[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 29.461126] audit: type=1400 audit(1586524420.939:8): avc: denied { execmem } for pid=6111 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 29.763424] IPVS: ftp: loaded support on port[0] = 21 [ 30.943070] can: request_module (can-proto-0) failed. [ 30.952640] can: request_module (can-proto-0) failed. [ 30.978470] audit: type=1400 audit(1586524422.460:9): avc: denied { create } for pid=6088 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. 2020/04/10 13:13:49 parsed 1 programs 2020/04/10 13:13:49 executed programs: 0 [ 38.465204] audit: type=1400 audit(1586524429.943:10): avc: denied { execmem } for pid=6230 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 38.739323] IPVS: ftp: loaded support on port[0] = 21 [ 39.497597] IPVS: ftp: loaded support on port[0] = 21 [ 39.545692] chnl_net:caif_netlink_parms(): no params data found [ 39.593034] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.600680] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.607808] device bridge_slave_0 entered promiscuous mode [ 39.615431] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.622386] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.629851] device bridge_slave_1 entered promiscuous mode [ 39.653008] IPVS: ftp: loaded support on port[0] = 21 [ 39.654681] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.667236] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.687961] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.696522] team0: Port device team_slave_0 added [ 39.705839] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.713430] team0: Port device team_slave_1 added [ 39.719344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.730385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.800634] device hsr_slave_0 entered promiscuous mode [ 39.838454] device hsr_slave_1 entered promiscuous mode [ 39.890457] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.901395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.944865] chnl_net:caif_netlink_parms(): no params data found [ 40.002383] IPVS: ftp: loaded support on port[0] = 21 [ 40.021709] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.029002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.035877] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.042313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.070825] chnl_net:caif_netlink_parms(): no params data found [ 40.087656] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.094830] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.101963] device bridge_slave_0 entered promiscuous mode [ 40.110340] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.116689] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.125140] device bridge_slave_1 entered promiscuous mode [ 40.160627] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.169693] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.191413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.198876] team0: Port device team_slave_0 added [ 40.223428] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.231098] team0: Port device team_slave_1 added [ 40.242869] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.249727] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.257392] device bridge_slave_0 entered promiscuous mode [ 40.264569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.273438] IPVS: ftp: loaded support on port[0] = 21 [ 40.292088] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.299348] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.306255] device bridge_slave_1 entered promiscuous mode [ 40.318702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.390371] device hsr_slave_0 entered promiscuous mode [ 40.418478] device hsr_slave_1 entered promiscuous mode [ 40.470192] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.522569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.532698] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.548862] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.565238] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 40.571538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.582858] chnl_net:caif_netlink_parms(): no params data found [ 40.604968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.621041] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.627423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.634178] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.640736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.651830] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.659330] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.666222] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.676405] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.683867] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.694446] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.701967] team0: Port device team_slave_0 added [ 40.707570] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.715141] team0: Port device team_slave_1 added [ 40.722451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.743531] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.750171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.765342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.778317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.785414] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.792383] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.799790] device bridge_slave_0 entered promiscuous mode [ 40.813929] IPVS: ftp: loaded support on port[0] = 21 [ 40.816058] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.825771] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.900052] device hsr_slave_0 entered promiscuous mode [ 40.958067] device hsr_slave_1 entered promiscuous mode [ 40.998107] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.004995] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.013002] device bridge_slave_1 entered promiscuous mode [ 41.023667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.033626] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.041250] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.049996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.058434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.066233] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.072669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.095217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.113256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.121165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.129489] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.136043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.151032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.160037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.168425] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.229774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.240879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.252325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.260821] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.284046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.291523] team0: Port device team_slave_0 added [ 41.299913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.309699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.318207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.325954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.336041] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.346755] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.353919] team0: Port device team_slave_1 added [ 41.361992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.369953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.380313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.387537] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.411656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.419944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.426168] chnl_net:caif_netlink_parms(): no params data found [ 41.441129] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.452093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.470151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.477047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 41.486200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.493615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.501461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.509104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.523937] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.530675] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.570034] device hsr_slave_0 entered promiscuous mode [ 41.607895] device hsr_slave_1 entered promiscuous mode [ 41.649602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 41.661245] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.669200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.676515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.684708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.692892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.700122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.707073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.715217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.723268] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.729676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.736829] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.749468] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.758699] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.765049] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.772564] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 41.779604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.797209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.807331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.815432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.823376] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.830166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.893220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.909137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.916657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.927646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.935391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.945422] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.952030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.961706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.973911] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.980432] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.987228] device bridge_slave_0 entered promiscuous mode [ 41.993990] chnl_net:caif_netlink_parms(): no params data found [ 42.007224] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.014727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.022818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.031897] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.039278] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.045616] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.052876] device bridge_slave_1 entered promiscuous mode [ 42.072607] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.082211] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.093361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.103296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.126780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.135368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.143199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.151220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.159441] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.165822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.172853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.182717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.191761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.199698] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.206741] team0: Port device team_slave_0 added [ 42.215068] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.222527] team0: Port device team_slave_1 added [ 42.232277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.240119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.261658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.273476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.281905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.329694] device hsr_slave_0 entered promiscuous mode [ 42.367779] device hsr_slave_1 entered promiscuous mode [ 42.412525] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.419817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.427615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.435410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.445164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.454801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.468568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.480891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.488492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.500084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.509067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.516809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.525189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.532918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.540787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.548816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.556398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.564555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.572816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.586372] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.593446] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.601228] device bridge_slave_0 entered promiscuous mode [ 42.608794] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.615150] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.623657] device bridge_slave_1 entered promiscuous mode [ 42.641884] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.649609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.664946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.682738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.690549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.698567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.706211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.718902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.728039] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.734144] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.744014] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.752426] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.763135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.786005] hrtimer: interrupt took 26087 ns [ 