[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 33.728164] audit: type=1400 audit(1590630584.606:8): avc: denied { execmem } for pid=6002 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 34.015373] IPVS: ftp: loaded support on port[0] = 21 [ 35.206978] can: request_module (can-proto-0) failed. [ 35.216672] can: request_module (can-proto-0) failed. [ 35.248271] audit: type=1400 audit(1590630586.127:9): avc: denied { create } for pid=5981 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. 2020/05/28 01:49:54 parsed 1 programs 2020/05/28 01:49:54 executed programs: 0 [ 43.855848] audit: type=1400 audit(1590630594.732:10): avc: denied { execmem } for pid=6113 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 44.109664] IPVS: ftp: loaded support on port[0] = 21 [ 44.868848] IPVS: ftp: loaded support on port[0] = 21 [ 44.939097] chnl_net:caif_netlink_parms(): no params data found [ 44.968909] IPVS: ftp: loaded support on port[0] = 21 [ 44.994559] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.002512] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.010773] device bridge_slave_0 entered promiscuous mode [ 45.034230] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.040897] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.047980] device bridge_slave_1 entered promiscuous mode [ 45.082168] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.082733] IPVS: ftp: loaded support on port[0] = 21 [ 45.142636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.154905] chnl_net:caif_netlink_parms(): no params data found [ 45.205405] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.214128] team0: Port device team_slave_0 added [ 45.220069] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.227560] team0: Port device team_slave_1 added [ 45.267989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.287381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.323342] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.332387] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.343016] device bridge_slave_0 entered promiscuous mode [ 45.350191] chnl_net:caif_netlink_parms(): no params data found [ 45.369786] IPVS: ftp: loaded support on port[0] = 21 [ 45.375597] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.384406] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.391331] device bridge_slave_1 entered promiscuous mode [ 45.431021] device hsr_slave_0 entered promiscuous mode [ 45.468593] device hsr_slave_1 entered promiscuous mode [ 45.508912] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.534347] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.584776] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.591864] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.600066] device bridge_slave_0 entered promiscuous mode [ 45.611838] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.622523] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.630123] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.639309] device bridge_slave_1 entered promiscuous mode [ 45.657285] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.690216] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.717572] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.743580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.744221] IPVS: ftp: loaded support on port[0] = 21 [ 45.752011] team0: Port device team_slave_0 added [ 45.763788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.772635] team0: Port device team_slave_1 added [ 45.779159] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.787242] team0: Port device team_slave_0 added [ 45.833275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.849616] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.857194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.864763] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.874306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.884175] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.892634] team0: Port device team_slave_1 added [ 45.929444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.954068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.964242] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.976994] chnl_net:caif_netlink_parms(): no params data found [ 46.031254] device hsr_slave_0 entered promiscuous mode [ 46.078743] device hsr_slave_1 entered promiscuous mode [ 46.129184] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.137097] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.205826] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.214707] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.281303] device hsr_slave_0 entered promiscuous mode [ 46.328363] device hsr_slave_1 entered promiscuous mode [ 46.411806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.419126] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.427635] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.437219] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.451339] device bridge_slave_0 entered promiscuous mode [ 46.471094] chnl_net:caif_netlink_parms(): no params data found [ 46.486018] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.495199] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.504628] device bridge_slave_1 entered promiscuous mode [ 46.529621] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.553535] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.617049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.625962] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.636471] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.646969] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.701993] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.726723] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.735042] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.746437] device bridge_slave_0 entered promiscuous mode [ 46.756997] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.765117] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.774708] device bridge_slave_1 entered promiscuous mode [ 46.781879] chnl_net:caif_netlink_parms(): no params data found [ 46.796702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.805519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.820987] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.830133] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.847123] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.856660] team0: Port device team_slave_0 added [ 46.863918] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.873731] team0: Port device team_slave_1 added [ 46.900761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.911173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.925321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.939844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.951812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.963871] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.973061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.984433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.012522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.025002] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.070644] device