[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 33.708056] audit: type=1400 audit(1588438264.590:8): avc: denied { execmem } for pid=5971 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 33.948461] IPVS: ftp: loaded support on port[0] = 21 [ 35.131561] can: request_module (can-proto-0) failed. [ 35.141476] can: request_module (can-proto-0) failed. [ 35.167560] audit: type=1400 audit(1588438266.051:9): avc: denied { create } for pid=5949 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. 2020/05/02 16:51:14 parsed 1 programs 2020/05/02 16:51:14 executed programs: 0 [ 43.507375] audit: type=1400 audit(1588438274.394:10): avc: denied { execmem } for pid=6084 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 43.804434] IPVS: ftp: loaded support on port[0] = 21 [ 44.602553] IPVS: ftp: loaded support on port[0] = 21 [ 44.645752] chnl_net:caif_netlink_parms(): no params data found [ 44.698142] IPVS: ftp: loaded support on port[0] = 21 [ 44.712364] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.719502] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.726798] device bridge_slave_0 entered promiscuous mode [ 44.764751] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.771200] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.778585] device bridge_slave_1 entered promiscuous mode [ 44.814218] chnl_net:caif_netlink_parms(): no params data found [ 44.852303] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.864363] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.888354] IPVS: ftp: loaded support on port[0] = 21 [ 44.900164] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.906660] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.913777] device bridge_slave_0 entered promiscuous mode [ 44.926201] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.935227] team0: Port device team_slave_0 added [ 44.940701] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.947817] team0: Port device team_slave_1 added [ 44.952796] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.959741] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.966856] device bridge_slave_1 entered promiscuous mode [ 44.989618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.000992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.048180] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.059751] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.100782] chnl_net:caif_netlink_parms(): no params data found [ 45.145587] device hsr_slave_0 entered promiscuous mode [ 45.183459] device hsr_slave_1 entered promiscuous mode [ 45.227732] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.239987] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.247687] team0: Port device team_slave_0 added [ 45.248418] IPVS: ftp: loaded support on port[0] = 21 [ 45.252883] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.272827] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.280412] team0: Port device team_slave_1 added [ 45.286357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.300298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.327334] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.334216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.341397] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.347851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.386660] device hsr_slave_0 entered promiscuous mode [ 45.423583] device hsr_slave_1 entered promiscuous mode [ 45.463799] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.497047] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.504807] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.511161] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.518838] device bridge_slave_0 entered promiscuous mode [ 45.525994] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.532344] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.540319] device bridge_slave_1 entered promiscuous mode [ 45.564457] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.574058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.647977] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.654479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.661045] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.667432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.679689] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.687525] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.695110] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.701685] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.712333] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.720109] team0: Port device team_slave_0 added [ 45.726567] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.734800] team0: Port device team_slave_1 added [ 45.741921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.765358] IPVS: ftp: loaded support on port[0] = 21 [ 45.774583] chnl_net:caif_netlink_parms(): no params data found [ 45.783337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.866318] device hsr_slave_0 entered promiscuous mode [ 45.903313] device hsr_slave_1 entered promiscuous mode [ 45.998997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.005897] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.021940] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.044435] chnl_net:caif_netlink_parms(): no params data found [ 46.061280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.080568] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.095897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.104454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.129371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.143408] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.149490] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.155661] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.162039] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.169996] device bridge_slave_0 entered promiscuous mode [ 46.179855] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.186268] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.193289] device bridge_slave_1 entered promiscuous mode [ 46.206975] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.217781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.244521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.252537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.261681] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.268108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.276636] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.290754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.299585] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.306132] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.313117] device bridge_slave_0 entered promiscuous mode [ 46.320002] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.326466] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.333715] device bridge_slave_1 entered promiscuous mode [ 46.340386] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.349528] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.362670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.379198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.386444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.393951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.401564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.410040] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.416424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.427418] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.433813] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.445748] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.452768] team0: Port device team_slave_0 added [ 46.461268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.476215] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.486302] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.494692] team0: Port device team_slave_1 added [ 46.499935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.509338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.518947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.526833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.536045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.547384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.556127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.564118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.571812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.579557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.587525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.595408] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.601755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.622341] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.629955] team0: Port device team_slave_0 added [ 46.638051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.649197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.659154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.666315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.673861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.681584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.689404] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.695816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.702601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.711052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.719969] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.729575] team0: Port device team_slave_1 added [ 46.735405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.743419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.817780] device hsr_slave_0 entered promiscuous mode [ 46.863041] device hsr_slave_1 entered promiscuous mode [ 46.903390] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.911409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.978221] chnl_net:caif_netlink_parms(): no params data found [ 46.990857] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.002417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.027988] device hsr_slave_0 entered promiscuous mode [ 47.083139] device hsr_slave_1 entered promiscuous mode [ 47.143733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.150909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.159250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.182557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.189768] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.198399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.211290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.219230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.227717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.237160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.245111] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.256829] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.266081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.279103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.286719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.295534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.303938] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.309953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.327692] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.335544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.348132] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.358938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.367298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.377153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.390051] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.396713] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.403946] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.410976] device bridge_slave_0 entered promiscuous mode [ 47.419234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.427593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.435332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.442180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.461803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.474241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.483840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.491918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.506837] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.515429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.525730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.533169] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.541326] device bridge_slave_1 entered promiscuous mode [ 47.555474] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.569725] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.578165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.587169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.596775] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.603385] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.611848] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.620373] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.631448] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.638114] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.648803] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.663881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.672416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.679324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.687328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.695832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.704110] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.710454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.717917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.728816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.739570] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.747868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.764731] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 47.773936] team0: Port device team_slave_0 added [ 47.780114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.788358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.796582] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.803004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.810575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.820470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.828665] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.835075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.841990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.875586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.885651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.894622] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 