[ 36.824104][ T26] audit: type=1800 audit(1555733670.450:27): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.846073][ T26] audit: type=1800 audit(1555733670.450:28): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.314758][ T26] audit: type=1800 audit(1555733671.000:29): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.334283][ T26] audit: type=1800 audit(1555733671.000:30): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.197' (ECDSA) to the list of known hosts. 2019/04/20 04:15:54 parsed 1 programs 2019/04/20 04:15:56 executed programs: 0 syzkaller login: [ 122.893329][ T7709] IPVS: ftp: loaded support on port[0] = 21 [ 122.911570][ T7711] IPVS: ftp: loaded support on port[0] = 21 [ 122.934723][ T7714] IPVS: ftp: loaded support on port[0] = 21 [ 122.940530][ T7717] IPVS: ftp: loaded support on port[0] = 21 [ 122.946315][ T7715] IPVS: ftp: loaded support on port[0] = 21 [ 123.039291][ T7718] IPVS: ftp: loaded support on port[0] = 21 [ 123.229675][ T7714] chnl_net:caif_netlink_parms(): no params data found [ 123.305748][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 123.326037][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 123.369399][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.377187][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.385585][ T7714] device bridge_slave_0 entered promiscuous mode [ 123.394541][ T7715] chnl_net:caif_netlink_parms(): no params data found [ 123.426235][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.433667][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.441869][ T7714] device bridge_slave_1 entered promiscuous mode [ 123.484959][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.492125][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.499942][ T7711] device bridge_slave_0 entered promiscuous mode [ 123.513511][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.520754][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.529021][ T7711] device bridge_slave_1 entered promiscuous mode [ 123.574197][ T7714] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 123.602810][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 123.620550][ T7714] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.629140][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.638499][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.646721][ T7709] device bridge_slave_0 entered promiscuous mode [ 123.669542][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.676884][ T7715] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.685899][ T7715] device bridge_slave_0 entered promiscuous mode [ 123.698647][ T7711] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 123.713847][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.721409][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.729208][ T7709] device bridge_slave_1 entered promiscuous mode [ 123.744893][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.754253][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.762275][ T7715] device bridge_slave_1 entered promiscuous mode [ 123.779892][ T7711] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.804431][ T7709] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 123.829169][ T7714] team0: Port device team_slave_0 added [ 123.840385][ T7718] chnl_net:caif_netlink_parms(): no params data found [ 123.850144][ T7709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.873553][ T7715] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 123.884799][ T7714] team0: Port device team_slave_1 added [ 123.893773][ T7715] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.927362][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.934772][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.943380][ T7717] device bridge_slave_0 entered promiscuous mode [ 123.957950][ T7711] team0: Port device team_slave_0 added [ 123.974559][ T7709] team0: Port device team_slave_0 added [ 123.982330][ T7711] team0: Port device team_slave_1 added [ 123.997198][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.005749][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.014597][ T7717] device bridge_slave_1 entered promiscuous mode [ 124.027040][ T7709] team0: Port device team_slave_1 added [ 124.055013][ T7715] team0: Port device team_slave_0 added [ 124.134253][ T7714] device hsr_slave_0 entered promiscuous mode [ 124.172485][ T7714] device hsr_slave_1 entered promiscuous mode [ 124.226249][ T7717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.236095][ T7715] team0: Port device team_slave_1 added [ 124.261300][ T7717] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.315168][ T7709] device hsr_slave_0 entered promiscuous mode [ 124.361382][ T7709] device hsr_slave_1 entered promiscuous mode [ 124.401464][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.408683][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.417269][ T7718] device bridge_slave_0 entered promiscuous mode [ 124.473822][ T7711] device hsr_slave_0 entered promiscuous mode [ 124.511470][ T7711] device hsr_slave_1 entered promiscuous mode [ 124.577667][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.585544][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.596794][ T7718] device bridge_slave_1 entered promiscuous mode [ 124.616781][ T7718] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.626631][ T7717] team0: Port device team_slave_0 added [ 124.634228][ T7717] team0: Port device team_slave_1 added [ 124.692783][ T7715] device hsr_slave_0 entered promiscuous mode [ 124.732232][ T7715] device hsr_slave_1 entered promiscuous mode [ 124.792683][ T7718] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.814821][ T7718] team0: Port device team_slave_0 added [ 124.884319][ T7717] device hsr_slave_0 entered promiscuous mode [ 124.921387][ T7717] device hsr_slave_1 entered promiscuous mode [ 124.962325][ T7718] team0: Port device team_slave_1 added [ 125.093911][ T7718] device hsr_slave_0 entered promiscuous mode [ 125.131228][ T7718] device hsr_slave_1 entered promiscuous mode [ 125.203732][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.249883][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.262769][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.280901][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.295103][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.312937][ T7714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.339763][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.350191][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.359064][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.366265][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.374503][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.383585][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.392018][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.399162][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.407366][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.431241][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.438960][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.464338][ T7715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.478024][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.491263][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.499915][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.508072][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.516969][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.525883][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.534757][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.545406][ T7714] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.564750][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.572821][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.582963][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.591439][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.598493][ T7723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.606456][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.615213][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.623771][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.632344][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.640621][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.647714][ T7723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.655931][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.677655][ T7709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.688517][ T7709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.709115][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.717359][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.725781][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.734276][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.743591][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.752223][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.760322][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.768897][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.777190][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.784290][ T7723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.792074][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.799764][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.810154][ T7715] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.834510][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.848734][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.857944][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.875337][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.882463][ T7726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.890195][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.898898][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.907323][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.916049][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.943294][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.954774][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.962834][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.971929][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.980279][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.987433][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.995150][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.003951][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.012441][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.021038][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.029438][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.036717][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.044506][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.053589][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.062435][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.070791][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.079564][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.092400][ T7709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.099566][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.119717][ T7718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.135836][ T7715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.146856][ T7715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.173590][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.187051][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.196825][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.210001][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.219834][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.228386][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.236734][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.245064][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.253705][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.262501][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.270586][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.279220][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.287800][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.296196][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.304566][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.315575][ T7717] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.327797][ T7714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.339773][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.356109][ T7711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.367552][ T7711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.382701][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.390449][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.405933][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.420771][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.437356][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.446650][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.462969][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.476187][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.517834][ T7714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.567789][ T7718] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.578132][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.587265][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.596598][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.608506][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.615625][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.633647][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.642728][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.652726][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.659799][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.678670][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.686826][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.695253][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.705778][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.715082][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.731660][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.746004][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.772278][ T7715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.787703][ T7717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.799286][ T7717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.820200][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.829510][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.848403][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.857953][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.876196][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.883328][ T7726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.893780][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.903443][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.911844][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.918901][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.926653][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.935456][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.943996][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.952694][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.963499][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.972216][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.987306][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.995645][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.036563][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.045942][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.078916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.106326][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.136804][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.187087][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.209669][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.226564][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.246652][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.256100][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.265892][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.275941][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.306443][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.332449][ T7718] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/04/20 04:16:01 executed programs: 40 2019/04/20 04:16:06 executed programs: 287 [ 134.113741][ T9071] ================================================================== [ 134.122133][ T9071] BUG: KASAN: stack-out-of-bounds in __ip_options_echo+0x294/0x1120 [ 134.130130][ T9071] Write of size 69 at addr ffff88808958f068 by task syz-executor.1/9071 [ 134.138555][ T9071] [ 134.140904][ T9071] CPU: 1 PID: 9071 Comm: syz-executor.1 Not tainted 5.1.0-rc5+ #76 [ 134.148825][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.158913][ T9071] Call Trace: [ 134.162224][ T9071] dump_stack+0x172/0x1f0 [ 134.166561][ T9071] ? __ip_options_echo+0x294/0x1120 [ 134.171857][ T9071] print_address_description.cold+0x7c/0x20d [ 134.177843][ T9071] ? __ip_options_echo+0x294/0x1120 [ 134.183248][ T9071] ? __ip_options_echo+0x294/0x1120 [ 134.188464][ T9071] kasan_report.cold+0x1b/0x40 [ 134.193249][ T9071] ? find_held_lock+0x1/0x130 [ 134.193289][ T9071] ? __ip_options_echo+0x294/0x1120 [ 134.193305][ T9071] check_memory_region+0x123/0x190 [ 134.193321][ T9071] memcpy+0x38/0x50 [ 134.193333][ T9071] __ip_options_echo+0x294/0x1120 [ 134.193352][ T9071] __icmp_send+0x725/0x1400 [ 134.193372][ T9071] ? icmp_route_lookup.constprop.0+0x1570/0x1570 [ 134.193386][ T9071] ? __lock_acquire+0x548/0x3fb0 [ 134.203676][ T9071] ? __lock_acquire+0x548/0x3fb0 [ 134.203702][ T9071] ? ipv4_link_failure+0x210/0x550 [ 134.203716][ T9071] ? find_held_lock+0x35/0x130 [ 134.203738][ T9071] ? ipv4_link_failure+0x210/0x550 [ 134.253973][ T9071] ? lock_downgrade+0x880/0x880 [ 134.258857][ T9071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.265112][ T9071] ipv4_link_failure+0x29f/0x550 [ 134.265128][ T9071] ? ipv4_link_failure+0x29f/0x550 [ 134.265152][ T9071] ? update_or_create_fnhe+0x16d0/0x16d0 [ 134.265175][ T9071] ? kasan_check_read+0x11/0x20 [ 134.275243][ T9071] ? update_or_create_fnhe+0x16d0/0x16d0 [ 134.275261][ T9071] vti6_tnl_xmit+0x10d4/0x1c0c [ 134.275279][ T9071] ? __lock_acquire+0x548/0x3fb0 [ 134.275307][ T9071] ? vti6_rcv+0x970/0x970 [ 134.301346][ T9071] dev_hard_start_xmit+0x1b2/0x980 [ 134.301370][ T9071] __dev_queue_xmit+0x271d/0x3060 [ 134.301388][ T9071] ? __lock_acquire+0x548/0x3fb0 [ 134.301407][ T9071] ? netdev_pick_tx+0x300/0x300 [ 134.320804][ T9071] ? mark_held_locks+0xf0/0xf0 [ 134.330411][ T9071] ? lockdep_hardirqs_on+0x418/0x5d0 [ 134.336195][ T9071] ? __local_bh_enable_ip+0x15a/0x270 [ 134.341584][ T9071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.348193][ T9071] dev_queue_xmit+0x18/0x20 [ 134.352708][ T9071] ? dev_queue_xmit+0x18/0x20 [ 134.357392][ T9071] neigh_direct_output+0x16/0x20 [ 134.362377][ T9071] ip_finish_output2+0x949/0x1740 [ 134.367418][ T9071] ? ip_output+0x44b/0x670 [ 134.371942][ T9071] ? ip_copy_metadata+0xcb0/0xcb0 [ 134.376986][ T9071] ip_finish_output+0x73c/0xd50 [ 134.381836][ T9071] ? ip_finish_output+0x73c/0xd50 [ 134.381856][ T9071] ip_output+0x21f/0x670 [ 134.381873][ T9071] ? ip_mc_output+0xf70/0xf70 [ 134.381892][ T9071] ? ip_fragment.constprop.0+0x240/0x240 [ 134.381916][ T9071] ? kasan_check_read+0x11/0x20 [ 134.391171][ T9071] raw_sendmsg+0x1d2b/0x2f20 [ 134.391194][ T9071] ? compat_raw_getsockopt+0x100/0x100 [ 134.391208][ T9071] ? __switch_to_asm+0x34/0x70 [ 134.391219][ T9071] ? __switch_to_asm+0x40/0x70 [ 134.391239][ T9071] ? __schedule+0x81b/0x1cc0 [ 134.426222][ T9071] ? raw_bind+0x5d0/0x5d0 [ 134.426251][ T9071] ? tomoyo_socket_sendmsg_permission+0x147/0x3b8 [ 134.426269][ T9071] ? tomoyo_socket_bind_permission+0x340/0x340 [ 134.426284][ T9071] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 134.426308][ T9071] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 134.454450][ T9071] ? futex_wait+0x482/0x5e0 [ 134.464737][ T9071] inet_sendmsg+0x147/0x5d0 [ 134.470040][ T9071] ? inet_sendmsg+0x147/0x5d0 [ 134.474724][ T9071] ? ipip_gro_receive+0x100/0x100 [ 134.479755][ T9071] sock_sendmsg+0xdd/0x130 [ 134.484181][ T9071] sock_write_iter+0x27c/0x3e0 [ 134.488980][ T9071] ? sock_sendmsg+0x130/0x130 [ 134.493682][ T9071] ? __fget+0x35a/0x550 [ 134.497851][ T9071] ? find_held_lock+0x35/0x130 [ 134.502800][ T9071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 134.509049][ T9071] ? iov_iter_init+0xee/0x220 [ 134.513744][ T9071] new_sync_write+0x4c7/0x760 [ 134.518449][ T9071] ? default_llseek+0x2e0/0x2e0 [ 134.523321][ T9071] ? __fget+0x381/0x550 [ 134.527498][ T9071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.533751][ T9071] ? security_file_permission+0x94/0x380 [ 134.539492][ T9071] __vfs_write+0xe4/0x110 [ 134.544008][ T9071] vfs_write+0x20c/0x580 [ 134.548264][ T9071] ksys_write+0x14f/0x2d0 [ 134.552641][ T9071] ? __ia32_sys_read+0xb0/0xb0 [ 134.557501][ T9071] ? do_syscall_64+0x26/0x610 [ 134.562180][ T9071] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 134.562195][ T9071] ? do_syscall_64+0x26/0x610 [ 134.562216][ T9071] __x64_sys_write+0x73/0xb0 [ 134.562233][ T9071] do_syscall_64+0x103/0x610 [ 134.562253][ T9071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 134.582373][ T9071] RIP: 0033:0x458c29 [ 134.582389][ T9071] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 134.582397][ T9071] RSP: 002b:00007fdf1e9e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.582411][ T9071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 134.582419][ T9071] RDX: 0000000000000014 RSI: 00000000200002c0 RDI: 0000000000000003 [ 134.582436][ T9071] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 134.582444][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf1e9e56d4 [ 134.582452][ T9071] R13: 00000000004c8623 R14: 00000000004ded68 R15: 00000000ffffffff [ 134.582471][ T9071] [ 134.597438][ T3877] kobject: 'loop0' (0000000023ae957d): kobject_uevent_env [ 134.611846][ T9071] The buggy address belongs to the page: [ 134.611866][ T9071] page:ffffea00022563c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 134.611876][ T9071] flags: 0x1fffc0000000000() [ 134.611893][ T9071] raw: 01fffc0000000000 0000000000000000 ffffffff02250101 0000000000000000 [ 134.611908][ T9071] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 134.611913][ T9071] page dumped because: kasan: bad access detected [ 134.611917][ T9071] [ 134.611920][ T9071] Memory state around the buggy address: [ 134.611931][ T9071] ffff88808958ef80: 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 f2 [ 134.611940][ T9071] ffff88808958f000: f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.611949][ T9071] >ffff88808958f080: 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 134.611955][ T9071] ^ [ 134.611964][ T9071] ffff88808958f100: 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 00 [ 134.611973][ T9071] ffff88808958f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.611977][ T9071] ================================================================== [ 134.611982][ T9071] Disabling lock debugging due to kernel taint [ 134.612054][ T9071] Kernel panic - not syncing: panic_on_warn set ... [ 134.643701][ T3877] kobject: 'loop0' (0000000023ae957d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 134.644487][ T9071] CPU: 1 PID: 9071 Comm: syz-executor.1 Tainted: G B 5.1.0-rc5+ #76 [ 134.656925][ T3877] kobject: 'loop3' (00000000d62c189c): kobject_uevent_env [ 134.660463][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.670880][ T3877] kobject: 'loop3' (00000000d62c189c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 134.675789][ T9071] Call Trace: [ 134.836610][ T9071] dump_stack+0x172/0x1f0 [ 134.840942][ T9071] panic+0x2cb/0x65c [ 134.844972][ T9071] ? __warn_printk+0xf3/0xf3 [ 134.849570][ T9071] ? trace_hardirqs_on+0x5e/0x230 [ 134.854580][ T9071] ? trace_hardirqs_on+0x5e/0x230 [ 134.861049][ T9071] ? __ip_options_echo+0x294/0x1120 [ 134.866354][ T9071] end_report+0x47/0x4f [ 134.870607][ T9071] ? __ip_options_echo+0x294/0x1120 [ 134.875940][ T9071] kasan_report.cold+0xe/0x40 [ 134.880617][ T9071] ? find_held_lock+0x1/0x130 [ 134.885311][ T9071] ? __ip_options_echo+0x294/0x1120 [ 134.890536][ T9071] check_memory_region+0x123/0x190 [ 134.895667][ T9071] memcpy+0x38/0x50 [ 134.899472][ T9071] __ip_options_echo+0x294/0x1120 [ 134.904588][ T9071] __icmp_send+0x725/0x1400 [ 134.909107][ T9071] ? icmp_route_lookup.constprop.0+0x1570/0x1570 [ 134.915458][ T9071] ? __lock_acquire+0x548/0x3fb0 [ 134.920416][ T9071] ? __lock_acquire+0x548/0x3fb0 [ 134.926595][ T9071] ? ipv4_link_failure+0x210/0x550 [ 134.931716][ T9071] ? find_held_lock+0x35/0x130 [ 134.936941][ T9071] ? ipv4_link_failure+0x210/0x550 [ 134.942669][ T9071] ? lock_downgrade+0x880/0x880 [ 134.947524][ T9071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.953773][ T9071] ipv4_link_failure+0x29f/0x550 [ 134.958733][ T9071] ? ipv4_link_failure+0x29f/0x550 [ 134.963870][ T9071] ? update_or_create_fnhe+0x16d0/0x16d0 [ 134.969510][ T9071] ? kasan_check_read+0x11/0x20 [ 134.974475][ T9071] ? update_or_create_fnhe+0x16d0/0x16d0 [ 134.980128][ T9071] vti6_tnl_xmit+0x10d4/0x1c0c [ 134.984927][ T9071] ? __lock_acquire+0x548/0x3fb0 [ 134.990595][ T9071] ? vti6_rcv+0x970/0x970 [ 134.996823][ T9071] dev_hard_start_xmit+0x1b2/0x980 [ 135.001967][ T9071] __dev_queue_xmit+0x271d/0x3060 [ 135.007029][ T9071] ? __lock_acquire+0x548/0x3fb0 [ 135.011994][ T9071] ? netdev_pick_tx+0x300/0x300 [ 135.016869][ T9071] ? mark_held_locks+0xf0/0xf0 [ 135.021904][ T9071] ? lockdep_hardirqs_on+0x418/0x5d0 [ 135.027204][ T9071] ? __local_bh_enable_ip+0x15a/0x270 [ 135.033226][ T9071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 135.039565][ T9071] dev_queue_xmit+0x18/0x20 [ 135.044160][ T9071] ? dev_queue_xmit+0x18/0x20 [ 135.048834][ T9071] neigh_direct_output+0x16/0x20 [ 135.053802][ T9071] ip_finish_output2+0x949/0x1740 [ 135.060018][ T9071] ? ip_output+0x44b/0x670 [ 135.064449][ T9071] ? ip_copy_metadata+0xcb0/0xcb0 [ 135.069498][ T9071] ip_finish_output+0x73c/0xd50 [ 135.074705][ T9071] ? ip_finish_output+0x73c/0xd50 [ 135.079734][ T9071] ip_output+0x21f/0x670 [ 135.084091][ T9071] ? ip_mc_output+0xf70/0xf70 [ 135.088870][ T9071] ? ip_fragment.constprop.0+0x240/0x240 [ 135.094509][ T9071] ? kasan_check_read+0x11/0x20 [ 135.099359][ T9071] raw_sendmsg+0x1d2b/0x2f20 [ 135.103966][ T9071] ? compat_raw_getsockopt+0x100/0x100 [ 135.109433][ T9071] ? __switch_to_asm+0x34/0x70 [ 135.114318][ T9071] ? __switch_to_asm+0x40/0x70 [ 135.119185][ T9071] ? __schedule+0x81b/0x1cc0 [ 135.124050][ T9071] ? raw_bind+0x5d0/0x5d0 [ 135.128383][ T9071] ? tomoyo_socket_sendmsg_permission+0x147/0x3b8 [ 135.134795][ T9071] ? tomoyo_socket_bind_permission+0x340/0x340 [ 135.141575][ T9071] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 135.147499][ T9071] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 135.153243][ T9071] ? futex_wait+0x482/0x5e0 [ 135.157840][ T9071] inet_sendmsg+0x147/0x5d0 [ 135.162343][ T9071] ? inet_sendmsg+0x147/0x5d0 [ 135.167024][ T9071] ? ipip_gro_receive+0x100/0x100 [ 135.172051][ T9071] sock_sendmsg+0xdd/0x130 [ 135.176476][ T9071] sock_write_iter+0x27c/0x3e0 [ 135.181262][ T9071] ? sock_sendmsg+0x130/0x130 [ 135.185970][ T9071] ? __fget+0x35a/0x550 [ 135.190241][ T9071] ? find_held_lock+0x35/0x130 [ 135.195101][ T9071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 135.201370][ T9071] ? iov_iter_init+0xee/0x220 [ 135.206051][ T9071] new_sync_write+0x4c7/0x760 [ 135.210726][ T9071] ? default_llseek+0x2e0/0x2e0 [ 135.215585][ T9071] ? __fget+0x381/0x550 [ 135.219738][ T9071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 135.225990][ T9071] ? security_file_permission+0x94/0x380 [ 135.231640][ T9071] __vfs_write+0xe4/0x110 [ 135.235974][ T9071] vfs_write+0x20c/0x580 [ 135.240221][ T9071] ksys_write+0x14f/0x2d0 [ 135.244555][ T9071] ? __ia32_sys_read+0xb0/0xb0 [ 135.249328][ T9071] ? do_syscall_64+0x26/0x610 [ 135.254020][ T9071] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 135.260089][ T9071] ? do_syscall_64+0x26/0x610 [ 135.264853][ T9071] __x64_sys_write+0x73/0xb0 [ 135.269452][ T9071] do_syscall_64+0x103/0x610 [ 135.274045][ T9071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 135.279941][ T9071] RIP: 0033:0x458c29 [ 135.283832][ T9071] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 135.303444][ T9071] RSP: 002b:00007fdf1e9e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.311859][ T9071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 135.319852][ T9071] RDX: 0000000000000014 RSI: 00000000200002c0 RDI: 0000000000000003 [ 135.327829][ T9071] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 135.335827][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf1e9e56d4 [ 135.343800][ T9071] R13: 00000000004c8623 R14: 00000000004ded68 R15: 00000000ffffffff [ 135.352564][ T9071] Kernel Offset: disabled [ 135.356907][ T9071] Rebooting in 86400 seconds..