[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 31.854940] audit: type=1400 audit(1585630571.680:8): avc: denied { execmem } for pid=6118 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 31.870753] IPVS: ftp: loaded support on port[0] = 21 [ 32.291505] can: request_module (can-proto-0) failed. [ 33.318557] can: request_module (can-proto-0) failed. [ 33.343848] audit: type=1400 audit(1585630573.170:9): avc: denied { create } for pid=6092 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.207' (ECDSA) to the list of known hosts. 2020/03/31 04:56:21 parsed 1 programs 2020/03/31 04:56:21 executed programs: 0 [ 41.992858] audit: type=1400 audit(1585630581.812:10): avc: denied { execmem } for pid=6241 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.036580] IPVS: ftp: loaded support on port[0] = 21 [ 42.068492] IPVS: ftp: loaded support on port[0] = 21 [ 42.093506] IPVS: ftp: loaded support on port[0] = 21 [ 42.114806] IPVS: ftp: loaded support on port[0] = 21 [ 42.117137] IPVS: ftp: loaded support on port[0] = 21 [ 42.177928] IPVS: ftp: loaded support on port[0] = 21 [ 42.288656] chnl_net:caif_netlink_parms(): no params data found [ 42.301755] chnl_net:caif_netlink_parms(): no params data found [ 42.489289] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.496150] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.505053] device bridge_slave_0 entered promiscuous mode [ 42.568119] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.575356] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.585225] device bridge_slave_1 entered promiscuous mode [ 42.597931] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.605996] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.613646] device bridge_slave_0 entered promiscuous mode [ 42.624712] chnl_net:caif_netlink_parms(): no params data found [ 42.654638] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.661293] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.668134] device bridge_slave_1 entered promiscuous mode [ 42.693879] chnl_net:caif_netlink_parms(): no params data found [ 42.704242] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.712306] chnl_net:caif_netlink_parms(): no params data found [ 42.720571] chnl_net:caif_netlink_parms(): no params data found [ 42.739786] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.752357] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.770913] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.777321] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.784907] device bridge_slave_0 entered promiscuous mode [ 42.796194] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.826995] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.833838] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.842813] device bridge_slave_1 entered promiscuous mode [ 42.855023] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.863823] team0: Port device team_slave_0 added [ 42.893949] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.906445] team0: Port device team_slave_0 added [ 42.912351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.919516] team0: Port device team_slave_1 added [ 42.929888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.950870] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.958861] team0: Port device team_slave_1 added [ 42.968278] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.976177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.985055] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.997624] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.004095] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.011454] device bridge_slave_0 entered promiscuous mode [ 43.017682] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.024503] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.034055] device bridge_slave_0 entered promiscuous mode [ 43.040895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.053350] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.059715] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.068955] device bridge_slave_0 entered promiscuous mode [ 43.076509] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.087980] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.094940] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.102311] device bridge_slave_1 entered promiscuous mode [ 43.115140] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.124045] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.131783] device bridge_slave_1 entered promiscuous mode [ 43.143063] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.149527] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.156879] device bridge_slave_1 entered promiscuous mode [ 43.222765] device hsr_slave_0 entered promiscuous mode [ 43.270481] device hsr_slave_1 entered promiscuous mode [ 43.326992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.336328] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.344176] team0: Port device team_slave_0 added [ 43.353173] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.391857] device hsr_slave_0 entered promiscuous mode [ 43.430477] device hsr_slave_1 entered promiscuous mode [ 43.491459] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.499268] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.510485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.518416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.525793] team0: Port device team_slave_1 added [ 