[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 30.427961] audit: type=1400 audit(1591655657.454:8): avc: denied { execmem } for pid=6121 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 30.678627] IPVS: ftp: loaded support on port[0] = 21 [ 31.807972] can: request_module (can-proto-0) failed. [ 31.816433] can: request_module (can-proto-0) failed. [ 31.841990] audit: type=1400 audit(1591655658.875:9): avc: denied { create } for pid=6099 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. 2020/06/08 22:34:27 parsed 1 programs 2020/06/08 22:34:27 executed programs: 0 [ 40.304874] audit: type=1400 audit(1591655667.350:10): avc: denied { execmem } for pid=6237 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.493307] IPVS: ftp: loaded support on port[0] = 21 [ 41.261830] IPVS: ftp: loaded support on port[0] = 21 [ 41.325606] chnl_net:caif_netlink_parms(): no params data found [ 41.367645] IPVS: ftp: loaded support on port[0] = 21 [ 41.370336] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.380284] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.387620] device bridge_slave_0 entered promiscuous mode [ 41.394975] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.401379] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.408468] device bridge_slave_1 entered promiscuous mode [ 41.426720] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.435400] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.453847] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.460960] team0: Port device team_slave_0 added [ 41.474254] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.481506] team0: Port device team_slave_1 added [ 41.517813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.527086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.584320] device hsr_slave_0 entered promiscuous mode [ 41.622420] device hsr_slave_1 entered promiscuous mode [ 41.662582] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.671318] chnl_net:caif_netlink_parms(): no params data found [ 41.679863] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.707933] IPVS: ftp: loaded support on port[0] = 21 [ 41.767106] chnl_net:caif_netlink_parms(): no params data found [ 41.793206] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.799669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.806642] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.813023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.835611] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.842224] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.849107] device bridge_slave_0 entered promiscuous mode [ 41.857023] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.863955] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.871450] device bridge_slave_1 entered promiscuous mode [ 41.890855] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.901277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.936139] IPVS: ftp: loaded support on port[0] = 21 [ 41.951437] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.958760] team0: Port device team_slave_0 added [ 41.965643] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.973974] team0: Port device team_slave_1 added [ 41.988204] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.994638] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.001398] device bridge_slave_0 entered promiscuous mode [ 42.009151] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.015826] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.023666] device bridge_slave_1 entered promiscuous mode [ 42.030155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.103418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.110437] chnl_net:caif_netlink_parms(): no params data found [ 42.150781] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.194422] device hsr_slave_0 entered promiscuous mode [ 42.242072] device hsr_slave_1 entered promiscuous mode [ 42.294568] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.313598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.329964] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.346837] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.353631] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.360480] device bridge_slave_0 entered promiscuous mode [ 42.370428] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.376862] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.384367] device bridge_slave_1 entered promiscuous mode [ 42.408030] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.414894] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.430170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.442002] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.449801] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.458083] team0: Port device team_slave_0 added [ 42.466018] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.474515] team0: Port device team_slave_1 added [ 42.479947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.487934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.496206] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.510171] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.517989] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.553228] IPVS: ftp: loaded support on port[0] = 21 [ 42.565125] device hsr_slave_0 entered promiscuous mode [ 42.602007] device hsr_slave_1 entered promiscuous mode [ 42.645816] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.653516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.660568] team0: Port device team_slave_0 added [ 42.667951] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.675415] team0: Port device team_slave_1 added [ 42.681161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.688973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.697533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.716724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.725883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.733178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.794143] device hsr_slave_0 entered promiscuous mode [ 42.851965] device hsr_slave_1 entered promiscuous mode [ 42.913872] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.968232] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.977235] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.983458] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.992845] chnl_net:caif_netlink_parms(): no params data found [ 43.015224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.025136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.033816] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.041931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.049878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.058185] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.064611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.072914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.080593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.088357] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.094768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.114606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.124660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.145485] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.179763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.203538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.217176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.275848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.283808] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.290151] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.298309] device