Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts. 2021/01/17 22:35:42 parsed 1 programs 2021/01/17 22:35:42 executed programs: 0 [ *] A start job is running for dev-ttyS0.device (25s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (26s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (26s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (27s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (27s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (28s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (28s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (29s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (29s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (30s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (30s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (31s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (31s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (32s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (32s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (33s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (33s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (34s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (34s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (35s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (35s / 1min 30s)[ 42.400170][ T22] audit: type=1400 audit(1610922942.187:8): avc: denied { execmem } for pid=371 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.428061][ T376] cgroup1: Unknown subsys name 'perf_event' [ 42.430799][ T379] cgroup1: Unknown subsys name 'perf_event' [ 42.443596][ T379] cgroup1: Unknown subsys name 'net_cls' [ 42.446699][ T377] cgroup1: Unknown subsys name 'perf_event' [* ] A start job is running for dev-ttyS0.device (36s / 1min [ 42.473327][ T376] cgroup1: Unknown subsys name 'net_cls' 30s)[ 42.475822][ T377] cgroup1: Unknown subsys name 'net_cls' [ 42.475979][ T382] cgroup1: Unknown subsys name 'perf_event' [ 42.494558][ T383] cgroup1: Unknown subsys name 'perf_event' [ 42.495972][ T382] cgroup1: Unknown subsys name 'net_cls' [ 42.507861][ T384] cgroup1: Unknown subsys name 'perf_event' [ 42.510430][ T383] cgroup1: Unknown subsys name 'net_cls' [ 42.516573][ T384] cgroup1: Unknown subsys name 'net_cls' [ 42.652612][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.659653][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.667514][ T379] device bridge_slave_0 entered promiscuous mode [ 42.676362][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.683757][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.691377][ T379] device bridge_slave_1 entered promiscuous mode [ 42.727325][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.734620][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.742432][ T377] device bridge_slave_0 entered promiscuous mode [ 42.752697][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.759721][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.767622][ T377] device bridge_slave_1 entered promiscuous mode [ 42.825803][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.832975][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.840779][ T376] device bridge_slave_0 entered promiscuous mode [ 42.847726][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.855396][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.863117][ T376] device bridge_slave_1 entered promiscuous mode [ 42.900748][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.907782][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.915583][ T383] device bridge_slave_0 entered promiscuous mode [ 42.922860][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.929883][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.937773][ T383] device bridge_slave_1 entered promiscuous mode [** ] A start job is running for dev-ttyS0.device (36s / 1min 30s)[ 42.966542][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.973771][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.981674][ T382] device bridge_slave_0 entered promiscuous mode [ 43.011701][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.018750][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.026535][ T382] device bridge_slave_1 entered promiscuous mode [ 43.119269][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.126514][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.134504][ T384] device bridge_slave_0 entered promiscuous mode [ 43.145115][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.152664][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.160281][ T384] device bridge_slave_1 entered promiscuous mode [ 43.179854][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.186912][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.194203][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.201241][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.252555][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.259589][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.266896][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.273943][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.340423][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.347470][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.354783][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.361917][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.388480][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.396008][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.404268][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.411997][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.419141][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.426964][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.434583][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [*** ] A start job is running for dev-ttyS0.device (37s / 1min 30s)[ 