43.531347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.538475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.546040] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.553989] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.564142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.576465] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.584940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.605933] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.614376] team0: Port device team_slave_0 added [ 43.628072] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.637016] team0: Port device team_slave_0 added [ 43.644047] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.658038] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.666362] team0: Port device team_slave_1 added [ 43.677083] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.684859] team0: Port device team_slave_1 added [ 43.699425] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.706873] team0: Port device team_slave_0 added [ 43.713009] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.720531] team0: Port device team_slave_1 added [ 43.725782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.734635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.781764] device hsr_slave_0 entered promiscuous mode [ 43.820337] device hsr_slave_1 entered promiscuous mode [ 43.860527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.867666] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.877250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.888624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.896541] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.904170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.916941] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.984058] device hsr_slave_0 entered promiscuous mode [ 44.031080] device hsr_slave_1 entered promiscuous mode [ 44.080585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.087764] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.141910] device hsr_slave_0 entered promiscuous mode [ 44.180350] device hsr_slave_1 entered promiscuous mode [ 44.261736] device hsr_slave_0 entered promiscuous mode [ 44.300223] device hsr_slave_1 entered promiscuous mode [ 44.340587] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.347601] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.360820] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.369745] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.392210] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.407583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.416439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.448269] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.473454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.499106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.517893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.526323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.534207] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.543621] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.559505] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.568535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.579064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.590778] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.601817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.608667] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.617461] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.625241] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.632698] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.638772] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.650595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.657444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.664762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.671872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.681153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.690638] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.696717] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.711149] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.719492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.728890] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.737330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.746372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.755443] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.762714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.770756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.778287] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.784809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.791793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.799467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.808371] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.814816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.821705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.829581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.837227] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.843641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.850885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.857677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.866450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.876003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.887654] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.894752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.904055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.911378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