[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 30.598742] audit: type=1400 audit(1591031981.187:8): avc: denied { execmem } for pid=5966 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 30.840254] IPVS: ftp: loaded support on port[0] = 21 [ 31.989465] can: request_module (can-proto-0) failed. [ 31.998002] can: request_module (can-proto-0) failed. [ 32.024832] audit: type=1400 audit(1591031982.618:9): avc: denied { create } for pid=5946 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts. 2020/06/01 17:19:50 parsed 1 programs 2020/06/01 17:19:50 executed programs: 0 [ 40.361518] audit: type=1400 audit(1591031990.962:10): avc: denied { execmem } for pid=6082 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.684799] IPVS: ftp: loaded support on port[0] = 21 [ 41.473094] IPVS: ftp: loaded support on port[0] = 21 [ 41.516431] chnl_net:caif_netlink_parms(): no params data found [ 41.566494] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.573189] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.581238] device bridge_slave_0 entered promiscuous mode [ 41.590565] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.597691] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.605296] device bridge_slave_1 entered promiscuous mode [ 41.616387] IPVS: ftp: loaded support on port[0] = 21 [ 41.680284] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.697657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.711736] chnl_net:caif_netlink_parms(): no params data found [ 41.746758] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.755133] team0: Port device team_slave_0 added [ 41.767436] IPVS: ftp: loaded support on port[0] = 21 [ 41.776000] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.783316] team0: Port device team_slave_1 added [ 41.829389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.836972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.858276] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.866973] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.874978] device bridge_slave_0 entered promiscuous mode [ 41.892915] chnl_net:caif_netlink_parms(): no params data found [ 41.906724] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.913096] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.920470] device bridge_slave_1 entered promiscuous mode [ 41.955604] device hsr_slave_0 entered promiscuous mode [ 41.993707] device hsr_slave_1 entered promiscuous mode [ 42.036191] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.048118] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.089144] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.097413] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.105256] device bridge_slave_0 entered promiscuous mode [ 42.112222] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.121369] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.136822] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.143555] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.150540] device bridge_slave_1 entered promiscuous mode [ 42.188044] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.194041] IPVS: ftp: loaded support on port[0] = 21 [ 42.197190] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.212417] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.220832] team0: Port device team_slave_0 added [ 42.226905] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.233697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.240790] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.247352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.267369] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.274916] team0: Port device team_slave_1 added [ 42.281869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.295888] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.303204] team0: Port device team_slave_0 added [ 42.312082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.319999] team0: Port device team_slave_1 added [ 42.326786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.335136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.363051] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.416498] device hsr_slave_0 entered promiscuous mode [ 42.453551] device hsr_slave_1 entered promiscuous mode [ 42.506965] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.514160] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.554250] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.571458] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.626614] device hsr_slave_0 entered promiscuous mode [ 42.673490] device hsr_slave_1 entered promiscuous mode [ 42.714393] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.750135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.759684] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.775567] chnl_net:caif_netlink_parms(): no params data found [ 42.776193] IPVS: ftp: loaded support on port[0] = 21 [ 42.788377] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.796473] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.811618] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.883537] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.899255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.908606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.926816] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.932885] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.943979] chnl_net:caif_netlink_parms(): no params data found [ 42.980869] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.988362] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.996804] device bridge_slave_0 entered promiscuous mode [ 43.008239] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.015817] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.022740] device bridge_slave_1 entered promiscuous mode [ 43.048766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.058674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.081525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.089382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.097156] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.103551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.110695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.119403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.127567] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.134062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.143637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.151484] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.162865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.182260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.192890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.212344] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.222173] team0: Port device team_slave_0 added [ 43.228544] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.236425] team0: Port device team_slave_1 added [ 43.242254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.265174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.272035] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.279550] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.287275] device bridge_slave_0 entered promiscuous mode [ 