1 entered promiscuous mode [ 45.467064] device hsr_slave_0 entered promiscuous mode [ 45.505527] device hsr_slave_1 entered promiscuous mode [ 45.547011] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.554184] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.565543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.573100] team0: Port device team_slave_0 added [ 45.578876] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.586861] team0: Port device team_slave_1 added [ 45.592527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.600382] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.607909] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.620106] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.628631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.649880] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.659198] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.669787] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.717717] device hsr_slave_0 entered promiscuous mode [ 45.755585] device hsr_slave_1 entered promiscuous mode [ 45.795885] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.813724] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.821026] team0: Port device team_slave_0 added [ 45.828927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.838154] team0: Port device team_slave_1 added [ 45.843563] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.854311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.862282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.937007] device hsr_slave_0 entered promiscuous mode [ 45.975457] device hsr_slave_1 entered promiscuous mode [ 46.020485] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.028827] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.045634] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.053557] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.071560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.094211] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.110614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.119956] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.140624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.149711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.158086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.166836] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.172900] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.186651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.203130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.214165] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.225942] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.232727] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.241772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.252001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.260025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.268301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.275558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.283438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.291644] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.298216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.306983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.314694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.322729] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.329119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.336908] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.343149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.351715] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.358083] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.365928] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.373261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.384712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.393609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.404020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.411314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.419346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.427325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.434100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.443142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.455283] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.462706] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.472943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.481201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.489404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.498691] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.505094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.511801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.519267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.526288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.533883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.542772] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.549234] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.560789] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.567255] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.578076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.588912] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.596144] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.602969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.612610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.621105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.629479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.641898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.648929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.657152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.664662] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.671038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.677913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.686015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.693498] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.700078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.706893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.714616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.722774] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.729183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.736054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.744193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.751914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.759962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.768044] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.774502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.782968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.794457] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.804264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.814099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.822451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.829865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.837966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.844769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.853033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.861096] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.867479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.874463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.882490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.890262] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.896644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.903405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.911298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.918943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.925330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.932164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.940066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.947851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.963087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.970679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.980313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.988919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.001121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.008639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.018986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.027056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.034635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.046809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.056517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.065253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.072762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.081277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.091288] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.098311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.106837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.114392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.122619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.130609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.138554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.146552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.153846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.161416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.168699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.177797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.185699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.193412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.204027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.214289] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.221830] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.229476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.237001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.244715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.253494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.261796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.271004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.280790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.290013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.297708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.304591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.312780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.320835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.328724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.336671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.344243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.352961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.