hsr_slave_0 entered promiscuous mode [ 47.128096] device hsr_slave_1 entered promiscuous mode [ 47.168529] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.178163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.190684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.203730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.215554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.260906] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.270657] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.286796] team0: Port device team_slave_0 added [ 47.296601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.305249] team0: Port device team_slave_1 added [ 47.313529] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.322951] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.332435] device bridge_slave_0 entered promiscuous mode [ 47.343480] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.352451] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.362281] device bridge_slave_1 entered promiscuous mode [ 47.373574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.391410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.411401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.424974] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.441296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.465996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.479250] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.499589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.521692] device hsr_slave_0 entered promiscuous mode [ 47.568187] device hsr_slave_1 entered promiscuous mode [ 47.609882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.621124] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.641377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.652638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.668777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.679150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.686441] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.697154] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.708883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.729884] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.744872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.759575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.771955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.791020] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.802008] team0: Port device team_slave_0 added [ 47.812194] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.821990] team0: Port device team_slave_1 added [ 47.834113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.845809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.857033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.870539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.881608] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.892505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.908920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.920864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.930388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.942011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.953021] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.960442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.975319] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.983958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.000465] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.007217] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.019022] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.030539] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.039738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.047220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.068538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.076412] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.089938] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.096139] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.103214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.115178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.123255] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.130685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.144778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.201560] device hsr_slave_0 entered promiscuous mode [ 48.257716] device hsr_slave_1 entered promiscuous mode [ 48.298129] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.318418] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.326910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.341851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.351092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.359044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.370235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.379546] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.393420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.410282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.421842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.433054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.445245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.457485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.471160] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.478906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.492727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.505072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.513795] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.522597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.531910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.542740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.552546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.563429] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.571849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.583187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.590799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.599710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.624308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.635301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.647291] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.654026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.662024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.670309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.679191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.686742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.694903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.706244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.719122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.730338] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.736868] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.771523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.791414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.805238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.813944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.826443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.838364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.851526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.862364] 