[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 33.789296] audit: type=1400 audit(1598700672.132:9): avc: denied { execmem } for pid=6105 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 33.804197] IPVS: ftp: loaded support on port[0] = 21 [ 34.227638] can: request_module (can-proto-0) failed. [ 34.812006] can: request_module (can-proto-0) failed. [ 34.843426] audit: type=1400 audit(1598700673.193:10): avc: denied { create } for pid=6087 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. 2020/08/29 11:31:21 parsed 1 programs 2020/08/29 11:31:22 executed programs: 0 [ 43.746498] audit: type=1400 audit(1598700682.088:11): avc: denied { execmem } for pid=6226 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 43.822359] IPVS: ftp: loaded support on port[0] = 21 [ 43.823462] IPVS: ftp: loaded support on port[0] = 21 [ 43.842767] IPVS: ftp: loaded support on port[0] = 21 [ 43.842832] IPVS: ftp: loaded support on port[0] = 21 [ 43.855348] IPVS: ftp: loaded support on port[0] = 21 [ 43.873179] IPVS: ftp: loaded support on port[0] = 21 [ 44.082753] chnl_net:caif_netlink_parms(): no params data found [ 44.198472] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.205274] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.214374] device bridge_slave_0 entered promiscuous mode [ 44.280187] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.286617] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.295408] device bridge_slave_1 entered promiscuous mode [ 44.333626] chnl_net:caif_netlink_parms(): no params data found [ 44.361776] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.375965] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.392713] chnl_net:caif_netlink_parms(): no params data found [ 44.432012] chnl_net:caif_netlink_parms(): no params data found [ 44.462910] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.473205] team0: Port device team_slave_0 added [ 44.483232] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.493062] team0: Port device team_slave_1 added [ 44.522294] chnl_net:caif_netlink_parms(): no params data found [ 44.534172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.574512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.625593] chnl_net:caif_netlink_parms(): no params data found [ 44.636092] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.644264] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.651994] device bridge_slave_0 entered promiscuous mode [ 44.658965] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.665331] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.673583] device bridge_slave_1 entered promiscuous mode [ 44.684236] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.691236] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.698782] device bridge_slave_0 entered promiscuous mode [ 44.724233] device hsr_slave_0 entered promiscuous mode [ 44.730653] device hsr_slave_1 entered promiscuous mode [ 44.752302] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.760926] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.768802] device bridge_slave_1 entered promiscuous mode [ 44.795342] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.804319] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.815230] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.844754] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.860608] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.869092] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.878071] device bridge_slave_0 entered promiscuous mode [ 44.884937] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.891744] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.899207] device bridge_slave_0 entered promiscuous mode [ 44.909022] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.918605] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.925175] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.933885] device bridge_slave_1 entered promiscuous mode [ 44.962557] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.969505] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.976881] device bridge_slave_1 entered promiscuous mode [ 44.985227] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.008202] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.016127] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.024315] team0: Port device team_slave_0 added [ 45.030890] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.038425] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.045555] device bridge_slave_0 entered promiscuous mode [ 45.079519] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.091149] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.099191] team0: Port device team_slave_1 added [ 45.104620] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.114922] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.123409] device bridge_slave_1 entered promiscuous mode [ 45.131623] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.143538] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.150259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.157622] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.164046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.172475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.182292] team0: Port device team_slave_0 added [ 45.194293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.203022] team0: Port device team_slave_1 added [ 45.209814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.217836] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.231079] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.238818] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.254439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.283271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.305878] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.315371] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.324516] team0: Port device team_slave_0 added [ 45.330858] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.341308] team0: Port device team_slave_0 added [ 45.347796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.355319] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.363590] team0: Port device team_slave_1 added [ 45.371484] device hsr_slave_0 entered promiscuous mode [ 45.377619] device hsr_slave_1 entered promiscuous mode [ 45.383925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.393217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.401833] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.409718] team0: Port device team_slave_1 added [ 45.417614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.432536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.441049] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.459739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.474170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.494642] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.502413] team0: Port device team_slave_0 added [ 45.515810] device hsr_slave_0 entered promiscuous mode [ 45.522606] device hsr_slave_1 entered promiscuous mode [ 45.529388] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.545496] device hsr_slave_0 entered promiscuous mode [ 45.551726] device hsr_slave_1 entered promiscuous mode [ 45.559894] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.569207] team0: Port device team_slave_1 added [ 45.580197] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.592301] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.599721] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.608283] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.619703] device hsr_slave_0 entered promiscuous mode [ 45.625720] device hsr_slave_1 entered promiscuous mode [ 45.634936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.646161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.663052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.689656] device hsr_slave_0 entered promiscuous mode [ 45.696146] device hsr_slave_1 entered promiscuous mode [ 45.705362] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.718250] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.732428] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.741861] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.751644] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.775083] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.797716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.820411] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.833679] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.849285] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.863145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.872128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.889716] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.895865] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.940159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.955397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.967392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.980247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.990071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.999730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.008695] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.015110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.023206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.033122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