[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 29.445025] audit: type=1400 audit(1590671576.646:8): avc: denied { execmem } for pid=5971 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 29.701944] IPVS: ftp: loaded support on port[0] = 21 [ 30.920212] can: request_module (can-proto-0) failed. [ 30.928802] can: request_module (can-proto-0) failed. [ 30.954914] audit: type=1400 audit(1590671578.157:9): avc: denied { create } for pid=5950 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. 2020/05/28 13:13:06 parsed 1 programs 2020/05/28 13:13:06 executed programs: 0 [ 39.295491] audit: type=1400 audit(1590671586.491:10): avc: denied { execmem } for pid=6084 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 39.606649] IPVS: ftp: loaded support on port[0] = 21 [ 40.394642] IPVS: ftp: loaded support on port[0] = 21 [ 40.459905] chnl_net:caif_netlink_parms(): no params data found [ 40.529063] IPVS: ftp: loaded support on port[0] = 21 [ 40.552119] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.559753] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.567255] device bridge_slave_0 entered promiscuous mode [ 40.576432] chnl_net:caif_netlink_parms(): no params data found [ 40.588476] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.594847] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.602431] device bridge_slave_1 entered promiscuous mode [ 40.633080] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.648961] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.662619] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.669676] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.677053] device bridge_slave_0 entered promiscuous mode [ 40.685088] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.693164] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.700391] device bridge_slave_1 entered promiscuous mode [ 40.728777] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.736260] team0: Port device team_slave_0 added [ 40.742129] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.752294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.760222] team0: Port device team_slave_1 added [ 40.766301] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.774139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.783359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.801051] IPVS: ftp: loaded support on port[0] = 21 [ 40.858238] device hsr_slave_0 entered promiscuous mode [ 40.916376] device hsr_slave_1 entered promiscuous mode [ 40.961252] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.968387] team0: Port device team_slave_0 added [ 40.976257] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.010087] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.017697] team0: Port device team_slave_1 added [ 41.022913] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.048748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.062952] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.077013] chnl_net:caif_netlink_parms(): no params data found [ 41.129315] device hsr_slave_0 entered promiscuous mode [ 41.165579] device hsr_slave_1 entered promiscuous mode [ 41.215977] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.228273] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.234819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.241877] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.248299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.257148] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.280073] IPVS: ftp: loaded support on port[0] = 21 [ 41.290975] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.299903] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.306871] device bridge_slave_0 entered promiscuous mode [ 41.323553] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.329959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.336600] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.342952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.352670] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.359383] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.366713] device bridge_slave_1 entered promiscuous mode [ 41.472221] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.497664] IPVS: ftp: loaded support on port[0] = 21 [ 41.502690] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 41.510538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.520888] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.529863] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.538417] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.545798] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 41.553475] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.560642] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.581627] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.604619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.610818] chnl_net:caif_netlink_parms(): no params data found [ 41.622292] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.630215] team0: Port device team_slave_0 added [ 41.636042] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.643057] team0: Port device team_slave_1 added [ 41.690499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.702415] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.719093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.727782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.734660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.747123] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.753209] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.760658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.767859] chnl_net:caif_netlink_parms(): no params data found [ 41.839184] device hsr_slave_0 entered promiscuous mode [ 41.885537] device hsr_slave_1 entered promiscuous mode [ 41.926289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.943281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.950682] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.959470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.966326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.973042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.980925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.989182] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.995576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.020772] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.028007] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.034393] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.056402] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.062915] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.070391] device bridge_slave_0 entered promiscuous mode [ 42.078116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.088320] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.094672] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.102577] device bridge_slave_0 entered promiscuous mode [ 42.114176] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.120858] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.127953] device bridge_slave_1 entered promiscuous mode [ 