[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 30.717636] audit: type=1400 audit(1588077153.233:8): avc: denied { execmem } for pid=5973 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 30.989433] IPVS: ftp: loaded support on port[0] = 21 [ 32.202191] can: request_module (can-proto-0) failed. [ 32.211027] can: request_module (can-proto-0) failed. [ 32.238502] audit: type=1400 audit(1588077154.765:9): avc: denied { create } for pid=5951 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.198' (ECDSA) to the list of known hosts. 2020/04/28 12:32:43 parsed 1 programs 2020/04/28 12:32:43 executed programs: 0 [ 40.735375] audit: type=1400 audit(1588077163.271:10): avc: denied { execmem } for pid=6090 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.032169] IPVS: ftp: loaded support on port[0] = 21 [ 41.799672] IPVS: ftp: loaded support on port[0] = 21 [ 41.865304] chnl_net:caif_netlink_parms(): no params data found [ 41.895801] IPVS: ftp: loaded support on port[0] = 21 [ 41.968885] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.975763] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.985298] device bridge_slave_0 entered promiscuous mode [ 41.995473] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.001920] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.008724] device bridge_slave_1 entered promiscuous mode [ 42.032784] chnl_net:caif_netlink_parms(): no params data found [ 42.042396] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.063567] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.085137] IPVS: ftp: loaded support on port[0] = 21 [ 42.108375] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.115009] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.122996] device bridge_slave_0 entered promiscuous mode [ 42.134955] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.141578] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.148509] device bridge_slave_1 entered promiscuous mode [ 42.165711] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.173195] team0: Port device team_slave_0 added [ 42.192139] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.200529] team0: Port device team_slave_1 added [ 42.208066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.216753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.227396] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.236983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.277046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.285327] team0: Port device team_slave_0 added [ 42.333545] device hsr_slave_0 entered promiscuous mode [ 42.381462] device hsr_slave_1 entered promiscuous mode [ 42.425198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.434769] team0: Port device team_slave_1 added [ 42.441640] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.449418] IPVS: ftp: loaded support on port[0] = 21 [ 42.488320] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.495772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.515158] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.533118] chnl_net:caif_netlink_parms(): no params data found [ 42.614242] device hsr_slave_0 entered promiscuous mode [ 42.650941] device hsr_slave_1 entered promiscuous mode [ 42.683321] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.696625] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.703793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.711276] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.718059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.758033] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.783756] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.792183] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.799053] device bridge_slave_0 entered promiscuous mode [ 42.806577] chnl_net:caif_netlink_parms(): no params data found [ 42.825332] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.832874] IPVS: ftp: loaded support on port[0] = 21 [ 42.833595] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.846122] device bridge_slave_1 entered promiscuous mode [ 42.862004] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.868374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.875088] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.881512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.918618] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.927314] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.936444] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.943822] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.958523] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.006488] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.058992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.074824] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.081767] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.088576] device bridge_slave_0 entered promiscuous mode [ 43.115449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.124961] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.132761] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.139108] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.148546] device bridge_slave_1 entered promiscuous mode [ 43.169797] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.178481] team0: Port device team_slave_0 added [ 43.184970] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.192458] team0: Port device team_slave_1 added [ 43.198747] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.205672] chnl_net:caif_netlink_parms(): no params data found [ 43.217500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.226982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.240155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.247652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.256479] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.263926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.271878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.285132] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.292939] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.329635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.339025] team0: Port device team_slave_0 added [ 43.346361] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.382564] device hsr_slave_0 entered promiscuous mode [ 43.440477] device hsr_slave_1 entered promiscuous mode [ 43.480976] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.489765] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.498124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.505275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.512857] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.519878] team0: Port device team_slave_1 added [ 43.525959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.534285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.587606] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.601802] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.607909] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.615715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.623968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.632846] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.639204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.648110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.678231] chnl_net:caif_netlink_parms(): no