[ 39.555183][ T26] audit: type=1800 audit(1556043528.281:29): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. 2019/04/23 18:19:50 parsed 1 programs 2019/04/23 18:19:52 executed programs: 0 syzkaller login: [ 103.776462][ T7776] IPVS: ftp: loaded support on port[0] = 21 [ 103.787271][ T7773] IPVS: ftp: loaded support on port[0] = 21 [ 103.787775][ T7780] IPVS: ftp: loaded support on port[0] = 21 [ 103.806272][ T7774] IPVS: ftp: loaded support on port[0] = 21 [ 103.806867][ T7778] IPVS: ftp: loaded support on port[0] = 21 [ 103.836247][ T7781] IPVS: ftp: loaded support on port[0] = 21 [ 104.087680][ T7773] chnl_net:caif_netlink_parms(): no params data found [ 104.164157][ T7780] chnl_net:caif_netlink_parms(): no params data found [ 104.173980][ T7776] chnl_net:caif_netlink_parms(): no params data found [ 104.204304][ T7778] chnl_net:caif_netlink_parms(): no params data found [ 104.270494][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.278311][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.286195][ T7773] device bridge_slave_0 entered promiscuous mode [ 104.300541][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 104.324859][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.331945][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.340742][ T7773] device bridge_slave_1 entered promiscuous mode [ 104.415923][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.423885][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.431629][ T7776] device bridge_slave_0 entered promiscuous mode [ 104.439083][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.446406][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.454242][ T7780] device bridge_slave_0 entered promiscuous mode [ 104.465628][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.473494][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.481094][ T7780] device bridge_slave_1 entered promiscuous mode [ 104.497790][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.505165][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.515451][ T7778] device bridge_slave_0 entered promiscuous mode [ 104.528455][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.535747][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.543732][ T7778] device bridge_slave_1 entered promiscuous mode [ 104.555018][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.562160][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.570156][ T7776] device bridge_slave_1 entered promiscuous mode [ 104.599905][ T7776] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.610284][ T7773] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.621117][ T7773] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 104.640191][ T7781] chnl_net:caif_netlink_parms(): no params data found [ 104.651099][ T7780] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.660792][ T7776] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 104.680642][ T7778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.707122][ T7780] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 104.740508][ T7778] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 104.752961][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.760029][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.767922][ T7774] device bridge_slave_0 entered promiscuous mode [ 104.777828][ T7776] team0: Port device team_slave_0 added [ 104.785227][ T7773] team0: Port device team_slave_0 added [ 104.792542][ T7776] team0: Port device team_slave_1 added [ 104.799444][ T7780] team0: Port device team_slave_0 added [ 104.811784][ T7780] team0: Port device team_slave_1 added [ 104.821785][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.829010][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.837039][ T7774] device bridge_slave_1 entered promiscuous mode [ 104.845022][ T7773] team0: Port device team_slave_1 added [ 104.944412][ T7776] device hsr_slave_0 entered promiscuous mode [ 104.982945][ T7776] device hsr_slave_1 entered promiscuous mode [ 105.024037][ T7778] team0: Port device team_slave_0 added [ 105.032080][ T7774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 105.041422][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.051053][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.058840][ T7781] device bridge_slave_0 entered promiscuous mode [ 105.105612][ T7780] device hsr_slave_0 entered promiscuous mode [ 105.173057][ T7780] device hsr_slave_1 entered promiscuous mode [ 105.214150][ T7778] team0: Port device team_slave_1 added [ 105.227425][ T7774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 105.241697][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.250251][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.258243][ T7781] device bridge_slave_1 entered promiscuous mode [ 105.345527][ T7778] device hsr_slave_0 entered promiscuous