42.134614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.145218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.152237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.160429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.168146] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.174657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.181630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.189790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.197456] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.203812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.210736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.218900] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.226076] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.232895] device bridge_slave_1 entered promiscuous mode [ 42.246034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.266269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.274053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.281987] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.288397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.300803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.315243] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.324097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.338751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.346158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.356674] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.365835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.373470] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.391967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.401331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.410518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.418874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.427147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.434697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.442983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.461389] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.469022] team0: Port device team_slave_0 added [ 42.474661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.482143] team0: Port device team_slave_1 added [ 42.488466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.497345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.504682] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.512931] team0: Port device team_slave_0 added [ 42.519070] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.527350] team0: Port device team_slave_1 added [ 42.532782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.541549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.550455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.559273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.567958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.575865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.583237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.594991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.604171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.618443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.626009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.632929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.640909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.648851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.656370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.665867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.698202] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.704228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.716175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.723725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.733273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.798012] device hsr_slave_0 entered promiscuous mode [ 42.825563] device hsr_slave_1 entered promiscuous mode [ 42.885966] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.898085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.906510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.914003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.967145] device hsr_slave_0 entered promiscuous mode [ 43.005617] device hsr_slave_1 entered promiscuous mode [ 43.065163] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.076668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.088202] chnl_net:caif_netlink_parms(): no params data found [ 43.102715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.110660] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.131942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.139928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.149075] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.163547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.172144] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.179533] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.186636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.226011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.252780] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.260194] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.267709] device bridge_slave_0 entered promiscuous mode [ 43.274252] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.282078] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.290002] device bridge_slave_1 entered promiscuous mode [ 43.301808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.309167] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.322759] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.339154] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.352639] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.363536] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.385928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.427512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.434417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.457339] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.463447] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.472822] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.485936] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.493180] team0: Port device team_slave_0 added [ 43.500364] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.508600] team0: Port device team_slave_1 added [ 