bridge_slave_0 entered promiscuous mode [ 43.305772] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.312577] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.319509] device bridge_slave_1 entered promiscuous mode [ 43.326704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.334619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.343627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.358343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.370348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.377851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.385585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.393293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.400696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.408904] chnl_net:caif_netlink_parms(): no params data found [ 43.419170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.431130] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.441634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.449089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.466809] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.476668] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.484697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.499067] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.507859] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.515091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.522815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.529645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.537825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.545279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.552409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.559825] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.573477] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.581054] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.589902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.602046] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.608307] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.621105] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.629881] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.636604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.643965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.652261] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.659651] team0: Port device team_slave_0 added [ 43.667599] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.674360] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.688824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.698094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.706469] team0: Port device team_slave_1 added [ 43.722401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.730367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.739550] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.746389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.754788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.764205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.774061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.781389] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.788393] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.796279] device bridge_slave_0 entered promiscuous mode [ 43.803316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.810926] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.818496] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.825513] device bridge_slave_1 entered promiscuous mode [ 43.832802] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.846160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.854514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.864212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.872875] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.880752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.889401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.897896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.906128] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.912916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.922567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.930489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.940102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.949486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.957002] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.977186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.986294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.994816] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.001144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.008945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.017390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.025314] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.031689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.039224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.058709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.067641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.076812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.084990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.094802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.133490] device hsr_slave_0 entered promiscuous mode [ 44.171432] device hsr_slave_1 entered promiscuous mode [ 44.212073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.220277] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.228899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.238122] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.252616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.260176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.268276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.276037] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.282463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.289518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.297213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.306602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.314013] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.323715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.333651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.350709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.358206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.368239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.375925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.384178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.396331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.404716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.412138] team0: Port device team_slave_0 added [ 44.417668] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.425226] team0: Port device team_slave_1 added [ 