[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 36.061413] audit: type=1400 audit(1588037204.955:8): avc: denied { execmem } for pid=5996 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 36.297264] IPVS: ftp: loaded support on port[0] = 21 [ 37.417425] can: request_module (can-proto-0) failed. [ 37.426601] can: request_module (can-proto-0) failed. [ 37.452179] audit: type=1400 audit(1588037206.345:9): avc: denied { create } for pid=5973 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2020/04/28 01:26:54 parsed 1 programs 2020/04/28 01:26:54 executed programs: 0 [ 45.781183] audit: type=1400 audit(1588037214.678:10): avc: denied { execmem } for pid=6108 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 46.053920] IPVS: ftp: loaded support on port[0] = 21 [ 46.842037] IPVS: ftp: loaded support on port[0] = 21 [ 46.911262] chnl_net:caif_netlink_parms(): no params data found [ 46.954317] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.961673] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.969194] device bridge_slave_0 entered promiscuous mode [ 46.976565] IPVS: ftp: loaded support on port[0] = 21 [ 46.977254] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.988203] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.995569] device bridge_slave_1 entered promiscuous mode [ 47.017185] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.026112] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.051049] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.060602] team0: Port device team_slave_0 added [ 47.091501] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.101317] team0: Port device team_slave_1 added [ 47.108463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.118650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.143891] chnl_net:caif_netlink_parms(): no params data found [ 47.205435] device hsr_slave_0 entered promiscuous mode [ 47.233634] device hsr_slave_1 entered promiscuous mode [ 47.273253] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.292318] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.313940] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.320400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.327684] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.328681] IPVS: ftp: loaded support on port[0] = 21 [ 47.334094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.358350] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.364782] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.371696] device bridge_slave_0 entered promiscuous mode [ 47.380459] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.387387] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.394723] device bridge_slave_1 entered promiscuous mode [ 47.413746] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.426467] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.483032] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.490063] team0: Port device team_slave_0 added [ 47.520691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.528795] team0: Port device team_slave_1 added [ 47.540522] chnl_net:caif_netlink_parms(): no params data found [ 47.556757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.564917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.625197] device hsr_slave_0 entered promiscuous mode [ 47.662969] device hsr_slave_1 entered promiscuous mode [ 47.723843] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.731209] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.740724] IPVS: ftp: loaded support on port[0] = 21 [ 47.776258] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.783111] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.790115] device bridge_slave_0 entered promiscuous mode [ 47.800911] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.808155] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.815743] device bridge_slave_1 entered promiscuous mode [ 47.867076] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.873511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.911923] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.925017] chnl_net:caif_netlink_parms(): no params data found [ 47.940606] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.947005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.953735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.960120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.970645] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.979562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.000957] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.009257] team0: Port device team_slave_0 added [ 48.015842] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.023827] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.030757] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.040176] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.047284] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.058352] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.066410] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.073944] team0: Port device team_slave_1 added [ 48.091411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.100215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.109604] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.116377] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.123792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.138733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.145765] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.153735] device bridge_slave_0 entered promiscuous mode [ 48.160752] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.168608] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.175950] device bridge_slave_1 entered promiscuous mode [ 48.185845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.207280] IPVS: ftp: loaded support on port[0] = 21 [ 48.227816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.236376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.284797] device hsr_slave_0 entered promiscuous mode [ 48.322751] device hsr_slave_1 entered promiscuous mode [ 48.366269] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.380850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.388666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.397323] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.403727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.412023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.424413] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.439242] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.446517] team0: Port device team_slave_0 added [ 48.452693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.460357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.469533] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.475968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.510651] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.521275] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.529665] team0: Port device team_slave_1 added [ 48.540412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.549410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.557954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.599607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.609251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.620067] chnl_net:caif_netlink_parms(): no