[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 31.849017] audit: type=1400 audit(1591168340.546:8): avc: denied { execmem } for pid=6255 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 31.864167] IPVS: ftp: loaded support on port[0] = 21 [ 32.309003] can: request_module (can-proto-0) failed. [ 33.342129] can: request_module (can-proto-0) failed. [ 33.370040] audit: type=1400 audit(1591168342.068:9): avc: denied { create } for pid=6234 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. 2020/06/03 07:12:30 parsed 1 programs 2020/06/03 07:12:31 executed programs: 0 [ 42.580575] audit: type=1400 audit(1591168351.284:10): avc: denied { execmem } for pid=6375 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.660530] IPVS: ftp: loaded support on port[0] = 21 [ 42.665286] IPVS: ftp: loaded support on port[0] = 21 [ 42.686047] IPVS: ftp: loaded support on port[0] = 21 [ 42.721786] IPVS: ftp: loaded support on port[0] = 21 [ 42.741570] IPVS: ftp: loaded support on port[0] = 21 [ 42.795166] IPVS: ftp: loaded support on port[0] = 21 [ 42.985260] chnl_net:caif_netlink_parms(): no params data found [ 42.995558] chnl_net:caif_netlink_parms(): no params data found [ 43.070370] chnl_net:caif_netlink_parms(): no params data found [ 43.106393] chnl_net:caif_netlink_parms(): no params data found [ 43.185085] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.192220] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.200458] device bridge_slave_0 entered promiscuous mode [ 43.228171] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.235360] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.245769] device bridge_slave_0 entered promiscuous mode [ 43.255695] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.262897] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.270833] device bridge_slave_1 entered promiscuous mode [ 43.282780] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.289783] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.297302] device bridge_slave_1 entered promiscuous mode [ 43.382477] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.393282] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.402340] device bridge_slave_0 entered promiscuous mode [ 43.416531] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.424351] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.433574] device bridge_slave_0 entered promiscuous mode [ 43.443314] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.454806] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.467102] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.476119] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.485378] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.494196] device bridge_slave_1 entered promiscuous mode [ 43.514847] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.522704] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.531724] device bridge_slave_1 entered promiscuous mode [ 43.555299] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.574009] chnl_net:caif_netlink_parms(): no params data found [ 43.585606] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.594519] chnl_net:caif_netlink_parms(): no params data found [ 43.606333] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.621098] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.630211] team0: Port device team_slave_0 added [ 43.636244] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.645259] team0: Port device team_slave_0 added [ 43.655273] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.669276] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.684110] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.694113] team0: Port device team_slave_1 added [ 43.700082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.707739] team0: Port device team_slave_1 added [ 43.713703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.742460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.751777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.784849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.794709] team0: Port device team_slave_0 added [ 43.801863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.816507] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.825096] team0: Port device team_slave_0 added [ 43.841248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.852784] team0: Port device team_slave_1 added [ 43.921001] device hsr_slave_0 entered promiscuous mode [ 43.938825] device hsr_slave_1 entered promiscuous mode [ 43.979104] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.987151] team0: Port device team_slave_1 added [ 43.999320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.012167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.061206] device hsr_slave_0 entered promiscuous mode [ 44.118741] device hsr_slave_1 entered promiscuous mode [ 44.159573] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.166491] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.177331] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.186767] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.194661] device bridge_slave_0 entered promiscuous mode [ 44.202433] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.209336] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.216559] device bridge_slave_1 entered promiscuous mode [ 44.223206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.238311] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.245514] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.254519] device bridge_slave_0 entered promiscuous mode [ 44.264009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.277543] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.287778] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.312313] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.319972] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.329958] device bridge_slave_1 entered promiscuous mode [ 44.350366] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.410809] device hsr_slave_0 entered promiscuous mode [ 44.448457] device hsr_slave_1 entered promiscuous mode [ 44.488858] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.497130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.507334] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.570020] device hsr_slave_0 entered promiscuous mode [ 44.618519] device hsr_slave_1 entered promiscuous mode [ 44.683393] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.691624] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.700547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.714997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.722370] team0: Port device team_slave_0 added [ 44.729234] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.737089] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.745141] team0: Port device team_slave_1 added [ 44.754159] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.767430] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.775665] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.783741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.792468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.804284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.871210] device hsr_slave_0 entered promiscuous mode [ 44.908422] device hsr_slave_1 entered promiscuous mode [ 44.965021] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.975205] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.987336] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.995062] team0: