[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 35.078456] audit: type=1400 audit(1586872498.651:8): avc: denied { execmem } for pid=6256 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 35.088305] IPVS: ftp: loaded support on port[0] = 21 [ 35.511567] can: request_module (can-proto-0) failed. [ 36.567570] can: request_module (can-proto-0) failed. [ 36.594868] audit: type=1400 audit(1586872500.172:9): avc: denied { create } for pid=6233 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. 2020/04/14 13:55:08 parsed 1 programs 2020/04/14 13:55:08 executed programs: 0 [ 45.343580] audit: type=1400 audit(1586872508.927:10): avc: denied { execmem } for pid=6379 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 45.419477] IPVS: ftp: loaded support on port[0] = 21 [ 45.493257] IPVS: ftp: loaded support on port[0] = 21 [ 45.507348] IPVS: ftp: loaded support on port[0] = 21 [ 45.508598] IPVS: ftp: loaded support on port[0] = 21 [ 45.589692] IPVS: ftp: loaded support on port[0] = 21 [ 45.604415] chnl_net:caif_netlink_parms(): no params data found [ 45.605655] IPVS: ftp: loaded support on port[0] = 21 [ 45.689409] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.696668] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.703743] device bridge_slave_0 entered promiscuous mode [ 45.711495] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.718036] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.725249] device bridge_slave_1 entered promiscuous mode [ 45.843726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.854405] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.874674] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.883481] team0: Port device team_slave_0 added [ 45.891980] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.900231] team0: Port device team_slave_1 added [ 45.934094] chnl_net:caif_netlink_parms(): no params data found [ 45.941936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.950267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.973235] chnl_net:caif_netlink_parms(): no params data found [ 46.081730] chnl_net:caif_netlink_parms(): no params data found [ 46.118989] device hsr_slave_0 entered promiscuous mode [ 46.145159] device hsr_slave_1 entered promiscuous mode [ 46.197444] chnl_net:caif_netlink_parms(): no params data found [ 46.209466] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.216405] chnl_net:caif_netlink_parms(): no params data found [ 46.248101] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.268803] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.278349] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.287354] device bridge_slave_0 entered promiscuous mode [ 46.293946] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.300650] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.308055] device bridge_slave_0 entered promiscuous mode [ 46.314594] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.321178] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.329107] device bridge_slave_1 entered promiscuous mode [ 46.357528] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.363966] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.375492] device bridge_slave_0 entered promiscuous mode [ 46.381758] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.389081] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.396541] device bridge_slave_1 entered promiscuous mode [ 46.423161] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.429837] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.437192] device bridge_slave_1 entered promiscuous mode [ 46.457468] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.470959] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.497958] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.505697] team0: Port device team_slave_0 added [ 46.511552] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.523692] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.533454] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.541627] device bridge_slave_0 entered promiscuous mode [ 46.549250] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.556336] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.563267] device bridge_slave_1 entered promiscuous mode [ 46.570884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.580534] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.590162] team0: Port device team_slave_1 added [ 46.596995] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.606277] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.612798] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.620352] device bridge_slave_0 entered promiscuous mode [ 46.635670] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.653231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.661515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.674186] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.680884] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.688296] device bridge_slave_1 entered promiscuous mode [ 46.695285] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.713047] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.720493] team0: Port device team_slave_0 added [ 46.740147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.752303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.764436] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.775480] team0: Port device team_slave_1 added [ 46.781023] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.790099] team0: Port device team_slave_0 added [ 46.826279] device hsr_slave_0 entered promiscuous mode [ 46.864963] device hsr_slave_1 entered promiscuous mode [ 46.906097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.914034] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.925895] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.933221] team0: Port device team_slave_0 added [ 46.939635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.947664] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.955379] team0: Port device team_slave_1 added [ 46.961073] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.969247] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.977282] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.985959] team0: Port device team_slave_1 added [ 46.991193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.998458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.008941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.020073] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.027758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.076571] device hsr_slave_0 entered promiscuous mode [ 47.114954] device hsr_slave_1 entered promiscuous mode [ 47.173569] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.188860] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.196501] team0: Port device team_slave_0 added [ 47.227337] device hsr_slave_0 entered promiscuous mode [ 47.274930] device hsr_slave_1 entered promiscuous mode [ 47.314862] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.321720] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.329483] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.377769] device hsr_slave_0 entered promiscuous mode [ 47.425262] device hsr_slave_1 entered promiscuous mode [ 47.464906] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.472236] team0: Port device team_slave_1 added [ 47.477651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.486039] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.499618] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.513551] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.521023] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.542557] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.551325] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.571750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.581080] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.626182] device