[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.529602][ T26] audit: type=1800 audit(1553072131.778:25): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 38.557845][ T26] audit: type=1800 audit(1553072131.788:26): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 38.580157][ T26] audit: type=1800 audit(1553072131.788:27): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. 2019/03/20 08:55:39 fuzzer started 2019/03/20 08:55:42 dialing manager at 10.128.0.26:32837 2019/03/20 08:55:42 syscalls: 1 2019/03/20 08:55:42 code coverage: enabled 2019/03/20 08:55:42 comparison tracing: enabled 2019/03/20 08:55:42 extra coverage: extra coverage is not supported by the kernel 2019/03/20 08:55:42 setuid sandbox: enabled 2019/03/20 08:55:42 namespace sandbox: enabled 2019/03/20 08:55:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/20 08:55:42 fault injection: enabled 2019/03/20 08:55:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/20 08:55:42 net packet injection: enabled 2019/03/20 08:55:42 net device setup: enabled 08:58:23 executing program 0: syzkaller login: [ 210.228999][ T7864] IPVS: ftp: loaded support on port[0] = 21 08:58:23 executing program 1: [ 210.335578][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 210.426020][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.452989][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.461341][ T7864] device bridge_slave_0 entered promiscuous mode [ 210.485247][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.492364][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.500964][ T7864] device bridge_slave_1 entered promiscuous mode [ 210.516233][ T7867] IPVS: ftp: loaded support on port[0] = 21 [ 210.551782][ T7864] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.575369][ T7864] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:58:23 executing program 2: [ 210.639310][ T7864] team0: Port device team_slave_0 added [ 210.648201][ T7864] team0: Port device team_slave_1 added [ 210.776938][ T7864] device hsr_slave_0 entered promiscuous mode 08:58:24 executing program 3: [ 210.853418][ T7864] device hsr_slave_1 entered promiscuous mode [ 210.950100][ T7867] chnl_net:caif_netlink_parms(): no params data found [ 210.996041][ T7870] IPVS: ftp: loaded support on port[0] = 21 [ 211.012741][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.020123][ T7864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.028213][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.035344][ T7864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.067341][ T7872] IPVS: ftp: loaded support on port[0] = 21 08:58:24 executing program 4: [ 211.141668][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.149680][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.161922][ T7867] device bridge_slave_0 entered promiscuous mode [ 211.194285][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.207312][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.218103][ T7867] device bridge_slave_1 entered promiscuous mode [ 211.271679][ T7867] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.296774][ T7867] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.311137][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.344092][ T7875] IPVS: ftp: loaded support on port[0] = 21 [ 211.379281][ T22] bridge0: port 1(bridge_slave_0) entered disabled state 08:58:24 executing program 5: [ 211.390194][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.402313][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 211.432671][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.510633][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.520019][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.534186][ T7867] team0: Port device team_slave_0 added [ 211.549873][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 211.575515][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.591092][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.599747][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.606864][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.620832][ T7867] team0: Port device team_slave_1 added [ 211.641698][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.651453][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.660144][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.667292][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.699431][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.706668][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.714705][ T7870] device bridge_slave_0 entered promiscuous mode [ 211.722638][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.729843][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.737551][ T7870] device bridge_slave_1 entered promiscuous mode [ 211.774588][ T7880] IPVS: ftp: loaded support on port[0] = 21 [ 211.795160][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.805061][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.865689][ T7867] device hsr_slave_0 entered promiscuous mode [ 211.903280][ T7867] device hsr_slave_1 entered promiscuous mode [ 211.980888][ T7870] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.024847][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.033762][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.042063][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.050677][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.059275][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.067650][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.075825][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.084242][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.092669][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.102147][ T7870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.137006][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.169633][ T7870] team0: Port device team_slave_0 added [ 212.180354][ T7870] team0: Port device team_slave_1 added [ 212.188623][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 212.269875][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.295835][ T7875] chnl_net:caif_netlink_parms(): no params data found [ 212.329335][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.339130][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.349605][ T7872] device bridge_slave_0 entered promiscuous mode 08:58:25 executing program 0: 08:58:25 executing program 0: [ 212.416129][ T7870] device