[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 35.405619] audit: type=1400 audit(1596040336.504:8): avc: denied { execmem } for pid=6124 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 35.416628] IPVS: ftp: loaded support on port[0] = 21 [ 35.870061] can: request_module (can-proto-0) failed. [ 36.845219] can: request_module (can-proto-0) failed. [ 36.869015] audit: type=1400 audit(1596040337.975:9): avc: denied { create } for pid=6103 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.244' (ECDSA) to the list of known hosts. 2020/07/29 16:32:25 parsed 1 programs 2020/07/29 16:32:26 executed programs: 0 [ 45.316909] audit: type=1400 audit(1596040346.428:10): avc: denied { execmem } for pid=6241 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 45.380984] IPVS: ftp: loaded support on port[0] = 21 [ 45.390968] IPVS: ftp: loaded support on port[0] = 21 [ 45.402410] IPVS: ftp: loaded support on port[0] = 21 [ 45.490088] IPVS: ftp: loaded support on port[0] = 21 [ 45.493558] IPVS: ftp: loaded support on port[0] = 21 [ 45.516907] IPVS: ftp: loaded support on port[0] = 21 [ 45.621413] chnl_net:caif_netlink_parms(): no params data found [ 45.692509] chnl_net:caif_netlink_parms(): no params data found [ 45.788265] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.794646] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.802822] device bridge_slave_0 entered promiscuous mode [ 45.812231] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.819814] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.826852] device bridge_slave_1 entered promiscuous mode [ 45.839916] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.846613] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.853945] device bridge_slave_0 entered promiscuous mode [ 45.862588] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.869303] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.876805] device bridge_slave_1 entered promiscuous mode [ 45.896907] chnl_net:caif_netlink_parms(): no params data found [ 45.908331] chnl_net:caif_netlink_parms(): no params data found [ 45.927829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.961492] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.973645] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.033769] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.071627] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.080061] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.087181] device bridge_slave_0 entered promiscuous mode [ 46.096836] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.103161] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.112093] device bridge_slave_1 entered promiscuous mode [ 46.118351] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.124701] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.132921] device bridge_slave_0 entered promiscuous mode [ 46.141877] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.148512] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.155286] device bridge_slave_1 entered promiscuous mode [ 46.161592] chnl_net:caif_netlink_parms(): no params data found [ 46.172354] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.180479] team0: Port device team_slave_0 added [ 46.186695] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.193966] team0: Port device team_slave_1 added [ 46.213793] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.227200] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.237546] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.249347] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.257274] team0: Port device team_slave_0 added [ 46.262261] chnl_net:caif_netlink_parms(): no params data found [ 46.278790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.290573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.300258] team0: Port device team_slave_1 added [ 46.308699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.316823] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.324567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.336132] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.343278] team0: Port device team_slave_0 added [ 46.407340] device hsr_slave_0 entered promiscuous mode [ 46.445776] device hsr_slave_1 entered promiscuous mode [ 46.497062] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.509249] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.517672] team0: Port device team_slave_1 added [ 46.538514] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.558199] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.597042] device hsr_slave_0 entered promiscuous mode [ 46.635637] device hsr_slave_1 entered promiscuous mode [ 46.679710] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.695132] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.701966] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.709516] device bridge_slave_0 entered promiscuous mode [ 46.716514] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.723473] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.730176] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.737300] device bridge_slave_1 entered promiscuous mode [ 46.743510] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.751127] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.758187] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.764922] device bridge_slave_0 entered promiscuous mode [ 46.782015] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.789177] team0: Port device team_slave_0 added [ 46.805256] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.847121] device hsr_slave_0 entered promiscuous mode [ 46.875424] device hsr_slave_1 entered promiscuous mode [ 46.915383] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.921719] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.929897] device bridge_slave_1 entered promiscuous mode [ 46.943841] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.951417] team0: Port device team_slave_1 added [ 46.960150] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.969802] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.983170] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.992120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.005277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.013042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.020669] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.034495] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.046083] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.059056] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.070191] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.078056] team0: Port device team_slave_0 added [ 47.083601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.091531] team0: Port device team_slave_1 added [ 47.156936] device hsr_slave_0 entered promiscuous mode [ 47.205422] device hsr_slave_1 entered promiscuous mode [ 47.255642] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.264091] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.277331] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.291980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.308228] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.316749] team0: Port device team_slave_0 added [ 47.323964] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.357899] device hsr_slave_0 entered promiscuous mode [ 47.395469] device hsr_slave_1 entered promiscuous mode [ 47.449982] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.456673] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.463832] team0: Port device team_slave_1 added [ 47.469409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.485523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.491713] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.499701] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.510726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.534478] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.587048] device hsr_slave_0 entered promiscuous mode [ 47.625421] device hsr_slave_1 entered promiscuous mode [ 