43.523064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.540937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.550155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.564233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.581031] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.588880] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.599354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.607277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.622317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.630139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.638639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.657639] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.664104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.673507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.692845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.729186] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.738369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.755892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.764066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.772607] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.779048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.787712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.797189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.807830] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.814237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.823871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.837655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.867535] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.874087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.886737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.893661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.902937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.914128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.948632] device hsr_slave_0 entered promiscuous mode [ 43.994913] device hsr_slave_1 entered promiscuous mode [ 44.034702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.042656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.051110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.060002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.068945] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.075903] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.082671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.092967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.100908] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.108380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.116523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.124923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.132474] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.138894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.146646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.156230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.163719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.171297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.180774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.193039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.200945] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.209124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.217074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.225206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.233440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.243342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.251780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.260894] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.267801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.279598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.287770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.295414] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.302001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.309100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.316943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.324591] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.330970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.337986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.349220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.361702] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.374087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.381295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.391232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.400771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.410946] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.418362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.426398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.434927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.445105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.456173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.467205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.475732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.484830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.491889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.501535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.509759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.518033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.526286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.534141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.542584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.551762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.565395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.572294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.581005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.588717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.596539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.606513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.621066] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.627599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.639232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.652890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.663943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.678235] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.686961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.696173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 2020/05/28 13:13:11 executed programs: 14 [ 44.706928] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.713659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.739803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.760440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.772929] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.781140] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.797845] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.806148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.812471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.825472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.841033] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.847989] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.857576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.865793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.875121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.882929] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.889347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.899055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.908814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.916509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.925742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.933294] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.939726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.950390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.979784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.999748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.018853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.037334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.048502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.059407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.071232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.088471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.099600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.108598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.118734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.127245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.139322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.151382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.160049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.170782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.183787] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.191259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.206533] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.217138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.220384] ================================================================== [ 