.041495] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.047965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.054848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.070041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.081957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.094936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.103325] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.112197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.122986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.133572] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.143649] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.152499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.162638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.170064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.177670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.188720] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.201389] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.209175] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.218866] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.228436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.241906] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.248181] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.254758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.262922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.271309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.279481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.287781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.295923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.304541] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.311110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.318856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.329557] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.335816] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.345110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.356262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.365470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.374499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.386538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.398244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.410320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.419577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.429592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.438253] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.444614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.452504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.461592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.469890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.478899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.485931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.494737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.503048] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.509532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.518596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.533039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.541207] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.547552] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.556943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.564163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.571883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.579463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.588095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.595959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.604021] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.610541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.618246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.630167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.639025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.650189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.658497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.669400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.677106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.685060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.693285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.702154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.710756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.718605] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.725196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.732449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.740539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.748352] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.754740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.761789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.769896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.777738] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.784103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.793139] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.803917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.813630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.823159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.830885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.838579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.847027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.854715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.862880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.871268] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.877859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.884779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.892634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.904204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.913990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.923695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.934524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.942906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.950980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.959605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.967274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.974514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.982845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.990746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.001283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.014122] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.020952] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.030154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.042390] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.049194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.058273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.067447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.078059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.087252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.096717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.105663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.114775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.125465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.138818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.147793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.157775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.165554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.173920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.183403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.193625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.205220] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.211916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.219489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.227595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.236039] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.242429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.249651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.257687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.265563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.273475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.281698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.290671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.298902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.306187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.317957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.329511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.341138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.350832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.362002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.370621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.380518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.389637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.399954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.408637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.417418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.425234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.433840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.444732] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