params data found [ 48.664789] device hsr_slave_0 entered promiscuous mode [ 48.702722] device hsr_slave_1 entered promiscuous mode [ 48.753012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.760818] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.774087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.784908] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.793518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.800254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.810255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.818499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.826136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.833815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.841248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.858260] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.874008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.887377] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.901611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.914194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.924457] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.936217] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.970444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.977826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.985860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.994047] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.000117] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.006693] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.014319] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.021232] device bridge_slave_0 entered promiscuous mode [ 49.028471] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.034963] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.041947] device bridge_slave_1 entered promiscuous mode [ 49.057130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.064750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.073757] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.079768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.124790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.164812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.170943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.179713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.188094] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.194519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.203061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.211472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.228992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.237436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.245788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.256552] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.262953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.269703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.279189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.287132] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.298033] chnl_net:caif_netlink_parms(): no params data found [ 49.310626] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.319159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.335782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.345113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.368896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.381927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.389963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.400201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.408377] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.416401] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.424161] team0: Port device team_slave_0 added [ 49.436917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.443945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.451316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.462061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.471208] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.477966] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.497905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.505689] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.513696] team0: Port device team_slave_1 added [ 49.519060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.527066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.534870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.543128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.552610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.560196] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.568128] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.576349] device bridge_slave_0 entered promiscuous mode [ 49.587189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.594755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.606604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.616355] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.633054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.654727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.668315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.678720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.690947] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.697378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.704569] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.710927] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.718523] device bridge_slave_1 entered promiscuous mode [ 49.725147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.747017] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.756274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.777334] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.787882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.801530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.809691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.818370] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.825149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.878491] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.888327] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.936285] device hsr_slave_0 entered promiscuous mode [ 49.973174] device hsr_slave_1 entered promiscuous mode [ 50.015299] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.031719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.041427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.048973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.064094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.076514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.085821] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.103485] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.109681] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.119465] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.128174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.136794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.160163] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.168756] team0: Port device team_slave_0 added [ 