hsr_slave_0 entered promiscuous mode [ 47.664610] device hsr_slave_1 entered promiscuous mode [ 47.705115] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.712558] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.727860] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.741716] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.753112] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.766649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.774998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.784068] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.791056] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.803915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.832510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.839301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.848900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.857431] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.864024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.871843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.885984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.895150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.906324] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.920816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.927108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.935429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.942930] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.949380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.956554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.965537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.975473] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.985310] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.991671] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.001738] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.008352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.019017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.026915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.041153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.050294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.061030] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.071719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.079938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.089286] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.095719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.103324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.110756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.118579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.128093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.138701] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.145008] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.153515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.162583] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.168923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.177362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.185565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.193021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.203526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.212144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.225221] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.232785] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.242187] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.248544] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.255389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.263161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.273298] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.279715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.287349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.295911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.303549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.311963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.320310] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.326976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.334965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.341836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.349573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.357823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.366138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.378247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.387279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.397257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.405171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.412666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.421162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.428991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.437465] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.443821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.450743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.458620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.466567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.474251] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.480615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.487439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.497070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.505957] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.514761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.523393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.532901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.540255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.547749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.555733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.563145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.570635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.577951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.585779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.593519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.601127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.610547] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.617727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.633322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.642049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.651773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.660298] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.666929] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.672961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.680065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.687963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.695618] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.701965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.708902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.717769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.726995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.736818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.746398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.755612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.763736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.773400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.781895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.789767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.797797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.807709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.819952] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