Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 28.863298] audit: type=1400 audit(1597028800.466:8): avc: denied { execmem } for pid=6119 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 28.885043] IPVS: ftp: loaded support on port[0] = 21 [ 29.234277] can: request_module (can-proto-0) failed. [ 29.243352] can: request_module (can-proto-0) failed. [ 29.252025] can: request_module (can-proto-0) failed. [ 29.279535] audit: type=1400 audit(1597028800.886:9): avc: denied { create } for pid=6097 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2020/08/10 03:06:48 parsed 1 programs 2020/08/10 03:06:48 executed programs: 0 [ 36.731469] audit: type=1400 audit(1597028808.343:10): avc: denied { execmem } for pid=6236 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 36.788975] IPVS: ftp: loaded support on port[0] = 21 [ 36.824520] IPVS: ftp: loaded support on port[0] = 21 [ 36.885583] chnl_net:caif_netlink_parms(): no params data found [ 36.914335] IPVS: ftp: loaded support on port[0] = 21 [ 36.953404] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.959891] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.968051] device bridge_slave_0 entered promiscuous mode [ 36.976759] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.983216] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.990163] device bridge_slave_1 entered promiscuous mode [ 37.033450] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 37.044958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 37.088192] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 37.096409] team0: Port device team_slave_0 added [ 37.102882] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.109978] team0: Port device team_slave_1 added [ 37.115186] chnl_net:caif_netlink_parms(): no params data found [ 37.133648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.140842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.155457] IPVS: ftp: loaded support on port[0] = 21 [ 37.197867] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.205555] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.212979] device bridge_slave_0 entered promiscuous mode [ 37.225423] device hsr_slave_0 entered promiscuous mode [ 37.231165] device hsr_slave_1 entered promiscuous mode [ 37.239132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 37.245945] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.252546] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.259357] device bridge_slave_1 entered promiscuous mode [ 37.295280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 37.331096] chnl_net:caif_netlink_parms(): no params data found [ 37.349195] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 37.372048] IPVS: ftp: loaded support on port[0] = 21 [ 37.373997] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 37.397686] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.404206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.411364] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.417810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.440290] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 37.447486] team0: Port device team_slave_0 added [ 37.478775] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.486368] team0: Port device team_slave_1 added [ 37.494866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.518472] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.525079] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.533208] device bridge_slave_0 entered promiscuous mode [ 37.540291] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.547227] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.555298] device bridge_slave_1 entered promiscuous mode [ 37.568626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.609027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 37.629887] device hsr_slave_0 entered promiscuous mode [ 37.638783] device hsr_slave_1 entered promiscuous mode [ 37.650572] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 37.659466] chnl_net:caif_netlink_parms(): no params data found [ 37.668286] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 37.685422] IPVS: ftp: loaded support on port[0] = 21 [ 37.698718] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 37.706239] team0: Port device team_slave_0 added [ 37.711744] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 37.787474] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 37.795329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.804729] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.812580] team0: Port device team_slave_1 added [ 37.820409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.827870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.851872] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 37.874806] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.892533] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.899413] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 37.929592] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 37.942291] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.948672] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.957235] device bridge_slave_0 entered promiscuous mode [ 37.969367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.976466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.983577] chnl_net:caif_netlink_parms(): no params data found [ 38.007846] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.015618] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.022648] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.029704] device bridge_slave_1 entered promiscuous mode [ 38.038291] device hsr_slave_0 entered promiscuous mode [ 38.044452] device hsr_slave_1 entered promiscuous mode [ 38.050271] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.063870] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 38.069955] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.097110] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.108993] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.115708] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.123062] device bridge_slave_0 entered promiscuous mode [ 38.129666] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.136117] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.143371] device bridge_slave_1 entered promiscuous mode [ 