360717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.368629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.378086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.386857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.394982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.403293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.412165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.421365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.430252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.438602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.446212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.453810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.461386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.469180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.476814] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.483148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.490127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.498048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.505654] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.511986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.518800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.526496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.533820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.541600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.549778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.556710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.564126] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.571896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.581940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.595815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.603178] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.609604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.619190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.630692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.639339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.648386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.656506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.664054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.672361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.680129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.688287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.698717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.707630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.719934] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.728575] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.734589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.744089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.752042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.760180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.768198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.777436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.786023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.793257] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.800789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.813034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.825037] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.831454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.839843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.848437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.858061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.878441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.888335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.905887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.915886] ================================================================== [ 47.923542] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x114/0x120 [ 47.924093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.930026] Read of size 8 at addr ffff888097f9dae0 by task syz-executor.3/7132 [ 47.930030] [ 47.930037] CPU: 0 PID: 7132 Comm: syz-executor.3 Not tainted 4.19.119-syzkaller #0 [ 47.930041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.930043] Call Trace: [ 47.930055] dump_stack+0x123/0x177 [ 47.930066] print_address_description.cold.8+0x9/0x1ff [ 47.930072] kasan_report.cold.9+0x242/0x309 [ 47.930078] ? v4l2_ctrl_grab+0x114/0x120 [ 47.930086] __asan_report_load8_noabort+0x14/0x20 [ 47.930091] v4l2_ctrl_grab+0x114/0x120 [ 47.930099] vicodec_stop_streaming+0xfc/0x130 [ 47.930106] __vb2_queue_cancel+0x99/0x6f0 [ 47.930111] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 47.930116] ? kasan_check_read+0x11/0x20 [ 47.930131] vb2_core_queue_release+0x1e/0x70 [ 47.930137] vb2_queue_release+0x9/0x10 [ 47.930142] v4l2_m2m_ctx_release+0x22/0x30 [ 47.930148] vicodec_release+0xb5/0x120 [ 47.930155] v4l2_release+0xee/0x1a0 [ 47.930162] __fput+0x24c/0x7f0 [ 47.930170] ____fput+0x9/0x10 [ 47.930177] task_work_run+0x10e/0x190 [ 47.930188] exit_to_usermode_loop+0x1a9/0x200 [ 47.948535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.954397] do_syscall_64+0x419/0x4e0 [ 47.973997] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.975282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.975288] RIP: 0033:0x4120b1 [ 47.975294] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 47.975296] RSP: 002b:00007ffd9f028400 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 47.975302] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 47.975305] RDX: 0000001b32120000 RSI: 0000000000740490 RDI: 0000000000000003 [ 47.975308] RBP: 000000000073c900 R08: 000000000000bb22 R09: 000000000000bb22 [ 47.975311] R10: 00007ffd9f0284d0 R11: 0000000000000293 R12: ffffffffffffffff [ 47.975314] R13: 000000000000bb24 R14: 00000000000003e8 R15: 000000000073bf0c [ 47.975326] [ 47.975329] Allocated by task 7133: [ 47.975335] save_stack+0x43/0xd0 [ 47.975339] kasan_kmalloc+0xc7/0xe0 [ 47.975345] __kmalloc_node+0x50/0x70 [ 47.975351] kvmalloc_node+0x68/0x70 [ 47.975358] v4l2_ctrl_new.part.9+0x22a/0x12b0 [ 47.975363] v4l2_ctrl_new_std+0x1c9/0x2d0 [ 47.975369] vicodec_open+0x18d/0xa90 [ 47.975375] v4l2_open+0x17d/0x2d0 [ 47.975380] chrdev_open+0x1f0/0x5c0 [ 47.975384] do_dentry_open+0x3f4/0x1010 [ 47.975388] vfs_open+0x9a/0xc0 [ 47.975392] path_openat+0x6fa/0x3c60 [ 47.975396] do_filp_open+0x177/0x250 [ 47.975399] do_sys_open+0x1dd/0x350 [ 47.975402] __x64_sys_openat+0x98/0xf0 [ 47.975407] do_syscall_64+0xd6/0x4e0 [ 47.975411] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.975413] [ 47.975415] Freed by task 7132: [ 47.975418] save_stack+0x43/0xd0 [ 47.975420] __kasan_slab_free+0x102/0x150 [ 47.975424] kasan_slab_free+0xe/0x10 [ 47.975427] kfree+0xcf/0x230 [ 47.975431] kvfree+0x2c/0x30 [ 47.975436] v4l2_ctrl_handler_free+0x421/0x7e0 [ 47.975440] vicodec_release+0x61/0x120 [ 47.975444] v4l2_release+0xee/0x1a0 [ 47.975448] __fput+0x24c/0x7f0 [ 47.975451] ____fput+0x9/0x10 [ 47.975457] task_work_run+0x10e/0x190 [ 47.975461] exit_to_usermode_loop+0x1a9/0x200 [ 47.975465] do_syscall_64+0x419/0x4e0 [ 47.975470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.982316] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.984016] [ 47.995380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.997469] The buggy address belongs to the object at ffff888097f9dac0 [ 47.997469] which belongs to the cache kmalloc-256 of size 256 [ 48.008673] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.010388] The buggy address is located 32 bytes inside of [ 48.010388] 256-byte region [ffff888097f9dac0, ffff888097f9dbc0) [ 48.028139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.030782] The buggy address belongs to the page: [ 48.320521] page:ffffea00025fe740 count:1 mapcount:0 mapping:ffff88812c31e7c0 index:0x0 [ 48.328651] flags: 0x1fffc0000000100(slab) [ 48.332960] raw: 01fffc0000000100 ffffea0002619248 ffffea000261d008 ffff88812c31e7c0 [ 48.340828] raw: 0000000000000000 ffff888097f9d0c0 000000010000000c 0000000000000000 [ 48.348708] page dumped because: kasan: bad access detected [ 48.354414] [ 48.356016] Memory state around the buggy address: [ 48.360923] ffff888097f9d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.368262] ffff888097f9da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.375615] >ffff888097f9da80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 48.382956] ^ [ 48.389430] ffff888097f9db00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.396777] ffff888097f9db80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 48.404154] ================================================================== [ 48.411490] Disabling lock debugging due to kernel taint [ 48.425278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.437709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.446430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.453200] Kernel panic - not syncing: panic_on_warn set ... [ 48.453200] [ 48.460204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.460565] CPU: 0 PID: 7132 Comm: syz-executor.3 Tainted: G B 4.19.119-syzkaller #0 [ 48.460568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.460571] Call Trace: [ 48.460581] dump_stack+0x123/0x177 [ 48.460589] panic+0x1cd/0x387 [ 48.479134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.486296] ? __warn_printk+0xd6/0xd6 [ 48.486304] ? ___preempt_schedule+0x16/0x18 [ 48.486312] kasan_end_report+0x47/0x4f [ 48.486316] kasan_report.cold.9+0x76/0x309 [ 48.486322] ? v4l2_ctrl_grab+0x114/0x120 [ 48.486327] __asan_report_load8_noabort+0x14/0x20 [ 48.486330] v4l2_ctrl_grab+0x114/0x120 [ 48.486337] vicodec_stop_streaming+0xfc/0x130 [ 48.486342] __vb2_queue_cancel+0x99/0x6f0 [ 48.486346] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 48.486349] ? kasan_check_read+0x11/0x20 [ 48.486355] vb2_core_queue_release+0x1e/0x70 [ 48.486360] vb2_queue_release+0x9/0x10 [ 48.486364] v4l2_m2m_ctx_release+0x22/0x30 [ 48.486368] vicodec_release+0xb5/0x120 [ 48.486373] v4l2_release+0xee/0x1a0 [ 48.486377] __fput+0x24c/0x7f0 [ 48.486382] ____fput+0x9/0x10 [ 48.486388] task_work_run+0x10e/0x190 [ 48.486394] exit_to_usermode_loop+0x1a9/0x200 [ 48.486398] do_syscall_64+0x419/0x4e0 [ 48.486403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.486407] RIP: 0033:0x4120b1 [ 48.486412] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 48.486414] RSP: 002b:00007ffd9f028400 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 48.486419] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 48.486421] RDX: 0000001b32120000 RSI: 0000000000740490 RDI: 0000000000000003 [ 48.486424] RBP: 000000000073c900 R08: 000000000000bb22 R09: 000000000000bb22 [ 48.486427] R10: 00007ffd9f0284d0 R11: 0000000000000293 R12: ffffffffffffffff [ 48.486428] R13: 000000000000bb24 R14: 00000000000003e8 R15: 000000000073bf0c [ 48.490562] Kernel Offset: disabled [ 48.665084] Rebooting in 86400 seconds..