43.294493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.339511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.350807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.358357] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.365459] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.372296] device bridge_slave_1 entered promiscuous mode [ 43.386310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.446809] device hsr_slave_0 entered promiscuous mode [ 43.493561] device hsr_slave_1 entered promiscuous mode [ 43.556363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.564265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.571728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.586131] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.594281] chnl_net:caif_netlink_parms(): no params data found [ 43.605983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.613576] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.620222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.627374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.641648] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.659377] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.666103] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.673500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.683783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.695611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.710451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.718625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.726933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.735318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.746468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.755511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.764014] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.778074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.787129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.796432] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.802426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.816931] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.825717] team0: Port device team_slave_0 added [ 43.831365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.845887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.853228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.866293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.875878] team0: Port device team_slave_1 added [ 43.881032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.890947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.900637] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.909170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.917316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.925516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.933795] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.940129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.947067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.955208] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.969171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.984636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.991665] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.998482] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.005942] device bridge_slave_0 entered promiscuous mode [ 44.012125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.019333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.026348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.035025] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.049553] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.055854] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.062106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.076302] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.083763] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.090798] device bridge_slave_1 entered promiscuous mode [ 44.105538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.117394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.138082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.146260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.155048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.162552] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.169074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.176236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.184307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.225045] device hsr_slave_0 entered promiscuous mode [ 44.263589] device hsr_slave_1 entered promiscuous mode [ 44.303907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.313493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.323682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.331401] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.338894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.346862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.356793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.365150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.373484] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.379824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.387365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.396105] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.405998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.416751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.424593] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.434603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.442457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.450773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.478681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.488505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.498948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.506764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.528502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.536572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.546728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.555867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.564319] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.572460] team0: Port device team_slave_0 added [ 44.580754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.593418] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.601926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.609781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.617923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.626574] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.634587] team0: Port device team_slave_1 added [ 44.640137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.653978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.662151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.675499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.686380] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.692445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.699597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.707439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.718476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.729879] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.751780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.759618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.774472] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.787323] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.793636] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.834959] device