[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts. 2020/08/05 06:34:43 parsed 1 programs 2020/08/05 06:34:43 executed programs: 0 syzkaller login: [ 1047.871197] audit: type=1400 audit(1596609283.784:8): avc: denied { execmem } for pid=6547 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 1047.915865] IPVS: ftp: loaded support on port[0] = 21 [ 1048.000557] chnl_net:caif_netlink_parms(): no params data found [ 1048.114900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.121673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.130081] device bridge_slave_0 entered promiscuous mode [ 1048.137310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.144066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.151911] device bridge_slave_1 entered promiscuous mode [ 1048.170056] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1048.179347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1048.198662] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1048.206143] team0: Port device team_slave_0 added [ 1048.212235] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1048.234373] team0: Port device team_slave_1 added [ 1048.250634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.256879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.282190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.293738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.300104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.325413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.336562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1048.344335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1048.411317] device hsr_slave_0 entered promiscuous mode [ 1048.448709] device hsr_slave_1 entered promiscuous mode [ 1048.489179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1048.496336] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1048.565910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.572374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.579421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.585808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.622185] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1048.628256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.637845] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1048.647754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.667277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.674657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.682717] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1048.693211] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1048.699891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.709089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1048.718126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.724711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.735112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1048.743114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.749523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.766215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1048.774111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1048.784772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1048.795033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1048.805803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1048.815246] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1048.822410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1048.836576] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1048.845013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1048.851933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1048.863471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.876191] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1048.886563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1048.923577] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1048.931099] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1048.937748] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1048.949096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1048.956817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1048.964299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1048.973828] device veth0_vlan entered promiscuous mode [ 1048.983916] device veth1_vlan entered promiscuous mode [ 1048.991132] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1048.997973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1049.015472] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1049.024719] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1049.032180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1049.040777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1049.050534] device veth0_macvtap entered promiscuous mode [ 1049.056791] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1049.068901] device veth1_macvtap entered promiscuous mode [ 1049.075009] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1049.085738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1049.096652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1049.108800] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1049.120355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.127252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1049.134909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1049.142487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1049.150784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.161714] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1049.168826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.175403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1049.186019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2020/08/05 06:34:47 result: hanged=false err=executor 0: exit status 67 setns(netns) failed (errno 22) child failed (errno 0) loop exited with status 67 setns(netns) failed (errno 22) child failed (errno 0) loop exited with status 67 [ 1051.930841] IPVS: ftp: loaded support on port[0] = 21 [ 1052.184401] chnl_net:caif_netlink_parms(): no params data found [ 1052.317541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.323985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.331829] device bridge_slave_0 entered promiscuous mode [ 1052.422283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.433278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.441059] device bridge_slave_1 entered promiscuous mode [ 1052.544411] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1052.554014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1052.573510] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1052.580850] team0: Port device team_slave_0 added [ 1052.588997] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1052.596335] team0: Port device team_slave_1 added [ 1052.613324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.619777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.646410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.745509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.751864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.779161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.790553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1052.882736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1052.942594] device hsr_slave_0 entered promiscuous mode [ 1052.978813] device hsr_slave_1 entered promiscuous mode [ 