47.901867] team0: Port device team_slave_1 added [ 47.911040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.919353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.927849] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.934238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.942018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.953630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.961419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.970510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.979940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.988639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.998998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.007219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.016783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.031001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.046718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.058117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.072327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.082044] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.109315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.124265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.131778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.141039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.151702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.206162] device hsr_slave_0 entered promiscuous mode [ 48.225506] device hsr_slave_1 entered promiscuous mode [ 48.253159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.260131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.267375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.274480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.282100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.291391] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.299781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.310536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.317747] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.328516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.335526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.342311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.349885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.357358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.365211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.374733] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.380802] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.390248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.403224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.413369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.427790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.435893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.447638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.462744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.476625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.493987] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.500050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.515143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.523317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.530843] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.537523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.546481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.554796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.564552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.575625] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.581889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.590923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.598417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.607264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.615757] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.622120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.632198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.641764] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.650837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.662737] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.671595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.693835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 2020/05/02 16:51:19 executed programs: 13 [ 48.706978] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.729308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.739227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.751687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.759922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.771646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.779852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.789261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.798213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.809542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.817369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.825256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.833712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.844547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.852135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.863933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.875942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.886637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.899539] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.909442] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.916969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.929572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.937593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.947214] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.954552] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.966340] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.979506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.991181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.999471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.007291] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.013696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.028179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.036017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.043956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.051660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.059456] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.065964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.076156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.088724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 49.102749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.127561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 