43.461942][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.469517][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.477730][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.484766][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.492468][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.500716][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.507721][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.560428][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.568663][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.575714][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.585096][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.593346][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.600392][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.607899][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.616467][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.624439][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.632552][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.650621][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.658608][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.666924][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.675453][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.691034][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.698532][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.706587][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.715100][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.723522][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.730598][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.738078][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.760194][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.767687][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.800769][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.809171][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.817516][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.824577][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.832096][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.839467][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.847549][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.855992][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.864225][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.871258][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.878642][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.886765][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.895595][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.903831][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.910928][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.918217][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.929878][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.938164][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.946728][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.954664][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ *** ] A start job is running for dev-ttyS0.device (37s / 1min 3[ 43.970440][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 0s)[ 43.979632][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.011411][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.020578][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.029012][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.038559][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.047391][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.054444][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.062106][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.070722][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.078875][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.086053][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.093679][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.101864][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.109270][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.117696][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.126720][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.133797][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.141247][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.149523][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.158092][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.165154][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.172691][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.180837][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.189146][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.197969][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.205924][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.230194][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.238348][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.247847][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.255925][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.264958][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.291704][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.300589][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.308978][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.317213][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.325766][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.334452][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.342743][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.351243][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.370268][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.390373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.398718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.408239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.417195][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.426799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.435425][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ *[0;1[ 44.447607][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready ;31m*[ 44.457814][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready * ] A start job is running for dev-ttyS0.device (38s / 1min 30s)[ 44.486550][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.495026][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.504777][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.514419][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.534087][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.543325][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.571859][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.605268][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.614208][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.623302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.632281][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.641319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.650476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.659015][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.668591][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.702148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.711337][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.721073][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.730191][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.738804][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.747577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.756276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.764919][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.791981][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.801912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.811115][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.819715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2021/01/17 