.828094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.836244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.844473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.852690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.860592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.868491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.876530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.884262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.892074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.899869] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.906266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.912991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.920833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.930276] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.941942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.952673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.960284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.983227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.991289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.000967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.009514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.017499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.033290] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.044653] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.055858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.070926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.080075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.090299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.098983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.122909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.132952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.155546] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.161965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.187508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.196125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.208178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.217557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.240438] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.253772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.273273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.286028] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.292144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.300277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.309041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.316946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.325452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.333156] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.339680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.348721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.361224] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.372322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.381512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.390084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.398428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.406811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.415137] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.421481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.433489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.443911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.453362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.464840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.472581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.480641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.488544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.498597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.508763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.518722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.526869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.536099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.546117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.553646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.561764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.570379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.578611] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.590217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.599119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.612155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.620800] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.627842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.637333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.645510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.653306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.661626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.669609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.678935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.691599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.699836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.708562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.720961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.752278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.766327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.777222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.791466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.810942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.832463] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.839515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.848619] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.856809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.866819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.875529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.883141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.891253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.899004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.909957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.919520] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.926085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.950220] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.962791] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.981386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.007183] 8021q: adding VLAN 0 to HW filter on device batadv0 2020/04/14 13:55:13 executed programs: 42 2020/04/14 13:55:18 executed programs: 608 2020/04/14 13:55:23 executed programs: 1205 2020/04/14 13:55:28 executed programs: 1770 2020/04/14 13:55:33 executed programs: 2289 2020/04/14 13:55:38 executed programs: 2834 2020/04/14 13:55:43 executed programs: 3384 2020/04/14 13:55:48 executed programs: 3943 2020/04/14 13:55:54 executed programs: 4483 2020/04/14 13:55:59 executed programs: 4992 2020/04/14 13:56:04 executed programs: 5496 2020/04/14 13:56:09 executed programs: 6033 2020/04/14 13:56:14 executed programs: 6579 2020/04/14 13:56:19 executed programs: 7094 2020/04/14 13:56:24 executed programs: 7613 2020/04/14 13:56:29 executed programs: 8128 2020/04/14 13:56:34 executed programs: 8622 2020/04/14 13:56:39 executed programs: 9125 2020/04/14 13:56:44 executed programs: 9662 2020/04/14 13:56:49 executed programs: 10193 2020/04/14 13:56:54 executed programs: 10678 2020/04/14 13:56:59 executed programs: 11165 2020/04/14 13:57:04 executed programs: 11649 2020/04/14 13:57:09 executed programs: 12120 2020/04/14 13:57:14 executed programs: 12621 2020/04/14 13:57:19 executed programs: 13129 [ 178.221756] ================================================================== [ 