44.430779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.439047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.449042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.457831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.466741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.483906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.490951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.501743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.509483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.520482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.529105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.536898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.548672] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.558774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.567672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.592808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.600235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.608895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.619606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.674375] device hsr_slave_0 entered promiscuous mode [ 44.721333] device hsr_slave_1 entered promiscuous mode [ 44.762559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.770113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.778640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.786304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.793841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.801391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.808742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.817927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.825803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.833179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.841128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.848302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.856211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.869503] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.875977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.884288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.893503] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.899536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.910777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.918865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.934082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.946397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.958499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.971268] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.981761] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.992230] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.998219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.016514] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.027572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.045025] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.056330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.067770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.080688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.107471] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.124538] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.136203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.143333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.152742] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.158810] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.169541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.179650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.189740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.197928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.206028] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.212505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.219609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.256487] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.267237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.294178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.306565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.315018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.323390] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.329791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.337624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.347941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.357446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.366942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.374368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.382438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.393702] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.399773] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.410039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.420620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.428671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.437068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.445416] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.451812] bridge0: port 1(bridge_slave_0) entered forwarding state 2020/06/08 22:34:32 executed programs: 11 [ 45.459144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.467164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.479268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.512231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.522142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.528976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.537508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.555036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.570003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.578570] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.584971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.593792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.609442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.617469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.625628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.637703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.647266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.656006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.664923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.674129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.684926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.692269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.703770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.711184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.718717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.731720] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.737892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.750540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.775365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.782920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.796213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.819979] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.828774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.837468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.846852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.858719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.867826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.876585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.885310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.896981] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.903290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.922226] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.932157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.180614] ================================================================== [ 