38.169549] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.178289] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.188401] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.197498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.206680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.225711] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.233860] team0: Port device team_slave_0 added [ 38.242653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.251124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.258767] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.265178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.272442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.281481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.289067] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.295478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.306449] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.320114] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.328907] team0: Port device team_slave_1 added [ 38.335645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.360036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.370109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.379421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.389308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.397149] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.404436] team0: Port device team_slave_0 added [ 38.416820] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.429447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.439242] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.446850] team0: Port device team_slave_1 added [ 38.488207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 38.496246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.522807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.535256] device hsr_slave_0 entered promiscuous mode [ 38.542938] device hsr_slave_1 entered promiscuous mode [ 38.549460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.559429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.567393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.576960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.595351] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 38.602050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.611165] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 38.627464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.642528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 38.650583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.657483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.664928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.673361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.681318] chnl_net:caif_netlink_parms(): no params data found [ 38.692314] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 38.698396] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.707906] device hsr_slave_0 entered promiscuous mode [ 38.713983] device hsr_slave_1 entered promiscuous mode [ 38.720516] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.734926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.745143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.754724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 38.765852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.774162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.782581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.790221] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.796558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.803561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.811535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.819745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.829144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.837511] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 38.846746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.858594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 38.866886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 38.876358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.884209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.892352] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.898712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.906100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.913890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.921669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.928453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.942701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.951602] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 38.958744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.970900] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 38.977096] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.989025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.002479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 39.011611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.026787] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.033311] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.041812] device bridge_slave_0 entered promiscuous mode [ 39.048047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.056097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.064067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.073662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.086953] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 39.094787] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 39.105588] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.112371] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.120289] device bridge_slave_1 entered promiscuous mode [ 39.126280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.133864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.141906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.151549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 39.160737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 39.169203] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 39.176728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 39.197477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.205417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.213656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.222052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.229423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.237052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.244166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.252318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.260367] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.266699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.276065] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 