.918424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.926443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.934816] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.941207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.948633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.957077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.964757] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.971148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.977894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.985062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.993616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.001405] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.007489] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.015207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.026151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.036217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.045502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.053845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.061625] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.067956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.075069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.083771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.093146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.102351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.113018] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.121601] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.127669] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.138293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.145645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.155129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.163046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.170994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.178619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.186401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.194393] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.200791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.207817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.217012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.226072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.237679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.245790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.255328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.263439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.271622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.279290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.287427] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.293832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.301059] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.307950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.318828] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.327030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.335772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.348155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.356238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.363606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.370718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.378403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.386197] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.392612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.399360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.407227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.414996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.422876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.430488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.438695] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.445311] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.452949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.465852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.474347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.483568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.494921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.503112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.511217] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.517543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.525403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.533464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.541039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.548632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.556405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.564417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.572657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.580568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.588997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.598903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.608160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.616979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.625937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.634345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.642717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.650936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.658390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.667218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.676508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.684596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.694137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.702502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.711176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.719055] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.725460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.732729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.740939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.748318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.755847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.764314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.773081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.784928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.794032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.802439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.809633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.818741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.827222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.835136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.843134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.851328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.858620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.866628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.874506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.884877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.894063] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.902969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.911083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.919461] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.927593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.935930] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.942847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.950924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.957983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.966591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.975066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.983176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.991020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.998646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.006749] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.013153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.022781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.035394] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.045299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.056979] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.067314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.075600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.083215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.091800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.099129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.108007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.116071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.125590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.137081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.146677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.155286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.163750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.171929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.179481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.187050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.194770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.203614] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.209633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.220568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.232976] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.239063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.257433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.268966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.277586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.297557] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.306258] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.323368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.336548] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.348981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.368548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.393423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.406873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.417080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.426063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.434431] FAULT_INJECTION: forcing a failure. [ 46.434431] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.435120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.447290] CPU: 1 PID: 7139 Comm: syz-executor.3 Not tainted 4.19.113-syzkaller #0 [ 46.461760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.471116] Call Trace: [ 46.473703] dump_stack+0x123/0x177 [ 46.475751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.477330] should_fail.cold.4+0x5/0x13 [ 46.488040] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 46.489500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.493142] ? __lock_acquire+0x26bc/0x4980 [ 46.493153] __alloc_pages_nodemask+0x1d5/0x710 [ 46.493158] ? mark_held_locks+0xc7/0x130 [ 46.493164] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 