49.188329] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 49.195686] Read of size 4 at addr ffff888084d3b99c by task syz-executor.1/7450 [ 49.203239] [ 49.205042] CPU: 0 PID: 7450 Comm: syz-executor.1 Not tainted 4.14.183-syzkaller #0 [ 49.213011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.222829] Call Trace: [ 49.225418] dump_stack+0xf7/0x13b [ 49.228962] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 49.233806] print_address_description.cold.7+0x9/0x1c9 [ 49.239313] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 49.244679] kasan_report.cold.8+0x11a/0x2d3 [ 49.249097] __asan_report_load4_noabort+0x14/0x20 [ 49.254115] __vb2_perform_fileio+0x10fd/0x12b0 [ 49.259399] ? vb2_core_poll+0x730/0x730 [ 49.263467] vb2_read+0xf/0x20 [ 49.266663] vb2_fop_read+0x1b6/0x390 [ 49.270464] ? vb2_fop_write+0x390/0x390 [ 49.274547] v4l2_read+0x133/0x240 [ 49.278094] do_iter_read+0x35e/0x570 [ 49.281907] ? dup_iter+0x250/0x250 [ 49.285628] vfs_readv+0xb6/0x110 [ 49.289077] ? compat_rw_copy_check_uvector+0x310/0x310 [ 49.294442] ? __fget+0x1ad/0x2f0 [ 49.297894] ? lock_downgrade+0x7f0/0x7f0 [ 49.302082] ? __fget+0x1ca/0x2f0 [ 49.305570] ? do_preadv+0x250/0x250 [ 49.309282] ? __fget_light+0x166/0x200 [ 49.313258] do_readv+0x10d/0x320 [ 49.316908] ? vfs_readv+0x110/0x110 [ 49.320622] ? do_syscall_64+0x4c/0x5b0 [ 49.324609] ? do_preadv+0x250/0x250 [ 49.329083] SyS_readv+0xb/0x10 [ 49.332512] do_syscall_64+0x1c7/0x5b0 [ 49.336380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.341312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 49.346747] RIP: 0033:0x459829 [ 49.350018] RSP: 002b:00007f2ec65acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 49.358195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 49.365600] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 49.373225] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 49.380677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ec65ad6d4 [ 49.388015] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 00000000ffffffff [ 49.395424] [ 49.397053] Allocated by task 7450: [ 49.400661] save_stack_trace+0x16/0x20 [ 49.404703] save_stack+0x43/0xd0 [ 49.408139] kasan_kmalloc+0xc7/0xe0 [ 49.411832] kmem_cache_alloc_trace+0x152/0x7a0 [ 49.416488] __vb2_init_fileio+0x160/0xaf0 [ 49.420704] __vb2_perform_fileio+0xa9f/0x12b0 [ 49.425269] vb2_read+0xf/0x20 [ 49.428752] vb2_fop_read+0x1b6/0x390 [ 49.432629] v4l2_read+0x133/0x240 [ 49.436178] do_iter_read+0x35e/0x570 [ 49.440061] vfs_readv+0xb6/0x110 [ 49.443486] do_readv+0x10d/0x320 [ 49.446916] SyS_readv+0xb/0x10 [ 49.450177] do_syscall_64+0x1c7/0x5b0 [ 49.454044] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 49.459203] [ 49.460804] Freed by task 7445: [ 49.464072] save_stack_trace+0x16/0x20 [ 49.468294] save_stack+0x43/0xd0 [ 49.471737] kasan_slab_free+0x71/0xc0 [ 49.475602] kfree+0xcc/0x270 [ 49.478686] __vb2_cleanup_fileio+0xee/0x140 [ 49.483083] vb2_core_queue_release+0xf/0x70 [ 49.487502] _vb2_fop_release+0x1ac/0x280 [ 49.491653] vb2_fop_release+0x66/0xd0 [ 49.495604] vivid_fop_release+0x15f/0x3a0 [ 49.499819] v4l2_release+0xeb/0x1a0 [ 49.503512] __fput+0x232/0x750 [ 49.506768] ____fput+0x9/0x10 [ 49.509947] task_work_run+0xe5/0x170 [ 49.513723] exit_to_usermode_loop+0x16a/0x1b0 [ 49.518284] do_syscall_64+0x416/0x5b0 [ 49.522239] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 49.527414] [ 49.529037] The buggy address belongs to the object at ffff888084d3b680 [ 49.529037] which belongs to the cache kmalloc-1024 of size 1024 [ 49.541859] The buggy address is located 796 bytes inside of [ 49.541859] 1024-byte region [ffff888084d3b680, ffff888084d3ba80) [ 49.553801] The buggy address belongs to the page: [ 49.558736] page:ffffea0002134e80 count:1 mapcount:0 mapping:ffff888084d3a000 index:0x0 compound_mapcount: 0 [ 49.568679] flags: 0x1fffc0000008100(slab|head) [ 49.573321] raw: 01fffc0000008100 ffff888084d3a000 0000000000000000 0000000100000007 [ 49.581181] raw: ffffea000224aa20 ffffea0002327c20 ffff8880aa800ac0 0000000000000000 [ 49.589036] page dumped because: kasan: bad access detected [ 49.594736] [ 49.596335] Memory state around the buggy address: [ 49.601239] ffff888084d3b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.608575] ffff888084d3b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.615917] >ffff888084d3b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.623248] ^ [ 49.627382] ffff888084d3ba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.634721] ffff888084d3ba80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.642052] ================================================================== [ 49.649391] Disabling lock debugging due to kernel taint [ 49.656564] Kernel panic - not syncing: panic_on_warn set ... [ 49.656564] [ 49.663933] CPU: 0 PID: 7450 Comm: syz-executor.1 Tainted: G B 4.14.183-syzkaller #0 [ 49.672929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.682273] Call Trace: [ 49.684865] dump_stack+0xf7/0x13b [ 49.688408] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 49.693232] panic+0x1b0/0x358 [ 49.697025] ? add_taint.cold.5+0x11/0x11 [ 49.701161] ? ___preempt_schedule+0x16/0x18 [ 49.705541] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 49.710370] kasan_end_report+0x47/0x4f [ 49.714316] kasan_report.cold.8+0x76/0x2d3 [ 49.718608] __asan_report_load4_noabort+0x14/0x20 [ 49.723513] __vb2_perform_fileio+0x10fd/0x12b0 [ 49.728163] ? vb2_core_poll+0x730/0x730 [ 49.732206] vb2_read+0xf/0x20 [ 49.735388] vb2_fop_read+0x1b6/0x390 [ 49.740047] ? vb2_fop_write+0x390/0x390 [ 49.744080] v4l2_read+0x133/0x240 [ 49.747597] do_iter_read+0x35e/0x570 [ 49.751379] ? dup_iter+0x250/0x250 [ 49.754979] vfs_readv+0xb6/0x110 [ 49.758424] ? compat_rw_copy_check_uvector+0x310/0x310 [ 49.763760] ? __fget+0x1ad/0x2f0 [ 49.767184] ? lock_downgrade+0x7f0/0x7f0 [ 49.771306] ? __fget+0x1ca/0x2f0 [ 49.774749] ? do_preadv+0x250/0x250 [ 49.778438] ? __fget_light+0x166/0x200 [ 49.782401] do_readv+0x10d/0x320 [ 49.785828] ? vfs_readv+0x110/0x110 [ 49.789524] ? do_syscall_64+0x4c/0x5b0 [ 49.793469] ? do_preadv+0x250/0x250 [ 49.797165] SyS_readv+0xb/0x10 [ 49.800417] do_syscall_64+0x1c7/0x5b0 [ 49.804284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.809098] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 49.814257] RIP: 0033:0x459829 [ 49.817417] RSP: 002b:00007f2ec65acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 49.825180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 49.832421] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 49.839665] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 49.846928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ec65ad6d4 [ 49.854169] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 00000000ffffffff [ 49.862755] Kernel Offset: disabled [ 49.866364] Rebooting in 86400 seconds..