50.176333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.184973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.194598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.202794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.210645] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.217218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.224830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.232895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.240679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.247991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.255651] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.263163] team0: Port device team_slave_1 added [ 50.275238] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.309301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.319009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.327518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.337919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.346402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.358258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.366248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.374733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.382929] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.389284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.407753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.419613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.435926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.446516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.454480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.470586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.480919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.525881] device hsr_slave_0 entered promiscuous mode [ 50.562981] device hsr_slave_1 entered promiscuous mode [ 50.622391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.630142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.637845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.647283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.660909] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.667291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.675161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.682424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.689993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.697947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.706949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.718165] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.728028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.735479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.744145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.752698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.760364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.768422] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.784181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.795176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.803103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.817850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.829417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.837598] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.845083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.855424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.879660] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.889168] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.906448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.918147] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.930014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.938648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.948070] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.956932] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.966862] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.977678] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.990678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.000603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.020007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.029443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.040977] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.048388] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.055831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.064689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 2020/04/28 01:26:59 executed programs: 14 [ 51.079167] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.085615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.103783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.116909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.129404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.144169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.160323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.170490] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.176934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.186526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.199504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.208446] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.214876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.229857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.245343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.260054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.268599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.277511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.286395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.296364] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.302815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.314200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.321757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.345618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.353598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.364248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.378584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.394815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.402823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.410423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.419828] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.435668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.454449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.462458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.470963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.486900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.495449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.504037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.516385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.528698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.537302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.548849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.556715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.564730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.575246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.586249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.594131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.601614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.609455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.617086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.628692] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.637178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.646742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.657521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.665447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.676809] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.683381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.697424] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.705830] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.717182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.727589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.160017] ================================================================== [ 