Port device team_slave_0 added [ 45.003972] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.011960] team0: Port device team_slave_1 added [ 45.026410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.040545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.054420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.071814] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.079957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.130209] device hsr_slave_0 entered promiscuous mode [ 45.168263] device hsr_slave_1 entered promiscuous mode [ 45.228430] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.239134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.247151] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.253508] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.260596] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.277789] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.287309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.295731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.305261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.322333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.329912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.341056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.348849] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.355337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.366167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.377974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.385810] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.392932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.400151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.408255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.416067] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.423128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.432320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.442044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.451898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.460213] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.466563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.474909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.482310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.491153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.504863] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.513819] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.523494] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.530646] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.537327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.545964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.552960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.561743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.577306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.585806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.594009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.602936] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.609706] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.618204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.627391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.635539] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.644501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.654632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.663492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.671741] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.678254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.685115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.692985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.700671] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.707049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.713987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.721222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.728291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.736188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.744104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.752375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.763308] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.770077] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.778603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.786355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.795063] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.801698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.810593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.819048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.827857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.841708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.850144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.857204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.866586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.875053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.883292] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.889720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.896723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.904539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.912534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.920561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.928490] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.935145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.952055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.959977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.972335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.981713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.991142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.999268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.007172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.016271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.024374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.032898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.041585] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.048087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.054867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.062482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.070118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.078400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.087332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.095086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.112332] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.118760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.127304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.137047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.149379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.156816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.166342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.174507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.183203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.190894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.201809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.212799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.223289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.231524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.239688