[ 36.347283][ T26] audit: type=1800 audit(1555734851.280:27): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.374784][ T26] audit: type=1800 audit(1555734851.280:28): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.060935][ T26] audit: type=1800 audit(1555734852.040:29): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.081367][ T26] audit: type=1800 audit(1555734852.040:30): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.245' (ECDSA) to the list of known hosts. 2019/04/20 04:35:41 parsed 1 programs 2019/04/20 04:35:44 executed programs: 0 syzkaller login: [ 129.409910][ T7748] IPVS: ftp: loaded support on port[0] = 21 [ 129.420755][ T7746] IPVS: ftp: loaded support on port[0] = 21 [ 129.435060][ T7744] IPVS: ftp: loaded support on port[0] = 21 [ 129.464256][ T7752] IPVS: ftp: loaded support on port[0] = 21 [ 129.465974][ T7751] IPVS: ftp: loaded support on port[0] = 21 [ 129.477897][ T7753] IPVS: ftp: loaded support on port[0] = 21 [ 129.643568][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 129.795566][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.802720][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.810794][ T7744] device bridge_slave_0 entered promiscuous mode [ 129.820722][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.827858][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.835658][ T7744] device bridge_slave_1 entered promiscuous mode [ 129.853808][ T7748] chnl_net:caif_netlink_parms(): no params data found [ 129.898883][ T7746] chnl_net:caif_netlink_parms(): no params data found [ 129.916738][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 129.940094][ T7751] chnl_net:caif_netlink_parms(): no params data found [ 129.950916][ T7744] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 129.990847][ T7748] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.999247][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.007371][ T7748] device bridge_slave_0 entered promiscuous mode [ 130.015545][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 130.025586][ T7744] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.052776][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.060926][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.068720][ T7748] device bridge_slave_1 entered promiscuous mode [ 130.122373][ T7744] team0: Port device team_slave_0 added [ 130.128629][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.135824][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.143568][ T7752] device bridge_slave_0 entered promiscuous mode [ 130.151032][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.158541][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.166615][ T7746] device bridge_slave_0 entered promiscuous mode [ 130.176577][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.183629][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.192156][ T7746] device bridge_slave_1 entered promiscuous mode [ 130.206228][ T7748] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.215633][ T7744] team0: Port device team_slave_1 added [ 130.221756][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.228986][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.236968][ T7752] device bridge_slave_1 entered promiscuous mode [ 130.259321][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.267054][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.275135][ T7751] device bridge_slave_0 entered promiscuous mode [ 130.283178][ T7748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.316979][ T7746] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.328648][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.335851][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.343642][ T7751] device bridge_slave_1 entered promiscuous mode [ 130.356125][ T7752] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.395903][ T7744] device hsr_slave_0 entered promiscuous mode [ 130.434277][ T7744] device hsr_slave_1 entered promiscuous mode [ 130.474295][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.481414][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.492236][ T7753] device bridge_slave_0 entered promiscuous mode [ 130.500590][ T7746] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.529022][ T7752] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.537845][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.547804][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.555701][ T7753] device bridge_slave_1 entered promiscuous mode [ 130.570391][ T7748] team0: Port device team_slave_0 added [ 130.578082][ T7746] team0: Port device team_slave_0 added [ 130.590107][ T7746] team0: Port device team_slave_1 added [ 130.600890][ T7751] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.611521][ T7751] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.620994][ T7748] team0: Port device team_slave_1 added [ 130.638702][ T7753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.649269][ T7753] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.669841][ T7752] team0: Port device team_slave_0 added [ 130.676716][ T7752] team0: Port device team_slave_1 added [ 130.720530][ T7751] team0: Port device team_slave_0 added [ 130.728487][ T7751] team0: Port device team_slave_1 added [ 130.776110][ T7748] device hsr_slave_0 entered promiscuous mode [ 130.824352][ T7748] device hsr_slave_1 entered promiscuous mode [ 130.905870][ T7746] device hsr_slave_0 entered promiscuous mode [ 130.944477][ T7746] device hsr_slave_1 entered promiscuous mode [ 130.999273][ T7753] team0: Port device team_slave_0 added [ 131.006775][ T7753] team0: Port device team_slave_1 added [ 131.096905][ T7753] device hsr_slave_0 entered promiscuous mode [ 131.144265][ T7753] device hsr_slave_1 entered promiscuous mode [ 131.236517][ T7752] device hsr_slave_0 entered promiscuous mode [ 131.304357][ T7752] device hsr_slave_1 entered promiscuous mode [ 131.396446][ T7751] device hsr_slave_0 entered promiscuous mode [ 131.444352][ T7751] device hsr_slave_1 entered promiscuous mode [ 131.580904][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.628701][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.639353][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.648226][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.658378][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.678972][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.691833][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.701757][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.710775][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.717989][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.726886][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.735830][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.744221][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.751256][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.759481][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.784931][ T7752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.797464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.807839][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.816904][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.825534][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.833716][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.842347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.850926][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.858638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.868256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.875988][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.883513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.900938][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.909438][ T7748] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.923383][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.932543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.941175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.949741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.957950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.966403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.974732][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.981781][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.990870][ T7746] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.005025][ T7752] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.018419][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.031177][ T7744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.039285][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.048032][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.055999][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.063498][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.072020][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.080543][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.087634][ T7760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.095251][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.102817][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.110521][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.118971][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.127989][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.135038][ T7760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.142613][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.151241][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.159545][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.166642][ T7760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.174668][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.184513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.192995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.201937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.209048][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.219431][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.227535][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.237471][ T7751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.271896][ T7748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.282692][ T7748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.300519][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.309416][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.317838][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.324958][ T7760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.333042][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.341788][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.350182][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.357259][ T7760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.364876][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.373335][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.381867][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.390413][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.399132][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.407683][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.416082][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.424714][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.433029][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.441434][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.449827][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.458283][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.466630][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.475065][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.483238][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.491494][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.501035][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.509729][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.518079][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.527707][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.542853][ T7751] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.553373][ T7752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.565510][ T7752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.573537][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.581571][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.589599][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.597453][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.605626][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.613185][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.620976][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.629553][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.662701][ T7748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.673072][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.694928][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.703722][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.710818][ T7761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.718757][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.727333][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.736019][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.745521][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.753743][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.762374][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.772123][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.780803][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.789369][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.796469][ T7761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.804082][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.812529][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.821176][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.828255][ T7761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.846389][ T7752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.863135][ T7746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.874440][ T7746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.904545][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.912329][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.935843][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.943594][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.955852][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.969211][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.984664][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.992939][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.001511][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.012540][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.027211][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.036211][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.044879][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.054234][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.063296][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.080458][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.089194][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.097708][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.106122][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.114576][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.122942][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.131709][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.139262][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.163549][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.181375][ T7753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.194992][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.212132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.221265][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.229630][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.239789][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.259416][ T7753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.285686][ T7751] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/04/20 04:35:49 executed programs: 88 2019/04/20 04:35:54 executed programs: 473 [ 143.443677][ T9089] ================================================================== [ 143.452046][ T9089] BUG: KASAN: stack-out-of-bounds in __ip_options_echo+0xfac/0x1120 [ 143.460030][ T9089] Write of size 1 at addr ffff888095807093 by task syz-executor.5/9089 [ 143.468259][ T9089] [ 143.470602][ T9089] CPU: 1 PID: 9089 Comm: syz-executor.5 Not tainted 5.1.0-rc5+ #146 [ 143.478576][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.488632][ T9089] Call Trace: [ 143.491925][ T9089] dump_stack+0x172/0x1f0 [ 143.496266][ T9089] ? __ip_options_echo+0xfac/0x1120 [ 143.501476][ T9089] print_address_description.cold+0x7c/0x20d [ 143.507474][ T9089] ? __ip_options_echo+0xfac/0x1120 [ 143.512688][ T9089] ? __ip_options_echo+0xfac/0x1120 [ 143.517898][ T9089] kasan_report.cold+0x1b/0x40 [ 143.522676][ T9089] ? __ip_options_echo+0xfac/0x1120 [ 143.527892][ T9089] __asan_report_store1_noabort+0x17/0x20 [ 143.533623][ T9089] __ip_options_echo+0xfac/0x1120 [ 143.538665][ T9089] __icmp_send+0x725/0x1400 [ 143.543196][ T9089] ? icmp_route_lookup.constprop.0+0x1570/0x1570 [ 143.549533][ T9089] ? __lock_acquire+0x548/0x3fb0 [ 143.554480][ T9089] ? __lock_acquire+0x548/0x3fb0 [ 143.559436][ T9089] ? ipv4_link_failure+0x210/0x550 [ 143.564555][ T9089] ? find_held_lock+0x35/0x130 [ 143.569326][ T9089] ? ipv4_link_failure+0x210/0x550 [ 143.574463][ T9089] ? lock_downgrade+0x880/0x880 [ 143.579322][ T9089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 143.585585][ T9089] ipv4_link_failure+0x29f/0x550 [ 143.590530][ T9089] ? ipv4_link_failure+0x29f/0x550 [ 143.595647][ T9089] ? update_or_create_fnhe+0x16c0/0x16c0 [ 143.601291][ T9089] ? kasan_check_read+0x11/0x20 [ 143.606158][ T9089] ? update_or_create_fnhe+0x16c0/0x16c0 [ 143.611794][ T9089] vti6_tnl_xmit+0x10d4/0x1c0c [ 143.616547][ T9089] ? __lock_acquire+0x548/0x3fb0 [ 143.616585][ T9089] ? vti6_rcv+0x970/0x970 [ 143.616611][ T9089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 143.616653][ T9089] dev_hard_start_xmit+0x18f/0x960 [ 143.616676][ T9089] __dev_queue_xmit+0x2a9d/0x36c0 [ 143.616689][ T9089] ? __lock_acquire+0x548/0x3fb0 [ 143.616705][ T9089] ? netdev_core_pick_tx+0x300/0x300 [ 143.616718][ T9089] ? mark_held_locks+0xf0/0xf0 [ 143.616730][ T9089] ? lockdep_hardirqs_on+0x418/0x5d0 [ 143.616742][ T9089] ? __local_bh_enable_ip+0x15a/0x270 [ 143.616759][ T9089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 143.674160][ T9089] dev_queue_xmit+0x18/0x20 [ 143.678686][ T9089] ? dev_queue_xmit+0x18/0x20 [ 143.683342][ T9089] neigh_direct_output+0x16/0x20 [ 143.688257][ T9089] ip_finish_output2+0x8ff/0x24e0 [ 143.693272][ T9089] ? ip_output+0x44b/0x670 [ 143.697671][ T9089] ? find_held_lock+0x35/0x130 [ 143.702418][ T9089] ? ip_copy_metadata+0xcb0/0xcb0 [ 143.707439][ T9089] ip_finish_output+0x734/0xd50 [ 143.712265][ T9089] ? ip_finish_output+0x734/0xd50 [ 143.717267][ T9089] ip_output+0x21f/0x670 [ 143.721486][ T9089] ? ip_mc_output+0xf70/0xf70 [ 143.726143][ T9089] ? ip_fragment.constprop.0+0x240/0x240 [ 143.731764][ T9089] ? kasan_check_read+0x11/0x20 [ 