39.282605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.291991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 39.304148] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.313393] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.321952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.329138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.337273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.345156] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.351558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.362246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.370985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 39.380761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 39.394140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.402555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.411782] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 39.428221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.437262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.452832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.461115] team0: Port device team_slave_0 added [ 39.467398] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.476453] team0: Port device team_slave_1 added [ 39.483127] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 39.496308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.503451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.514009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.522473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.529242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.539889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.548729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.556753] devpts: called with bogus options [ 39.566347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.578076] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 39.587217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.598365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.623856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.633212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.641057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.649030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.650773] devpts: called with bogus options [ 39.660458] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 39.672506] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.681403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 39.693374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.701182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.717999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 39.737254] devpts: called with bogus options [ 39.745503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.758129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 39.771551] device hsr_slave_0 entered promiscuous mode [ 39.777991] device hsr_slave_1 entered promiscuous mode [ 39.784795] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.792858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.796659] devpts: called with bogus options [ 39.816792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.825322] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.831927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.839867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.847418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.859616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 39.868671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 39.876424] devpts: called with bogus options [ 39.880492] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.889263] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 39.895766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.905129] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.917643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.928255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.936529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.944624] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.951160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.958190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.966768] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 39.975545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 39.992241] devpts: called with bogus options [ 39.992822] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.014069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.022042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.034236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.046963] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.053950] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.070761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.080252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.087856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.104212] devpts: called with bogus options [ 40.104428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.118222] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 40.123070] devpts: called with bogus options [ 40.127057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.143021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.153969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.160108] devpts: called with bogus options [ 40.162569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.167818] devpts: called with bogus options [ 40.173964] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.184681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.192578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.195987] devpts: called with bogus options [ 40.200404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.213525] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 40.224047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.232303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.239955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.246657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.253919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.262451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.270590] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.276949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.287322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.296323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 