53.167429] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 53.174090] Read of size 8 at addr ffff8880a72cf820 by task kworker/u4:0/5 [ 53.181116] [ 53.182766] CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.177-syzkaller #0 [ 53.190394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.199747] Workqueue: tipc_rcv tipc_recv_work [ 53.204325] Call Trace: [ 53.206911] dump_stack+0xf7/0x13b [ 53.210454] ? __lock_acquire+0x32f9/0x4500 [ 53.214863] print_address_description.cold.7+0x9/0x1c9 [ 53.220228] ? __lock_acquire+0x32f9/0x4500 [ 53.224558] kasan_report.cold.8+0x11a/0x2d3 [ 53.228962] __asan_report_load8_noabort+0x14/0x20 [ 53.233893] __lock_acquire+0x32f9/0x4500 [ 53.238038] ? __lock_acquire+0x6a4/0x4500 [ 53.242272] ? preempt_schedule+0x4d/0x60 [ 53.246417] ? preempt_schedule_common+0x1f/0xe0 [ 53.251174] ? release_sock+0x122/0x180 [ 53.255166] ? trace_hardirqs_on+0x10/0x10 [ 53.259408] ? trace_hardirqs_off+0x10/0x10 [ 53.263746] ? trace_hardirqs_off+0x10/0x10 [ 53.268088] ? _raw_spin_unlock_bh+0x30/0x40 [ 53.272499] ? release_sock+0x122/0x180 [ 53.276469] ? __lock_is_held+0xb5/0x140 [ 53.280529] lock_acquire+0x173/0x400 [ 53.284333] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.289263] _raw_spin_lock_bh+0x31/0x40 [ 53.293344] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.297949] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.302357] tipc_receive_from_sock+0x290/0x570 [ 53.307022] ? tipc_send_work+0x5e0/0x5e0 [ 53.311172] ? lock_downgrade+0x7f0/0x7f0 [ 53.315490] ? tipc_send_work+0xb1/0x5e0 [ 53.319577] ? trace_hardirqs_off+0x10/0x10 [ 53.323921] ? __lock_is_held+0xb5/0x140 [ 53.328003] tipc_recv_work+0x78/0xd0 [ 53.331800] process_one_work+0x7a3/0x16c0 [ 53.336034] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 53.340695] worker_thread+0xcc/0xee0 [ 53.344486] kthread+0x33b/0x410 [ 53.347840] ? process_one_work+0x16c0/0x16c0 [ 53.352359] ? kthread_create_on_node+0xa0/0xa0 [ 53.357055] ret_from_fork+0x3a/0x50 [ 53.360758] [ 53.362368] Allocated by task 7068: [ 53.366012] save_stack_trace+0x16/0x20 [ 53.369980] save_stack+0x43/0xd0 [ 53.373500] kasan_kmalloc+0xc7/0xe0 [ 53.377240] kmem_cache_alloc_trace+0x152/0x7b0 [ 53.381912] tipc_subscrb_connect_cb+0x44/0x140 [ 53.386583] tipc_accept_from_sock+0x29e/0x4c0 [ 53.391160] tipc_recv_work+0x78/0xd0 [ 53.394985] process_one_work+0x7a3/0x16c0 [ 53.399237] worker_thread+0xcc/0xee0 [ 53.403028] kthread+0x33b/0x410 [ 53.406420] ret_from_fork+0x3a/0x50 [ 53.410119] [ 53.411736] Freed by task 7068: [ 53.415003] save_stack_trace+0x16/0x20 [ 53.418969] save_stack+0x43/0xd0 [ 53.422411] kasan_slab_free+0x71/0xc0 [ 53.426285] kfree+0xcc/0x270 [ 53.429387] tipc_subscrb_put+0x19/0x20 [ 53.433453] tipc_subscrb_release_cb+0x1a/0x20 [ 53.438037] tipc_close_conn+0x15d/0x1f0 [ 53.442085] tipc_send_work+0x462/0x5e0 [ 53.446049] process_one_work+0x7a3/0x16c0 [ 53.450271] worker_thread+0xcc/0xee0 [ 53.454060] kthread+0x33b/0x410 [ 53.457417] ret_from_fork+0x3a/0x50 [ 53.461120] [ 53.462734] The buggy address belongs to the object at ffff8880a72cf800 [ 53.462734] which belongs to the cache kmalloc-96 of size 96 [ 53.475381] The buggy address is located 32 bytes inside of [ 53.475381] 96-byte region [ffff8880a72cf800, ffff8880a72cf860) [ 53.487097] The buggy address belongs to the page: [ 53.492096] page:ffffea00029cb3c0 count:1 mapcount:0 mapping:ffff8880a72cf000 index:0x0 [ 53.500312] flags: 0x1fffc0000000100(slab) [ 53.504531] raw: 01fffc0000000100 ffff8880a72cf000 0000000000000000 0000000100000020 [ 53.512392] raw: ffffea00027e5260 ffffea00027e1860 ffff8880aa8004c0 0000000000000000 [ 53.520243] page dumped because: kasan: bad access detected [ 53.525932] [ 53.527542] Memory state around the buggy address: [ 53.532452] ffff8880a72cf700: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 53.539802] ffff8880a72cf780: 00 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc [ 53.547143] >ffff8880a72cf800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 53.554588] ^ [ 53.559026] ffff8880a72cf880: 00 00 00 00 00 00 00 00 05 fc fc fc fc fc fc fc [ 53.566357] ffff8880a72cf900: 00 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc [ 53.573697] ================================================================== [ 53.581038] Disabling lock debugging due to kernel taint [ 53.586485] Kernel panic - not syncing: panic_on_warn set ... [ 53.586485] [ 53.593822] CPU: 1 PID: 5 Comm: kworker/u4:0 Tainted: G B 4.14.177-syzkaller #0 [ 53.602371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.611719] Workqueue: tipc_rcv tipc_recv_work [ 53.616274] Call Trace: [ 53.618835] dump_stack+0xf7/0x13b [ 53.622346] ? __lock_acquire+0x32f9/0x4500 [ 53.626652] panic+0x1b0/0x36a [ 53.629825] ? add_taint.cold.5+0x11/0x11 [ 53.633958] ? lock_downgrade+0x7f0/0x7f0 [ 53.639565] ? __lock_acquire+0x32f9/0x4500 [ 53.643872] kasan_end_report+0x47/0x4f [ 53.647912] kasan_report.cold.8+0x76/0x2d3 [ 53.652236] __asan_report_load8_noabort+0x14/0x20 [ 53.657155] __lock_acquire+0x32f9/0x4500 [ 53.661421] ? __lock_acquire+0x6a4/0x4500 [ 53.665656] ? preempt_schedule+0x4d/0x60 [ 53.669797] ? preempt_schedule_common+0x1f/0xe0 [ 53.674541] ? release_sock+0x122/0x180 [ 53.678760] ? trace_hardirqs_on+0x10/0x10 [ 53.682968] ? trace_hardirqs_off+0x10/0x10 [ 53.687271] ? trace_hardirqs_off+0x10/0x10 [ 53.691587] ? _raw_spin_unlock_bh+0x30/0x40 [ 53.695977] ? release_sock+0x122/0x180 [ 53.699934] ? __lock_is_held+0xb5/0x140 [ 53.703988] lock_acquire+0x173/0x400 [ 53.707772] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.712325] _raw_spin_lock_bh+0x31/0x40 [ 53.716368] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.720926] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.725324] tipc_receive_from_sock+0x290/0x570 [ 53.729975] ? tipc_send_work+0x5e0/0x5e0 [ 53.734096] ? lock_downgrade+0x7f0/0x7f0 [ 53.738214] ? tipc_send_work+0xb1/0x5e0 [ 53.742250] ? trace_hardirqs_off+0x10/0x10 [ 53.746561] ? __lock_is_held+0xb5/0x140 [ 53.750592] tipc_recv_work+0x78/0xd0 [ 53.754378] process_one_work+0x7a3/0x16c0 [ 53.758590] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 53.763234] worker_thread+0xcc/0xee0 [ 53.767020] kthread+0x33b/0x410 [ 53.770385] ? process_one_work+0x16c0/0x16c0 [ 53.774860] ? kthread_create_on_node+0xa0/0xa0 [ 53.779525] ret_from_fork+0x3a/0x50 [ 53.784615] Kernel Offset: disabled [ 53.788244] Rebooting in 86400 seconds..