8021q: adding VLAN 0 to HW filter on device bond0 2020/05/28 01:49:59 executed programs: 9 [ 48.871475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.880728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.901463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.921168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.936545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.958056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.992106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.000121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.012187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.022694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.035103] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.041581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.054977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.065979] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.076383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.085967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.094511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.102869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.111349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.122180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.132154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.140820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.151534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.162375] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.169416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.180120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.191387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.201279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.210366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.224415] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.234473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.256392] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.266706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.279514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.288483] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.298631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.308031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.318971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.330119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.344385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.356220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.369877] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.379723] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.391839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.408781] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.421796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.432079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.448921] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.457890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.468827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.476589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.486227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.497347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.512267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.534457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.545170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.556768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.569693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.586612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.603047] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.615671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.628680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.640936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.654303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.671800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.685374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.696150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.712908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.723902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.734639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.746515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.756650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.767873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.778170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.788585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.802449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.813738] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.822684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.837270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.846499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.859764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.874549] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.884480] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.895504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.905321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.916043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.929581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.946406] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.960753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.974504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.989905] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.000469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.022706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.035475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.076273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.094326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.113609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.147485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.156763] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.164947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.173606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.188034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.201740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.214430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.223429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.237757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.249119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.269822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.284891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.297890] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.307819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.324028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.334418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.348546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.359112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.369494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.384287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.394705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.406270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.416373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.431842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.448834] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.478731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.498917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.509173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.521133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.533288] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.541696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.565670] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.581350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.663072] ================================================================== [ 