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.247589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.255112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.265936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.274616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.286176] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.295732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.303338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.311112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.318870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.326724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.334668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.344527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.355442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.365518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.375293] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.383100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.390920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.399202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.407177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.414998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.423312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.431350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.441299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.449478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.461261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.472548] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.479105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.488340] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.494560] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.502054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.510528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.519781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.534258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.542825] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.552741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.561663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.570460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.578723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.586162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.597151] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.607993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.615918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.636012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.645108] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.660972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.679035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.687012] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.702845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.710417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.718318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.726049] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.732475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.740975] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.749345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.759751] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.765873] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.772310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.779940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.786907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.794800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.802627] audit: type=1400 audit(1591168355.495:11): avc: denied { write } for pid=7276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 46.824559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.834251] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.840727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.851797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.866251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.875007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.884876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.895034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.903561] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.909994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.920822] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.936532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.945556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.955608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.966179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.979856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.994373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.002430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.025305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.036412] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.043457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.053115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.062333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.074285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.082246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.090870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.098849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.110350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.123467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.136036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.144413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.154838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.167998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.175535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.185651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.193704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.207573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.215172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.228091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.236082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.244479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.252733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.263091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.273851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.282609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.291451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.300286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.309037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.318863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.329581] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.336419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.345481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.353863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.374080] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.380692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.404618] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.415452] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.430933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.441702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.484124] ================================================================== [ 47.491526] BUG: KASAN: use-after-free in __lock_acquire+0x3426/0x4980 [ 47.498188] Read of size 8 at addr ffff88809538a1e0 