40.308703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.316774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.325786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 40.337756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 40.346611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.355487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.364373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.375812] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.382278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.391154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 40.398328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.414692] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 40.424025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.435948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.445544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.453548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.464246] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 40.472904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.484997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.490861] devpts: called with bogus options [ 40.492142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.503150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.511152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.524336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 40.533365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.543463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.557130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.564924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 40.573171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.584025] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.590455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.603843] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.610618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.618187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.628074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.638730] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.648720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.656345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.667812] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.674974] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.682548] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 40.694992] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 40.704613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.711493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.720534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.730647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.738507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.747575] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.754246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.762545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.772145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 40.784076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.791956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.792554] devpts: called with bogus options [ 40.799852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.812196] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.818594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.826013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.836214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.849508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 40.856589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.874829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.882144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.890575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.898531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.910076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.918437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.927222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.937826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 40.949893] devpts: called with bogus options [ 40.952856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.963159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.973291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 40.981226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.989383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.999226] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 41.005650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.020757] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 41.027939] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 41.036149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.043821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.053874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.094854] devpts: called with bogus options [ 41.143609] devpts: called with bogus options [ 41.220820] devpts: called with bogus options [ 41.223681] devpts: called with bogus options [ 41.225667] devpts: called with bogus options [ 41.234140] devpts: called with bogus options [ 41.236368] devpts: called with bogus options [ 41.246806] devpts: called with bogus options [ 41.339651] devpts: called with bogus options [ 41.377912] devpts: called with bogus options [ 41.397478] blktrace: Concurrent blktraces are not allowed on loop0 [ 41.404478] devpts: called with bogus options [ 41.411189] devpts: called with bogus options [ 41.411339] devpts: called with bogus options [ 41.417442] blktrace: Concurrent blktraces are not allowed on loop0 [ 41.420559] devpts: called with bogus options [ 41.428711] blktrace: Concurrent blktraces are not allowed on loop0 [ 41.441949] blktrace: Concurrent blktraces are not allowed on loop0 [ 41.456599] devpts: called with bogus options [ 41.461866] blktrace: Concurrent blktraces are not allowed on loop0 [ 41.494600] devpts: called with bogus options [ 41.499847] blktrace: Concurrent blktraces are not allowed on loop0 [ 41.510711] blktrace: Concurrent blktraces are not allowed on loop0 [ 41.512448] devpts: called with bogus options [ 41.518114] devpts: called with bogus options [ 41.530075] devpts: called with bogus options [ 41.536510] devpts: called with bogus options [ 41.540631] devpts: called with bogus options [ 41.547003] devpts: called with bogus options [ 41.583791] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 41.665637] devpts: called with bogus options [ 41.665802] devpts: called with bogus options [ 41.684958] devpts: called with bogus options [ 41.687089] devpts: called with bogus options [ 41.706374] devpts: called with bogus options 2020/08/10 03:06:53 executed programs: 26 [ 41.717179] devpts: called with bogus options [ 41.738950] devpts: called with bogus options [ 41.758531] devpts: called with bogus options [ 41.763589] devpts: called with bogus options [ 41.812542] devpts: called with bogus options [ 41.812553] devpts: called with bogus options [ 41.819274] devpts: called with bogus options [ 41.824676] devpts: called with bogus options [ 41.826465] devpts: called with bogus options [ 41.837884] devpts: called with bogus options [ 41.900303] devpts: called with bogus options [ 41.948714] devpts: called with bogus options [ 41.953284] devpts: called with bogus options [ 41.962223] devpts: called with bogus options [ 41.966128] devpts: called with bogus options [ 41.974503] devpts: called with bogus options [ 42.016065] devpts: called with bogus options [ 42.019983] devpts: called with bogus options [ 42.037929] devpts: called with bogus options [ 42.080209] devpts: called with bogus options [ 42.080619] devpts: called with bogus options [ 42.085177] devpts: called with bogus options [ 42.119643] devpts: called with bogus options [ 42.123536] devpts: called with bogus options [ 42.137666] devpts: called with bogus options [ 42.159659] devpts: called with bogus options [ 42.159661] devpts: called with bogus options [ 42.173545] devpts: called with bogus options [ 42.199821] devpts: called with bogus options [ 42.201559] devpts: called with bogus options [ 42.207332] devpts: called with bogus options [ 42.216849] devpts: called with bogus options [ 42.291867] devpts: called with bogus options [ 42.317222] devpts: called with bogus options [ 42.323847] devpts: called with bogus options [ 42.330335] devpts: called with bogus options [ 42.332718] devpts: called with bogus options [ 42.340023] devpts: called with bogus options [ 42.356969] devpts: called with bogus options [ 42.365171] devpts: called with bogus options [ 42.406326] devpts: called with bogus options [ 42.527744] devpts: called with bogus options [ 42.534213] devpts: called with bogus options [ 42.543202] devpts: called with bogus options [ 42.548334] devpts: called with bogus options [ 42.562740] devpts: called with bogus options [ 42.566702] devpts: called with bogus options [ 42.596047] devpts: called with bogus options [ 42.596048] devpts: called with bogus options [ 42.615378] devpts: called with bogus options [ 42.654685] devpts: called with bogus options [ 42.665239] devpts: called with bogus options [ 42.680837] devpts: called with bogus options [ 42.692325] devpts: called with bogus options [ 42.700857] devpts: called with bogus options [ 42.700914] devpts: called with bogus options [ 42.725674] devpts: called with bogus options [ 42.741486] devpts: called with bogus options [ 42.773205] devpts: called with bogus options [ 42.781433] devpts: called with bogus options [ 42.833603] devpts: called with bogus options [ 42.840181] devpts: called with bogus options [ 42.886695] devpts: called with bogus options [ 42.886894] devpts: called with bogus options [ 42.912169] devpts: called with bogus options [ 42.928938] devpts: called with bogus options [ 42.934936] devpts: called with bogus options [ 42.934938] devpts: called with bogus options [ 42.954883] devpts: called with bogus options [ 42.976863] devpts: called with bogus options [ 42.987125] devpts: called with bogus options [ 42.993943] devpts: called with bogus options [ 43.015850] devpts: called with bogus options [ 43.025103] devpts: called with bogus options [ 43.042436] devpts: called with bogus options [ 43.046138] devpts: called with bogus options [ 43.100179] devpts: called with bogus options [ 43.113367] devpts: called with bogus options [ 43.135161] devpts: called with bogus options [ 43.146666] devpts: called with bogus options [ 43.177182] devpts: called with bogus options [ 43.182165] devpts: called with bogus options [ 43.187204] devpts: called with bogus options [ 43.214777] devpts: called with bogus options [ 43.214936] devpts: called with bogus options [ 43.250212] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.253351] devpts: called with bogus options [ 43.257315] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.269480] devpts: called with bogus options [ 43.282094] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.290625] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.292523] devpts: called with bogus options [ 43.305613] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.310095] devpts: called with bogus options [ 43.320158] devpts: called with bogus options [ 43.325216] devpts: called with bogus options [ 43.325344] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.336878] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.343185] devpts: called with bogus options [ 43.348609] devpts: called with bogus options [ 43.358337] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.377695] devpts: called with bogus options [ 43.380607] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.395727] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.404839] devpts: called with bogus options [ 43.404980] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.415397] devpts: called with bogus options [ 43.422479] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.438428] devpts: called with bogus options [ 43.440918] devpts: called with bogus options [ 43.443978] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.449309] devpts: called with bogus options [ 43.455019] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.466532] devpts: called with bogus options [ 43.467066] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.484656] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.488524] devpts: called with bogus options [ 43.492731] blktrace: Concurrent blktraces are not allowed on loop0 [ 43.511155] devpts: called with bogus options [ 43.511261] devpts: called with bogus options [ 43.516846] devpts: called with bogus options [ 43.525140] devpts: called with bogus options [ 43.530898] devpts: called with bogus options [ 43.541608] devpts: called with bogus options [ 43.582089] devpts: called with bogus options [ 43.594748] devpts: called with bogus options [ 43.615971] devpts: called with bogus options [ 