143.736613][ T9089] raw_sendmsg+0x1d2b/0x2f20 [ 143.741213][ T9089] ? compat_raw_getsockopt+0x100/0x100 [ 143.746654][ T9089] ? aa_profile_af_perm+0x320/0x320 [ 143.751851][ T9089] ? __local_bh_enable_ip+0x15a/0x270 [ 143.757205][ T9089] ? rt_add_uncached_list+0x147/0x1a0 [ 143.762560][ T9089] ? trace_hardirqs_on+0x67/0x230 [ 143.767562][ T9089] ? raw_bind+0x5d0/0x5d0 [ 143.771902][ T9089] ? should_fail+0x1de/0x852 [ 143.776482][ T9089] ? ___might_sleep+0x163/0x280 [ 143.781319][ T9089] ? __might_sleep+0x95/0x190 [ 143.785986][ T9089] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 143.791596][ T9089] ? aa_sk_perm+0x288/0x880 [ 143.796080][ T9089] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 143.801606][ T9089] inet_sendmsg+0x147/0x5e0 [ 143.806084][ T9089] ? inet_sendmsg+0x147/0x5e0 [ 143.810743][ T9089] ? ipip_gro_receive+0x100/0x100 [ 143.815744][ T9089] sock_sendmsg+0xdd/0x130 [ 143.820141][ T9089] sock_write_iter+0x27c/0x3e0 [ 143.824894][ T9089] ? sock_sendmsg+0x130/0x130 [ 143.829557][ T9089] ? aa_path_link+0x460/0x460 [ 143.834224][ T9089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 143.840439][ T9089] ? iov_iter_init+0xee/0x220 [ 143.845107][ T9089] new_sync_write+0x4c7/0x760 [ 143.849775][ T9089] ? default_llseek+0x2e0/0x2e0 [ 143.854608][ T9089] ? common_file_perm+0x238/0x720 [ 143.859611][ T9089] ? lock_downgrade+0x880/0x880 [ 143.864442][ T9089] ? apparmor_file_permission+0x25/0x30 [ 143.869966][ T9089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 143.876192][ T9089] ? security_file_permission+0x94/0x380 [ 143.881804][ T9089] __vfs_write+0xe4/0x110 [ 143.886123][ T9089] vfs_write+0x20c/0x580 [ 143.890360][ T9089] ksys_write+0x14f/0x2d0 [ 143.894672][ T9089] ? __ia32_sys_read+0xb0/0xb0 [ 143.899437][ T9089] ? do_syscall_64+0x26/0x610 [ 143.904098][ T9089] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 143.910173][ T9089] ? do_syscall_64+0x26/0x610 [ 143.914841][ T9089] __x64_sys_write+0x73/0xb0 [ 143.919409][ T9089] do_syscall_64+0x103/0x610 [ 143.923977][ T9089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 143.929844][ T9089] RIP: 0033:0x458c29 [ 143.933719][ T9089] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 143.953318][ T9089] RSP: 002b:00007ffdbe9862d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.961719][ T9089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 143.969670][ T9089] RDX: 0000000000000014 RSI: 00000000200002c0 RDI: 0000000000000003 [ 143.977631][ T9089] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 143.985583][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001d27914 [ 143.993548][ T9089] R13: 00000000004c8623 R14: 00000000004ded68 R15: 00000000ffffffff [ 144.001509][ T9089] [ 144.003818][ T9089] The buggy address belongs to the page: [ 144.009434][ T9089] page:ffffea00025601c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 144.018253][ T9089] flags: 0x1fffc0000000000() [ 144.022828][ T9089] raw: 01fffc0000000000 0000000000000000 ffffffff02560101 0000000000000000 [ 144.031397][ T9089] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 144.039970][ T9089] page dumped because: kasan: bad access detected [ 144.046364][ T9089] [ 144.048701][ T9089] Memory state around the buggy address: [ 144.054324][ T9089] ffff888095806f80: 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 f2 [ 144.062381][ T9089] ffff888095807000: f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00 [ 144.070437][ T9089] >ffff888095807080: 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 144.078474][ T9089] ^ [ 144.083044][ T9089] ffff888095807100: 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 00 [ 144.091094][ T9089] ffff888095807180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 144.099130][ T9089] ================================================================== [ 144.107173][ T9089] Disabling lock debugging due to kernel taint [ 144.113338][ T9089] Kernel panic - not syncing: panic_on_warn set ... [ 144.119925][ T9089] CPU: 1 PID: 9089 Comm: syz-executor.5 Tainted: G B 5.1.0-rc5+ #146 [ 144.129261][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.139846][ T9089] Call Trace: [ 144.143124][ T9089] dump_stack+0x172/0x1f0 [ 144.147436][ T9089] panic+0x2cb/0x65c [ 144.151307][ T9089] ? __warn_printk+0xf3/0xf3 [ 144.155876][ T9089] ? trace_hardirqs_on+0x5e/0x230 [ 144.160872][ T9089] ? trace_hardirqs_on+0x5e/0x230 [ 144.165874][ T9089] ? __ip_options_echo+0xfac/0x1120 [ 144.171046][ T9089] end_report+0x47/0x4f [ 144.175174][ T9089] ? __ip_options_echo+0xfac/0x1120 [ 144.180343][ T9089] kasan_report.cold+0xe/0x40 [ 144.185000][ T9089] ? __ip_options_echo+0xfac/0x1120 [ 144.190178][ T9089] __asan_report_store1_noabort+0x17/0x20 [ 144.195881][ T9089] __ip_options_echo+0xfac/0x1120 [ 144.200894][ T9089] __icmp_send+0x725/0x1400 [ 144.205386][ T9089] ? icmp_route_lookup.constprop.0+0x1570/0x1570 [ 144.211688][ T9089] ? __lock_acquire+0x548/0x3fb0 [ 144.216601][ T9089] ? __lock_acquire+0x548/0x3fb0 [ 144.221513][ T9089] ? ipv4_link_failure+0x210/0x550 [ 144.226602][ T9089] ? find_held_lock+0x35/0x130 [ 144.231357][ T9089] ? ipv4_link_failure+0x210/0x550 [ 144.236445][ T9089] ? lock_downgrade+0x880/0x880 [ 144.241271][ T9089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 144.247488][ T9089] ipv4_link_failure+0x29f/0x550 [ 144.252401][ T9089] ? ipv4_link_failure+0x29f/0x550 [ 144.257488][ T9089] ? update_or_create_fnhe+0x16c0/0x16c0 [ 144.263096][ T9089] ? kasan_check_read+0x11/0x20 [ 144.267927][ T9089] ? update_or_create_fnhe+0x16c0/0x16c0 [ 144.273543][ T9089] vti6_tnl_xmit+0x10d4/0x1c0c [ 144.278301][ T9089] ? __lock_acquire+0x548/0x3fb0 [ 144.283232][ T9089] ? vti6_rcv+0x970/0x970 [ 144.287543][ T9089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 144.293784][ T9089] dev_hard_start_xmit+0x18f/0x960 [ 144.298880][ T9089] __dev_queue_xmit+0x2a9d/0x36c0 [ 144.303883][ T9089] ? __lock_acquire+0x548/0x3fb0 [ 144.308811][ T9089] ? netdev_core_pick_tx+0x300/0x300 [ 144.314090][ T9089] ? mark_held_locks+0xf0/0xf0 [ 144.318841][ T9089] ? lockdep_hardirqs_on+0x418/0x5d0 [ 144.324102][ T9089] ? __local_bh_enable_ip+0x15a/0x270 [ 144.329463][ T9089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 144.335678][ T9089] dev_queue_xmit+0x18/0x20 [ 144.340156][ T9089] ? dev_queue_xmit+0x18/0x20 [ 144.344823][ T9089] neigh_direct_output+0x16/0x20 [ 144.349753][ T9089] ip_finish_output2+0x8ff/0x24e0 [ 144.354755][ T9089] ? ip_output+0x44b/0x670 [ 144.359149][ T9089] ? find_held_lock+0x35/0x130 [ 144.363889][ T9089] ? ip_copy_metadata+0xcb0/0xcb0 [ 144.368910][ T9089] ip_finish_output+0x734/0xd50 [ 144.373752][ T9089] ? ip_finish_output+0x734/0xd50 [ 144.378752][ T9089] ip_output+0x21f/0x670 [ 144.382968][ T9089] ? ip_mc_output+0xf70/0xf70 [ 144.387622][ T9089] ? ip_fragment.constprop.0+0x240/0x240 [ 144.393241][ T9089] ? kasan_check_read+0x11/0x20 [ 144.398083][ T9089] raw_sendmsg+0x1d2b/0x2f20 [ 144.402652][ T9089] ? compat_raw_getsockopt+0x100/0x100 [ 144.408087][ T9089] ? aa_profile_af_perm+0x320/0x320 [ 144.413272][ T9089] ? __local_bh_enable_ip+0x15a/0x270 [ 144.418617][ T9089] ? rt_add_uncached_list+0x147/0x1a0 [ 144.423965][ T9089] ? trace_hardirqs_on+0x67/0x230 [ 144.428967][ T9089] ? raw_bind+0x5d0/0x5d0 [ 144.433270][ T9089] ? should_fail+0x1de/0x852 [ 144.437853][ T9089] ? ___might_sleep+0x163/0x280 [ 144.442679][ T9089] ? __might_sleep+0x95/0x190 [ 144.447348][ T9089] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 144.452960][ T9089] ? aa_sk_perm+0x288/0x880 [ 144.457445][ T9089] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 144.462982][ T9089] inet_sendmsg+0x147/0x5e0 [ 144.467465][ T9089] ? inet_sendmsg+0x147/0x5e0 [ 144.472122][ T9089] ? ipip_gro_receive+0x100/0x100 [ 144.477134][ T9089] sock_sendmsg+0xdd/0x130 [ 144.481527][ T9089] sock_write_iter+0x27c/0x3e0 [ 144.486268][ T9089] ? sock_sendmsg+0x130/0x130 [ 144.490923][ T9089] ? aa_path_link+0x460/0x460 [ 144.495586][ T9089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 144.501802][ T9089] ? iov_iter_init+0xee/0x220 [ 144.506457][ T9089] new_sync_write+0x4c7/0x760 [ 144.511111][ T9089] ? default_llseek+0x2e0/0x2e0 [ 144.515950][ T9089] ? common_file_perm+0x238/0x720 [ 144.520948][ T9089] ? lock_downgrade+0x880/0x880 [ 144.525775][ T9089] ? apparmor_file_permission+0x25/0x30 [ 144.531307][ T9089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 144.537542][ T9089] ? security_file_permission+0x94/0x380 [ 144.543153][ T9089] __vfs_write+0xe4/0x110 [ 144.547463][ T9089] vfs_write+0x20c/0x580 [ 144.551685][ T9089] ksys_write+0x14f/0x2d0 [ 144.556003][ T9089] ? __ia32_sys_read+0xb0/0xb0 [ 144.560752][ T9089] ? do_syscall_64+0x26/0x610 [ 144.565425][ T9089] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 144.571472][ T9089] ? do_syscall_64+0x26/0x610 [ 144.576138][ T9089] __x64_sys_write+0x73/0xb0 [ 144.580720][ T9089] do_syscall_64+0x103/0x610 [ 144.585297][ T9089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 144.591182][ T9089] RIP: 0033:0x458c29 [ 144.595055][ T9089] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 144.614635][ T9089] RSP: 002b:00007ffdbe9862d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.623019][ T9089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 144.630965][ T9089] RDX: 0000000000000014 RSI: 00000000200002c0 RDI: 0000000000000003 [ 144.638927][ T9089] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 144.646876][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001d27914 [ 144.654823][ T9089] R13: 00000000004c8623 R14: 00000000004ded68 R15: 00000000ffffffff [ 144.663583][ T9089] Kernel Offset: disabled [ 144.667900][ T9089] Rebooting in 86400 seconds..