46.493173] ? trace_hardirqs_on_caller+0x28/0x180 [ 46.493183] alloc_pages_current+0xd6/0x1b0 [ 46.493194] skb_page_frag_refill+0x20b/0x400 [ 46.493201] sk_page_frag_refill+0x46/0x1b0 [ 46.493206] sk_alloc_sg+0x108/0x760 [ 46.493210] ? lockdep_hardirqs_on+0x421/0x5c0 [ 46.493218] ? lock_sock_nested+0x82/0x100 [ 46.493229] alloc_encrypted_sg+0x81/0x100 [ 46.493237] tls_sw_sendpage+0x4f8/0xc00 [ 46.493252] ? tls_sw_sendmsg+0x1020/0x1020 [ 46.493258] ? pipe_lock+0x4f/0x60 [ 46.493270] inet_sendpage+0x122/0x600 [ 46.493278] ? kernel_sendpage+0xd0/0xd0 [ 46.493284] kernel_sendpage+0x60/0xd0 [ 46.493288] ? lock_downgrade+0x860/0x860 [ 46.493292] ? pipe_lock+0x4f/0x60 [ 46.493296] sock_sendpage+0x6d/0xd0 [ 46.493306] pipe_to_sendpage+0x212/0x430 [ 46.493314] ? generic_pipe_buf_nosteal+0x10/0x10 [ 46.493324] __splice_from_pipe+0x2cb/0x720 [ 46.493328] ? generic_pipe_buf_nosteal+0x10/0x10 [ 46.493335] ? generic_pipe_buf_nosteal+0x10/0x10 [ 46.493340] splice_from_pipe+0xbb/0x120 [ 46.493344] ? splice_shrink_spd+0xa0/0xa0 [ 46.493354] ? rw_verify_area+0xb8/0x2b0 [ 46.493361] generic_splice_sendpage+0x10/0x20 [ 46.493365] do_splice+0x4fd/0x12d0 [ 46.493375] ? ksys_dup3+0x2e0/0x2e0 [ 46.493383] ? opipe_prep.part.13+0x320/0x320 [ 46.493390] ? __fget_light+0x174/0x1e0 [ 46.517783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.518150] __x64_sys_splice+0x248/0x300 [ 46.518163] do_syscall_64+0xd0/0x4e0 [ 46.518174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.518179] RIP: 0033:0x4592c9 [ 46.529062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.531956] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.531959] RSP: 002b:00007f2420deec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 46.531964] RAX: ffffffffffffffda RBX: 00007f2420deec90 RCX: 00000000004592c9 [ 46.531967] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 46.531970] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 46.531972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2420def6d4 [ 46.531974] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 46.532893] FAULT_INJECTION: forcing a failure. [ 46.532893] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.545829] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.583718] CPU: 1 PID: 7141 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 46.768405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.777747] Call Trace: [ 46.780337] dump_stack+0x123/0x177 [ 46.783947] should_fail.cold.4+0x5/0x13 [ 46.787989] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 46.793073] ? __lock_acquire+0x792/0x4980 [ 46.797292] __alloc_pages_nodemask+0x1d5/0x710 [ 46.801955] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 46.806949] ? __lock_acquire+0x792/0x4980 [ 46.811164] alloc_pages_current+0xd6/0x1b0 [ 46.815472] skb_page_frag_refill+0x20b/0x400 [ 46.819945] sk_page_frag_refill+0x46/0x1b0 [ 46.824246] sk_alloc_sg+0x108/0x760 [ 46.827938] ? lockdep_hardirqs_on+0x421/0x5c0 [ 46.832504] ? lock_sock_nested+0x82/0x100 [ 46.836718] alloc_encrypted_sg+0x81/0x100 [ 46.840933] tls_sw_sendpage+0x4f8/0xc00 [ 46.844980] ? tls_sw_sendmsg+0x1020/0x1020 [ 46.849283] ? pipe_lock+0x4f/0x60 [ 46.852806] inet_sendpage+0x122/0x600 [ 46.856671] ? kernel_sendpage+0xd0/0xd0 [ 46.860711] kernel_sendpage+0x60/0xd0 [ 46.864575] ? lock_downgrade+0x860/0x860 [ 46.868704] ? pipe_lock+0x4f/0x60 [ 46.872224] sock_sendpage+0x6d/0xd0 [ 46.875915] pipe_to_sendpage+0x212/0x430 [ 46.880044] ? generic_pipe_buf_nosteal+0x10/0x10 [ 46.884869] __splice_from_pipe+0x2cb/0x720 [ 46.889167] ? generic_pipe_buf_nosteal+0x10/0x10 [ 46.894004] ? generic_pipe_buf_nosteal+0x10/0x10 [ 46.898825] splice_from_pipe+0xbb/0x120 [ 46.902863] ? splice_shrink_spd+0xa0/0xa0 [ 46.907082] ? rw_verify_area+0xb8/0x2b0 [ 46.911121] generic_splice_sendpage+0x10/0x20 [ 46.915695] do_splice+0x4fd/0x12d0 [ 46.919304] ? ksys_dup3+0x2e0/0x2e0 [ 46.922995] ? opipe_prep.part.13+0x320/0x320 [ 46.927471] ? __fget_light+0x174/0x1e0 [ 46.931447] __x64_sys_splice+0x248/0x300 [ 46.935608] do_syscall_64+0xd0/0x4e0 [ 46.939416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.944702] RIP: 0033:0x4592c9 [ 46.947878] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.966774] RSP: 002b:00007f0fd3a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 46.974484] RAX: ffffffffffffffda RBX: 00007f0fd3a44c90 RCX: 00000000004592c9 [ 46.981738] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 46.988986] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 46.996237] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0fd3a456d4 [ 47.003486] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 47.025028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.039421] FAULT_INJECTION: forcing a failure. [ 47.039421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 47.041153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.056126] CPU: 1 PID: 7156 Comm: syz-executor.4 Not tainted 4.19.113-syzkaller #0 [ 47.061217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.066207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.075230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.082547] Call Trace: [ 47.082561] dump_stack+0x123/0x177 [ 47.082572] should_fail.cold.4+0x5/0x13 [ 47.082579] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 47.082587] ? __lock_acquire+0x792/0x4980 [ 47.082597] __alloc_pages_nodemask+0x1d5/0x710 [ 47.082606] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 47.082618] ? __lock_acquire+0x792/0x4980 [ 47.082628] alloc_pages_current+0xd6/0x1b0 [ 47.082637] skb_page_frag_refill+0x20b/0x400 [ 47.082645] sk_page_frag_refill+0x46/0x1b0 [ 47.093698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.095929] sk_alloc_sg+0x108/0x760 [ 47.105604] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.109291] ? lockdep_hardirqs_on+0x421/0x5c0 [ 47.119347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.123183] ? lock_sock_nested+0x82/0x100 [ 47.123194] alloc_encrypted_sg+0x81/0x100 [ 47.123202] tls_sw_sendpage+0x4f8/0xc00 [ 47.123217] ? tls_sw_sendmsg+0x1020/0x1020 [ 47.123224] ? pipe_lock+0x4f/0x60 [ 47.123236] inet_sendpage+0x122/0x600 [ 47.123243] ? kernel_sendpage+0xd0/0xd0 [ 47.123248] kernel_sendpage+0x60/0xd0 [ 47.123254] ? lock_downgrade+0x860/0x860 [ 47.123258] ? pipe_lock+0x4f/0x60 [ 47.123262] sock_sendpage+0x6d/0xd0 [ 47.123272] pipe_to_sendpage+0x212/0x430 [ 47.123279] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.123291] __splice_from_pipe+0x2cb/0x720 [ 47.123298] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.123306] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.123311] splice_from_pipe+0xbb/0x120 [ 47.123316] ? splice_shrink_spd+0xa0/0xa0 [ 47.123327] ? rw_verify_area+0xb8/0x2b0 [ 47.123335] generic_splice_sendpage+0x10/0x20 [ 47.123340] do_splice+0x4fd/0x12d0 [ 47.123347] ? ksys_dup3+0x2e0/0x2e0 [ 47.123354] ? opipe_prep.part.13+0x320/0x320 [ 47.123361] ? __fget_light+0x174/0x1e0 [ 47.123369] __x64_sys_splice+0x248/0x300 [ 47.123379] do_syscall_64+0xd0/0x4e0 [ 47.123390] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.123396] RIP: 0033:0x4592c9 2020/03/31 04:56:27 executed programs: 6 [ 47.123402] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 47.123405] RSP: 002b:00007f768bc11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 47.123412] RAX: ffffffffffffffda RBX: 00007f768bc11c90 RCX: 00000000004592c9 [ 47.123415] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 47.123418] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 47.123422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f768bc126d4 [ 47.123425] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 47.350217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.358534] FAULT_INJECTION: forcing a failure. [ 47.358534] name failslab, interval 1, probability 0, space 0, times 1 [ 47.367230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.381783] FAULT_INJECTION: forcing a failure. [ 47.381783] name failslab, interval 1, probability 0, space 0, times 1 [ 47.397285] CPU: 1 PID: 7161 Comm: syz-executor.3 Not tainted 4.19.113-syzkaller #0 [ 47.405107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.414462] Call Trace: [ 47.417049] dump_stack+0x123/0x177 [ 47.420671] should_fail.cold.4+0x5/0x13 [ 47.424739] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 47.429846] ? lock_downgrade+0x860/0x860 [ 47.433997] __should_failslab+0xba/0xf0 [ 47.438042] should_failslab+0x9/0x14 [ 47.441832] __kmalloc+0x2dd/0x770 [ 47.445358] ? tls_push_record+0xf3/0x1720 [ 47.449579] ? __sk_mem_schedule+0x5f/0xc0 [ 47.453806] tls_push_record+0xf3/0x1720 [ 47.457850] ? lockdep_hardirqs_on+0x421/0x5c0 [ 47.462425] ? alloc_encrypted_sg+0x81/0x100 [ 47.466816] tls_sw_sendpage+0x458/0xc00 [ 47.470874] ? tls_sw_sendmsg+0x1020/0x1020 [ 47.475544] ? pipe_lock+0x4f/0x60 [ 47.479088] inet_sendpage+0x122/0x600 [ 47.482974] ? kernel_sendpage+0xd0/0xd0 [ 47.487037] kernel_sendpage+0x60/0xd0 [ 47.490917] ? lock_downgrade+0x860/0x860 [ 47.495058] ? pipe_lock+0x4f/0x60 [ 47.498605] sock_sendpage+0x6d/0xd0 [ 47.502324] pipe_to_sendpage+0x212/0x430 [ 47.506472] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.511315] ? kasan_check_write+0x14/0x20 [ 47.515534] ? anon_pipe_buf_release+0x149/0x1f0 [ 47.520300] __splice_from_pipe+0x2cb/0x720 [ 47.524621] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.529468] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.534296] splice_from_pipe+0xbb/0x120 [ 47.538335] ? splice_shrink_spd+0xa0/0xa0 [ 47.542575] ? rw_verify_area+0xb8/0x2b0 [ 47.546646] generic_splice_sendpage+0x10/0x20 [ 47.551227] do_splice+0x4fd/0x12d0 [ 47.554850] ? ksys_dup3+0x2e0/0x2e0 [ 47.558562] ? opipe_prep.part.13+0x320/0x320 [ 47.563054] ? __fget_light+0x174/0x1e0 [ 47.567027] __x64_sys_splice+0x248/0x300 [ 47.571347] do_syscall_64+0xd0/0x4e0 [ 47.575129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.580295] RIP: 0033:0x4592c9 [ 47.583465] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 47.602349] RSP: 002b:00007f2420deec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 47.610035] RAX: ffffffffffffffda RBX: 00007f2420deec90 RCX: 00000000004592c9 [ 47.617306] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 47.624667] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 47.631924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2420def6d4 [ 47.639190] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 47.661022] CPU: 1 PID: 7162 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0 [ 47.668847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.678203] Call Trace: [ 47.680890] dump_stack+0x123/0x177 [ 47.684520] should_fail.cold.4+0x5/0x13 [ 47.688588] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 47.693698] ? lock_downgrade+0x860/0x860 [ 47.697857] __should_failslab+0xba/0xf0 [ 47.701931] should_failslab+0x9/0x14 [ 47.705737] __kmalloc+0x2dd/0x770 [ 47.709286] ? tls_push_record+0xf3/0x1720 [ 47.713524] ? __sk_mem_schedule+0x5f/0xc0 [ 47.717775] tls_push_record+0xf3/0x1720 [ 47.721841] ? lockdep_hardirqs_on+0x421/0x5c0 [ 47.726430] ? alloc_encrypted_sg+0x81/0x100 [ 47.730849] tls_sw_sendpage+0x458/0xc00 [ 47.734899] ? tls_sw_sendmsg+0x1020/0x1020 [ 47.739198] ? pipe_lock+0x4f/0x60 [ 47.742722] inet_sendpage+0x122/0x600 [ 47.746608] ? kernel_sendpage+0xd0/0xd0 [ 47.750647] kernel_sendpage+0x60/0xd0 [ 47.754521] ? lock_downgrade+0x860/0x860 [ 47.758647] ? pipe_lock+0x4f/0x60 [ 47.762172] sock_sendpage+0x6d/0xd0 [ 47.765864] pipe_to_sendpage+0x212/0x430 [ 47.769992] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.774816] ? kasan_check_write+0x14/0x20 [ 47.779033] ? anon_pipe_buf_release+0x149/0x1f0 [ 47.783795] __splice_from_pipe+0x2cb/0x720 [ 47.788120] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.792973] ? generic_pipe_buf_nosteal+0x10/0x10 [ 47.797805] splice_from_pipe+0xbb/0x120 [ 47.801860] ? splice_shrink_spd+0xa0/0xa0 [ 47.806092] ? rw_verify_area+0xb8/0x2b0 [ 47.810135] generic_splice_sendpage+0x10/0x20 [ 47.814699] do_splice+0x4fd/0x12d0 [ 47.818310] ? ksys_dup3+0x2e0/0x2e0 [ 47.822020] ? opipe_prep.part.13+0x320/0x320 [ 47.826519] ? __fget_light+0x174/0x1e0 [ 47.830493] __x64_sys_splice+0x248/0x300 [ 47.834635] do_syscall_64+0xd0/0x4e0 [ 47.838428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.843598] RIP: 0033:0x4592c9 [ 47.846770] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 47.865653] RSP: 002b:00007f0fd3a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 47.873340] RAX: ffffffffffffffda RBX: 00007f0fd3a44c90 RCX: 00000000004592c9 [ 47.880587] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 47.887833] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 47.895082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0fd3a456d4 [ 47.902333] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 47.921971] ================================================================== [ 47.929498] BUG: KASAN: slab-out-of-bounds in scatterwalk_copychunks+0x1e1/0x610 [ 47.937022] Read of size 4094 at addr ffff88809b30a000 by task syz-executor.3/7161 [ 47.944717] [ 47.946475] CPU: 0 PID: 7161 Comm: syz-executor.3 Not tainted 4.19.113-syzkaller #0 [ 47.954260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.963597] Call Trace: [ 47.966170] dump_stack+0x123/0x177 [ 47.969781] print_address_description.cold.8+0x9/0x1ff [ 47.975123] kasan_report.cold.9+0x242/0x309 [ 47.979530] ? scatterwalk_copychunks+0x1e1/0x610 [ 47.984362] check_memory_region+0x13e/0x1b0 [ 47.988747] memcpy+0x23/0x50 [ 47.991839] scatterwalk_copychunks+0x1e1/0x610 [ 47.996520] scatterwalk_map_and_copy+0x128/0x190 [ 48.001355] ? __lock_is_held+0xb5/0x140 [ 48.005532] ? scatterwalk_copychunks+0x610/0x610 [ 48.010383] ? rcu_read_lock_sched_held+0x108/0x120 [ 48.015403] ? __kmalloc+0x5f1/0x770 [ 48.019118] ? gcmaes_encrypt.constprop.15+0x630/0xda0 [ 48.024385] gcmaes_encrypt.constprop.15+0x6d6/0xda0 [ 48.029474] ? tls_push_record+0xf3/0x1720 [ 48.033690] ? tls_sw_sendpage+0x458/0xc00 [ 48.037903] ? inet_sendpage+0x122/0x600 [ 48.041943] ? kernel_sendpage+0x60/0xd0 [ 48.045983] ? sock_sendpage+0x6d/0xd0 [ 48.049863] ? pipe_to_sendpage+0x212/0x430 [ 48.054165] ? gcmaes_crypt_by_sg.constprop.16+0x14c0/0x14c0 [ 48.059947] ? usleep_range+0x130/0x130 [ 48.063907] ? __lock_is_held+0xb5/0x140 [ 48.067950] generic_gcmaes_encrypt+0xfd/0x150 [ 48.072514] ? generic_gcmaes_encrypt+0xfd/0x150 [ 48.077267] ? helper_rfc4106_encrypt+0x450/0x450 [ 48.082102] ? __kmalloc+0x5f1/0x770 [ 48.085821] gcmaes_wrapper_encrypt+0x109/0x180 [ 48.090475] tls_push_record+0x966/0x1720 [ 48.094629] ? sk_stream_kill_queues+0x510/0x510 [ 48.099380] tls_sw_sendpage+0x458/0xc00 [ 48.103439] ? tls_sw_sendmsg+0x1020/0x1020 [ 48.107756] ? pipe_lock+0x4f/0x60 [ 48.111287] inet_sendpage+0x122/0x600 [ 48.115162] ? kernel_sendpage+0xd0/0xd0 [ 48.119209] kernel_sendpage+0x60/0xd0 [ 48.123080] ? lock_downgrade+0x860/0x860 [ 48.127206] ? pipe_lock+0x4f/0x60 [ 48.130725] sock_sendpage+0x6d/0xd0 [ 48.134420] pipe_to_sendpage+0x212/0x430 [ 48.138549] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.143372] ? kasan_check_write+0x14/0x20 [ 48.147596] ? anon_pipe_buf_release+0x149/0x1f0 [ 48.152346] __splice_from_pipe+0x2cb/0x720 [ 48.156646] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.161468] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.166289] splice_from_pipe+0xbb/0x120 [ 48.170330] ? splice_shrink_spd+0xa0/0xa0 [ 48.174546] ? rw_verify_area+0xb8/0x2b0 [ 48.178615] generic_splice_sendpage+0x10/0x20 [ 48.183209] do_splice+0x4fd/0x12d0 [ 48.186828] ? ksys_dup3+0x2e0/0x2e0 [ 48.190522] ? opipe_prep.part.13+0x320/0x320 [ 48.194997] ? __fget_light+0x174/0x1e0 [ 48.198951] __x64_sys_splice+0x248/0x300 [ 48.203080] do_syscall_64+0xd0/0x4e0 [ 48.206861] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.212032] RIP: 0033:0x4592c9 [ 48.215207] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.234093] RSP: 002b:00007f2420deec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 48.241794] RAX: ffffffffffffffda RBX: 00007f2420deec90 RCX: 00000000004592c9 [ 48.249068] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.256324] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 48.263575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2420def6d4 [ 48.270826] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 48.278087] [ 48.279696] Allocated by task 3527: [ 48.283304] save_stack+0x43/0xd0 [ 48.286733] kasan_kmalloc+0xc7/0xe0 [ 48.290424] kasan_slab_alloc+0x12/0x20 [ 48.294374] kmem_cache_alloc+0x12e/0x730 [ 48.298510] getname_flags+0xb8/0x520 [ 48.302300] user_path_at_empty+0x1e/0x40 [ 48.306424] vfs_statx+0xbe/0x150 [ 48.309965] __do_sys_newlstat+0x85/0xe0 [ 48.314004] __x64_sys_newlstat+0x4f/0x70 [ 48.318129] do_syscall_64+0xd0/0x4e0 [ 48.321927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.327094] [ 