[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 28.079638] audit: type=1400 audit(1588868451.994:8): avc: denied { execmem } for pid=6116 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 28.321647] IPVS: ftp: loaded support on port[0] = 21 [ 29.420231] can: request_module (can-proto-0) failed. [ 29.428704] can: request_module (can-proto-0) failed. [ 29.455014] audit: type=1400 audit(1588868453.366:9): avc: denied { create } for pid=6095 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. 2020/05/07 16:21:00 parsed 1 programs 2020/05/07 16:21:00 executed programs: 0 [ 37.020078] audit: type=1400 audit(1588868460.943:10): avc: denied { execmem } for pid=6236 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 37.303155] IPVS: ftp: loaded support on port[0] = 21 [ 38.040431] IPVS: ftp: loaded support on port[0] = 21 [ 38.094293] chnl_net:caif_netlink_parms(): no params data found [ 38.174881] IPVS: ftp: loaded support on port[0] = 21 [ 38.178148] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.188697] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.196707] device bridge_slave_0 entered promiscuous mode [ 38.205054] chnl_net:caif_netlink_parms(): no params data found [ 38.220258] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.227173] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.234326] device bridge_slave_1 entered promiscuous mode [ 38.259389] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.277982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.311375] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.317877] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.325210] device bridge_slave_0 entered promiscuous mode [ 38.335509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.343573] IPVS: ftp: loaded support on port[0] = 21 [ 38.343744] team0: Port device team_slave_0 added [ 38.358018] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.365337] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.372647] device bridge_slave_1 entered promiscuous mode [ 38.378906] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.386262] team0: Port device team_slave_1 added [ 38.409645] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.423977] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.434423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.454186] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.478915] IPVS: ftp: loaded support on port[0] = 21 [ 38.526080] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.535211] team0: Port device team_slave_0 added [ 38.540629] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.548017] team0: Port device team_slave_1 added [ 38.574921] device hsr_slave_0 entered promiscuous mode [ 38.611999] device hsr_slave_1 entered promiscuous mode [ 38.663846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.670866] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.678398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.687659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.754337] device hsr_slave_0 entered promiscuous mode [ 38.771652] device hsr_slave_1 entered promiscuous mode [ 38.820278] chnl_net:caif_netlink_parms(): no params data found [ 38.841123] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.847653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.854644] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.861006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.869937] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.877409] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.960310] IPVS: ftp: loaded support on port[0] = 21 [ 38.983858] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.990264] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.999602] device bridge_slave_0 entered promiscuous mode [ 39.006440] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.012802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.019349] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.025736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.077611] chnl_net:caif_netlink_parms(): no params data found [ 39.094099] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.100456] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.108282] device bridge_slave_1 entered promiscuous mode [ 39.128600] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.157372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.181555] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.188696] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.197628] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.204731] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.222967] chnl_net:caif_netlink_parms(): no params data found [ 39.245745] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.253203] team0: Port device team_slave_0 added [ 39.275878] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.283048] team0: Port device team_slave_1 added [ 39.288259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.304510] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.311855] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.318778] device bridge_slave_0 entered promiscuous mode [ 39.325979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.338505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.357489] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.366000] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.373659] device bridge_slave_1 entered promiscuous mode [ 39.434698] device hsr_slave_0 entered promiscuous mode [ 39.471343] device hsr_slave_1 entered promiscuous mode [ 39.513058] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.520704] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 39.534689] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.543738] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.550083] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.557284] device bridge_slave_0 entered promiscuous mode [ 39.564455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.572223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.579438] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.592667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.612198] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.618557] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.626181] device bridge_slave_1 entered promiscuous mode [ 39.644879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.653024] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.660438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.717971] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.725565] team0: Port device team_slave_0 added [ 39.731754] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 39.737856] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.757274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.767086] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.775078] team0: Port device team_slave_1 added [ 39.780367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.793675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 39.802189] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.809251] team0: Port device team_slave_0 added [ 39.815259] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.822719] team0: Port device team_slave_1 added [ 39.829022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.838128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.846246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.854167] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.860491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.868190] chnl_net:caif_netlink_parms(): no params data found [ 