Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts. 2020/06/07 15:38:27 parsed 1 programs syzkaller login: [ 67.582584][ T3648] kmemleak: Automatic memory scanning thread ended 2020/06/07 15:38:34 executed programs: 0 [ 75.240490][ T25] audit: type=1400 audit(1591544314.873:8): avc: denied { execmem } for pid=6455 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 75.257405][ T6456] IPVS: ftp: loaded support on port[0] = 21 [ 75.286565][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 75.345431][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.353051][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.361070][ T6456] device bridge_slave_0 entered promiscuous mode [ 75.368357][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.376413][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.383789][ T6456] device bridge_slave_1 entered promiscuous mode [ 75.393798][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.403792][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.416270][ T6456] team0: Port device team_slave_0 added [ 75.422497][ T6456] team0: Port device team_slave_1 added [ 75.431372][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.438920][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.465313][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.476408][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.484863][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.511223][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.565521][ T6456] device hsr_slave_0 entered promiscuous mode [ 75.624852][ T6456] device hsr_slave_1 entered promiscuous mode [ 75.703403][ T6456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.735676][ T6456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.795616][ T6456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.855589][ T6456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.899420][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.906791][ T6456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.913999][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.921025][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.938019][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.946720][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.954163][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.962283][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.969816][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.978579][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.986494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.994565][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.001581][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.015570][ T6456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.025951][ T6456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.037440][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.047017][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.054117][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.061766][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.070028][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.078073][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.086027][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.093891][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.101278][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.112239][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.120294][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.128044][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.142746][ T6456] device veth0_vlan entered promiscuous mode [ 76.149328][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.158034][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.166211][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.173533][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.182969][ T6456] device veth1_vlan entered promiscuous mode [ 76.193278][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.201238][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.208970][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.218966][ T6456] device veth0_macvtap entered promiscuous mode [ 76.226575][ T6456] device veth1_macvtap entered promiscuous mode [ 76.236502][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.243704][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.252452][ T6111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.261718][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.269167][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.317747][ T6680] ubi0: attaching mtd0 [ 76.321997][ T6680] ubi0: scanning is finished [ 76.327654][ T6680] ubi0: empty MTD device detected [ 76.365288][ T6680] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 76.372787][ T6680] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 76.380570][ T6680] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 76.387989][ T6680] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 76.395590][ T6680] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 76.402322][ T6680] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 76.410712][ T6680] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3520019690 [ 76.420905][ T6680] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 76.431096][ T6683] ubi0: background thread "ubi_bgt0d" started, PID 6683 2020/06/07 15:38:41 executed programs: 1 [ 82.108694][ T6689] ubi0: detaching mtd0 [ 82.113162][ T6689] ubi0: mtd0 is detached [ 82.118387][ T6689] ubi0: attaching mtd0 [ 82.122592][ T6689] ubi0: scanning is finished [ 82.165119][ T6689] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 82.172629][ T6689] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 82.179948][ T6689] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 82.186903][ T6689] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 82.194635][ T6689] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 82.201431][ T6689] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 82.209467][ T6689] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 82.219463][ T6689] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 82.229352][ T6693] ubi0: background thread "ubi_bgt0d" started, PID 6693 [ 82.241654][ T6695] ubi0: detaching mtd0 [ 82.246143][ T6695] ubi0: mtd0 is detached [ 82.250525][ T6695] ubi0: attaching mtd0 [ 82.254816][ T6695] ubi0: scanning is finished [ 82.294910][ T6695] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 82.302425][ T6695] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 82.310305][ T6695] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 82.317389][ T6695] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 82.324901][ T6695] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 82.331652][ T6695] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 82.339813][ T6695] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 82.349785][ T6695] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 82.359709][ T6701] ubi0: background thread "ubi_bgt0d" started, PID 6701 [ 85.823773][ T0] NOHZ: local_softirq_pending 08 2020/06/07 15:38:47 executed programs: 3 [ 88.046704][ T6706] ubi0: detaching mtd0 [ 88.051307][ T6706] ubi0: mtd0 is detached [ 88.055968][ T6706] ubi0: attaching mtd0 [ 88.060286][ T6706] ubi0: scanning is finished [ 