178.229200] BUG: KASAN: use-after-free in __lock_acquire+0x3426/0x4980 [ 178.235982] Read of size 8 at addr ffff888086e07908 by task syz-executor.0/18906 [ 178.243509] [ 178.245251] CPU: 1 PID: 18906 Comm: syz-executor.0 Not tainted 4.19.115-syzkaller #0 [ 178.253209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.262558] Call Trace: [ 178.265155] dump_stack+0x123/0x177 [ 178.268788] print_address_description.cold.8+0x9/0x1ff [ 178.274273] kasan_report.cold.9+0x242/0x309 [ 178.279379] ? __lock_acquire+0x3426/0x4980 [ 178.283699] __asan_report_load8_noabort+0x14/0x20 [ 178.288761] __lock_acquire+0x3426/0x4980 [ 178.292937] ? save_stack+0xa9/0xd0 [ 178.296568] ? save_stack+0x43/0xd0 [ 178.300193] ? __kasan_slab_free+0x102/0x150 [ 178.304630] ? kasan_slab_free+0xe/0x10 [ 178.308602] ? kfree+0xcf/0x220 [ 178.311878] ? bpf_tcp_remove+0x42c/0x960 [ 178.316032] ? bpf_tcp_close+0xd2/0x280 [ 178.320005] ? mark_held_locks+0x130/0x130 [ 178.324353] ? do_syscall_64+0x413/0x4e0 [ 178.328434] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 178.333795] ? find_held_lock+0x36/0x1d0 [ 178.337852] ? debug_check_no_obj_freed+0x1ff/0x472 [ 178.342869] ? lock_downgrade+0x860/0x860 [ 178.347006] ? _raw_spin_unlock_irqrestore+0x63/0xd0 [ 178.352108] ? quarantine_put+0x11b/0x1c0 [ 178.356255] lock_acquire+0x173/0x3d0 [ 178.360053] ? psock_map_pop.isra.17+0x1f/0x1b0 [ 178.364717] ? bpf_tcp_remove+0x42c/0x960 [ 178.368860] ? tcp_check_oom+0x4b0/0x4b0 [ 178.372919] _raw_spin_lock_bh+0x31/0x40 [ 178.376973] ? psock_map_pop.isra.17+0x1f/0x1b0 [ 178.381648] psock_map_pop.isra.17+0x1f/0x1b0 [ 178.386166] ? tcp_check_oom+0x4b0/0x4b0 [ 178.390228] bpf_tcp_remove+0x435/0x960 [ 178.394201] ? tcp_check_oom+0x4b0/0x4b0 [ 178.398258] bpf_tcp_close+0xd2/0x280 [ 178.402050] inet_release+0xb4/0x1b0 [ 178.405755] inet6_release+0x46/0x60 [ 178.409461] __sock_release+0xc2/0x290 [ 178.414560] sock_close+0x10/0x20 [ 178.418020] __fput+0x249/0x7f0 [ 178.421295] ____fput+0x9/0x10 [ 178.424487] task_work_run+0x108/0x180 [ 178.428369] exit_to_usermode_loop+0x1a9/0x200 [ 178.432946] do_syscall_64+0x413/0x4e0 [ 178.436829] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 178.442009] RIP: 0033:0x413511 [ 178.445216] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 178.464109] RSP: 002b:00007ffc12f0dbc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 178.471822] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 178.479091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 178.486549] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 178.493916] R10: 00007ffc12f0dca0 R11: 0000000000000293 R12: 000000000075bf20 [ 178.501179] R13: 000000000002b83b R14: 00000000007610a8 R15: ffffffffffffffff [ 178.508449] [ 178.510067] Allocated by task 18918: [ 178.513772] save_stack+0x43/0xd0 [ 178.517216] kasan_kmalloc+0xc7/0xe0 [ 178.520927] kmem_cache_alloc_node_trace+0x14c/0x730 [ 178.526033] __sock_map_ctx_update_elem.isra.24+0x32c/0xcd0 [ 178.531740] sock_map_ctx_update_elem.isra.25+0xf7/0x5d0 [ 178.537197] sock_map_update_elem+0x1b6/0x390 [ 178.541687] map_update_elem+0x59c/0xb70 [ 178.545744] __x64_sys_bpf+0x224/0x3a0 [ 178.549625] do_syscall_64+0xd0/0x4e0 [ 178.553422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 178.561116] [ 178.562745] Freed by task 7294: [ 178.566025] save_stack+0x43/0xd0 [ 178.569481] __kasan_slab_free+0x102/0x150 [ 178.573711] kasan_slab_free+0xe/0x10 [ 178.577506] kfree+0xcf/0x220 [ 178.580605] smap_gc_work+0x775/0xa90 [ 178.584488] process_one_work+0x830/0x1670 [ 178.588716] worker_thread+0x85/0xb60 [ 178.592526] kthread+0x324/0x3e0 [ 178.595890] ret_from_fork+0x24/0x30 [ 178.599689] [ 178.601307] The buggy address belongs to the object at ffff888086e076c0 [ 178.601307] which belongs to the cache kmalloc-1024 of size 1024 [ 178.614246] The buggy address is located 584 bytes inside of [ 178.614246] 1024-byte region [ffff888086e076c0, ffff888086e07ac0) [ 178.626238] The buggy address belongs to the page: [ 178.631158] page:ffffea00021b8180 count:1 mapcount:0 mapping:ffff88812c31eac0 index:0xffff888086e07240 compound_mapcount: 0 [ 178.642727] flags: 0x1fffc0000008100(slab|head) [ 178.647397] raw: 01fffc0000008100 ffffea0002783608 ffffea00025e4c08 ffff88812c31eac0 [ 178.655277] raw: ffff888086e07240 ffff888086e06040 0000000100000004 0000000000000000 [ 178.663146] page dumped because: kasan: bad access detected [ 178.668868] [ 178.670486] Memory state around the buggy address: [ 178.675411] ffff888086e07800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.682764] ffff888086e07880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.690136] >ffff888086e07900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.697474] ^ [ 178.701112] ffff888086e07980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.708457] ffff888086e07a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.715800] ================================================================== [ 178.723137] Disabling lock debugging due to kernel taint [ 178.728578] Kernel panic - not syncing: panic_on_warn set ... [ 178.728578] [ 178.736013] CPU: 1 PID: 18906 Comm: syz-executor.0 Tainted: G B 4.19.115-syzkaller #0 [ 178.745259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.754704] Call Trace: [ 178.757283] dump_stack+0x123/0x177 [ 178.760997] panic+0x1cd/0x375 [ 178.764287] ? __warn_printk+0xd6/0xd6 [ 178.768174] ? lock_downgrade+0x860/0x860 [ 178.772311] ? _raw_spin_unlock_irqrestore+0x63/0xd0 [ 178.777393] kasan_end_report+0x47/0x4f [ 178.781346] kasan_report.cold.9+0x76/0x309 [ 178.785663] ? __lock_acquire+0x3426/0x4980 [ 178.789961] __asan_report_load8_noabort+0x14/0x20 [ 178.794897] __lock_acquire+0x3426/0x4980 [ 178.799059] ? save_stack+0xa9/0xd0 [ 178.802682] ? save_stack+0x43/0xd0 [ 178.806287] ? __kasan_slab_free+0x102/0x150 [ 178.810680] ? kasan_slab_free+0xe/0x10 [ 178.814634] ? kfree+0xcf/0x220 [ 178.817889] ? bpf_tcp_remove+0x42c/0x960 [ 178.822026] ? bpf_tcp_close+0xd2/0x280 [ 178.825988] ? mark_held_locks+0x130/0x130 [ 178.830199] ? do_syscall_64+0x413/0x4e0 [ 178.834334] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 178.839959] ? find_held_lock+0x36/0x1d0 [ 178.844147] ? debug_check_no_obj_freed+0x1ff/0x472 [ 178.849143] ? lock_downgrade+0x860/0x860 [ 178.853277] ? _raw_spin_unlock_irqrestore+0x63/0xd0 [ 178.858380] ? quarantine_put+0x11b/0x1c0 [ 178.862508] lock_acquire+0x173/0x3d0 [ 178.866324] ? psock_map_pop.isra.17+0x1f/0x1b0 [ 178.870989] ? bpf_tcp_remove+0x42c/0x960 [ 178.875127] ? tcp_check_oom+0x4b0/0x4b0 [ 178.879167] _raw_spin_lock_bh+0x31/0x40 [ 178.883213] ? psock_map_pop.isra.17+0x1f/0x1b0 [ 178.887867] psock_map_pop.isra.17+0x1f/0x1b0 [ 178.892352] ? tcp_check_oom+0x4b0/0x4b0 [ 178.896387] bpf_tcp_remove+0x435/0x960 [ 178.900336] ? tcp_check_oom+0x4b0/0x4b0 [ 178.904393] bpf_tcp_close+0xd2/0x280 [ 178.908169] inet_release+0xb4/0x1b0 [ 178.911856] inet6_release+0x46/0x60 [ 178.915630] __sock_release+0xc2/0x290 [ 178.919490] sock_close+0x10/0x20 [ 178.922919] __fput+0x249/0x7f0 [ 178.926185] ____fput+0x9/0x10 [ 178.929354] task_work_run+0x108/0x180 [ 178.933232] exit_to_usermode_loop+0x1a9/0x200 [ 178.937813] do_syscall_64+0x413/0x4e0 [ 178.941685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 178.946863] RIP: 0033:0x413511 [ 178.950046] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 178.969066] RSP: 002b:00007ffc12f0dbc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 178.976754] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 178.984024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 178.991294] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 178.998545] R10: 00007ffc12f0dca0 R11: 0000000000000293 R12: 000000000075bf20 [ 179.005804] R13: 000000000002b83b R14: 00000000007610a8 R15: ffffffffffffffff [ 179.014734] Kernel Offset: disabled [ 179.018363] Rebooting in 86400 seconds..