47.675661] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.682713] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.693216] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.703464] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.709772] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.719010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.727486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.737306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.745427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.755687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.763894] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.777534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.785780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.792089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.800071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.807959] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.814424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.821443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.829422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.837273] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.843707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.850496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.857516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.865280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.878863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.890848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.902634] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.909138] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.924996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.939552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.953595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.964131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.971860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.980753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.988967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.996715] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.003035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.009837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.018197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.026712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.036665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.045984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.054110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.062205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.070059] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.076451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.083338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.091127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.105811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.112475] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.120786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.133978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.142378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.149957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.157078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.166797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.174160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.182120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.190490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.197609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.205567] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.211708] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.218954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.227091] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.234686] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.245184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.254782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.263661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.271582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.279511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.286701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.293510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.301483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.309041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.316602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.325832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.333721] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.340710] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.353109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.361466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.370162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.378382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.386187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.393650] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.400059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.408271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.418077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.427361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.437219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.444403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.455053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.462324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.470370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.478170] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.484485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.491276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.499280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.506900] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.513225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.521419] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.527795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.539957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.549899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.556986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.564019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.573886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.581604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.590092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.599940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.609057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.619054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.627662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.635959] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.642284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.649380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.661479] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.669121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.678301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.688024] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.694106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.702194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.710117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.719159] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.727090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.737019] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.748517] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.756786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.764198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.772375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.779561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.787534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.795410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.802772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.810618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.818378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.825327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.833247] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.839414] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.850062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.861605] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.868129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.877212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.886189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