hsr_slave_0 entered promiscuous mode 08:58:25 executing program 0: [ 212.463375][ T7870] device hsr_slave_1 entered promiscuous mode 08:58:25 executing program 0: 08:58:25 executing program 0: [ 212.546307][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.560461][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.569158][ T7872] device bridge_slave_1 entered promiscuous mode 08:58:25 executing program 0: [ 212.626291][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.635957][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.652383][ T7875] device bridge_slave_0 entered promiscuous mode [ 212.668664][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state 08:58:25 executing program 0: [ 212.679800][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.705528][ T7875] device bridge_slave_1 entered promiscuous mode [ 212.765363][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.790236][ T7872] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.809424][ T7880] chnl_net:caif_netlink_parms(): no params data found [ 212.826409][ T7875] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.836727][ T7872] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.851969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.860162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.869779][ T7867] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.885445][ T7875] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.914909][ T7875] team0: Port device team_slave_0 added [ 212.943603][ T7872] team0: Port device team_slave_0 added [ 212.949448][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.958455][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.966428][ T7880] device bridge_slave_0 entered promiscuous mode [ 212.975209][ T7875] team0: Port device team_slave_1 added [ 212.981038][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.988297][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.996442][ T7880] device bridge_slave_1 entered promiscuous mode [ 213.017815][ T7872] team0: Port device team_slave_1 added [ 213.039473][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.048253][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.057425][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.064583][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.072181][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.081223][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.089675][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.096879][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.112474][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.156041][ T7875] device hsr_slave_0 entered promiscuous mode [ 213.213414][ T7875] device hsr_slave_1 entered promiscuous mode [ 213.253466][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.261322][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.270262][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.296158][ T7880] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.306394][ T7880] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.318702][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.327201][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.335962][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.385718][ T7872] device hsr_slave_0 entered promiscuous mode [ 213.425209][ T7872] device hsr_slave_1 entered promiscuous mode [ 213.475744][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.494547][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.502283][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.510272][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.518902][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.544426][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.552960][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.561501][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.570439][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.578957][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.587592][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.596334][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.603457][ T7881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.612683][ T7880] team0: Port device team_slave_0 added [ 213.631461][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.641613][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.649733][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.658520][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.667377][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.674481][ T7881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.682305][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.699601][ T7880] team0: Port device team_slave_1 added [ 213.764885][ T7880] device hsr_slave_0 entered promiscuous mode [ 213.813608][ T7880] device hsr_slave_1 entered promiscuous mode [ 213.858318][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.885732][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.895462][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.904492][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.913551][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.921903][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.955818][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.994536][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 08:58:27 executing program 1: [ 214.015932][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.039824][ T7870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.058438][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.094987][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.101947][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.111881][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.151780][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.168746][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.195421][ T7875] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.206729][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.216309][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.224877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.234896][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.244017][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.251080][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.260126][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.277988][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 