39.878106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.885336] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.893835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.908320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 39.937419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.945775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.954817] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.961199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.970430] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 39.978421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.022941] device hsr_slave_0 entered promiscuous mode [ 40.060829] device hsr_slave_1 entered promiscuous mode [ 40.101017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.108622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.116251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.125050] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 40.173625] device hsr_slave_0 entered promiscuous mode [ 40.220695] device hsr_slave_1 entered promiscuous mode [ 40.260823] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.267690] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.276225] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.282686] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.289252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.305096] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.313344] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.322275] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.330653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.339384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.349010] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.356304] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.364133] device bridge_slave_0 entered promiscuous mode [ 40.371385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.378225] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.385309] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.392718] device bridge_slave_1 entered promiscuous mode [ 40.411439] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.422964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.430862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.438454] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.444894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.451909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.459604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.467582] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.473958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.480821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.489036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.498385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 40.507335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.517824] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.536972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.544130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.552202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.559723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.569086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 40.579572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.586827] team0: Port device team_slave_0 added [ 40.592920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.600941] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.607959] team0: Port device team_slave_1 added [ 40.614565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 40.623183] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.634845] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.641668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.649912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.657722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.668487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 40.680920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.689171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.722728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.730733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.738079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.745857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.754013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.762356] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.768387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.832821] device hsr_slave_0 entered promiscuous mode [ 40.880464] device hsr_slave_1 entered promiscuous mode [ 40.928603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.936770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.945379] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.957409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.964840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.974855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.983499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.996739] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.003918] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.013199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.023981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 41.032771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 41.039790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.047316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.054268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.062292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.069585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.077359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.087814] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.094703] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.102702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.109179] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 41.120624] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 41.126629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.134772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.142731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.151429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.159207] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.165859] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.174212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.186788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.194113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.202168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.209731] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.216281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.223210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.230954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.238485] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.244869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.252109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.259049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.268322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.277304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.288127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.296744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.304858] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.311275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.318681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.326604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.334223] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.340617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.349067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.358964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.373421] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 