42.792546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.800873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.818230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.829791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.839008] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.845082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.873056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.881948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.890229] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.896659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.904564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.912963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.921698] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.928132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.938235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.959339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.976125] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.998036] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.005706] team0: Port device team_slave_0 added [ 43.018724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.030425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.038298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.052816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.064709] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.083460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.097884] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.105051] team0: Port device team_slave_1 added [ 43.112748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.122475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.132421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.142304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.151171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.160389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.168982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.176812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.185463] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.194262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.202413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.270211] device hsr_slave_0 entered promiscuous mode [ 43.307457] device hsr_slave_1 entered promiscuous mode [ 43.348582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.355486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.364687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.374219] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.381306] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.394756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.402727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.410665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.418483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.426104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.436052] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.442705] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.449521] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.459437] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.465490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.476004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.490837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.499162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.506663] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.513342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.521159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.534677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.543881] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 2020/04/10 13:13:55 executed programs: 14 [ 43.550305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.564135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.585288] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.591755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.611732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.634215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.657779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.666458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.682636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.692731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.712096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.720165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.728037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.736089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.762970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.770026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.778719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.795672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.804223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.819005] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.840683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.847604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.855173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.863812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.872030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.883861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.894350] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.901076] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.913685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.922685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.932136] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.940071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.954049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.964215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.974241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.984457] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.990904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.002366] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.012742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.021400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.029200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.036837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.045557] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.052135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.062493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.072317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.081030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.088860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.098661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.106441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.116028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.124884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.135139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.145236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.152892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.160823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.168692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.176171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.184079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.194910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.203296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.211077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.224556] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.230836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.241856] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.252524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.605516] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 