params data found [ 43.691537] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.697907] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.705535] device bridge_slave_0 entered promiscuous mode [ 43.718556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.729023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.737105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.745056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.752755] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.759250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.766429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.775460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.783128] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.789475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.796431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.804217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.811926] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.818261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.826732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.838156] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.844620] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.851517] device bridge_slave_1 entered promiscuous mode [ 43.892216] device hsr_slave_0 entered promiscuous mode [ 43.930230] device hsr_slave_1 entered promiscuous mode [ 43.970597] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.977648] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.989092] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.996314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.006198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.019304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.027918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.035895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.056155] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.067317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.076225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.085612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.098622] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.105269] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.112798] device bridge_slave_0 entered promiscuous mode [ 44.122248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.130509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.138398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.146289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.154129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.161876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.169339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.176249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.188610] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.195778] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.202908] device bridge_slave_1 entered promiscuous mode [ 44.219288] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.231480] team0: Port device team_slave_0 added [ 44.237210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.244872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.263192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.274725] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.286311] team0: Port device team_slave_1 added [ 44.292374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.302676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.310367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.317876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.328125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.336839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.345183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.356910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.364640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.372399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.380108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.388475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.403009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.414031] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.424081] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.438333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.446706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.458572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.468516] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.475264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.506779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.513824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.524194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.537610] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.545720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.602070] device hsr_slave_0 entered promiscuous mode [ 44.639943] device hsr_slave_1 entered promiscuous mode [ 44.680148] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.687882] team0: Port device team_slave_0 added [ 44.694140] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.703129] team0: Port device team_slave_1 added [ 44.709290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.718377] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.732465] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.739101] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.747120] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.755984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.768917] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.789431] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.823275] device hsr_slave_0 entered promiscuous mode [ 44.860100] device hsr_slave_1 entered promiscuous mode [ 44.911838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.920224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.930478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.941410] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.948833] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.959614] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.972627] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.983315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.995229] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.007402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.026531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.045221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.058596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.066784] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.073295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.081338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.090355] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.105385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.115324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.125001] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.134048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.142376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.151352] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.157757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.165018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.172167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.181767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.200928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.210034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.216132] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.224235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.238937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.252218] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.265591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.291637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.308573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.333366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.363058] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.369483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.404697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.427645] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.436753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.447504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.471565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.509919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.516988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.546794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.570291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.580237] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.586385] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.598336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.619722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.627533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.636975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.645374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.653737] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.660193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.669724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.686768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.697306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.704714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.712828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.720610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.729089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.737136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.744163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.751916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.764061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.772819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.782676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.790760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.798435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.806242] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.814073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.823795] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.833959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.842271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.851731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.858818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.867402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.875930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.884329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.894970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.905419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.914123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.922007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.929715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.937471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.945990] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.953139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.965577] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.973321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.982307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.994157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.001492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.011327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.020591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.032467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.041606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.051832] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.058898] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.067211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.077983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.088277] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.096877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.104627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.114369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.122879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.131026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.139544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.148233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.156544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.167106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.176131] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.183067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.196437] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.204914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.216688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.225384] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.233299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.244302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.266433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.282245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.294415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.304793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.313594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.325686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.336209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.346699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.355720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.368471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.376946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.385698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.394527] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.402519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.410762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.421490] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.439291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.448128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 2020/04/28 12:32:49 executed programs: 15 [ 46.460439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.476761] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.485307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.501828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.510113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.520684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.539220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.547248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.562443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.575245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.583987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.595332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.603897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.612998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.621575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.630978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.658234] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.682376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.765101] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.816937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.337642] ================================================================== [ 48.345150] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 48.351906] Read of size 8 at addr ffff888097955e20 by task kworker/u4:3/595 [ 48.359253] [ 48.361175] CPU: 0 PID: 595 Comm: kworker/u4:3 Not tainted 4.14.177-syzkaller #0 [ 48.368696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.378051] Workqueue: tipc_rcv tipc_recv_work [ 48.382633] Call Trace: [ 48.385220] dump_stack+0xf7/0x13b [ 48.388759] ? __lock_acquire+0x32f9/0x4500 [ 48.393079] print_address_description.cold.7+0x9/0x1c9 [ 48.398528] ? __lock_acquire+0x32f9/0x4500 [ 48.402845] kasan_report.cold.8+0x11a/0x2d3 [ 48.407251] __asan_report_load8_noabort+0x14/0x20 [ 48.412192] __lock_acquire+0x32f9/0x4500 [ 48.416344] ? __lock_acquire+0x6a4/0x4500 [ 48.420583] ? preempt_schedule+0x4d/0x60 [ 48.424994] ? preempt_schedule_common+0x1f/0xe0 [ 48.429754] ? release_sock+0x122/0x180 [ 48.433729] ? trace_hardirqs_on+0x10/0x10 [ 48.437967] ? trace_hardirqs_off+0x10/0x10 [ 48.442404] ? trace_hardirqs_off+0x10/0x10 [ 48.446726] ? _raw_spin_unlock_bh+0x30/0x40 [ 48.451155] ? release_sock+0x122/0x180 [ 48.455127] ? __lock_is_held+0xb5/0x140 [ 48.459216] lock_acquire+0x173/0x400 [ 48.463020] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 48.467697] _raw_spin_lock_bh+0x31/0x40 [ 48.471788] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 48.476890] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 48.481303] tipc_receive_from_sock+0x290/0x570 [ 48.485973] ? tipc_send_work+0x5e0/0x5e0 [ 48.490210] ? trace_hardirqs_off+0x10/0x10 [ 48.494967] ? __lock_is_held+0xb5/0x140 [ 48.499112] tipc_recv_work+0x78/0xd0 [ 48.503095] process_one_work+0x7a3/0x16c0 [ 48.507940] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 48.512610] worker_thread+0xcc/0xee0 [ 48.516418] kthread+0x33b/0x410 [ 48.519794] ? process_one_work+0x16c0/0x16c0 [ 48.524329] ? kthread_create_on_node+0xa0/0xa0 [ 48.529037] ret_from_fork+0x3a/0x50 [ 48.532746] [ 48.534373] Allocated by task 595: [ 48.538001] save_stack_trace+0x16/0x20 [ 48.542158] save_stack+0x43/0xd0 [ 48.546507] kasan_kmalloc+0xc7/0xe0 [ 48.550320] kmem_cache_alloc_trace+0x152/0x7b0 [ 48.555258] tipc_subscrb_connect_cb+0x44/0x140 [ 48.560014] tipc_accept_from_sock+0x29e/0x4c0 [ 48.564907] tipc_recv_work+0x78/0xd0 [ 48.568716] process_one_work+0x7a3/0x16c0 [ 48.573589] worker_thread+0xcc/0xee0 [ 48.577399] kthread+0x33b/0x410 [ 48.581078] ret_from_fork+0x3a/0x50 [ 48.584817] [ 48.586703] Freed by task 22: [ 48.589822] save_stack_trace+0x16/0x20 [ 48.593837] save_stack+0x43/0xd0 [ 48.597313] kasan_slab_free+0x71/0xc0 [ 48.601202] kfree+0xcc/0x270 [ 48.604478] tipc_subscrb_put+0x19/0x20 [ 48.608481] tipc_subscrb_release_cb+0x1a/0x20 [ 48.613796] tipc_close_conn+0x15d/0x1f0 [ 48.617894] tipc_send_work+0x462/0x5e0 [ 48.622042] process_one_work+0x7a3/0x16c0 [ 48.626319] worker_thread+0xcc/0xee0 [ 48.630157] kthread+0x33b/0x410 [ 48.633530] ret_from_fork+0x3a/0x50 [ 48.637244] [ 48.638864] The buggy address belongs to the object at ffff888097955e00 [ 48.638864] which belongs to the cache kmalloc-96 of size 96 [ 48.652368] The buggy address is located 32 bytes inside of [ 48.652368] 96-byte region [ffff888097955e00, ffff888097955e60) [ 48.668684] The buggy address belongs to the page: [ 48.676644] page:ffffea00025e5540 count:1 mapcount:0 mapping:ffff888097955000 index:0x0 [ 48.688287] flags: 0x1fffc0000000100(slab) [ 48.693592] raw: 01fffc0000000100 ffff888097955000 0000000000000000 0000000100000020 [ 48.702692] raw: ffffea00025f3ce0 ffffea00025e56a0 ffff8880aa8004c0 0000000000000000 [ 48.711036] page dumped because: kasan: bad access detected [ 48.716744] [ 48.718369] Memory state around the buggy address: [ 48.723642] ffff888097955d00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 48.731372] ffff888097955d80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 48.741936] >ffff888097955e00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 48.749979] ^ [ 48.755002] ffff888097955e80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 48.762823] ffff888097955f00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 48.770370] ================================================================== [ 48.777857] Disabling lock debugging due to kernel taint [ 48.783314] Kernel panic - not syncing: panic_on_warn set ... [ 48.783314] [ 48.790877] CPU: 0 PID: 595 Comm: kworker/u4:3 Tainted: G B 4.14.177-syzkaller #0 [ 48.800056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.809427] Workqueue: tipc_rcv tipc_recv_work [ 48.814218] Call Trace: [ 48.816907] dump_stack+0xf7/0x13b [ 48.820538] ? __lock_acquire+0x32f9/0x4500 [ 48.825208] panic+0x1b0/0x36a [ 48.828406] ? add_taint.cold.5+0x11/0x11 [ 48.832706] ? lock_downgrade+0x7f0/0x7f0 [ 48.836895] ? __lock_acquire+0x32f9/0x4500 [ 48.841225] kasan_end_report+0x47/0x4f [ 48.845245] kasan_report.cold.8+0x76/0x2d3 [ 48.849586] __asan_report_load8_noabort+0x14/0x20 [ 48.854678] __lock_acquire+0x32f9/0x4500 [ 48.859115] ? __lock_acquire+0x6a4/0x4500 [ 48.863346] ? preempt_schedule+0x4d/0x60 [ 48.867585] ? preempt_schedule_common+0x1f/0xe0 [ 48.872437] ? release_sock+0x122/0x180 [ 48.876704] ? trace_hardirqs_on+0x10/0x10 [ 48.881133] ? trace_hardirqs_off+0x10/0x10 [ 48.885987] ? trace_hardirqs_off+0x10/0x10 [ 48.890470] ? _raw_spin_unlock_bh+0x30/0x40 [ 48.894940] ? release_sock+0x122/0x180 [ 48.899347] ? __lock_is_held+0xb5/0x140 [ 48.903428] lock_acquire+0x173/0x400 [ 48.907297] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 48.911862] _raw_spin_lock_bh+0x31/0x40 [ 48.915907] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 48.920465] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 48.924859] tipc_receive_from_sock+0x290/0x570 [ 48.929504] ? tipc_send_work+0x5e0/0x5e0 [ 48.933761] ? trace_hardirqs_off+0x10/0x10 [ 48.938158] ? __lock_is_held+0xb5/0x140 [ 48.942211] tipc_recv_work+0x78/0xd0 [ 48.946001] process_one_work+0x7a3/0x16c0 [ 48.950576] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 48.955229] worker_thread+0xcc/0xee0 [ 48.959387] kthread+0x33b/0x410 [ 48.963275] ? process_one_work+0x16c0/0x16c0 [ 48.968507] ? kthread_create_on_node+0xa0/0xa0 [ 48.973351] ret_from_fork+0x3a/0x50 [ 48.978998] Kernel Offset: disabled [ 48.982639] Rebooting in 86400 seconds..