88.103848][ T6706] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 88.111314][ T6706] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 88.118811][ T6706] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 88.126177][ T6706] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 88.133691][ T6706] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 88.140427][ T6706] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 88.148775][ T6706] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 88.159121][ T6706] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 88.169237][ T6709] ubi0: background thread "ubi_bgt0d" started, PID 6709 [ 88.180618][ T6712] ubi0: detaching mtd0 [ 88.185118][ T6712] ubi0: mtd0 is detached [ 88.189514][ T6712] ubi0: attaching mtd0 [ 88.194259][ T6712] ubi0: scanning is finished [ 88.232772][ T6712] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 88.240292][ T6712] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 88.247817][ T6712] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 88.255128][ T6712] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 88.262507][ T6712] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 88.269779][ T6712] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 88.277974][ T6712] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 88.288121][ T6712] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 88.298268][ T6718] ubi0: background thread "ubi_bgt0d" started, PID 6718 2020/06/07 15:38:53 executed programs: 5 [ 93.976815][ T6722] ubi0: detaching mtd0 [ 93.981488][ T6722] ubi0: mtd0 is detached [ 93.986672][ T6722] ubi0: attaching mtd0 [ 93.991039][ T6722] ubi0: scanning is finished [ 94.083045][ T6722] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 94.090514][ T6722] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 94.098130][ T6722] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.105260][ T6722] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 94.112961][ T6722] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.119694][ T6722] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 94.127977][ T6722] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 94.139077][ T6722] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.149258][ T6725] ubi0: background thread "ubi_bgt0d" started, PID 6725 [ 94.160622][ T6728] ubi0: detaching mtd0 [ 94.165097][ T6728] ubi0: mtd0 is detached [ 94.169469][ T6728] ubi0: attaching mtd0 [ 94.174196][ T6728] ubi0: scanning is finished [ 94.205984][ T6728] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 94.219173][ T6728] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 94.226817][ T6728] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.234005][ T6728] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 94.241610][ T6728] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.248756][ T6728] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 94.256979][ T6728] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 94.267634][ T6728] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.278081][ T6734] ubi0: background thread "ubi_bgt0d" started, PID 6734 2020/06/07 15:38:59 executed programs: 7 [ 100.077565][ T6738] ubi0: detaching mtd0 [ 100.082208][ T6738] ubi0: mtd0 is detached [ 100.086580][ T6738] ubi0: attaching mtd0 [ 100.090766][ T6738] ubi0: scanning is finished [ 100.112550][ T6738] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 100.120012][ T6738] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 100.127767][ T6738] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 100.135003][ T6738] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 100.142648][ T6738] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 100.149960][ T6738] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 100.158295][ T6738] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 100.168567][ T6738] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 100.178724][ T6742] ubi0: background thread "ubi_bgt0d" started, PID 6742 [ 100.190923][ T6744] ubi0: detaching mtd0 [ 100.195492][ T6744] ubi0: mtd0 is detached [ 100.199895][ T6744] ubi0: attaching mtd0 [ 100.204176][ T6744] ubi0: scanning is finished [ 100.236313][ T6744] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 100.247877][ T6744] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 100.255561][ T6744] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 100.262618][ T6744] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 100.270431][ T6744] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 100.277296][ T6744] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 100.285281][ T6744] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 100.295357][ T6744] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 100.305293][ T6750] ubi0: background thread "ubi_bgt0d" started, PID 6750 2020/06/07 15:39:05 executed programs: 9 [ 106.133006][ T6754] ubi0: detaching mtd0 [ 106.137804][ T6754] ubi0: mtd0 is detached [ 106.142504][ T6754] ubi0: attaching mtd0 [ 106.146852][ T6754] ubi0: scanning is finished [ 106.181913][ T6754] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 106.189420][ T6754] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 106.196930][ T6754] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 106.203937][ T6754] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 106.211340][ T6754] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 106.218075][ T6754] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 106.226152][ T6754] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 106.236255][ T6754] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 106.246208][ T6758] ubi0: background thread "ubi_bgt0d" started, PID 6758 [ 106.254931][ T6760] ubi0: detaching mtd0 [ 106.259476][ T6760] ubi0: mtd0 is detached [ 106.264445][ T6760] ubi0: attaching mtd0 [ 106.268875][ T6760] ubi0: scanning is finished [ 106.311815][ T6760] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 106.319369][ T6760] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 106.326837][ T6760] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 106.333815][ T6760] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 106.341205][ T6760] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 106.347951][ T6760] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 106.355938][ T6760] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3520019690 [ 106.366367][ T6760] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 106.377171][ T6765] ubi0: background thread "ubi_bgt0d" started, PID 6765 [ 107.685586][ T6768] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88811e8018a0 (size 32): comm "syz-executor.0", pid 6680, jiffies 4294944906 (age 38.240s) hex dump (first 32 bytes): 00 01 00 00 00 00 ad de 22 01 00 00 00 00 ad de ........"....... 00 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 ................ backtrace: [<00000000b29916c2>] erase_aeb+0x25/0x110 [<00000000a6d58b02>] ubi_wl_init+0x193/0x5c0 [<00000000ba2fd998>] ubi_attach+0x611/0x18ba [<00000000b2f43313>] ubi_attach_mtd_dev+0x665/0xcc0 [<00000000a5094701>] ctrl_cdev_ioctl+0x144/0x1b0 [<0000000066746dba>] ksys_ioctl+0xa6/0xd0 [<00000000b2087ce9>] __x64_sys_ioctl+0x1a/0x20 [<00000000ae38bf48>] do_syscall_64+0x6e/0x220 [<000000009aad9b14>] entry_SYSCALL_64_after_hwframe+0x44/0xa9