mode [ 105.392975][ T7778] device hsr_slave_1 entered promiscuous mode [ 105.443464][ T7774] team0: Port device team_slave_0 added [ 105.494383][ T7773] device hsr_slave_0 entered promiscuous mode [ 105.572896][ T7773] device hsr_slave_1 entered promiscuous mode [ 105.661449][ T7774] team0: Port device team_slave_1 added [ 105.676580][ T7781] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 105.687052][ T7781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 105.734325][ T7781] team0: Port device team_slave_0 added [ 105.753654][ T7781] team0: Port device team_slave_1 added [ 105.807547][ T7774] device hsr_slave_0 entered promiscuous mode [ 105.863245][ T7774] device hsr_slave_1 entered promiscuous mode [ 105.974416][ T7781] device hsr_slave_0 entered promiscuous mode [ 106.013000][ T7781] device hsr_slave_1 entered promiscuous mode [ 106.116674][ T7776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.147259][ T7776] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.170278][ T7780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.196863][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.206332][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.217091][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.229170][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.258119][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.266696][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.275705][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.282961][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.290856][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.299793][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.307641][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.322033][ T7780] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.334443][ T7778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.350414][ T7778] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.358911][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.369188][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.377724][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.384829][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.392311][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.400425][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.408175][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.416887][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.424617][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.445540][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.456260][ T7773] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.473294][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.481841][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.490328][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.497389][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.505303][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.513787][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.522162][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.530655][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.537716][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.545548][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.553967][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.562172][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.570706][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.579110][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.588007][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.595919][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.603911][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.612284][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.620669][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.627755][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.635792][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.644420][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.652749][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.659805][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.667713][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.676333][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.684923][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.693202][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.700259][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.718458][ T7776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.729445][ T7776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.763442][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.771333][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.779548][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.787634][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.796579][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.805229][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.814041][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.822361][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.831170][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.839864][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.846945][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.855392][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.863811][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.872016][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.880605][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.889069][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.896162][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.904549][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.913644][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.921844][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.928926][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.937089][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.945714][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.954368][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.963342][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.971705][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.981586][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.990018][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.998414][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.006865][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.015264][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.023877][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.032173][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.040466][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.048895][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.057132][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.065297][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.073684][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.081562][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.089528][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.099954][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.121623][ T7773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.132513][ T7773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.145302][ T7780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.160418][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.169206][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.178020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.186464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.195183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.203512][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.211655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.220280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.228489][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.237271][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.245550][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.253983][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.262063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.270790][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.306239][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.326281][ T7781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.341165][ T7773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.353839][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.362468][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.376634][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.396935][ T7780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.406536][ T7776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.431219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.442099][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.473802][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.482112][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.503056][ T7781] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.518287][ T7774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.548415][ T7774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.558882][ T7778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.573013][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.581103][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.617455][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.634936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.692860][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.719179][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.758389][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.765527][ T7788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.787594][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.800994][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.817206][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.824354][ T7788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.832055][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.846508][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.872346][ T7781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.884681][ T7781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.899243][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.907773][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.916997][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.925372][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.933741][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.941913][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.950193][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.958421][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.966737][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.975279][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.983434][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.008611][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.056521][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/04/23 18:19:57 executed programs: 48 2019/04/23 18:20:02 executed programs: 331 [ 115.630743][ T9445] ================================================================== [ 115.639290][ T9445] BUG: KASAN: stack-out-of-bounds in __ip_options_echo+0x294/0x1120 [ 115.647644][ T9445] Write of size 69 at addr ffff888091067068 by task syz-executor.0/9445 [ 115.656717][ T9445] [ 115.659093][ T9445] CPU: 0 PID: 9445 Comm: syz-executor.0 Not tainted 5.1.0-rc6 #79 [ 115.667450][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.678223][ T9445] Call Trace: [ 115.681537][ T9445] dump_stack+0x172/0x1f0 [ 115.685990][ T9445] ? __ip_options_echo+0x294/0x1120 [ 115.691330][ T9445] print_address_description.cold+0x7c/0x20d [ 115.697674][ T9445] ? __ip_options_echo+0x294/0x1120 [ 115.703153][ T9445] ? __ip_options_echo+0x294/0x1120 [ 115.703191][ T9445] kasan_report.cold+0x1b/0x40 [ 115.703207][ T9445] ? match_held_lock+0x4b1/0x500 [ 115.703218][ T9445] ? __ip_options_echo+0x294/0x1120 [ 115.703234][ T9445] check_memory_region+0x123/0x190 [ 115.703251][ T9445] memcpy+0x38/0x50 [ 115.703265][ T9445] __ip_options_echo+0x294/0x1120 [ 115.703286][ T9445] __icmp_send+0x725/0x1400 [ 115.703309][ T9445] ? icmp_route_lookup.constprop.0+0x1570/0x1570 [ 115.703328][ T9445] ? __lock_acquire+0x548/0x3fb0 [ 115.703343][ T9445] ? __lock_acquire+0x548/0x3fb0 [ 115.703361][ T9445] ? ipv4_link_failure+0x210/0x550 [ 115.703371][ T9445] ? find_held_lock+0x35/0x130 [ 115.703415][ T9445] ? ipv4_link_failure+0x210/0x550 [ 115.703433][ T9445] ? lock_downgrade+0x880/0x880 [ 115.703446][ T9445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.739097][ T9445] ipv4_link_failure+0x29f/0x550 [ 115.739113][ T9445] ? ipv4_link_failure+0x29f/0x550 [ 115.739134][ T9445] ? update_or_create_fnhe+0x16d0/0x16d0 [ 115.761444][ T9445] ? kasan_check_read+0x11/0x20 [ 115.761468][ T9445] ? update_or_create_fnhe+0x16d0/0x16d0 [ 115.761489][ T9445] vti6_tnl_xmit+0x10d4/0x1c0c [ 115.810341][ T9445] ? __lock_acquire+0x548/0x3fb0 [ 115.810366][ T9445] ? vti6_rcv+0x970/0x970 [ 115.810431][ T9445] dev_hard_start_xmit+0x1b2/0x980 [ 115.838356][ T9445] __dev_queue_xmit+0x271d/0x3060 [ 115.848933][ T9445] ? __lock_acquire+0x548/0x3fb0 [ 115.848954][ T9445] ? netdev_pick_tx+0x300/0x300 [ 115.848972][ T9445] ? mark_held_locks+0xf0/0xf0 [ 115.848987][ T9445] ? nf_ct_deliver_cached_events+0x216/0x6e0 [ 115.849013][ T9445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.849028][ T9445] dev_queue_xmit+0x18/0x20 [ 115.849040][ T9445] ? dev_queue_xmit+0x18/0x20 [ 115.849053][ T9445] neigh_direct_output+0x16/0x20 [ 115.849067][ T9445] ip_finish_output2+0x949/0x1740 [ 115.849079][ T9445] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 115.849091][ T9445] ? ip_output+0x44b/0x670 [ 115.849106][ T9445] ? ip_copy_metadata+0xcb0/0xcb0 [ 115.849129][ T9445] ip_finish_output+0x73c/0xd50 [ 115.849148][ T9445] ? ip_finish_output+0x73c/0xd50 [ 115.923177][ T9445] ip_output+0x21f/0x670 [ 115.927522][ T9445] ? ip_mc_output+0xf70/0xf70 [ 115.932217][ T9445] ? ip_fragment.constprop.0+0x240/0x240 [ 115.937866][ T9445] ? kasan_check_read+0x11/0x20 [ 115.942888][ T9445] raw_sendmsg+0x1d2b/0x2f20 [ 115.947504][ T9445] ? compat_raw_getsockopt+0x100/0x100 [ 115.953078][ T9445] ? __switch_to_asm+0x34/0x70 [ 115.957938][ T9445] ? __switch_to_asm+0x40/0x70 [ 115.962715][ T9445] ? aa_profile_af_perm+0x320/0x320 [ 115.968232][ T9445] ? __schedule+0x81b/0x1cc0 [ 115.972929][ T9445] ? raw_bind+0x5d0/0x5d0 [ 115.977460][ T9445] ? ___might_sleep+0x163/0x280 [ 115.982326][ T9445] ? __might_sleep+0x95/0x190 [ 115.987169][ T9445] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 115.993119][ T9445] ? aa_sk_perm+0x288/0x880 [ 115.997729][ T9445] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 116.003378][ T9445] inet_sendmsg+0x147/0x5d0 [ 116.008013][ T9445] ? inet_sendmsg+0x147/0x5d0 [ 116.013019][ T9445] ? ipip_gro_receive+0x100/0x100 [ 116.018242][ T9445] sock_sendmsg+0xdd/0x130 [ 116.022678][ T9445] sock_write_iter+0x27c/0x3e0 [ 116.027544][ T9445] ? sock_sendmsg+0x130/0x130 [ 116.032672][ T9445] ? aa_path_link+0x460/0x460 [ 116.037365][ T9445] ? find_held_lock+0x35/0x130 [ 116.042512][ T9445] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 116.049409][ T9445] ? iov_iter_init+0xee/0x220 [ 116.054244][ T9445] new_sync_write+0x4c7/0x760 [ 116.059139][ T9445] ? default_llseek+0x2e0/0x2e0 [ 116.064596][ T9445] ? common_file_perm+0x238/0x720 [ 116.069636][ T9445] ? __fget+0x381/0x550 [ 116.074199][ T9445] ? apparmor_file_permission+0x25/0x30 [ 116.079972][ T9445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.086463][ T9445] ? security_file_permission+0x94/0x380 [ 116.092596][ T9445] __vfs_write+0xe4/0x110 [ 116.096949][ T9445] vfs_write+0x20c/0x580 [ 116.101563][ T9445] ksys_write+0x14f/0x2d0 [ 116.106150][ T9445] ? __ia32_sys_read+0xb0/0xb0 [ 116.110929][ T9445] ? do_syscall_64+0x26/0x610 [ 116.115796][ T9445] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 116.122357][ T9445] ? do_syscall_64+0x26/0x610 [ 116.127079][ T9445] __x64_sys_write+0x73/0xb0 [ 116.132079][ T9445] do_syscall_64+0x103/0x610 [ 116.137020][ T9445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 116.143540][ T9445] RIP: 0033:0x458c29 [ 116.148797][ T9445] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 116.172218][ T9445] RSP: 002b:00007f7a4e3b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.182445][ T9445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 116.191026][ T9445] RDX: 000000000000001c RSI: 0000000020000100 RDI: 0000000000000003 [ 116.199345][ T9445] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 116.207414][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a4e3b26d4 [ 116.216346][ T9445] R13: 00000000004c8703 R14: 00000000004deea0 R15: 00000000ffffffff [ 116.226516][ T9445] [ 116.229460][ T9445] The buggy address belongs to the page: [ 116.235728][ T9445] page:ffffea00024419c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 116.246286][ T9445] flags: 0x1fffc0000000000() [ 116.251265][ T9445] raw: 01fffc0000000000 0000000000000000 ffffffff02440101 0000000000000000 [ 116.260367][ T9445] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 116.270179][ T9445] page dumped because: kasan: bad access detected [ 116.277197][ T9445] [ 116.279869][ T9445] Memory state around the buggy address: [ 116.286220][ T9445] ffff888091066f80: 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 f2 [ 116.294939][ T9445] ffff888091067000: f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.303648][ T9445] >ffff888091067080: 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 116.314021][ T9445] ^ [ 116.318927][ T9445] ffff888091067100: 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 00 [ 116.328256][ T9445] ffff888091067180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.337030][ T9445] ================================================================== [ 116.345898][ T9445] Disabling lock debugging due to kernel taint [ 116.352257][ T9445] Kernel panic - not syncing: panic_on_warn set ... [ 116.358963][ T9445] CPU: 0 PID: 9445 Comm: syz-executor.0 Tainted: G B 5.1.0-rc6 #79 [ 116.365056][ T3876] kobject: 'loop5' (00000000fa506979): kobject_uevent_env [ 116.369309][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.369314][ T9445] Call Trace: [ 116.369336][ T9445] dump_stack+0x172/0x1f0 [ 116.369360][ T9445] panic+0x2cb/0x65c [ 116.386938][ T3876] kobject: 'loop5' (00000000fa506979): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 116.387700][ T9445] ? __warn_printk+0xf3/0xf3 [ 116.414778][ T9445] ? trace_hardirqs_on+0x5e/0x230 [ 116.419994][ T9445] ? trace_hardirqs_on+0x5e/0x230 [ 116.425038][ T9445] ? __ip_options_echo+0x294/0x1120 [ 116.430253][ T9445] end_report+0x47/0x4f [ 116.434598][ T9445] ? __ip_options_echo+0x294/0x1120 [ 116.440238][ T9445] kasan_report.cold+0xe/0x40 [ 116.445243][ T9445] ? match_held_lock+0x4b1/0x500 [ 116.450722][ T9445] ? __ip_options_echo+0x294/0x1120 [ 116.456259][ T9445] check_memory_region+0x123/0x190 [ 116.461801][ T9445] memcpy+0x38/0x50 [ 116.466076][ T9445] __ip_options_echo+0x294/0x1120 [ 116.471207][ T9445] __icmp_send+0x725/0x1400 [ 116.476544][ T9445] ? icmp_route_lookup.constprop.0+0x1570/0x1570 [ 116.483325][ T9445] ? __lock_acquire+0x548/0x3fb0 [ 116.484355][ T3876] kobject: 'loop4' (000000005d43182e): kobject_uevent_env [ 116.488285][ T9445] ? __lock_acquire+0x548/0x3fb0 [ 116.488305][ T9445] ? ipv4_link_failure+0x210/0x550 [ 116.488323][ T9445] ? find_held_lock+0x35/0x130 [ 116.502200][ T3876] kobject: 'loop4' (000000005d43182e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 116.506562][ T9445] ? ipv4_link_failure+0x210/0x550 [ 116.506586][ T9445] ? lock_downgrade+0x880/0x880 [ 116.506599][ T9445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.506624][ T9445] ipv4_link_failure+0x29f/0x550 [ 116.516181][ T3876] kobject: 'loop1' (00000000db71c739): kobject_uevent_env [ 116.522107][ T9445] ? ipv4_link_failure+0x29f/0x550 [ 116.522124][ T9445] ? update_or_create_fnhe+0x16d0/0x16d0 [ 116.522147][ T9445] ? kasan_check_read+0x11/0x20 [ 116.537606][ T3876] kobject: 'loop1' (00000000db71c739): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 116.539168][ T9445] ? update_or_create_fnhe+0x16d0/0x16d0 [ 116.539185][ T9445] vti6_tnl_xmit+0x10d4/0x1c0c [ 116.539205][ T9445] ? __lock_acquire+0x548/0x3fb0 [ 116.594473][ T9445] ? vti6_rcv+0x970/0x970 [ 116.598917][ T9445] dev_hard_start_xmit+0x1b2/0x980 [ 116.604135][ T9445] __dev_queue_xmit+0x271d/0x3060 [ 116.609333][ T9445] ? __lock_acquire+0x548/0x3fb0 [ 116.614613][ T9445] ? netdev_pick_tx+0x300/0x300 [ 116.620420][ T9445] ? mark_held_locks+0xf0/0xf0 [ 116.625649][ T9445] ? nf_ct_deliver_cached_events+0x216/0x6e0 [ 116.631961][ T9445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.638731][ T9445] dev_queue_xmit+0x18/0x20 [ 116.643731][ T9445] ? dev_queue_xmit+0x18/0x20 [ 116.648775][ T9445] neigh_direct_output+0x16/0x20 [ 116.654304][ T9445] ip_finish_output2+0x949/0x1740 [ 116.659687][ T9445] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 116.666510][ T9445] ? ip_output+0x44b/0x670 [ 116.671724][ T9445] ? ip_copy_metadata+0xcb0/0xcb0 [ 116.677062][ T9445] ip_finish_output+0x73c/0xd50 [ 116.682069][ T9445] ? ip_finish_output+0x73c/0xd50 [ 116.687262][ T9445] ip_output+0x21f/0x670 [ 116.691770][ T9445] ? ip_mc_output+0xf70/0xf70 [ 116.697243][ T9445] ? ip_fragment.constprop.0+0x240/0x240 [ 116.703177][ T9445] ? kasan_check_read+0x11/0x20 [ 116.708781][ T9445] raw_sendmsg+0x1d2b/0x2f20 [ 116.714225][ T9445] ? compat_raw_getsockopt+0x100/0x100 [ 116.720175][ T9445] ? __switch_to_asm+0x34/0x70 [ 116.725275][ T9445] ? __switch_to_asm+0x40/0x70 [ 116.730460][ T9445] ? aa_profile_af_perm+0x320/0x320 [ 116.736368][ T9445] ? __schedule+0x81b/0x1cc0 [ 116.741513][ T9445] ? raw_bind+0x5d0/0x5d0 [ 116.746237][ T9445] ? ___might_sleep+0x163/0x280 [ 116.751460][ T9445] ? __might_sleep+0x95/0x190 [ 116.756321][ T9445] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 116.762274][ T9445] ? aa_sk_perm+0x288/0x880 [ 116.767505][ T9445] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 116.773537][ T9445] inet_sendmsg+0x147/0x5d0 [ 116.778433][ T9445] ? inet_sendmsg+0x147/0x5d0 [ 116.784618][ T9445] ? ipip_gro_receive+0x100/0x100 [ 116.790126][ T9445] sock_sendmsg+0xdd/0x130 [ 116.794557][ T9445] sock_write_iter+0x27c/0x3e0 [ 116.799776][ T9445] ? sock_sendmsg+0x130/0x130 [ 116.804781][ T9445] ? aa_path_link+0x460/0x460 [ 116.809959][ T9445] ? find_held_lock+0x35/0x130 [ 116.814965][ T9445] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 116.821213][ T9445] ? iov_iter_init+0xee/0x220 [ 116.825993][ T9445] new_sync_write+0x4c7/0x760 [ 116.831203][ T9445] ? default_llseek+0x2e0/0x2e0 [ 116.836097][ T9445] ? common_file_perm+0x238/0x720 [ 116.841240][ T9445] ? __fget+0x381/0x550 [ 116.845442][ T9445] ? apparmor_file_permission+0x25/0x30 [ 116.851217][ T9445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 116.857612][ T9445] ? security_file_permission+0x94/0x380 [ 116.863352][ T9445] __vfs_write+0xe4/0x110 [ 116.867810][ T9445] vfs_write+0x20c/0x580 [ 116.872153][ T9445] ksys_write+0x14f/0x2d0 [ 116.876499][ T9445] ? __ia32_sys_read+0xb0/0xb0 [ 116.881290][ T9445] ? do_syscall_64+0x26/0x610 [ 116.886128][ T9445] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 116.892290][ T9445] ? do_syscall_64+0x26/0x610 [ 116.897112][ T9445] __x64_sys_write+0x73/0xb0 [ 116.919331][ T9445] do_syscall_64+0x103/0x610 [ 116.924031][ T9445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 116.929934][ T9445] RIP: 0033:0x458c29 [ 116.934025][ T9445] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 116.954016][ T9445] RSP: 002b:00007f7a4e3b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.962682][ T9445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 116.970754][ T9445] RDX: 000000000000001c RSI: 0000000020000100 RDI: 0000000000000003 [ 116.979996][ T9445] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 116.988374][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a4e3b26d4 [ 116.996827][ T9445] R13: 00000000004c8703 R14: 00000000004deea0 R15: 00000000ffffffff [ 117.006224][ T9445] Kernel Offset: disabled [ 117.011277][ T9445] Rebooting in 86400 seconds..