hsr_slave_0 entered promiscuous mode [ 44.883125] device hsr_slave_1 entered promiscuous mode [ 44.933011] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.941298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.949574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.956868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.964275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.971844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.983927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.996605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.004939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.025557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.038486] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.045429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.057002] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.066581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.076225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.084113] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.090446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.097716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.106034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.113666] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.120000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.128403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.144555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.151539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.164790] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.175863] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.183011] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.190963] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.201407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.208922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.218688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.229438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.237348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.245076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.253000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.260542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.270189] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.276768] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.304053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.314309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.329132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.337380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.346476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.356977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.365314] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.371640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.379095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.389080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.397173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.405720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.415474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.430623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.438642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.447263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.455371] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.461722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.469140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.477484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.485374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.498401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 2020/06/01 17:19:56 executed programs: 10 [ 45.507206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.516465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.529743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.537047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.547955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.562684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.571868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.591954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.614101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.637652] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.645868] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.651923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.673735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.681861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.690169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.700120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.713814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.727471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.737061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.746129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.754052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.762688] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.771287] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.778140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.792004] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.799020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.808824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.819868] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.829262] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.854420] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.873717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.883370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.900295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.916536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.933478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.942937] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.949302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.957797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.966656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.977896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.986407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.994641] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.000984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.010920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.022095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.037435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.044911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.057006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.064889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.074245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.084466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.093062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.100959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.108874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.119340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.128266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.136390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.147680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.156493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.164933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.184662] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.191615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.207687] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.217677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.394370] vivid-000: kernel_thread() failed 2020/06/01 17:20:01 executed programs: 118 [ 52.066933] ================================================================== [ 52.074617] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x10fd/0x12b0 [ 52.081782] Read of size 4 at addr ffff888098a9ec5c by task syz-executor.1/7622 [ 52.089257] [ 52.090865] CPU: 1 PID: 7622 Comm: syz-executor.1 Not tainted 4.14.182-syzkaller #0 [ 52.098631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.108173] Call Trace: [ 52.110754] dump_stack+0xf7/0x13b [ 52.114273] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 52.119275] print_address_description.cold.7+0x9/0x1c9 [ 52.124704] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 52.129523] kasan_report.cold.8+0x11a/0x2d3 [ 52.133935] __asan_report_load4_noabort+0x14/0x20 [ 52.138848] __vb2_perform_fileio+0x10fd/0x12b0 [ 52.143497] ? vb2_core_poll+0x730/0x730 [ 52.148070] vb2_read+0xf/0x20 [ 52.151242] vb2_fop_read+0x1b6/0x390 [ 52.155031] ? vb2_fop_write+0x390/0x390 [ 52.160126] v4l2_read+0x135/0x240 [ 52.163661] __vfs_read+0xde/0x840 [ 52.167195] ? vfs_copy_file_range+0xb50/0xb50 [ 52.171779] ? fsnotify+0x1160/0x1160 [ 52.175573] ? __inode_security_revalidate+0xd3/0x100 [ 52.180742] ? selinux_file_permission+0x31f/0x3e0 [ 52.185739] ? security_file_permission+0x14f/0x1c0 [ 52.190732] ? rw_verify_area+0xb8/0x2b0 [ 52.194776] vfs_read+0xf5/0x300 [ 52.198142] SyS_read+0x100/0x250 [ 52.201592] ? kernel_write+0x130/0x130 [ 52.205565] ? do_syscall_64+0x4c/0x5b0 [ 52.209530] ? kernel_write+0x130/0x130 [ 52.213492] do_syscall_64+0x1c9/0x5b0 [ 52.217374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.222203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 52.227542] RIP: 0033:0x458da9 [ 52.230917] RSP: 002b:00007f834c01ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.239023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 52.246545] RDX: 0000000000000052 RSI: 0000000020000540 RDI: 0000000000000003 [ 52.253798] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 52.261053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f834c01f6d4 [ 52.268855] R13: 00000000004c4ac8 R14: 00000000004da088 R15: 00000000ffffffff [ 52.276119] [ 52.277739] Allocated by task 7622: [ 52.281359] save_stack_trace+0x16/0x20 [ 52.285312] save_stack+0x43/0xd0 [ 52.288743] kasan_kmalloc+0xc7/0xe0 [ 52.293496] kmem_cache_alloc_trace+0x152/0x7b0 [ 52.298143] __vb2_init_fileio+0x160/0xaf0 [ 52.302438] __vb2_perform_fileio+0xa9f/0x12b0 [ 52.307008] vb2_read+0xf/0x20 [ 52.310273] vb2_fop_read+0x1b6/0x390 [ 52.314052] v4l2_read+0x135/0x240 [ 52.317579] __vfs_read+0xde/0x840 [ 52.321111] vfs_read+0xf5/0x300 [ 52.324486] SyS_read+0x100/0x250 [ 52.327918] do_syscall_64+0x1c9/0x5b0 [ 52.331785] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 52.336950] [ 52.338556] Freed by task 7611: [ 52.341827] save_stack_trace+0x16/0x20 [ 52.345779] save_stack+0x43/0xd0 [ 52.349221] kasan_slab_free+0x71/0xc0 [ 52.353090] kfree+0xcc/0x270 [ 52.356174] __vb2_cleanup_fileio+0xee/0x140 [ 52.360573] vb2_core_queue_release+0xf/0x70 [ 52.364969] _vb2_fop_release+0x1ac/0x280 [ 52.369092] vb2_fop_release+0x66/0xd0 [ 52.372956] vivid_fop_release+0x15f/0x3a0 [ 52.377170] v4l2_release+0xee/0x1a0 [ 52.380869] __fput+0x235/0x750 [ 52.384135] ____fput+0x9/0x10 [ 52.387316] task_work_run+0xeb/0x180 [ 52.391184] exit_to_usermode_loop+0x16a/0x1b0 [ 52.395757] do_syscall_64+0x418/0x5b0 [ 52.399630] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 52.404800] [ 52.406408] The buggy address belongs to the object at ffff888098a9e940 [ 52.406408] which belongs to the cache kmalloc-1024 of size 1024 [ 52.419318] The buggy address is located 796 bytes inside of [ 52.419318] 1024-byte region [ffff888098a9e940, ffff888098a9ed40) [ 52.431263] The buggy address belongs to the page: [ 52.436191] page:ffffea000262a780 count:1 mapcount:0 mapping:ffff888098a9e040 index:0x0 compound_mapcount: 0 [ 52.446526] flags: 0x1fffc0000008100(slab|head) [ 52.451185] raw: 01fffc0000008100 ffff888098a9e040 0000000000000000 0000000100000007 [ 52.459151] raw: ffffea0002608ea0 ffffea00025ea7a0 ffff8880aa800ac0 0000000000000000 [ 52.467025] page dumped because: kasan: bad access detected [ 52.472771] [ 52.474380] Memory state around the buggy address: [ 52.479287] ffff888098a9eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.486624] ffff888098a9eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.493974] >ffff888098a9ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.501315] ^ [ 52.507583] ffff888098a9ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.514925] ffff888098a9ed00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 52.522266] ================================================================== [ 52.529717] Disabling lock debugging due to kernel taint [ 52.542329] Kernel panic - not syncing: panic_on_warn set ... [ 52.542329] [ 52.549705] CPU: 1 PID: 7622 Comm: syz-executor.1 Tainted: G B 4.14.182-syzkaller #0 [ 52.559051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.568400] Call Trace: [ 52.570979] dump_stack+0xf7/0x13b [ 52.574521] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 52.579357] panic+0x1b0/0x36a [ 52.582538] ? add_taint.cold.5+0x11/0x11 [ 52.586678] ? ___preempt_schedule+0x16/0x18 [ 52.591261] ? __vb2_perform_fileio+0x10fd/0x12b0 [ 52.596081] kasan_end_report+0x47/0x4f [ 52.600045] kasan_report.cold.8+0x76/0x2d3 [ 52.604354] __asan_report_load4_noabort+0x14/0x20 [ 52.609271] __vb2_perform_fileio+0x10fd/0x12b0 [ 52.613933] ? vb2_core_poll+0x730/0x730 [ 52.617967] vb2_read+0xf/0x20 [ 52.621132] vb2_fop_read+0x1b6/0x390 [ 52.624905] ? vb2_fop_write+0x390/0x390 [ 52.628939] v4l2_read+0x135/0x240 [ 52.632452] __vfs_read+0xde/0x840 [ 52.635971] ? vfs_copy_file_range+0xb50/0xb50 [ 52.640711] ? fsnotify+0x1160/0x1160 [ 52.644502] ? __inode_security_revalidate+0xd3/0x100 [ 52.649666] ? selinux_file_permission+0x31f/0x3e0 [ 52.654584] ? security_file_permission+0x14f/0x1c0 [ 52.659580] ? rw_verify_area+0xb8/0x2b0 [ 52.663620] vfs_read+0xf5/0x300 [ 52.666962] SyS_read+0x100/0x250 [ 52.670387] ? kernel_write+0x130/0x130 [ 52.674335] ? do_syscall_64+0x4c/0x5b0 [ 52.678302] ? kernel_write+0x130/0x130 [ 52.682248] do_syscall_64+0x1c9/0x5b0 [ 52.686105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.690921] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 52.696082] RIP: 0033:0x458da9 [ 52.699243] RSP: 002b:00007f834c01ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.706926] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 52.714191] RDX: 0000000000000052 RSI: 0000000020000540 RDI: 0000000000000003 [ 52.721443] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 52.728695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f834c01f6d4 [ 52.736023] R13: 00000000004c4ac8 R14: 00000000004da088 R15: 00000000ffffffff [ 52.744768] Kernel Offset: disabled [ 52.748398] Rebooting in 86400 seconds..