by task syz-executor.2/7282 [ 47.505731] [ 47.507361] CPU: 0 PID: 7282 Comm: syz-executor.2 Not tainted 4.19.126-syzkaller #0 [ 47.515141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.524498] Call Trace: [ 47.527084] dump_stack+0x123/0x177 [ 47.530742] print_address_description.cold.8+0x9/0x1ff [ 47.536112] kasan_report.cold.9+0x242/0x309 [ 47.540527] ? __lock_acquire+0x3426/0x4980 [ 47.544913] __asan_report_load8_noabort+0x14/0x20 [ 47.550009] __lock_acquire+0x3426/0x4980 [ 47.554140] ? find_held_lock+0x36/0x1d0 [ 47.558293] ? mark_held_locks+0x130/0x130 [ 47.562593] ? finish_task_switch+0x14a/0x720 [ 47.567106] ? _raw_spin_unlock_irq+0x27/0x80 [ 47.571594] ? finish_task_switch+0x14a/0x720 [ 47.576072] ? lockdep_hardirqs_on+0x421/0x5c0 [ 47.580966] ? _raw_spin_unlock_irq+0x27/0x80 [ 47.585565] ? trace_hardirqs_on+0x28/0x190 [ 47.589889] ? _raw_spin_unlock_irq+0x60/0x80 [ 47.594374] ? finish_task_switch+0x14a/0x720 [ 47.599414] ? finish_task_switch+0x11c/0x720 [ 47.604032] lock_acquire+0x173/0x3d0 [ 47.607846] ? lock_sock_nested+0x3a/0x100 [ 47.612076] _raw_spin_lock_bh+0x31/0x40 [ 47.616211] ? lock_sock_nested+0x3a/0x100 [ 47.620467] lock_sock_nested+0x3a/0x100 [ 47.624664] nr_accept+0x4d7/0x690 [ 47.628369] ? nr_ioctl+0x2e0/0x2e0 [ 47.632872] ? finish_wait+0x290/0x290 [ 47.636751] __sys_accept4+0x32b/0x6b0 [ 47.640726] ? __ia32_sys_listen+0x70/0x70 [ 47.644945] ? kasan_check_read+0x11/0x20 [ 47.649095] ? _copy_to_user+0x91/0xb0 [ 47.653666] ? put_timespec64+0xa9/0x100 [ 47.657857] ? nsecs_to_jiffies+0x20/0x20 [ 47.662007] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 47.666757] ? do_syscall_64+0x21/0x4e0 [ 47.670920] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.676296] __x64_sys_accept+0x70/0xb0 [ 47.680546] do_syscall_64+0xd0/0x4e0 [ 47.684356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.689563] RIP: 0033:0x459829 [ 47.692745] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 47.712135] RSP: 002b:00007f184c2e9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 47.719838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 47.727324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 47.734584] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 47.741934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f184c2ea6d4 [ 47.749201] R13: 00000000004bf6e9 R14: 00000000004d0f80 R15: 00000000ffffffff [ 47.757365] [ 47.758982] Allocated by task 7273: [ 47.762737] save_stack+0x43/0xd0 [ 47.766181] kasan_kmalloc+0xc7/0xe0 [ 47.769891] __kmalloc+0x15b/0x770 [ 47.774077] sk_prot_alloc+0x148/0x240 [ 47.778117] sk_alloc+0x30/0xc60 [ 47.781481] nr_create+0x7e/0x5a0 [ 47.785816] __sock_create+0x262/0x540 [ 47.789689] __sys_socket+0xd7/0x1d0 [ 47.793397] __x64_sys_socket+0x6e/0xb0 [ 47.797528] do_syscall_64+0xd0/0x4e0 [ 47.801430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.806600] [ 47.808631] Freed by task 7272: [ 47.812040] save_stack+0x43/0xd0 [ 47.815488] __kasan_slab_free+0x102/0x150 [ 47.820057] kasan_slab_free+0xe/0x10 [ 47.823966] kfree+0xcf/0x220 [ 47.827080] __sk_destruct+0x3b0/0x540 [ 47.830970] sk_destruct+0x83/0xb0 2020/06/03 07:12:36 executed programs: 7 [ 47.834508] __sk_free+0x9e/0x230 [ 47.838090] sk_free+0x23/0x30 [ 47.841283] nr_release+0x2d6/0x360 [ 47.844904] __sock_release+0xc2/0x290 [ 47.848787] sock_close+0x10/0x20 [ 47.852238] __fput+0x249/0x7f0 [ 47.855514] ____fput+0x9/0x10 [ 47.858701] task_work_run+0x108/0x180 [ 47.862589] exit_to_usermode_loop+0x1a9/0x200 [ 47.867167] do_syscall_64+0x413/0x4e0 [ 47.871055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.876244] [ 47.877865] The buggy address belongs to the object at ffff88809538a140 [ 47.877865] which belongs to the cache kmalloc-2048 of size 2048 [ 47.890796] The buggy address is located 160 bytes inside of [ 47.890796] 2048-byte region [ffff88809538a140, ffff88809538a940) [ 47.902862] The buggy address belongs to the page: [ 47.907782] page:ffffea000254e280 count:1 mapcount:0 mapping:ffff88812c31ec40 index:0x0 compound_mapcount: 0 [ 47.917843] flags: 0x1fffc0000008100(slab|head) [ 47.922508] raw: 01fffc0000008100 ffffea000257c788 ffffea0002575b88 ffff88812c31ec40 [ 47.930388] raw: 0000000000000000 ffff88809538a140 0000000100000003 0000000000000000 [ 47.938271] page dumped because: kasan: bad access detected [ 47.943979] [ 47.945594] Memory state around the buggy address: [ 47.950512] ffff88809538a080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.958214] ffff88809538a100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 47.965640] >ffff88809538a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.972986] ^ [ 47.979503] ffff88809538a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.986852] ffff88809538a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.994204] ================================================================== [ 48.001595] Disabling lock debugging due to kernel taint [ 48.007843] Kernel panic - not syncing: panic_on_warn set ... [ 48.007843] [ 48.015222] CPU: 0 PID: 7282 Comm: syz-executor.2 Tainted: G B 4.19.126-syzkaller #0 [ 48.024402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.033747] Call Trace: [ 48.036318] dump_stack+0x123/0x177 [ 48.039936] panic+0x1cd/0x375 [ 48.043107] ? __warn_printk+0xd6/0xd6 [ 48.046984] ? lock_downgrade+0x860/0x860 [ 48.051299] ? _raw_spin_unlock_irqrestore+0x63/0xd0 [ 48.056509] kasan_end_report+0x47/0x4f [ 48.060477] kasan_report.cold.9+0x76/0x309 [ 48.064806] ? __lock_acquire+0x3426/0x4980 [ 48.069132] __asan_report_load8_noabort+0x14/0x20 [ 48.074061] __lock_acquire+0x3426/0x4980 [ 48.078212] ? find_held_lock+0x36/0x1d0 [ 48.082287] ? mark_held_locks+0x130/0x130 [ 48.086620] ? finish_task_switch+0x14a/0x720 [ 48.091112] ? _raw_spin_unlock_irq+0x27/0x80 [ 48.095686] ? finish_task_switch+0x14a/0x720 [ 48.100273] ? lockdep_hardirqs_on+0x421/0x5c0 [ 48.105115] ? _raw_spin_unlock_irq+0x27/0x80 [ 48.109598] ? trace_hardirqs_on+0x28/0x190 [ 48.113927] ? _raw_spin_unlock_irq+0x60/0x80 [ 48.118424] ? finish_task_switch+0x14a/0x720 [ 48.122981] ? finish_task_switch+0x11c/0x720 [ 48.127504] lock_acquire+0x173/0x3d0 [ 48.131310] ? lock_sock_nested+0x3a/0x100 [ 48.135529] _raw_spin_lock_bh+0x31/0x40 [ 48.140012] ? lock_sock_nested+0x3a/0x100 [ 48.144227] lock_sock_nested+0x3a/0x100 [ 48.148275] nr_accept+0x4d7/0x690 [ 48.151793] ? nr_ioctl+0x2e0/0x2e0 [ 48.155395] ? finish_wait+0x290/0x290 [ 48.159261] __sys_accept4+0x32b/0x6b0 [ 48.163406] ? __ia32_sys_listen+0x70/0x70 [ 48.167644] ? kasan_check_read+0x11/0x20 [ 48.171872] ? _copy_to_user+0x91/0xb0 [ 48.175811] ? put_timespec64+0xa9/0x100 [ 48.179867] ? nsecs_to_jiffies+0x20/0x20 [ 48.183993] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.188729] ? do_syscall_64+0x21/0x4e0 [ 48.192791] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.198145] __x64_sys_accept+0x70/0xb0 [ 48.202123] do_syscall_64+0xd0/0x4e0 [ 48.205917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.211085] RIP: 0033:0x459829 [ 48.214390] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.233278] RSP: 002b:00007f184c2e9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 48.240976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 48.248338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 48.255640] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 48.262920] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f184c2ea6d4 [ 48.270182] R13: 00000000004bf6e9 R14: 00000000004d0f80 R15: 00000000ffffffff [ 48.278529] Kernel Offset: disabled [ 48.282358] Rebooting in 86400 seconds..