08:58:27 executing program 2: [ 214.309289][ T7880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.317527][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.334547][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.353071][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.361976][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.378367][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.387290][ T7881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.388866][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.409292][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.418367][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.427592][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.455429][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.463494][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.473294][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.483947][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.491085][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.500215][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.508854][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.517384][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.524509][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.532551][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.541275][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.549802][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.558568][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.566930][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.575768][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.583650][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.592390][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.608893][ T7880] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.617892][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.626771][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.645180][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.655183][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.669918][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.677094][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.694918][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.704000][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.711918][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.721017][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.729798][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.736904][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.744705][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.753444][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.762048][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.770722][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.784310][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.792245][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.801254][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.810400][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.826358][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.834954][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.855861][ T7872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.867467][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.877660][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.887119][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.897283][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.906182][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.915200][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.923711][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.931992][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.940448][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.948674][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.957107][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.965797][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.975942][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.995175][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.022137][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.049973][ T7880] 8021q: adding VLAN 0 to HW filter on device batadv0 08:58:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 08:58:28 executing program 0: 08:58:28 executing program 1: 08:58:28 executing program 2: 08:58:28 executing program 4: 08:58:28 executing program 5: creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8003}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc62}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x1) creat(&(0x7f0000000140)='./bus\x00', 0x0) 08:58:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, 0x0, 0x0) 08:58:28 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r0, 0x0, 0x2, &(0x7f0000000200)='!\x00'}, 0x30) 08:58:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000006c0)={@dev={0xfe, 0x80, [], 0x13}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 08:58:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x201fa, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0xbf) write$P9_RREAD(r0, 0x0, 0x0) [ 215.283429][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 215.283444][ T26] audit: type=1804 audit(1553072308.528:31): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir649427342/syzkaller.BDYR2M/1/bus" dev="sda1" ino=16545 res=1 08:58:28 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x16) getsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x200001000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{&(0x7f0000000500)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa", 0x5a, 0x10000}], 0x5, 0x0) 08:58:28 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) close(r0) [ 215.463164][ T26] audit: type=1804 audit(1553072308.638:32): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir649427342/syzkaller.BDYR2M/1/bus" dev="sda1" ino=16545 res=1 08:58:28 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f0912fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154002000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 215.591649][ T7950] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 756082810144684242 /dev/loop3 08:58:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}}, 0xf8}}, 0x0) [ 215.682578][ T7960] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 215.714576][ T7960] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 215.723134][ T7960] IPv6: NLM_F_CREATE should be specified when creating new route 08:58:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x40045436, 0x2) [ 215.731096][ T7960] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 215.742162][ T7960] IPv6: Can't replace route, no match found [ 215.754775][ T7963] [ 215.757289][ T7963] ============================= [ 215.757303][ T7963] WARNING: suspicious RCU usage [ 215.757315][ T7963] 5.1.0-rc1-next-20190320 #7 Not tainted [ 215.757321][ T7963] ----------------------------- 08:58:29 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) [ 215.757335][ T7963] net/xfrm/xfrm_user.c:1080 suspicious rcu_dereference_check() usage! [ 215.757343][ T7963] [ 215.757343][ T7963] other info that might help us debug this: [ 215.757343][ T7963] [ 215.757361][ T7963] [ 215.757361][ T7963] rcu_scheduler_active = 2, debug_locks = 1 [ 215.757372][ T7963] 1 lock held by syz-executor.1/7963: [ 215.793514][ T7963] #0: 000000001fe1fe8e (&net->xfrm.xfrm_cfg_mutex){+.+.}, at: xfrm_netlink_rcv+0x61/0x90 [ 215.817223][ T7963] [ 215.817223][ T7963] stack backtrace: [ 215.826984][ T7963] CPU: 0 PID: 7963 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190320 #7 [ 215.835940][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.846004][ T7963] Call Trace: [ 215.849311][ T7963] dump_stack+0x172/0x1f0 [ 215.853652][ T7963] lockdep_rcu_suspicious+0x153/0x15d [ 215.859047][ T7963] xfrm_alloc_userspi+0x7d5/0xa80 [ 215.864091][ T7963] ? xfrm_state_netlink+0x140/0x140 [ 215.869301][ T7963] ? nla_parse+0x45/0x60 [ 215.873553][ T7963] ? xfrm_state_netlink+0x140/0x140 [ 215.878762][ T7963] xfrm_user_rcv_msg+0x458/0x770 [ 215.883711][ T7963] ? xfrm_dump_sa_done+0xf0/0xf0 [ 215.888660][ T7963] ? mark_held_locks+0xf0/0xf0 [ 215.893436][ T7963] ? lockdep_hardirqs_on+0x418/0x5d0 [ 215.898793][ T7963] ? __mutex_lock+0x3cd/0x1310 [ 215.903575][ T7963] ? xfrm_netlink_rcv+0x61/0x90 [ 215.908479][ T7963] netlink_rcv_skb+0x17a/0x460 [ 215.913259][ T7963] ? xfrm_dump_sa_done+0xf0/0xf0 [ 215.918236][ T7963] ? netlink_ack+0xb50/0xb50 [ 215.922846][ T7963] xfrm_netlink_rcv+0x70/0x90 [ 215.927537][ T7963] netlink_unicast+0x536/0x720 [ 215.932319][ T7963] ? netlink_attachskb+0x770/0x770 [ 215.937442][ T7963] ? _copy_from_iter_full+0x259/0x8f0 [ 215.942820][ T7963] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 215.948556][ T7963] ? __check_object_size+0x3d/0x42f [ 215.953766][ T7963] netlink_sendmsg+0x8ae/0xd70 [ 215.958546][ T7963] ? netlink_unicast+0x720/0x720 [ 215.963524][ T7963] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 215.969085][ T7963] ? apparmor_socket_sendmsg+0x2a/0x30 [ 215.974555][ T7963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 215.980811][ T7963] ? security_socket_sendmsg+0x93/0xc0 [ 215.986283][ T7963] ? netlink_unicast+0x720/0x720 [ 215.991236][ T7963] sock_sendmsg+0xdd/0x130 [ 215.995668][ T7963] ___sys_sendmsg+0x806/0x930 [ 216.000359][ T7963] ? copy_msghdr_from_user+0x430/0x430 [ 216.005840][ T7963] ? kasan_check_read+0x11/0x20 [ 216.010705][ T7963] ? __fget+0x381/0x550 [ 216.014877][ T7963] ? ksys_dup3+0x3e0/0x3e0 [ 216.019307][ T7963] ? lock_downgrade+0x880/0x880 [ 216.024173][ T7963] ? __fget_light+0x1a9/0x230 [ 216.028888][ T7963] ? __fdget+0x1b/0x20 [ 216.032968][ T7963] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 216.039229][ T7963] __sys_sendmsg+0x105/0x1d0 [ 216.043855][ T7963] ? __ia32_sys_shutdown+0x80/0x80 [ 216.049025][ T7963] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 216.054494][ T7963] ? do_syscall_64+0x26/0x610 [ 216.059205][ T7963] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 216.065285][ T7963] ? do_syscall_64+0x26/0x610 [ 216.070253][ T7963] __x64_sys_sendmsg+0x78/0xb0 [ 216.075062][ T7963] do_syscall_64+0x103/0x610 [ 216.079665][ T7963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 216.085561][ T7963] RIP: 0033:0x458079 [ 216.089457][ T7963] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.109072][ T7963] RSP: 002b:00007fe3b4a48c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.117498][ T7963] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 216.125483][ T7963] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 216.133465][ T7963] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 216.141449][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3b4a496d4 [ 216.149434][ T7963] R13: 00000000004c56c3 R14: 00000000004d95f0 R15: 00000000ffffffff [ 216.165548][ T26] audit: type=1804 audit(1553072309.408:33): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir649427342/syzkaller.BDYR2M/1/bus" dev="sda1" ino=16545 res=1 08:58:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0xc0189436, 0x0) 08:58:29 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000480)=""/230) socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x4081886) sendfile(r0, r2, 0x0, 0x100000000) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) membarrier(0x0, 0x0) [ 216.206775][ T7950] BTRFS error (device loop3): superblock checksum mismatch [ 216.218633][ T26] audit: type=1804 audit(1553072309.448:34): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir649427342/syzkaller.BDYR2M/1/bus" dev="sda1" ino=16545 res=1 08:58:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}}, 0xf8}}, 0x0) 08:58:29 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f0312fe01b2a4a280930a06000000a84306910000000b000f00350200000600000019001d4004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 216.285915][ T26] audit: type=1804 audit(1553072309.448:35): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir649427342/syzkaller.BDYR2M/1/bus" dev="sda1" ino=16545 res=1 08:58:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') 08:58:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}}, 0xf8}}, 0x0) [ 216.414424][ T7987] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 216.472943][ T7987] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 216.509765][ T7987] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.560769][ T7950] BTRFS error (device loop3): open_ctree failed 08:58:29 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x16) getsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x200001000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{&(0x7f0000000500)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa", 0x5a, 0x10000}], 0x5, 0x0) 08:58:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}}, 