52.683743] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 52.700058] Read of size 8 at addr ffff8880a0c7d620 by task kworker/u4:0/5 [ 52.712484] [ 52.716181] CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.182-syzkaller #0 [ 52.731360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.756802] Workqueue: tipc_rcv tipc_recv_work [ 52.763561] Call Trace: [ 52.766985] dump_stack+0xf7/0x13b [ 52.773230] ? __lock_acquire+0x32f9/0x4500 [ 52.780373] print_address_description.cold.7+0x9/0x1c9 [ 52.789988] ? __lock_acquire+0x32f9/0x4500 [ 52.796999] kasan_report.cold.8+0x11a/0x2d3 [ 52.803615] __asan_report_load8_noabort+0x14/0x20 [ 52.812393] __lock_acquire+0x32f9/0x4500 [ 52.820375] ? __lock_acquire+0x6a4/0x4500 [ 52.827515] ? preempt_schedule+0x4d/0x60 [ 52.835127] ? preempt_schedule_common+0x1f/0xe0 [ 52.841361] ? release_sock+0x122/0x180 [ 52.846265] ? trace_hardirqs_on+0x10/0x10 [ 52.851498] ? trace_hardirqs_off+0x10/0x10 [ 52.856782] ? trace_hardirqs_off+0x10/0x10 [ 52.863433] ? _raw_spin_unlock_bh+0x30/0x40 [ 52.869574] ? release_sock+0x122/0x180 [ 52.875973] ? __lock_is_held+0xb5/0x140 [ 52.882504] lock_acquire+0x173/0x400 [ 52.889080] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 52.895803] _raw_spin_lock_bh+0x31/0x40 [ 52.901171] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 52.907420] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 52.913804] tipc_receive_from_sock+0x290/0x570 [ 52.919443] ? tipc_send_work+0x5e0/0x5e0 [ 52.924489] ? trace_hardirqs_off+0x10/0x10 [ 52.929895] ? __lock_is_held+0xb5/0x140 [ 52.935168] tipc_recv_work+0x78/0xd0 [ 52.940053] process_one_work+0x7a3/0x16c0 [ 52.948068] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 52.955622] worker_thread+0xcc/0xee0 [ 52.960042] kthread+0x33b/0x410 [ 52.964810] ? process_one_work+0x16c0/0x16c0 [ 52.971680] ? kthread_create_on_node+0xa0/0xa0 [ 52.976855] ret_from_fork+0x3a/0x50 [ 52.981832] [ 52.984043] Allocated by task 216: [ 52.989210] save_stack_trace+0x16/0x20 [ 52.993808] save_stack+0x43/0xd0 [ 52.997642] kasan_kmalloc+0xc7/0xe0 [ 53.003529] kmem_cache_alloc_trace+0x152/0x7b0 [ 53.010759] tipc_subscrb_connect_cb+0x44/0x140 [ 53.016153] tipc_accept_from_sock+0x29e/0x4c0 [ 53.022190] tipc_recv_work+0x78/0xd0 [ 53.026583] process_one_work+0x7a3/0x16c0 [ 53.032382] worker_thread+0xcc/0xee0 [ 53.036631] kthread+0x33b/0x410 [ 53.040368] ret_from_fork+0x3a/0x50 [ 53.044481] [ 53.046324] Freed by task 580: [ 53.050615] save_stack_trace+0x16/0x20 [ 53.056253] save_stack+0x43/0xd0 [ 53.062268] kasan_slab_free+0x71/0xc0 [ 53.066950] kfree+0xcc/0x270 [ 53.070072] tipc_subscrb_put+0x19/0x20 [ 53.075409] tipc_subscrb_release_cb+0x1a/0x20 [ 53.081596] tipc_close_conn+0x15e/0x1f0 [ 53.086919] tipc_send_work+0x462/0x5e0 [ 53.091619] process_one_work+0x7a3/0x16c0 [ 53.096413] worker_thread+0xcc/0xee0 [ 53.101527] kthread+0x33b/0x410 [ 53.110962] ret_from_fork+0x3a/0x50 [ 53.115988] [ 53.119705] The buggy address belongs to the object at ffff8880a0c7d600 [ 53.119705] which belongs to the cache kmalloc-96 of size 96 [ 53.138500] The buggy address is located 32 bytes inside of [ 53.138500] 96-byte region [ffff8880a0c7d600, ffff8880a0c7d660) [ 53.157858] The buggy address belongs to the page: [ 53.164335] page:ffffea0002831f40 count:1 mapcount:0 mapping:ffff8880a0c7d000 index:0x0 [ 53.173983] flags: 0x1fffc0000000100(slab) [ 53.178867] raw: 01fffc0000000100 ffff8880a0c7d000 0000000000000000 0000000100000020 [ 53.188832] raw: ffffea0002617e20 ffffea00026072a0 ffff8880aa8004c0 0000000000000000 [ 53.197293] page dumped because: kasan: bad access detected [ 53.203877] [ 53.205620] Memory state around the buggy address: [ 53.211815] ffff8880a0c7d500: 00 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc [ 53.219929] ffff8880a0c7d580: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 53.228409] >ffff8880a0c7d600: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 53.238238] ^ [ 53.243620] ffff8880a0c7d680: 00 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc [ 53.252293] ffff8880a0c7d700: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 53.261465] ================================================================== [ 53.270070] Disabling lock debugging due to kernel taint [ 53.276530] Kernel panic - not syncing: panic_on_warn set ... [ 53.276530] [ 53.285180] CPU: 1 PID: 5 Comm: kworker/u4:0 Tainted: G B 4.14.182-syzkaller #0 [ 53.295174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.306337] Workqueue: tipc_rcv tipc_recv_work [ 53.311823] Call Trace: [ 53.315393] dump_stack+0xf7/0x13b [ 53.319297] ? __lock_acquire+0x32f9/0x4500 [ 53.325678] panic+0x1b0/0x36a [ 53.329921] ? add_taint.cold.5+0x11/0x11 [ 53.335368] ? lock_downgrade+0x7f0/0x7f0 [ 53.341163] ? __lock_acquire+0x32f9/0x4500 [ 53.346758] kasan_end_report+0x47/0x4f [ 53.352481] kasan_report.cold.8+0x76/0x2d3 [ 53.358074] __asan_report_load8_noabort+0x14/0x20 [ 53.364593] __lock_acquire+0x32f9/0x4500 [ 53.370184] ? __lock_acquire+0x6a4/0x4500 [ 53.377038] ? preempt_schedule+0x4d/0x60 [ 53.382153] ? preempt_schedule_common+0x1f/0xe0 [ 53.388204] ? release_sock+0x122/0x180 [ 53.392747] ? trace_hardirqs_on+0x10/0x10 [ 53.398376] ? trace_hardirqs_off+0x10/0x10 [ 53.403225] ? trace_hardirqs_off+0x10/0x10 [ 53.410441] ? _raw_spin_unlock_bh+0x30/0x40 [ 53.415637] ? release_sock+0x122/0x180 [ 53.421164] ? __lock_is_held+0xb5/0x140 [ 53.425520] lock_acquire+0x173/0x400 [ 53.429723] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.435111] _raw_spin_lock_bh+0x31/0x40 [ 53.441429] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.448332] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 53.457108] tipc_receive_from_sock+0x290/0x570 [ 53.462266] ? tipc_send_work+0x5e0/0x5e0 [ 53.468386] ? trace_hardirqs_off+0x10/0x10 [ 53.474486] ? __lock_is_held+0xb5/0x140 [ 53.481651] tipc_recv_work+0x78/0xd0 [ 53.485738] process_one_work+0x7a3/0x16c0 [ 53.492263] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 53.498915] worker_thread+0xcc/0xee0 [ 53.503757] kthread+0x33b/0x410 [ 53.507984] ? process_one_work+0x16c0/0x16c0 [ 53.515128] ? kthread_create_on_node+0xa0/0xa0 [ 53.523521] ret_from_fork+0x3a/0x50 [ 53.530676] Kernel Offset: disabled [ 53.537521] Rebooting in 86400 seconds..