47.227791] BUG: KASAN: use-after-free in __lock_acquire+0x32f9/0x4500 [ 47.234451] Read of size 8 at addr ffff88808d57cca0 by task kworker/u4:0/5 [ 47.241458] [ 47.243080] CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.182-syzkaller #0 [ 47.250429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.259892] Workqueue: tipc_rcv tipc_recv_work [ 47.264474] Call Trace: [ 47.267088] dump_stack+0xf7/0x13b [ 47.270625] ? __lock_acquire+0x32f9/0x4500 [ 47.274950] print_address_description.cold.7+0x9/0x1c9 [ 47.281359] ? __lock_acquire+0x32f9/0x4500 [ 47.285688] kasan_report.cold.8+0x11a/0x2d3 [ 47.290791] __asan_report_load8_noabort+0x14/0x20 [ 47.295718] __lock_acquire+0x32f9/0x4500 [ 47.299914] ? __lock_acquire+0x6a4/0x4500 [ 47.304146] ? preempt_schedule+0x4d/0x60 [ 47.308315] ? preempt_schedule_common+0x1f/0xe0 [ 47.313165] ? release_sock+0x122/0x180 [ 47.317147] ? trace_hardirqs_on+0x10/0x10 [ 47.321415] ? trace_hardirqs_off+0x10/0x10 [ 47.325735] ? trace_hardirqs_off+0x10/0x10 [ 47.330058] ? _raw_spin_unlock_bh+0x30/0x40 [ 47.336029] ? release_sock+0x122/0x180 [ 47.340035] ? __lock_is_held+0xb5/0x140 [ 47.344189] lock_acquire+0x173/0x400 [ 47.347993] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 47.357445] _raw_spin_lock_bh+0x31/0x40 [ 47.361512] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 47.366099] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 47.370504] tipc_receive_from_sock+0x290/0x570 [ 47.375172] ? tipc_send_work+0x5e0/0x5e0 [ 47.379326] ? trace_hardirqs_off+0x10/0x10 [ 47.383649] ? __lock_is_held+0xb5/0x140 [ 47.387729] tipc_recv_work+0x78/0xd0 [ 47.391562] process_one_work+0x7a3/0x16c0 [ 47.395834] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 47.400503] worker_thread+0xcc/0xee0 [ 47.404314] kthread+0x33b/0x410 [ 47.407768] ? process_one_work+0x16c0/0x16c0 [ 47.412263] ? kthread_create_on_node+0xa0/0xa0 [ 47.416933] ret_from_fork+0x3a/0x50 [ 47.420641] [ 47.422269] Allocated by task 7083: [ 47.425893] save_stack_trace+0x16/0x20 [ 47.429867] save_stack+0x43/0xd0 [ 47.433318] kasan_kmalloc+0xc7/0xe0 [ 47.437043] kmem_cache_alloc_trace+0x152/0x7b0 [ 47.441723] tipc_subscrb_connect_cb+0x44/0x140 [ 47.446421] tipc_accept_from_sock+0x29e/0x4c0 [ 47.450999] tipc_recv_work+0x78/0xd0 [ 47.454827] process_one_work+0x7a3/0x16c0 [ 47.459062] worker_thread+0xcc/0xee0 [ 47.462894] kthread+0x33b/0x410 [ 47.466293] ret_from_fork+0x3a/0x50 [ 47.469996] [ 47.471624] Freed by task 7083: [ 47.474902] save_stack_trace+0x16/0x20 [ 47.478869] save_stack+0x43/0xd0 [ 47.483319] kasan_slab_free+0x71/0xc0 [ 47.487318] kfree+0xcc/0x270 [ 47.490420] tipc_subscrb_put+0x19/0x20 [ 47.494419] tipc_subscrb_release_cb+0x1a/0x20 [ 47.498997] tipc_close_conn+0x15e/0x1f0 [ 47.503062] tipc_send_work+0x462/0x5e0 [ 47.507044] process_one_work+0x7a3/0x16c0 [ 47.511304] worker_thread+0xcc/0xee0 [ 47.515205] kthread+0x33b/0x410 [ 47.518577] ret_from_fork+0x3a/0x50 [ 47.522282] [ 47.523905] The buggy address belongs to the object at ffff88808d57cc80 [ 47.523905] which belongs to the cache kmalloc-96 of size 96 [ 47.536396] The buggy address is located 32 bytes inside of [ 47.536396] 96-byte region [ffff88808d57cc80, ffff88808d57cce0) [ 47.549595] The buggy address belongs to the page: [ 47.554777] page:ffffea0002355f00 count:1 mapcount:0 mapping:ffff88808d57c000 index:0xffff88808d57ce80 [ 47.564245] flags: 0x1fffc0000000100(slab) [ 47.568493] raw: 01fffc0000000100 ffff88808d57c000 ffff88808d57ce80 0000000100000018 [ 47.576372] raw: ffffea0002854220 ffffea000238bc60 ffff8880aa8004c0 0000000000000000 [ 47.584245] page dumped because: kasan: bad access detected [ 47.589953] [ 47.591572] Memory state around the buggy address: [ 47.596523] ffff88808d57cb80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 47.603874] ffff88808d57cc00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 47.611247] >ffff88808d57cc80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 47.618599] ^ [ 47.623010] ffff88808d57cd00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 47.630408] ffff88808d57cd80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 47.637771] ================================================================== [ 47.645903] Disabling lock debugging due to kernel taint [ 47.651343] Kernel panic - not syncing: panic_on_warn set ... [ 47.651343] [ 47.658692] CPU: 0 PID: 5 Comm: kworker/u4:0 Tainted: G B 4.14.182-syzkaller #0 [ 47.667256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.676613] Workqueue: tipc_rcv tipc_recv_work [ 47.681188] Call Trace: [ 47.683750] dump_stack+0xf7/0x13b [ 47.687274] ? __lock_acquire+0x32f9/0x4500 [ 47.691571] panic+0x1b0/0x36a [ 47.694738] ? add_taint.cold.5+0x11/0x11 [ 47.698869] ? lock_downgrade+0x7f0/0x7f0 [ 47.703001] ? __lock_acquire+0x32f9/0x4500 [ 47.707316] kasan_end_report+0x47/0x4f [ 47.711276] kasan_report.cold.8+0x76/0x2d3 [ 47.715583] __asan_report_load8_noabort+0x14/0x20 [ 47.720487] __lock_acquire+0x32f9/0x4500 [ 47.724618] ? __lock_acquire+0x6a4/0x4500 [ 47.728837] ? preempt_schedule+0x4d/0x60 [ 47.732963] ? preempt_schedule_common+0x1f/0xe0 [ 47.737699] ? release_sock+0x122/0x180 [ 47.741664] ? trace_hardirqs_on+0x10/0x10 [ 47.746222] ? trace_hardirqs_off+0x10/0x10 [ 47.750529] ? trace_hardirqs_off+0x10/0x10 [ 47.754840] ? _raw_spin_unlock_bh+0x30/0x40 [ 47.759243] ? release_sock+0x122/0x180 [ 47.763202] ? __lock_is_held+0xb5/0x140 [ 47.767238] lock_acquire+0x173/0x400 [ 47.771015] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 47.775586] _raw_spin_lock_bh+0x31/0x40 [ 47.779642] ? tipc_subscrb_rcv_cb+0x479/0x9c0 [ 47.784437] tipc_subscrb_rcv_cb+0x479/0x9c0 [ 47.788838] tipc_receive_from_sock+0x290/0x570 [ 47.793492] ? tipc_send_work+0x5e0/0x5e0 [ 47.797700] ? trace_hardirqs_off+0x10/0x10 [ 47.801996] ? __lock_is_held+0xb5/0x140 [ 47.806031] tipc_recv_work+0x78/0xd0 [ 47.809895] process_one_work+0x7a3/0x16c0 [ 47.814119] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 47.818766] worker_thread+0xcc/0xee0 [ 47.822553] kthread+0x33b/0x410 [ 47.825907] ? process_one_work+0x16c0/0x16c0 [ 47.830986] ? kthread_create_on_node+0xa0/0xa0 [ 47.835645] ret_from_fork+0x3a/0x50 [ 47.840762] Kernel Offset: disabled [ 47.844376] Rebooting in 86400 seconds..