46.284367] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 46.661306] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 47.008415] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 47.138427] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 47.468822] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 47.507281] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 2020/04/10 13:14:00 executed programs: 313 [ 49.623954] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 49.646635] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 49.661820] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -9 [ 50.748186] ================================================================== [ 50.755747] BUG: KASAN: use-after-free in inet_shutdown+0x287/0x300 [ 50.762166] Read of size 4 at addr ffff88807abf1640 by task syz-executor.3/8829 [ 50.769614] [ 50.771252] CPU: 0 PID: 8829 Comm: syz-executor.3 Not tainted 4.14.175-syzkaller #0 [ 50.779133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.788496] Call Trace: [ 50.791097] dump_stack+0xf7/0x13b [ 50.794640] ? inet_shutdown+0x287/0x300 [ 50.798713] print_address_description.cold.7+0x9/0x1c9 [ 50.804085] ? inet_shutdown+0x287/0x300 [ 50.808335] kasan_report.cold.8+0x11a/0x2d3 [ 50.812759] __asan_report_load4_noabort+0x14/0x20 [ 50.817695] inet_shutdown+0x287/0x300 [ 50.821619] pppol2tp_session_close+0x91/0xc0 [ 50.826208] l2tp_tunnel_closeall+0x1df/0x2f0 [ 50.830716] ? trace_hardirqs_on+0xd/0x10 [ 50.834894] l2tp_udp_encap_destroy+0x7d/0xc0 [ 50.839400] udpv6_destroy_sock+0x89/0xb0 [ 50.843563] sk_common_release+0x5e/0x2c0 [ 50.847721] udp_lib_close+0x9/0x10 [ 50.851349] inet_release+0xd9/0x1c0 [ 50.855081] inet6_release+0x46/0x60 [ 50.855873] l2tp_core: tunl 4: sockfd_lookup(fd=3) returned -88 [ 50.858818] __sock_release+0xc2/0x2a0 [ 50.858827] sock_close+0x10/0x20 [ 50.858834] __fput+0x232/0x750 [ 50.858843] ? _raw_spin_unlock_irq+0x27/0x80 [ 50.881550] ____fput+0x9/0x10 [ 50.884745] task_work_run+0xe5/0x170 [ 50.888683] exit_to_usermode_loop+0x16a/0x1b0 [ 50.893441] do_syscall_64+0x416/0x5b0 [ 50.897359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.902278] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 50.907455] RIP: 0033:0x459a29 [ 50.910745] RSP: 002b:00007f0b8abb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 50.918448] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459a29 [ 50.925701] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 50.933317] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 50.940569] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0b8abba6d4 [ 50.947819] R13: 00000000004bff90 R14: 00000000004d1f00 R15: 00000000ffffffff [ 50.955078] [ 50.956687] Allocated by task 8840: [ 50.960294] save_stack_trace+0x16/0x20 [ 50.964246] save_stack+0x43/0xd0 [ 50.967711] kasan_kmalloc+0xc7/0xe0 [ 50.971428] kasan_slab_alloc+0x12/0x20 [ 50.975388] kmem_cache_alloc+0x12e/0x790 [ 50.979526] sock_alloc_inode+0x18/0x230 [ 50.983567] alloc_inode+0x56/0x150 [ 50.987187] new_inode_pseudo+0xc/0xd0 [ 50.991057] sock_alloc+0x3c/0x280 [ 50.994607] __sock_create+0x7a/0x540 [ 50.998388] SyS_socket+0xc6/0x1a0 [ 51.001918] do_syscall_64+0x1c7/0x5b0 [ 51.005784] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.010949] [ 51.012552] Freed by task 8824: [ 51.015810] save_stack_trace+0x16/0x20 [ 51.019849] save_stack+0x43/0xd0 [ 51.023281] kasan_slab_free+0x71/0xc0 [ 51.027147] kmem_cache_free+0x80/0x2d0 [ 51.031110] sock_destroy_inode+0x50/0x60 [ 51.035234] destroy_inode+0xb3/0x100 [ 51.039018] evict+0x36f/0x590 [ 51.042206] iput+0x3ac/0x810 [ 51.045292] dentry_unlink_inode+0x23e/0x2f0 [ 51.049678] __dentry_kill+0x2d2/0x540 [ 51.053545] dput.part.27+0x49a/0x610 [ 51.057324] dput+0xe/0x20 [ 51.060148] __fput+0x3f7/0x750 [ 51.063418] ____fput+0x9/0x10 [ 51.066588] task_work_run+0xe5/0x170 [ 51.070366] exit_to_usermode_loop+0x16a/0x1b0 [ 51.074942] do_syscall_64+0x416/0x5b0 [ 51.078827] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.084256] [ 51.085868] The buggy address belongs to the object at ffff88807abf1640 [ 51.085868] which belongs to the cache sock_inode_cache of size 1000 [ 51.099034] The buggy address is located 0 bytes inside of [ 51.099034] 1000-byte region [ffff88807abf1640, ffff88807abf1a28) [ 51.110807] The buggy address belongs to the page: [ 51.115729] page:ffffea0001eafc40 count:1 mapcount:0 mapping:ffff88807abf11c0 index:0xffff88807abf1ffd [ 51.125189] flags: 0x1fffc0000000100(slab) [ 51.129434] raw: 01fffc0000000100 ffff88807abf11c0 ffff88807abf1ffd 0000000100000003 [ 51.137479] raw: ffffea0001e80260 ffffea0001e802a0 ffff88821b7206c0 0000000000000000 [ 51.145357] page dumped because: kasan: bad access detected [ 51.151144] [ 51.152754] Memory state around the buggy address: [ 51.157666] ffff88807abf1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.165103] ffff88807abf1580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.172440] >ffff88807abf1600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 51.179898] ^ [ 51.185330] ffff88807abf1680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.192759] ffff88807abf1700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.200102] ================================================================== [ 51.207452] Disabling lock debugging due to kernel taint [ 51.215735] Kernel panic - not syncing: panic_on_warn set ... [ 51.215735] [ 51.223129] CPU: 0 PID: 8829 Comm: syz-executor.3 Tainted: G B 4.14.175-syzkaller #0 [ 51.232140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.241495] Call Trace: [ 51.244078] dump_stack+0xf7/0x13b [ 51.247619] ? inet_shutdown+0x287/0x300 [ 51.251682] panic+0x1b0/0x358 [ 51.254875] ? add_taint.cold.5+0x11/0x11 [ 51.259035] ? ___preempt_schedule+0x16/0x18 [ 51.263449] ? inet_shutdown+0x287/0x300 [ 51.267512] kasan_end_report+0x47/0x4f [ 51.271489] kasan_report.cold.8+0x76/0x2d3 [ 51.275811] __asan_report_load4_noabort+0x14/0x20 [ 51.280750] inet_shutdown+0x287/0x300 [ 51.284736] pppol2tp_session_close+0x91/0xc0 [ 51.289241] l2tp_tunnel_closeall+0x1df/0x2f0 [ 51.293740] ? trace_hardirqs_on+0xd/0x10 [ 51.297899] l2tp_udp_encap_destroy+0x7d/0xc0 [ 51.302394] udpv6_destroy_sock+0x89/0xb0 [ 51.306542] sk_common_release+0x5e/0x2c0 [ 51.310698] udp_lib_close+0x9/0x10 [ 51.314325] inet_release+0xd9/0x1c0 [ 51.318041] inet6_release+0x46/0x60 [ 51.321753] __sock_release+0xc2/0x2a0 [ 51.325639] sock_close+0x10/0x20 [ 51.330135] __fput+0x232/0x750 [ 51.333419] ? _raw_spin_unlock_irq+0x27/0x80 [ 51.337921] ____fput+0x9/0x10 [ 51.341116] task_work_run+0xe5/0x170 [ 51.344926] exit_to_usermode_loop+0x16a/0x1b0 [ 51.349512] do_syscall_64+0x416/0x5b0 [ 51.353401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.359126] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 51.364341] RIP: 0033:0x459a29 [ 51.367527] RSP: 002b:00007f0b8abb9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 51.375237] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459a29 [ 51.382509] RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000005 [ 51.390107] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 51.397381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0b8abba6d4 [ 51.404663] R13: 00000000004bff90 R14: 00000000004d1f00 R15: 00000000ffffffff [ 51.413578] Kernel Offset: disabled [ 51.417232] Rebooting in 86400 seconds..