22:35:47 executed programs: 102 [ ***] A start job is running for dev-ttyS0.device (38s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (39s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (39s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (40s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (40s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (41s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (41s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (42s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (42s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (43s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (43s / 1min 30s)[ 50.260527][ T1727] ================================================================== [ 50.268649][ T1727] BUG: KASAN: use-after-free in try_to_del_timer_sync+0x3ee/0x480 [ 50.276459][ T1727] Write of size 8 at addr ffff8881ed0831c8 by task syz-executor.2/1727 [ 50.284685][ T1727] [ 50.286998][ T1727] CPU: 1 PID: 1727 Comm: syz-executor.2 Not tainted 5.4.89-syzkaller-00264-gdc04463953b2 #0 [ 50.297043][ T1727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.307085][ T1727] Call Trace: [ 50.310478][ T1727] dump_stack+0x1dd/0x24e [ 50.314802][ T1727] ? show_regs_print_info+0x12/0x12 [ 50.319998][ T1727] ? printk+0xcf/0x114 [ 50.324056][ T1727] print_address_description+0x96/0x640 [ 50.329590][ T1727] ? devkmsg_release+0x11c/0x11c [ 50.334523][ T1727] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 50.339990][ T1727] __kasan_report+0x177/0x1f0 [ 50.344651][ T1727] ? try_to_del_timer_sync+0x3ee/0x480 [ 50.350091][ T1727] kasan_report+0x30/0x60 [ 50.354403][ T1727] try_to_del_timer_sync+0x3ee/0x480 [ 50.359667][ T1727] del_timer_sync+0x74/0xe0 [ 50.364153][ T1727] tun_free_netdev+0x99/0x3a0 [ 50.368830][ T1727] ? find_next_bit+0xd8/0x120 [ 50.373492][ T1727] ? tun_xdp+0x3d0/0x3d0 [ 50.377729][ T1727] netdev_run_todo+0xbe3/0xe90 [ 50.382495][ T1727] ? netdev_refcnt_read+0x1a0/0x1a0 [ 50.387674][ T1727] ? kfree+0x12c/0x660 [ 50.391722][ T1727] ? refcount_inc_checked+0x50/0x50 [ 50.396900][ T1727] ? netdev_state_change+0xa2/0x210 [ 50.402083][ T1727] ? netdev_features_change+0x140/0x140 [ 50.407610][ T1727] ? __module_put_and_exit+0x20/0x20 [ 50.412878][ T1727] ? __sk_destruct+0x3e8/0x470 [ 50.417638][ T1727] ? __sk_free+0x325/0x410 [ 50.422034][ T1727] tun_chr_close+0xc0/0xd0 [ 50.426427][ T1727] ? tun_chr_open+0x4a0/0x4a0 [ 50.431087][ T1727] __fput+0x27d/0x6c0 [ 50.435051][ T1727] task_work_run+0x176/0x1a0 [ 50.439622][ T1727] prepare_exit_to_usermode+0x2b0/0x310 [ 50.445163][ T1727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 50.451035][ T1727] RIP: 0033:0x417b71 [ 50.454929][ T1727] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 50.474612][ T1727] RSP: 002b:00007fff513720c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 50.483008][ T1727] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000417b71 [ 50.490963][ T1727] RDX: 0000001b33220000 RSI: 0000000000000001 RDI: 0000000000000003 [ 50.498918][ T1727] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 50.506878][ T1727] R10: 00007fff513721a0 R11: 0000000000000293 R12: ffffffffffffffff [ 50.514839][ T1727] R13: 000000000000c4f4 R14: 00000000000003e8 R15: 000000000119bf8c [ 50.522824][ T1727] [ 50.525146][ T1727] The buggy address belongs to the page: [ 50.530761][ T1727] page:ffffea0007b420c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 50.539848][ T1727] flags: 0x8000000000000000() [ 50.544506][ T1727] raw: 8000000000000000 0000000000000000 ffffea0007a74c48 0000000000000000 [ 50.553074][ T1727] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 50.561633][ T1727] page dumped because: kasan: bad access detected [ 50.568017][ T1727] [ 50.570318][ T1727] Memory state around the buggy address: [ 50.575934][ T1727] ffff8881ed083080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.583988][ T1727] ffff8881ed083100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.592052][ T1727] >ffff8881ed083180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.600111][ T1727] ^ [ 50.606514][ T1727] ffff8881ed083200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.614556][ T1727] ffff8881ed083280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.622594][ T1727] ================================================================== [ 50.630628][ T1727] Disabling lock debugging due to kernel taint [ 50.636752][ T1727] Kernel panic - not syncing: panic_on_warn set ... [ 50.643320][ T1727] CPU: 1 PID: 1727 Comm: syz-executor.2 Tainted: G B 5.4.89-syzkaller-00264-gdc04463953b2 #0 [ 50.654760][ T1727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.664794][ T1727] Call Trace: [ 50.668069][ T1727] dump_stack+0x1dd/0x24e [ 50.672377][ T1727] ? devkmsg_release+0x11c/0x11c [ 50.677293][ T1727] ? show_regs_print_info+0x12/0x12 [ 50.682466][ T1727] panic+0x285/0x750 [ 50.686356][ T1727] ? add_taint+0x3e/0x90 [ 50.690593][ T1727] ? nmi_panic+0x90/0x90 [ 50.694819][ T1727] __kasan_report+0x1e8/0x1f0 [ 50.699475][ T1727] ? try_to_del_timer_sync+0x3ee/0x480 [ 50.704927][ T1727] kasan_report+0x30/0x60 [ 50.709235][ T1727] try_to_del_timer_sync+0x3ee/0x480 [ 50.714498][ T1727] del_timer_sync+0x74/0xe0 [ 50.718982][ T1727] tun_free_netdev+0x99/0x3a0 [ 50.723639][ T1727] ? find_next_bit+0xd8/0x120 [ 50.728312][ T1727] ? tun_xdp+0x3d0/0x3d0 [ 50.732536][ T1727] netdev_run_todo+0xbe3/0xe90 [ 50.737276][ T1727] ? netdev_refcnt_read+0x1a0/0x1a0 [ 50.742471][ T1727] ? kfree+0x12c/0x660 [ 50.746516][ T1727] ? refcount_inc_checked+0x50/0x50 [ 50.751689][ T1727] ? netdev_state_change+0xa2/0x210 [ 50.756863][ T1727] ? netdev_features_change+0x140/0x140 [ 50.762385][ T1727] ? __module_put_and_exit+0x20/0x20 [ 50.767647][ T1727] ? __sk_destruct+0x3e8/0x470 [ 50.772385][ T1727] ? __sk_free+0x325/0x410 [ 50.776777][ T1727] tun_chr_close+0xc0/0xd0 [ 50.781185][ T1727] ? tun_chr_open+0x4a0/0x4a0 [ 50.785837][ T1727] __fput+0x27d/0x6c0 [ 50.789819][ T1727] task_work_run+0x176/0x1a0 [ 50.794390][ T1727] prepare_exit_to_usermode+0x2b0/0x310 [ 50.799915][ T1727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 50.805796][ T1727] RIP: 0033:0x417b71 [ 50.809670][ T1727] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 50.829259][ T1727] RSP: 002b:00007fff513720c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 50.837653][ T1727] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000417b71 [ 50.845600][ T1727] RDX: 0000001b33220000 RSI: 0000000000000001 RDI: 0000000000000003 [ 50.853557][ T1727] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 50.861510][ T1727] R10: 00007fff513721a0 R11: 0000000000000293 R12: ffffffffffffffff [ 50.869458][ T1727] R13: 000000000000c4f4 R14: 00000000000003e8 R15: 000000000119bf8c [ 50.878046][ T1727] Kernel Offset: disabled [ 50.882354][ T1727] Rebooting in 86400 seconds..