.895337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.904826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.911651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.919879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.927938] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.934263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.941343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.948946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.957488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.965233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.972014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.979343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.987103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.995443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.002999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.010925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.018541] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.025063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.032986] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.042886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.053719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.078195] ================================================================== [ 49.085656] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x114/0x120 [ 49.086505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.092256] Read of size 8 at addr ffff888085d019a0 by task syz-executor.1/7138 [ 49.092282] [ 49.092289] CPU: 1 PID: 7138 Comm: syz-executor.1 Not tainted 4.19.135-syzkaller #0 [ 49.092293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.092296] Call Trace: [ 49.092306] dump_stack+0x123/0x177 [ 49.121982] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.128324] print_address_description.cold.8+0x9/0x1ff [ 49.128332] kasan_report.cold.9+0x242/0x309 [ 49.128337] ? v4l2_ctrl_grab+0x114/0x120 [ 49.128346] __asan_report_load8_noabort+0x14/0x20 [ 49.128350] v4l2_ctrl_grab+0x114/0x120 [ 49.128358] vicodec_stop_streaming+0xfc/0x130 [ 49.128365] __vb2_queue_cancel+0x99/0x6f0 [ 49.128372] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 49.128376] ? kasan_check_read+0x11/0x20 [ 49.128387] vb2_core_queue_release+0x1e/0x70 [ 49.128394] vb2_queue_release+0x9/0x10 [ 49.128399] v4l2_m2m_ctx_release+0x22/0x30 [ 49.128404] vicodec_release+0xb5/0x120 [ 49.128411] v4l2_release+0xee/0x1a0 [ 49.128418] __fput+0x24c/0x7f0 [ 49.128426] ____fput+0x9/0x10 [ 49.128433] task_work_run+0x10e/0x190 [ 49.128445] exit_to_usermode_loop+0x1a9/0x200 [ 49.128454] do_syscall_64+0x419/0x4e0 [ 49.128464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.128469] RIP: 0033:0x4120b1 [ 49.128475] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 49.128478] RSP: 002b:00007ffe8f6fe450 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 49.128484] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 49.128487] RDX: 0000001b32020000 RSI: 0000000000740490 RDI: 0000000000000003 [ 49.128489] RBP: 000000000073c900 R08: 000000000000bfb7 R09: 000000000000bfb7 [ 49.128492] R10: 00007ffe8f6fe520 R11: 0000000000000293 R12: ffffffffffffffff [ 49.128494] R13: 000000000000bfba R14: 00000000000003e8 R15: 000000000073bf0c [ 49.128507] [ 49.128511] Allocated by task 7139: [ 49.128515] save_stack+0x43/0xd0 [ 49.128519] kasan_kmalloc+0xc7/0xe0 [ 49.128524] __kmalloc_node+0x50/0x70 [ 49.128529] kvmalloc_node+0x68/0x70 [ 49.128533] v4l2_ctrl_new.part.9+0x22a/0x11c0 [ 49.128537] v4l2_ctrl_new_std+0x1c9/0x2d0 [ 49.128540] vicodec_open+0x18d/0xa90 [ 49.128544] v4l2_open+0x17d/0x2d0 [ 49.128549] chrdev_open+0x1f0/0x5c0 [ 49.128553] do_dentry_open+0x3f4/0x1010 [ 49.128557] vfs_open+0x9a/0xc0 [ 49.128561] path_openat+0x6fa/0x3c60 [ 49.128567] do_filp_open+0x177/0x250 [ 49.153854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.154580] do_sys_open+0x1dd/0x350 [ 49.170439] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.172223] __x64_sys_openat+0x98/0xf0 [ 49.185129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.185559] do_syscall_64+0xd6/0x4e0 [ 49.377425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.382599] [ 49.384203] Freed by task 7138: [ 49.387479] save_stack+0x43/0xd0 [ 49.390908] __kasan_slab_free+0x102/0x150 [ 49.395123] kasan_slab_free+0xe/0x10 [ 49.398909] kfree+0xcf/0x230 [ 49.401996] kvfree+0x2c/0x30 [ 49.405077] v4l2_ctrl_handler_free+0x421/0x7e0 [ 49.409727] vicodec_release+0x61/0x120 [ 49.413674] v4l2_release+0xee/0x1a0 [ 49.417364] __fput+0x24c/0x7f0 [ 49.420624] ____fput+0x9/0x10 [ 49.423859] task_work_run+0x10e/0x190 [ 49.427728] exit_to_usermode_loop+0x1a9/0x200 [ 49.432285] do_syscall_64+0x419/0x4e0 [ 49.436156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.441322] [ 49.442925] The buggy address belongs to the object at ffff888085d01980 [ 49.442925] which belongs to the cache kmalloc-256 of size 256 [ 49.455702] The buggy address is located 32 bytes inside of [ 49.455702] 256-byte region [ffff888085d01980, ffff888085d01a80) [ 49.467470] The buggy address belongs to the page: [ 49.472384] page:ffffea0002174040 count:1 mapcount:0 mapping:ffff88812c31e7c0 index:0x0 [ 49.480502] flags: 0x1fffc0000000100(slab) [ 49.484717] raw: 01fffc0000000100 ffffea00026847c8 ffffea0002753208 ffff88812c31e7c0 [ 49.492583] raw: 0000000000000000 ffff888085d010c0 000000010000000c 0000000000000000 [ 49.500446] page dumped because: kasan: bad access detected [ 49.506128] [ 49.507728] Memory state around the buggy address: [ 49.512631] ffff888085d01880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.520015] ffff888085d01900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 49.527348] >ffff888085d01980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.534685] ^ [ 49.539131] ffff888085d01a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.546464] ffff888085d01a80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 49.553795] ================================================================== [ 49.561129] Disabling lock debugging due to kernel taint [ 49.568876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.577265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.579929] Kernel panic - not syncing: panic_on_warn set ... [ 49.579929] [ 49.584034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.591093] CPU: 0 PID: 7138 Comm: syz-executor.1 Tainted: G B 4.19.135-syzkaller #0 [ 49.591096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.591098] Call Trace: [ 49.591108] dump_stack+0x123/0x177 [ 49.591115] panic+0x1cd/0x387 [ 49.591119] ? __warn_printk+0xd6/0xd6 [ 49.591127] ? ___preempt_schedule+0x16/0x18 [ 49.599716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.607482] kasan_end_report+0x47/0x4f [ 49.607487] kasan_report.cold.9+0x76/0x309 [ 49.607492] ? v4l2_ctrl_grab+0x114/0x120 [ 49.607497] __asan_report_load8_noabort+0x14/0x20 [ 49.607502] v4l2_ctrl_grab+0x114/0x120 [ 49.617242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.619413] vicodec_stop_streaming+0xfc/0x130 [ 49.623296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.626323] __vb2_queue_cancel+0x99/0x6f0 [ 49.626328] ? v4l2_m2m_ioctl_expbuf+0xc0/0xc0 [ 49.626332] ? kasan_check_read+0x11/0x20 [ 49.626338] vb2_core_queue_release+0x1e/0x70 [ 49.626345] vb2_queue_release+0x9/0x10 [ 49.703249] v4l2_m2m_ctx_release+0x22/0x30 [ 49.707547] vicodec_release+0xb5/0x120 [ 49.711496] v4l2_release+0xee/0x1a0 [ 49.715189] __fput+0x24c/0x7f0 [ 49.718440] ____fput+0x9/0x10 [ 49.721605] task_work_run+0x10e/0x190 [ 49.725468] exit_to_usermode_loop+0x1a9/0x200 [ 49.730074] do_syscall_64+0x419/0x4e0 [ 49.733988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.739150] RIP: 0033:0x4120b1 [ 49.742316] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 49.761212] RSP: 002b:00007ffe8f6fe450 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 49.768896] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004120b1 [ 49.776139] RDX: 0000001b32020000 RSI: 0000000000740490 RDI: 0000000000000003 [ 49.783384] RBP: 000000000073c900 R08: 000000000000bfb7 R09: 000000000000bfb7 [ 49.790626] R10: 00007ffe8f6fe520 R11: 0000000000000293 R12: ffffffffffffffff [ 49.797870] R13: 000000000000bfba R14: 00000000000003e8 R15: 000000000073bf0c [ 49.806299] Kernel Offset: disabled [ 49.809910] Rebooting in 86400 seconds..