49.139440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.159082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.167475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.181962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.199291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.208678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.217203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.225592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.236872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.246968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.254962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.263973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.271326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.280067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.289150] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.296474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.311247] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 49.322112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.463994] ================================================================== [ 53.471779] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 53.478970] Read of size 4 at addr ffff8880a9e2e7dc by task syz-executor.2/7453 [ 53.486410] [ 53.488022] CPU: 0 PID: 7453 Comm: syz-executor.2 Not tainted 4.14.178-syzkaller #0 [ 53.495801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.505300] Call Trace: [ 53.507882] dump_stack+0xf7/0x13b [ 53.511412] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 53.516262] print_address_description.cold.7+0x9/0x1c9 [ 53.522144] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 53.526968] kasan_report.cold.8+0x11a/0x2d3 [ 53.531373] __asan_report_load4_noabort+0x14/0x20 [ 53.536288] __vb2_perform_fileio+0x10fd/0x12b0 [ 53.541027] ? vb2_core_poll+0x730/0x730 [ 53.545070] vb2_read+0xf/0x20 [ 53.548252] vb2_fop_read+0x1b6/0x390 [ 53.552046] ? vb2_fop_write+0x390/0x390 [ 53.556098] v4l2_read+0x135/0x240 [ 53.559629] __vfs_read+0xde/0x840 [ 53.563159] ? vfs_copy_file_range+0xb50/0xb50 [ 53.567725] ? fsnotify+0x1160/0x1160 [ 53.571779] ? __inode_security_revalidate+0xd3/0x100 [ 53.576961] ? selinux_file_permission+0x31f/0x3e0 [ 53.581884] ? security_file_permission+0x14f/0x1c0 [ 53.586899] ? rw_verify_area+0xb8/0x2b0 [ 53.591060] vfs_read+0xf5/0x300 [ 53.594413] SyS_read+0x100/0x250 [ 53.597858] ? kernel_write+0x130/0x130 [ 53.602333] ? do_syscall_64+0x4c/0x5b0 [ 53.606287] ? kernel_write+0x130/0x130 [ 53.610247] do_syscall_64+0x1c9/0x5b0 [ 53.614129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.618965] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.624133] RIP: 0033:0x458da9 [ 53.627298] RSP: 002b:00007f3a34d77c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.634984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 53.642232] RDX: 0000000000000052 RSI: 0000000020000540 RDI: 0000000000000003 [ 53.649598] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 53.656857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a34d786d4 [ 53.664113] R13: 00000000004c4ac8 R14: 00000000004da088 R15: 00000000ffffffff [ 53.672159] [ 53.673785] Allocated by task 7451: [ 53.677424] save_stack_trace+0x16/0x20 [ 53.681380] save_stack+0x43/0xd0 [ 53.684827] kasan_kmalloc+0xc7/0xe0 [ 53.688960] kmem_cache_alloc_trace+0x152/0x7b0 [ 53.693611] __vb2_init_fileio+0x160/0xaf0 [ 53.697822] __vb2_perform_fileio+0xa9f/0x12b0 [ 53.702409] vb2_read+0xf/0x20 [ 53.705597] vb2_fop_read+0x1b6/0x390 [ 53.709409] v4l2_read+0x135/0x240 [ 53.712935] __vfs_read+0xde/0x840 [ 53.716459] vfs_read+0xf5/0x300 [ 53.719802] SyS_read+0x100/0x250 [ 53.723235] do_syscall_64+0x1c9/0x5b0 [ 53.727102] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.732278] [ 53.733889] Freed by task 7457: [ 53.737509] save_stack_trace+0x16/0x20 [ 53.741463] save_stack+0x43/0xd0 [ 53.744900] kasan_slab_free+0x71/0xc0 [ 53.748780] kfree+0xcc/0x270 [ 53.751864] __vb2_cleanup_fileio+0xee/0x140 [ 53.756260] vb2_core_queue_release+0xf/0x70 [ 53.760646] _vb2_fop_release+0x1ac/0x280 [ 53.764865] vb2_fop_release+0x66/0xd0 [ 53.768746] vivid_fop_release+0x15f/0x3a0 [ 53.773138] v4l2_release+0xee/0x1a0 [ 53.776847] __fput+0x235/0x750 [ 53.780257] ____fput+0x9/0x10 [ 53.783524] task_work_run+0xeb/0x180 [ 53.787323] exit_to_usermode_loop+0x16a/0x1b0 [ 53.791883] do_syscall_64+0x418/0x5b0 [ 53.795955] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.801137] [ 53.802754] The buggy address belongs to the object at ffff8880a9e2e4c0 [ 53.802754] which belongs to the cache kmalloc-1024 of size 1024 [ 53.815655] The buggy address is located 796 bytes inside of [ 53.815655] 1024-byte region [ffff8880a9e2e4c0, ffff8880a9e2e8c0) [ 53.827593] The buggy address belongs to the page: [ 53.832513] page:ffffea0002a78b80 count:1 mapcount:0 mapping:ffff8880a9e2e040 index:0x0 compound_mapcount: 0 [ 53.842588] flags: 0x1fffc0000008100(slab|head) [ 53.847244] raw: 01fffc0000008100 ffff8880a9e2e040 0000000000000000 0000000100000007 [ 53.855141] raw: ffffea00026b1920 ffffea0002a775a0 ffff8880aa800ac0 0000000000000000 [ 53.863111] page dumped because: kasan: bad access detected [ 53.868807] [ 53.870414] Memory state around the buggy address: [ 53.875342] ffff8880a9e2e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.882684] ffff8880a9e2e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.890044] >ffff8880a9e2e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.897466] ^ [ 53.903684] ffff8880a9e2e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.911039] ffff8880a9e2e880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 53.918374] ================================================================== [ 53.925710] Disabling lock debugging due to kernel taint [ 53.972554] Kernel panic - not syncing: panic_on_warn set ... [ 53.972554] [ 53.979945] CPU: 0 PID: 7453 Comm: syz-executor.2 Tainted: G B 4.14.178-syzkaller #0 [ 53.988966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.998319] Call Trace: [ 54.000905] dump_stack+0xf7/0x13b [ 54.004526] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 54.009362] panic+0x1b0/0x36a [ 54.012543] ? add_taint.cold.5+0x11/0x11 [ 54.016686] ? ___preempt_schedule+0x16/0x18 [ 54.021093] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 54.025928] kasan_end_report+0x47/0x4f [ 54.029882] kasan_report.cold.8+0x76/0x2d3 [ 54.034290] __asan_report_load4_noabort+0x14/0x20 [ 54.039210] __vb2_perform_fileio+0x10fd/0x12b0 [ 54.044393] ? vb2_core_poll+0x730/0x730 [ 54.048460] vb2_read+0xf/0x20 [ 54.051633] vb2_fop_read+0x1b6/0x390 [ 54.055429] ? vb2_fop_write+0x390/0x390 [ 54.060608] v4l2_read+0x135/0x240 [ 54.064156] __vfs_read+0xde/0x840 [ 54.067683] ? vfs_copy_file_range+0xb50/0xb50 [ 54.072247] ? fsnotify+0x1160/0x1160 [ 54.076121] ? __inode_security_revalidate+0xd3/0x100 [ 54.081298] ? selinux_file_permission+0x31f/0x3e0 [ 54.086211] ? security_file_permission+0x14f/0x1c0 [ 54.091216] ? rw_verify_area+0xb8/0x2b0 [ 54.095263] vfs_read+0xf5/0x300 [ 54.098614] SyS_read+0x100/0x250 [ 54.102041] ? kernel_write+0x130/0x130 [ 54.106026] ? do_syscall_64+0x4c/0x5b0 [ 54.109981] ? kernel_write+0x130/0x130 [ 54.114117] do_syscall_64+0x1c9/0x5b0 [ 54.118008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.122849] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 54.128024] RIP: 0033:0x458da9 [ 54.131206] RSP: 002b:00007f3a34d77c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.138888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 54.146134] RDX: 0000000000000052 RSI: 0000000020000540 RDI: 0000000000000003 [ 54.153877] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 54.161133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a34d786d4 [ 54.168384] R13: 00000000004c4ac8 R14: 00000000004da088 R15: 00000000ffffffff [ 54.176976] Kernel Offset: disabled [ 54.180592] Rebooting in 86400 seconds..