.455592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.464425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.474133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.484397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.493402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.504992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.514568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.523325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.531629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.539701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.547617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.555499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.563392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.571245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.579255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.587291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.595348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.604171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.612221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.624368] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.632680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.651505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.659890] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.669244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.679524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.688182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.696968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.708893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.720535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.728618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.737540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.745186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.754404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.762933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.771174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.779376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.789440] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.796019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.805970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.816602] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.822966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.831276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.841968] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.853651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.874205] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.894840] ================================================================== [ 47.902507] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x114/0x120 [ 47.909017] Read of size 8 at addr ffff88809f46fea0 by task syz-executor.0/7121 [ 47.916467] [ 47.918105] CPU: 1 PID: 7121 Comm: syz-executor.0 Not tainted 4.19.142-syzkaller #0 [ 47.925897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.935263] Call Trace: [ 47.937880] dump_stack+0x123/0x177 [ 47.941586] print_address_description.cold.8+0x9/0x1ff [ 47.946984] kasan_report.cold.9+0x242/0x309 [ 47.951414] ? v4l2_ctrl_grab+0x114/0x120 [ 47.955615] __asan_report_load8_noabort+0x14/0x20 [ 47.960616] v4l2_ctrl_grab+0x114/0x120 [ 47.964638] vicodec_stop_streaming+0xfc/0x130 [ 47.969382] __vb2_queue_cancel+0x99/0x6f0 [ 47.973118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.973686] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 47.973701] ? kasan_check_read+0x11/0x20 [ 47.989193] vb2_core_queue_release+0x1e/0x70 [ 47.993809] vb2_queue_release+0x9/0x10 [ 47.998078] v4l2_m2m_ctx_release+0x22/0x30 [ 48.002563] vicodec_release+0xb5/0x120 [ 48.006891] v4l2_release+0xee/0x1a0 [ 48.010605] __fput+0x24c/0x7f0 [ 48.013890] ____fput+0x9/0x10 [ 48.017200] task_work_run+0x10e/0x190 [ 48.021136] exit_to_usermode_loop+0x1a9/0x200 [ 48.025797] do_syscall_64+0x419/0x4e0 [ 48.029820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.035143] RIP: 0033:0x4120b1 [ 48.038334] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 48.058064] RSP: 002b:00007ffc6ea9ca30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 48.066348] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 48.073732] RDX: 0000001b30f20000 RSI: 0000000000740490 RDI: 0000000000000003 [ 48.081021] RBP: 000000000073c900 R08: 000000000000baf7 R09: 000000000000baf7 [ 48.087645] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.088389] R10: 00007ffc6ea9cb00 R11: 0000000000000293 R12: ffffffffffffffff [ 48.102031] R13: 000000000000bb16 R14: 00000000000003e8 R15: 000000000073bf0c [ 48.109508] [ 48.111137] Allocated by task 7122: [ 48.114860] save_stack+0x43/0xd0 [ 48.118347] kasan_kmalloc+0xc7/0xe0 [ 48.120587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.122091] __kmalloc_node+0x50/0x70 [ 48.122099] kvmalloc_node+0x68/0x70 [ 48.122110] v4l2_ctrl_new.part.9+0x22a/0x11c0 [ 48.122114] v4l2_ctrl_new_std+0x1c9/0x2d0 [ 48.122120] vicodec_open+0x18d/0xa90 [ 48.122125] v4l2_open+0x17d/0x2d0 [ 48.122130] chrdev_open+0x1f0/0x5c0 [ 48.122141] do_dentry_open+0x3f4/0x1010 [ 48.159738] vfs_open+0x9a/0xc0 [ 48.163117] path_openat+0x6fa/0x3c60 [ 48.166972] do_filp_open+0x177/0x250 [ 48.170853] do_sys_open+0x1dd/0x350 [ 48.174729] __x64_sys_openat+0x98/0xf0 [ 48.179076] do_syscall_64+0xd6/0x4e0 [ 48.182912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.188228] [ 48.189859] Freed by task 7121: [ 48.193153] save_stack+0x43/0xd0 [ 48.196634] __kasan_slab_free+0x102/0x150 [ 48.200879] kasan_slab_free+0xe/0x10 [ 48.204707] kfree+0xcf/0x230 [ 48.207832] kvfree+0x2c/0x30 [ 48.210967] v4l2_ctrl_handler_free+0x421/0x7e0 [ 48.215661] vicodec_release+0x61/0x120 [ 48.219675] v4l2_release+0xee/0x1a0 [ 48.223869] __fput+0x24c/0x7f0 [ 48.227159] ____fput+0x9/0x10 [ 48.230544] task_work_run+0x10e/0x190 [ 48.234602] exit_to_usermode_loop+0x1a9/0x200 [ 48.239316] do_syscall_64+0x419/0x4e0 [ 48.243386] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.248597] [ 48.250221] The buggy address belongs to the object at ffff88809f46fe80 [ 48.250221] which belongs to the cache kmalloc-256 of size 256 [ 48.263915] The buggy address is located 32 bytes inside of [ 48.263915] 256-byte region [ffff88809f46fe80, ffff88809f46ff80) [ 48.275703] The buggy address belongs to the page: [ 48.280664] page:ffffea00027d1bc0 count:1 mapcount:0 mapping:ffff88812c31e7c0 index:0x0 [ 48.288814] flags: 0x1fffc0000000100(slab) [ 48.293059] raw: 01fffc0000000100 ffffea0002355488 ffffea00027b5088 ffff88812c31e7c0 [ 48.301026] raw: 0000000000000000 ffff88809f46f0c0 000000010000000c 0000000000000000 [ 48.308902] page dumped because: kasan: bad access detected [ 48.314637] [ 48.316266] Memory state around the buggy address: [ 48.321200] ffff88809f46fd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.328579] ffff88809f46fe00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 48.335953] >ffff88809f46fe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.343679] ^ [ 48.348100] ffff88809f46ff00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.355551] ffff88809f46ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.362930] ================================================================== [ 48.370299] Disabling lock debugging due to kernel taint [ 48.386598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.395338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.408396] Kernel panic - not syncing: panic_on_warn set ... [ 48.408396] [ 48.415945] CPU: 1 PID: 7121 Comm: syz-executor.0 Tainted: G B 4.19.142-syzkaller #0 [ 48.425134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.425736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.434589] Call Trace: [ 48.434616] dump_stack+0x123/0x177 [ 48.434625] panic+0x1cd/0x387 [ 48.434629] ? __warn_printk+0xd6/0xd6 [ 48.434637] ? ___preempt_schedule+0x16/0x18 [ 48.434647] kasan_end_report+0x47/0x4f [ 48.434651] kasan_report.cold.9+0x76/0x309 [ 48.434658] ? v4l2_ctrl_grab+0x114/0x120 [ 48.434662] __asan_report_load8_noabort+0x14/0x20 [ 48.434666] v4l2_ctrl_grab+0x114/0x120 [ 48.434677] vicodec_stop_streaming+0xfc/0x130 [ 48.485536] __vb2_queue_cancel+0x99/0x6f0 [ 48.490301] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 48.495108] ? kasan_check_read+0x11/0x20 [ 48.499359] vb2_core_queue_release+0x1e/0x70 [ 48.504092] vb2_queue_release+0x9/0x10 [ 48.508272] v4l2_m2m_ctx_release+0x22/0x30 [ 48.512623] vicodec_release+0xb5/0x120 [ 48.516790] v4l2_release+0xee/0x1a0 [ 48.520662] __fput+0x24c/0x7f0 [ 48.524030] ____fput+0x9/0x10 [ 48.527529] task_work_run+0x10e/0x190 [ 48.531451] exit_to_usermode_loop+0x1a9/0x200 [ 48.536933] do_syscall_64+0x419/0x4e0 [ 48.540841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.546050] RIP: 0033:0x4120b1 [ 48.549366] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 48.568536] RSP: 002b:00007ffc6ea9ca30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 48.577899] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 48.585273] RDX: 0000001b30f20000 RSI: 0000000000740490 RDI: 0000000000000003 [ 48.592547] RBP: 000000000073c900 R08: 000000000000baf7 R09: 000000000000baf7 [ 48.599930] R10: 00007ffc6ea9cb00 R11: 0000000000000293 R12: ffffffffffffffff [ 48.608942] R13: 000000000000bb16 R14: 00000000000003e8 R15: 000000000073bf0c [ 48.617791] Kernel Offset: disabled [ 48.621924] Rebooting in 86400 seconds..