43.621602] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 43.659359] devpts: called with bogus options [ 43.683430] devpts: called with bogus options [ 43.686567] devpts: called with bogus options [ 43.689481] devpts: called with bogus options [ 43.698801] devpts: called with bogus options [ 43.698818] devpts: called with bogus options [ 43.735069] devpts: called with bogus options [ 43.743725] devpts: called with bogus options [ 43.748529] devpts: called with bogus options [ 43.760607] devpts: called with bogus options [ 43.779617] devpts: called with bogus options [ 43.788779] devpts: called with bogus options [ 43.796914] devpts: called with bogus options [ 43.801595] devpts: called with bogus options [ 43.819330] ================================================================== [ 43.826955] BUG: KASAN: use-after-free in relay_switch_subbuf+0xb0a/0xc40 [ 43.834039] Read of size 8 at addr ffff8880aa484098 by task kworker/0:3/6892 [ 43.841277] [ 43.842911] CPU: 0 PID: 6892 Comm: kworker/0:3 Not tainted 4.14.193-syzkaller #0 [ 43.850444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.855429] devpts: called with bogus options [ 43.859795] Workqueue: events __blk_release_queue [ 43.859840] Call Trace: [ 43.859851] dump_stack+0xf7/0x13b [ 43.859860] ? relay_switch_subbuf+0xb0a/0xc40 [ 43.859868] print_address_description.cold.7+0x9/0x1c9 [ 43.859874] ? relay_switch_subbuf+0xb0a/0xc40 [ 43.859879] kasan_report.cold.8+0x11a/0x2d3 [ 43.859887] __asan_report_load8_noabort+0x14/0x20 [ 43.859892] relay_switch_subbuf+0xb0a/0xc40 [ 43.859901] relay_flush+0x183/0x230 [ 43.859909] ? trace_hardirqs_on_caller+0x40c/0x580 [ 43.859917] __blk_trace_startstop+0x430/0x5b0 [ 43.859922] ? trace_hardirqs_on_caller+0x40c/0x580 [ 43.859927] ? blk_msg_write+0x90/0x90 [ 43.859935] ? __lock_is_held+0xb5/0x140 [ 43.859940] ? trace_hardirqs_on+0xd/0x10 [ 43.859951] blk_trace_shutdown+0x5f/0xc0 [ 43.859957] __blk_release_queue+0x1f9/0x470 [ 43.859966] process_one_work+0x79e/0x16c0 [ 43.859978] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 43.859990] worker_thread+0xcc/0xee0 [ 43.860004] kthread+0x338/0x400 [ 43.860010] ? process_one_work+0x16c0/0x16c0 [ 43.860014] ? kthread_create_on_node+0xa0/0xa0 [ 43.860022] ret_from_fork+0x24/0x30 [ 43.860033] [ 43.883811] devpts: called with bogus options [ 43.885746] Allocated by task 7813: [ 43.885759] save_stack_trace+0x16/0x20 [ 43.885765] save_stack+0x43/0xd0 [ 43.885769] kasan_kmalloc+0xc7/0xe0 [ 43.885772] kasan_slab_alloc+0x12/0x20 [ 43.885775] kmem_cache_alloc+0x12e/0x790 [ 43.885781] __d_alloc+0x28/0xa50 [ 43.885785] d_alloc+0x43/0x260 [ 43.885789] __lookup_hash+0x40/0x160 [ 43.885792] lookup_one_len+0x26e/0x3a0 [ 43.885798] start_creating+0x91/0x190 [ 43.885805] __debugfs_create_file+0x37/0x390 [ 43.895038] devpts: called with bogus options [ 43.899858] debugfs_create_file+0x24/0x30 [ 43.899865] blk_create_buf_file_callback+0x19/0x20 [ 43.899871] relay_create_buf_file+0xea/0x160 [ 43.899875] relay_open_buf.part.11+0x5e7/0x940 [ 43.899878] relay_open+0x488/0x8a0 [ 43.899883] do_blk_trace_setup+0x3d2/0xb80 [ 43.899886] __blk_trace_setup+0xa8/0x110 [ 43.899890] blk_trace_ioctl+0x136/0x230 [ 43.899895] blkdev_ioctl+0x6fc/0x1770 [ 43.899899] block_ioctl+0xd7/0x130 [ 43.899904] do_vfs_ioctl+0x180/0xfb0 [ 43.899908] SyS_ioctl+0x74/0x80 [ 43.899913] do_syscall_64+0x1c7/0x5b0 [ 43.899920] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 43.899922] [ 43.899926] Freed by task 17: [ 43.899932] save_stack_trace+0x16/0x20 [ 43.899937] save_stack+0x43/0xd0 [ 43.899940] kasan_slab_free+0x71/0xc0 [ 43.899943] kmem_cache_free+0x80/0x2d0 [ 43.899947] __d_free+0x17/0x20 [ 43.899953] rcu_process_callbacks+0x7e0/0x11e0 [ 43.899956] __do_softirq+0x246/0x9b0 [ 43.899958] [ 43.899962] The buggy address belongs to the object at ffff8880aa484040 [ 43.899962] which belongs to the cache dentry of size 288 [ 43.899966] The buggy address is located 88 bytes inside of [ 43.899966] 288-byte region [ffff8880aa484040, ffff8880aa484160) [ 43.899968] The buggy address belongs to the page: [ 43.899974] page:ffffea0002a92100 count:1 mapcount:0 mapping:ffff8880aa484040 index:0x0 [ 43.899980] flags: 0x1fffc0000000100(slab) [ 43.899986] raw: 01fffc0000000100 ffff8880aa484040 0000000000000000 000000010000000b [ 43.900004] raw: ffffea0002a91a60 ffffea0002a91aa0 ffff88821f8c2680 0000000000000000 [ 43.900006] page dumped because: kasan: bad access detected [ 43.900008] [ 43.900010] Memory state around the buggy address: [ 43.900014] ffff8880aa483f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 43.900017] ffff8880aa484000: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 43.900019] >ffff8880aa484080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.900021] ^ [ 43.900024] ffff8880aa484100: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 43.900027] ffff8880aa484180: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.900029] ================================================================== [ 43.900031] Disabling lock debugging due to kernel taint [ 43.902182] Kernel panic - not syncing: panic_on_warn set ... [ 43.902182] [ 44.251603] CPU: 0 PID: 6892 Comm: kworker/0:3 Tainted: G B 4.14.193-syzkaller #0 [ 44.260459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.269817] Workqueue: events __blk_release_queue [ 44.274747] Call Trace: [ 44.277331] dump_stack+0xf7/0x13b [ 44.280885] ? relay_switch_subbuf+0xb0a/0xc40 [ 44.285448] panic+0x1b0/0x358 [ 44.288623] ? add_taint.cold.5+0x11/0x11 [ 44.292758] ? ___preempt_schedule+0x16/0x18 [ 44.297176] ? relay_switch_subbuf+0xb0a/0xc40 [ 44.301755] kasan_end_report+0x47/0x4f [ 44.305710] kasan_report.cold.8+0x76/0x2d3 [ 44.310042] __asan_report_load8_noabort+0x14/0x20 [ 44.314960] relay_switch_subbuf+0xb0a/0xc40 [ 44.319368] relay_flush+0x183/0x230 [ 44.323060] ? trace_hardirqs_on_caller+0x40c/0x580 [ 44.328055] __blk_trace_startstop+0x430/0x5b0 [ 44.332633] ? trace_hardirqs_on_caller+0x40c/0x580 [ 44.337649] ? blk_msg_write+0x90/0x90 [ 44.341636] ? __lock_is_held+0xb5/0x140 [ 44.345873] ? trace_hardirqs_on+0xd/0x10 [ 44.350031] blk_trace_shutdown+0x5f/0xc0 [ 44.354170] __blk_release_queue+0x1f9/0x470 [ 44.358813] process_one_work+0x79e/0x16c0 [ 44.363039] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 44.367702] worker_thread+0xcc/0xee0 [ 44.371495] kthread+0x338/0x400 [ 44.374844] ? process_one_work+0x16c0/0x16c0 [ 44.379413] ? kthread_create_on_node+0xa0/0xa0 [ 44.384073] ret_from_fork+0x24/0x30 [ 44.389306] Kernel Offset: disabled [ 44.392929] Rebooting in 86400 seconds..