48.328700] Freed by task 3527: [ 48.331961] save_stack+0x43/0xd0 [ 48.335397] __kasan_slab_free+0x102/0x150 [ 48.339610] kasan_slab_free+0xe/0x10 [ 48.343395] kmem_cache_free+0x83/0x290 [ 48.347352] putname+0xa8/0xe0 [ 48.350528] filename_lookup.part.57+0x1ec/0x360 [ 48.355259] user_path_at_empty+0x39/0x40 [ 48.359385] vfs_statx+0xbe/0x150 [ 48.362818] __do_sys_newlstat+0x85/0xe0 [ 48.366882] __x64_sys_newlstat+0x4f/0x70 [ 48.371035] do_syscall_64+0xd0/0x4e0 [ 48.374822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.379985] [ 48.381596] The buggy address belongs to the object at ffff88809b30aa40 [ 48.381596] which belongs to the cache names_cache of size 4096 [ 48.394328] The buggy address is located 2624 bytes to the left of [ 48.394328] 4096-byte region [ffff88809b30aa40, ffff88809b30ba40) [ 48.406793] The buggy address belongs to the page: [ 48.411716] page:ffffea00026cc280 count:1 mapcount:0 mapping:ffff88821bc47800 index:0x0 compound_mapcount: 0 [ 48.421863] flags: 0x1fffc0000008100(slab|head) [ 48.426519] raw: 01fffc0000008100 ffffea0002178f88 ffffea0002618908 ffff88821bc47800 [ 48.434392] raw: 0000000000000000 ffff88809b30aa40 0000000100000001 0000000000000000 [ 48.442263] page dumped because: kasan: bad access detected [ 48.447949] [ 48.449566] Memory state around the buggy address: [ 48.454489] ffff88809b309f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.461835] ffff88809b309f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.469176] >ffff88809b30a000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.476512] ^ [ 48.479859] ffff88809b30a080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.487195] ffff88809b30a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.494529] ================================================================== [ 48.501868] Disabling lock debugging due to kernel taint [ 48.508588] FAULT_INJECTION: forcing a failure. [ 48.508588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.509594] Kernel panic - not syncing: panic_on_warn set ... [ 48.509594] [ 48.525486] FAULT_INJECTION: forcing a failure. [ 48.525486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.527755] CPU: 0 PID: 7161 Comm: syz-executor.3 Tainted: G B 4.19.113-syzkaller #0 [ 48.527758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.527760] Call Trace: [ 48.527771] dump_stack+0x123/0x177 [ 48.527778] panic+0x1cd/0x375 [ 48.527785] ? __warn_printk+0xd6/0xd6 [ 48.571301] ? do_raw_spin_unlock+0x54/0x260 [ 48.575691] kasan_end_report+0x47/0x4f [ 48.579641] kasan_report.cold.9+0x76/0x309 [ 48.583942] ? scatterwalk_copychunks+0x1e1/0x610 [ 48.588759] check_memory_region+0x13e/0x1b0 [ 48.593144] memcpy+0x23/0x50 [ 48.596228] scatterwalk_copychunks+0x1e1/0x610 [ 48.600879] scatterwalk_map_and_copy+0x128/0x190 [ 48.605722] ? __lock_is_held+0xb5/0x140 [ 48.609769] ? scatterwalk_copychunks+0x610/0x610 [ 48.614593] ? rcu_read_lock_sched_held+0x108/0x120 [ 48.619591] ? __kmalloc+0x5f1/0x770 [ 48.623284] ? gcmaes_encrypt.constprop.15+0x630/0xda0 [ 48.628537] gcmaes_encrypt.constprop.15+0x6d6/0xda0 [ 48.633630] ? tls_push_record+0xf3/0x1720 [ 48.637841] ? tls_sw_sendpage+0x458/0xc00 [ 48.642050] ? inet_sendpage+0x122/0x600 [ 48.646096] ? kernel_sendpage+0x60/0xd0 [ 48.650134] ? sock_sendpage+0x6d/0xd0 [ 48.653995] ? pipe_to_sendpage+0x212/0x430 [ 48.658295] ? gcmaes_crypt_by_sg.constprop.16+0x14c0/0x14c0 [ 48.664091] ? usleep_range+0x130/0x130 [ 48.668069] ? __lock_is_held+0xb5/0x140 [ 48.672120] generic_gcmaes_encrypt+0xfd/0x150 [ 48.676687] ? generic_gcmaes_encrypt+0xfd/0x150 [ 48.681448] ? helper_rfc4106_encrypt+0x450/0x450 [ 48.686270] ? __kmalloc+0x5f1/0x770 [ 48.689966] gcmaes_wrapper_encrypt+0x109/0x180 [ 48.694614] tls_push_record+0x966/0x1720 [ 48.698738] ? sk_stream_kill_queues+0x510/0x510 [ 48.703471] tls_sw_sendpage+0x458/0xc00 [ 48.707510] ? tls_sw_sendmsg+0x1020/0x1020 [ 48.711822] ? pipe_lock+0x4f/0x60 [ 48.715357] inet_sendpage+0x122/0x600 [ 48.719220] ? kernel_sendpage+0xd0/0xd0 [ 48.723259] kernel_sendpage+0x60/0xd0 [ 48.727121] ? lock_downgrade+0x860/0x860 [ 48.731246] ? pipe_lock+0x4f/0x60 [ 48.734759] sock_sendpage+0x6d/0xd0 [ 48.738451] pipe_to_sendpage+0x212/0x430 [ 48.742584] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.747405] ? kasan_check_write+0x14/0x20 [ 48.751616] ? anon_pipe_buf_release+0x149/0x1f0 [ 48.756347] __splice_from_pipe+0x2cb/0x720 [ 48.760659] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.765491] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.770311] splice_from_pipe+0xbb/0x120 [ 48.774362] ? splice_shrink_spd+0xa0/0xa0 [ 48.778577] ? rw_verify_area+0xb8/0x2b0 [ 48.782628] generic_splice_sendpage+0x10/0x20 [ 48.787204] do_splice+0x4fd/0x12d0 [ 48.790821] ? ksys_dup3+0x2e0/0x2e0 [ 48.794524] ? opipe_prep.part.13+0x320/0x320 [ 48.799003] ? __fget_light+0x174/0x1e0 [ 48.802955] __x64_sys_splice+0x248/0x300 [ 48.807086] do_syscall_64+0xd0/0x4e0 [ 48.810880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.816069] RIP: 0033:0x4592c9 [ 48.819245] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.838137] RSP: 002b:00007f2420deec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 48.845840] RAX: ffffffffffffffda RBX: 00007f2420deec90 RCX: 00000000004592c9 [ 48.853128] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.860391] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 48.867649] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2420def6d4 [ 48.874897] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 48.883333] Kernel Offset: disabled [ 48.886955] Rebooting in 86400 seconds..