1053.129609] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1053.136754] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1053.374255] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1053.404958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.411939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.421300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.428022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.438238] device bridge_slave_1 left promiscuous mode [ 1053.444152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.502401] device bridge_slave_0 left promiscuous mode [ 1053.507883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.555246] device veth1_macvtap left promiscuous mode [ 1053.560953] device veth0_macvtap left promiscuous mode [ 1053.566288] device veth1_vlan left promiscuous mode [ 1053.571779] device veth0_vlan left promiscuous mode [ 1057.561407] device hsr_slave_1 left promiscuous mode [ 1057.621452] device hsr_slave_0 left promiscuous mode [ 1057.666428] team0 (unregistering): Port device team_slave_1 removed [ 1057.675609] team0 (unregistering): Port device team_slave_0 removed [ 1057.685796] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1057.731564] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1057.807564] bond0 (unregistering): Released all slaves [ 1057.857365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.866692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1057.876280] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1057.884004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1057.895185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1057.906111] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1057.912402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.920965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1057.927946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1057.936135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1057.944024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.950549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.959586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1057.967981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1057.976403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1057.985247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1057.993879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.001248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.010264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1058.020013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1058.032480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1058.040052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1058.052931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1058.060424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1058.070443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1058.078173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1058.088108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1058.096063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1058.104496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1058.116640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1058.124894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1058.132847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1058.183393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1058.190238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1058.201748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1058.212160] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1058.218189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1058.239340] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1058.247566] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1058.255367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1058.265976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1058.280042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.338202] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1058.351352] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1058.360930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1058.371003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1058.429058] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1058.436411] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1058.447767] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1058.462000] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1058.468722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1058.477586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1058.491427] device veth0_vlan entered promiscuous mode [ 1058.500524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1058.507643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1058.520273] device veth1_vlan entered promiscuous mode [ 1058.526499] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1058.541738] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1058.558016] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1058.571517] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1058.579684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1058.587654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1058.595922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1058.605645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1058.616477] device veth0_macvtap entered promiscuous mode [ 1058.625045] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1058.636693] device veth1_macvtap entered promiscuous mode [ 1058.644445] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1058.654918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1058.668222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1058.681314] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1058.688307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.697077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1058.706351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1058.714227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1058.725046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1058.736387] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1058.745013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.752697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1058.762943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2020/08/05 06:34:55 executed programs: 38 [ 1062.039412] Bluetooth: hci0: command 0x0409 tx timeout [ 1064.119224] Bluetooth: hci0: command 0x041b tx timeout 2020/08/05 06:35:01 result: hanged=false err=executor 0: exit status 67 setns(netns) failed (errno 22) child failed (errno 0) loop exited with status 67 setns(netns) failed (errno 22) child failed (errno 0) loop exited with status 67 2020/08/05 06:35:01 executed programs: 111 [ 1065.417436] IPVS: ftp: loaded support on port[0] = 21 [ 1065.667748] chnl_net:caif_netlink_parms(): no params data found [ 1065.813113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.819586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.826619] device bridge_slave_0 entered promiscuous mode [ 1065.926066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.932828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.940779] device bridge_slave_1 entered promiscuous mode [ 1065.958306] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1066.057045] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1066.075845] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1066.083400] team0: Port device team_slave_0 added [ 1066.089349] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1066.096858] team0: Port device team_slave_1 added [ 1066.117934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.125063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.154965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.251208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.258273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.285361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.296767] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1066.305291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1066.441881] device hsr_slave_0 entered promiscuous mode [ 1066.478726] device hsr_slave_1 entered promiscuous mode [ 1066.607746] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1066.615153] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1066.861245] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1066.893389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.900370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.909815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.916800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.925316] device bridge_slave_1 left promiscuous mode [ 1066.931393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.969488] device bridge_slave_0 left promiscuous mode [ 1066.975183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.031336] device veth1_macvtap left promiscuous mode [ 1067.036657] device veth0_macvtap left promiscuous mode [ 1067.043620] device veth1_vlan left promiscuous mode [ 1067.049557] device veth0_vlan left promiscuous mode [ 1070.941784] device hsr_slave_1 left promiscuous mode [ 1070.980779] device hsr_slave_0 left promiscuous mode [ 1071.025430] team0 (unregistering): Port device team_slave_1 removed [ 1071.035660] team0 (unregistering): Port device team_slave_0 removed [ 1071.046244] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1071.091085] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1071.176524] bond0 (unregistering): Released all slaves [ 1071.223509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.232287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1071.242547] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1071.250152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1071.257191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1071.267436] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1071.273604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.282148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1071.289214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1071.297080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1071.305285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.311744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.320560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1071.330090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1071.337133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1071.345455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1071.354470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.361122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.372314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1071.390402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1071.406811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1071.414979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1071.425272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1071.434197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1071.447688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1071.456074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1071.464682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1071.472439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1071.481165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1071.542114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1071.549329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1071.557066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1071.570177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1071.578552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1071.586247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1071.595172] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1071.601802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1071.621009] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1071.630264] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1071.636523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1071.645086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1071.657197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.675576] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1071.686205] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1071.694034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1071.703158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1071.756540] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1071.765268] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1071.774164] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1071.785147] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1071.794510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1071.803417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1071.815109] device veth0_vlan entered promiscuous mode [ 1071.823240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1071.832320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1071.843217] device veth1_vlan entered promiscuous mode [ 1071.851479] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1071.862332] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1071.878223] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1071.893427] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1071.900665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1071.910376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1071.917784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1071.926108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1071.937712] device veth0_macvtap entered promiscuous mode [ 1071.945821] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1071.957990] device veth1_macvtap entered promiscuous mode [ 1071.965056] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1071.976437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1071.990739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1072.001927] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1072.010669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.017354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1072.025642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1072.036328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1072.044701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1072.057785] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1072.066313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.074613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1072.083875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2020/08/05 06:35:09 executed programs: 112 [ 1075.318535] Bluetooth: hci0: command 0x0409 tx timeout [ 1077.398789] Bluetooth: hci0: command 0x041b tx timeout 2020/08/05 06:35:14 executed programs: 196 [ 1079.478632] Bluetooth: hci0: command 0x040f tx timeout [ 1081.638481] Bluetooth: hci0: command 0x0419 tx timeout 2020/08/05 06:35:19 executed programs: 294 [ 1083.718494] Bluetooth: hci0: command 0x0405 tx timeout [ 1085.798474] Bluetooth: hci0: command 0x0405 tx timeout [ 1087.878470] Bluetooth: hci0: command 0x0405 tx timeout 2020/08/05 06:35:24 executed programs: 400 2020/08/05 06:35:25 result: hanged=false err=executor 0: exit status 67 setns(netns) failed (errno 22) child failed (errno 0) loop exited with status 67 setns(netns) failed (errno 22) child failed (errno 0) loop exited with status 67 [ 1089.851614] IPVS: ftp: loaded support on port[0] = 21 [ 1090.098017] chnl_net:caif_netlink_parms(): no params data found [ 1090.230454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.236933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.244567] device bridge_slave_0 entered promiscuous mode [ 1090.339529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.345949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.355005] device bridge_slave_1 entered promiscuous mode [ 1090.459462] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1090.469279] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1090.487079] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1090.494835] team0: Port device team_slave_0 added [ 1090.503953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1090.514280] team0: Port device team_slave_1 added [ 1090.531555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.537824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.564328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.576571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.587460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.612984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.706492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1090.715280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1090.781107] device hsr_slave_0 entered promiscuous mode [ 1090.818983] device hsr_slave_1 entered promiscuous mode [ 1090.946875] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1090.955639] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1091.000820] ================================================================== [ 1091.008365] BUG: KASAN: use-after-free in __queue_work+0xdff/0x1100 [ 1091.014772] Read of size 4 at addr ffff88809a819740 by task kworker/1:2/3708 [ 1091.021953] [ 1091.023585] CPU: 1 PID: 3708 Comm: kworker/1:2 Not tainted 4.19.136-syzkaller #0 [ 1091.031256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.043393] Workqueue: events l2cap_chan_timeout [ 1091.048173] Call Trace: [ 1091.050855] dump_stack+0x1fc/0x2fe [ 1091.054495] print_address_description.cold+0x54/0x219 [ 1091.059783] kasan_report_error.cold+0x8a/0x1c7 [ 1091.064458] ? __queue_work+0xdff/0x1100 [ 1091.068629] __asan_report_load4_noabort+0x88/0x90 [ 1091.073566] ? __queue_work+0xdff/0x1100 [ 1091.077716] __queue_work+0xdff/0x1100 [ 1091.081609] ? cancel_delayed_work+0x21c/0x2c0 [ 1091.086266] __queue_delayed_work+0x1c6/0x270 [ 1091.090774] queue_delayed_work_on+0x195/0x200 [ 1091.095458] l2cap_chan_del+0x524/0x8e0 [ 1091.099431] l2cap_chan_close+0x108/0x820 [ 1091.103565] ? __set_monitor_timer+0x130/0x130 [ 1091.108178] ? check_preemption_disabled+0x41/0x280 [ 1091.113213] l2cap_chan_timeout+0x16d/0x210 [ 1091.117519] process_one_work+0x864/0x1570 [ 1091.121769] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1091.126866] worker_thread+0x64c/0x1130 [ 1091.130848] ? __kthread_parkme+0xfd/0x1b0 [ 1091.135066] ? process_one_work+0x1570/0x1570 [ 1091.139637] kthread+0x30b/0x410 [ 1091.143000] ? kthread_park+0x180/0x180 [ 1091.147004] ret_from_fork+0x24/0x30 [ 1091.150703] [ 1091.152307] Allocated by task 3711: [ 1091.155935] kmem_cache_alloc_trace+0x12f/0x380 [ 1091.160746] kernfs_fop_open+0x2b3/0xd20 [ 1091.165597] do_dentry_open+0x4aa/0x1160 [ 1091.169665] path_openat+0x793/0x2df0 [ 1091.173450] do_filp_open+0x18c/0x3f0 [ 1091.177237] do_sys_open+0x3b3/0x520 [ 1091.180946] do_syscall_64+0xf9/0x620 [ 1091.184745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1091.189927] [ 1091.191707] Freed by task 3711: [ 1091.194990] kfree+0xcc/0x210 [ 1091.198078] kernfs_fop_release+0x120/0x190 [ 1091.202386] __fput+0x2ce/0x890 [ 1091.206092] task_work_run+0x148/0x1c0 [ 1091.210231] exit_to_usermode_loop+0x251/0x2a0 [ 1091.214825] do_syscall_64+0x538/0x620 [ 1091.218716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1091.223883] [ 1091.225502] The buggy address belongs to the object at ffff88809a8195c0 [ 1091.225502] which belongs to the cache kmalloc-512 of size 512 [ 1091.238156] The buggy address is located 384 bytes inside of [ 1091.238156] 512-byte region [ffff88809a8195c0, ffff88809a8197c0) [ 1091.250153] The buggy address belongs to the page: [ 1091.255093] page:ffffea00026a0640 count:1 mapcount:0 mapping:ffff88812c39c940 index:0x0 [ 1091.263326] flags: 0xfffe0000000100(slab) [ 1091.267475] raw: 00fffe0000000100 ffffea000294eb48 ffffea000299d908 ffff88812c39c940 [ 1091.276300] raw: 0000000000000000 ffff88809a8190c0 0000000100000006 0000000000000000 [ 1091.284213] page dumped because: kasan: bad access detected [ 1091.289947] [ 1091.291562] Memory state around the buggy address: [ 1091.296490] ffff88809a819600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1091.303838] ffff88809a819680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1091.311201] >ffff88809a819700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1091.318563] ^ [ 1091.324019] ffff88809a819780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1091.331366] ffff88809a819800: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1091.338813] ================================================================== [ 1091.346171] Disabling lock debugging due to kernel taint [ 1091.351606] Kernel panic - not syncing: panic_on_warn set ... [ 1091.351606] [ 1091.358958] CPU: 1 PID: 3708 Comm: kworker/1:2 Tainted: G B 4.19.136-syzkaller #0 [ 1091.367907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.377263] Workqueue: events l2cap_chan_timeout [ 1091.381998] Call Trace: [ 1091.384581] dump_stack+0x1fc/0x2fe [ 1091.388201] panic+0x26a/0x50e [ 1091.391376] ? __warn_printk+0xf3/0xf3 [ 1091.395265] ? lock_downgrade+0x720/0x720 [ 1091.399395] ? print_shadow_for_address+0xb8/0x114 [ 1091.404312] ? trace_hardirqs_off+0x64/0x200 [ 1091.409182] kasan_end_report+0x43/0x49 [ 1091.413139] kasan_report_error.cold+0xa7/0x1c7 [ 1091.417858] ? __queue_work+0xdff/0x1100 [ 1091.421906] __asan_report_load4_noabort+0x88/0x90 [ 1091.426825] ? __queue_work+0xdff/0x1100 [ 1091.430870] __queue_work+0xdff/0x1100 [ 1091.434739] ? cancel_delayed_work+0x21c/0x2c0 [ 1091.439491] __queue_delayed_work+0x1c6/0x270 [ 1091.443972] queue_delayed_work_on+0x195/0x200 [ 1091.448553] l2cap_chan_del+0x524/0x8e0 [ 1091.452529] l2cap_chan_close+0x108/0x820 [ 1091.456848] ? __set_monitor_timer+0x130/0x130 [ 1091.461578] ? check_preemption_disabled+0x41/0x280 [ 1091.466601] l2cap_chan_timeout+0x16d/0x210 [ 1091.470918] process_one_work+0x864/0x1570 [ 1091.475149] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1091.479801] worker_thread+0x64c/0x1130 [ 1091.483759] ? __kthread_parkme+0xfd/0x1b0 [ 1091.487971] ? process_one_work+0x1570/0x1570 [ 1091.492448] kthread+0x30b/0x410 [ 1091.495832] ? kthread_park+0x180/0x180 [ 1091.499805] ret_from_fork+0x24/0x30 [ 1091.504695] Kernel Offset: disabled [ 1091.508323] Rebooting in 86400 seconds..