41.381672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.393072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.400308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.407968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.416010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.426626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.438978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.454758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.464414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.476770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.488740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.496534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.510317] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.518042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.529041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.538747] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.551808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.564780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.570820] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 41.572647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.590597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.598533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.606192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.608229] ================================================================== [ 41.613415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.620117] BUG: KASAN: use-after-free in padata_parallel_worker+0x37a/0x420 [ 41.620122] Write of size 8 at addr ffff888096884058 by task kworker/0:3/6950 [ 41.620124] [ 41.620130] CPU: 0 PID: 6950 Comm: kworker/0:3 Not tainted 4.14.179-syzkaller #0 [ 41.620133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.620140] Workqueue: pencrypt padata_parallel_worker [ 41.620145] Call Trace: [ 41.620152] dump_stack+0xf7/0x13b [ 41.620159] ? padata_parallel_worker+0x37a/0x420 [ 41.628996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.633818] print_address_description.cold.7+0x9/0x1c9 [ 41.633826] ? padata_parallel_worker+0x37a/0x420 [ 41.633831] kasan_report.cold.8+0x11a/0x2d3 [ 41.633838] __asan_report_store8_noabort+0x17/0x20 [ 41.633843] padata_parallel_worker+0x37a/0x420 [ 41.633849] ? padata_sysfs_store+0xa0/0xa0 [ 41.644732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 41.650261] process_one_work+0x79e/0x16c0 [ 41.650272] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 41.650282] worker_thread+0xcc/0xee0 [ 41.650295] kthread+0x338/0x400 [ 41.650299] ? process_one_work+0x16c0/0x16c0 [ 41.650305] ? kthread_create_on_node+0xa0/0xa0 [ 41.661974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 41.664906] ret_from_fork+0x24/0x30 [ 41.668711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.671003] [ 41.671007] Allocated by task 7127: [ 41.671016] save_stack_trace+0x16/0x20 [ 41.671022] save_stack+0x43/0xd0 [ 41.671024] kasan_kmalloc+0xc7/0xe0 [ 41.671030] __kmalloc+0x15b/0x7b0 [ 41.671035] tls_push_record+0xf6/0x14c0 [ 41.671039] tls_sw_sendmsg+0x90b/0x10a0 [ 41.671044] inet_sendmsg+0x108/0x440 [ 41.671050] sock_sendmsg+0xb5/0xf0 [ 41.671054] SYSC_sendto+0x1e3/0x2c0 [ 41.671057] SyS_sendto+0x9/0x10 [ 41.671063] do_syscall_64+0x1c7/0x5b0 [ 41.671070] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.671072] [ 41.671074] Freed by task 7127: [ 41.671078] save_stack_trace+0x16/0x20 [ 41.677474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.682710] save_stack+0x43/0xd0 [ 41.682714] kasan_slab_free+0x71/0xc0 [ 41.682717] kfree+0xcc/0x270 [ 41.682721] tls_push_record+0xd32/0x14c0 [ 41.682725] tls_sw_sendmsg+0x90b/0x10a0 [ 41.682730] inet_sendmsg+0x108/0x440 [ 41.682735] sock_sendmsg+0xb5/0xf0 [ 41.682738] SYSC_sendto+0x1e3/0x2c0 [ 41.682741] SyS_sendto+0x9/0x10 [ 41.682746] do_syscall_64+0x1c7/0x5b0 [ 41.682750] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.682753] [ 41.689836] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 41.692949] The buggy address belongs to the object at ffff888096884000 [ 41.692949] which belongs to the cache kmalloc-256 of size 256 [ 41.702606] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 41.707011] The buggy address is located 88 bytes inside of [ 41.707011] 256-byte region [ffff888096884000, ffff888096884100) [ 41.714957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.717957] The buggy address belongs to the page: [ 41.759577] BUG: unable to handle kernel [ 41.763059] page:ffffea00025a2100 count:1 mapcount:0 mapping:ffff888096884000 index:0x0 [ 41.764665] paging request [ 41.772218] at ffffffffffffffc8 [ 41.775645] flags: 0x1fffc0000000100(slab) [ 41.779336] IP: pcrypt_aead_enc+0x7b/0xf0 [ 41.782872] raw: 01fffc0000000100 ffff888096884000 0000000000000000 000000010000000c [ 41.786904] PGD 786d067 [ 41.790954] raw: ffffea00025b6fe0 ffffea000252c320 ffff8880aa8007c0 0000000000000000 [ 41.794739] P4D 786d067 [ 41.798340] page dumped because: kasan: bad access detected [ 41.802024] PUD 786f067 [ 41.805382] [ 41.809240] PMD 0 [ 41.814401] Memory state around the buggy address: [ 41.819255] ffff888096883f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.823220] Oops: 0000 [#1] PREEMPT SMP KASAN [ 41.833605] ffff888096883f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.837041] Modules linked in: [ 41.840917] >ffff888096884000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.848130] ^ [ 41.852166] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 4.14.179-syzkaller #0 [ 41.855936] ffff888096884080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.859560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.863333] ffff888096884100: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 41.866677] Workqueue: pencrypt padata_parallel_worker [ 41.870548] ================================================================== [ 41.875712] task: ffff8880a9e42600 task.stack: ffff8880a9e50000 [ 41.877376] Kernel panic - not syncing: panic_on_warn set ... [ 41.877376] [ 41.883269] RIP: 0010:pcrypt_aead_enc+0x7b/0xf0 [ 42.087374] RSP: 0018:ffff8880a9e57c90 EFLAGS: 00010246 [ 42.092714] RAX: dffffc0000000000 RBX: ffff88809a6baad0 RCX: ffffffff82b0c85e [ 42.099961] RDX: 1ffffffffffffff9 RSI: 0000000000000008 RDI: ffff88809a6bab08 [ 42.107207] RBP: ffff8880a9e57cb0 R08: 0000000000000001 R09: 0000000000000000 [ 42.114453] R10: 0000000000000050 R11: ffff8880a9e42600 R12: 0000000000000000 [ 42.121719] R13: ffff88809a6bab08 R14: ffff8880a9e57cf8 R15: 1ffff110153caf9b [ 42.128967] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 42.137172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.143030] CR2: ffffffffffffffc8 CR3: 000000009299f000 CR4: 00000000001406e0 [ 42.150279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.157541] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.164803] Call Trace: [ 42.167376] padata_parallel_worker+0x24e/0x420 [ 42.172027] ? padata_sysfs_store+0xa0/0xa0 [ 42.176331] process_one_work+0x79e/0x16c0 [ 42.180546] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 42.185192] worker_thread+0xcc/0xee0 [ 42.188982] kthread+0x338/0x400 [ 42.192322] ? process_one_work+0x16c0/0x16c0 [ 42.196793] ? kthread_create_on_node+0xa0/0xa0 [ 42.201526] ret_from_fork+0x24/0x30 [ 42.205224] Code: 00 0f 85 82 00 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 38 49 8d 7c 24 c8 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5a 4c 89 ef <41> ff 54 24 c8 48 8d 7b 1c 48 ba 00 00 00 00 00 fc ff df 48 89 [ 42.224349] RIP: pcrypt_aead_enc+0x7b/0xf0 RSP: ffff8880a9e57c90 [ 42.230473] CR2: ffffffffffffffc8 [ 42.233906] ---[ end trace fca13a8d68e05b32 ]--- [ 43.013282] Shutting down cpus with NMI [ 43.019688] Kernel Offset: disabled [ 43.023434] Rebooting in 86400 seconds..