0xf8}}, 0x0) 08:58:29 executing program 4: socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x4081886) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 08:58:29 executing program 5: creat(&(0x7f0000000400)='./file0\x00', 0x0) 08:58:29 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'ifb0\x00\x03\x00`\x00'}) 08:58:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13b}}, 0x1f) close(r2) r3 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) connect$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x2, {0x5, 0x8, 0x80000000, 0x2, 0x1, 0xfea8}, 0x1, 0x9}, 0xe) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000400)=0x4) r5 = signalfd4(r4, &(0x7f0000000c00)={0x1d9600000}, 0x3, 0x838401e50c07235a) r6 = dup2(r5, r0) write$9p(r6, &(0x7f0000000c40)="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", 0x1000) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000080)={0x20000000200000, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000040)=0x679, 0x4) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0xaf8a, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x200003, 0x7ff}, 0x10) 08:58:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}}, 0xf8}}, 0x0) [ 216.802644][ C0] hrtimer: interrupt took 54979 ns [ 216.908839][ T8019] mmap: syz-executor.5 (8019) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 216.926021][ T8014] BTRFS error (device loop3): superblock checksum mismatch [ 216.951491][ T8014] BTRFS error (device loop3): open_ctree failed [ 217.016132][ T8026] binder_alloc: binder_alloc_mmap_handler: 8017 20001000-20004000 already mapped failed -16 [ 217.066113][ T8028] binder: BINDER_SET_CONTEXT_MGR already set [ 217.072556][ T8028] binder: 8017:8028 ioctl 40046207 0 returned -16 08:58:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13b}}, 0x1f) close(r2) r3 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) connect$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x2, {0x5, 0x8, 0x80000000, 0x2, 0x1, 0xfea8}, 0x1, 0x9}, 0xe) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000400)=0x4) r5 = signalfd4(r4, &(0x7f0000000c00)={0x1d9600000}, 0x3, 0x838401e50c07235a) r6 = dup2(r5, r0) write$9p(r6, &(0x7f0000000c40)="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", 0x1000) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000080)={0x20000000200000, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000040)=0x679, 0x4) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0xaf8a, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x200003, 0x7ff}, 0x10) 08:58:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x61f}], 0x1, 0x1000000) 08:58:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}}, 0xf8}}, 0x0) 08:58:30 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1302}}, 0x80, 0x0}, 0x0) 08:58:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13b}}, 0x1f) close(r2) r3 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) connect$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x2, {0x5, 0x8, 0x80000000, 0x2, 0x1, 0xfea8}, 0x1, 0x9}, 0xe) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000400)=0x4) r5 = signalfd4(r4, &(0x7f0000000c00)={0x1d9600000}, 0x3, 0x838401e50c07235a) r6 = dup2(r5, r0) write$9p(r6, &(0x7f0000000c40)="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", 0x1000) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000080)={0x20000000200000, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000040)=0x679, 0x4) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0xaf8a, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x200003, 0x7ff}, 0x10) 08:58:30 executing program 2: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) 08:58:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}}, 0xf8}}, 0x0) [ 217.340808][ T8047] binder: BINDER_SET_CONTEXT_MGR already set [ 217.347282][ T8047] binder: 8046:8047 ioctl 40046207 0 returned -16 [ 217.469841][ T8055] ================================================================== [ 217.478233][ T8055] BUG: KASAN: use-after-free in tipc_sk_filter_rcv+0x2166/0x34f0 [ 217.485981][ T8055] Read of size 4 at addr ffff888099d7a9b4 by task syz-executor.2/8055 [ 217.494140][ T8055] [ 217.496490][ T8055] CPU: 1 PID: 8055 Comm: syz-executor.2 Not tainted 5.1.0-rc1-next-20190320 #7 [ 217.505441][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.515517][ T8055] Call Trace: [ 217.518830][ T8055] dump_stack+0x172/0x1f0 [ 217.523181][ T8055] ? tipc_sk_filter_rcv+0x2166/0x34f0 [ 217.529073][ T8055] print_address_description.cold+0x7c/0x20d [ 217.535074][ T8055] ? tipc_sk_filter_rcv+0x2166/0x34f0 [ 217.540461][ T8055] ? tipc_sk_filter_rcv+0x2166/0x34f0 [ 217.545849][ T8055] kasan_report.cold+0x1b/0x40 [ 217.550652][ T8055] ? tipc_sk_filter_rcv+0x2166/0x34f0 [ 217.556057][ T8055] __asan_report_load4_noabort+0x14/0x20 [ 217.561723][ T8055] tipc_sk_filter_rcv+0x2166/0x34f0 [ 217.566957][ T8055] ? debug_check_no_obj_freed+0x211/0x444 [ 217.572717][ T8055] ? tipc_sk_overlimit2+0xa0/0xa0 [ 217.577774][ T8055] ? kasan_check_write+0x14/0x20 [ 217.582731][ T8055] ? graph_lock+0x7b/0x200 [ 217.587171][ T8055] ? __lockdep_reset_lock+0x450/0x450 [ 217.592672][ T8055] ? kasan_check_read+0x11/0x20 [ 217.597547][ T8055] ? __lock_acquire+0x242a/0x3fb0 [ 217.602638][ T8055] ? __release_sock+0xca/0x3a0 [ 217.607433][ T8055] tipc_sk_backlog_rcv+0xeb/0x1e0 [ 217.612494][ T8055] ? tipc_sk_mcast_rcv+0x1020/0x1020 [ 217.617820][ T8055] ? __local_bh_enable_ip+0x15a/0x270 [ 217.623225][ T8055] ? lockdep_hardirqs_on+0x418/0x5d0 [ 217.628539][ T8055] ? __release_sock+0xca/0x3a0 [ 217.633316][ T8055] ? trace_hardirqs_on+0x67/0x230 [ 217.638358][ T8055] ? __release_sock+0xca/0x3a0 [ 217.643142][ T8055] ? __local_bh_enable_ip+0x15a/0x270 [ 217.648533][ T8055] __release_sock+0x12e/0x3a0 [ 217.653238][ T8055] release_sock+0x59/0x1c0 [ 217.657682][ T8055] tipc_setsockopt+0x496/0xb60 [ 217.662469][ T8055] ? tipc_sk_finish_conn+0x640/0x640 [ 217.667787][ T8055] ? apparmor_socket_setsockopt+0x22/0x30 [ 217.673531][ T8055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 217.679790][ T8055] ? security_socket_setsockopt+0x93/0xc0 [ 217.685536][ T8055] __sys_setsockopt+0x180/0x280 [ 217.690403][ T8055] ? kernel_accept+0x310/0x310 [ 217.695188][ T8055] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 217.700671][ T8055] ? do_syscall_64+0x26/0x610 [ 217.705369][ T8055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.711454][ T8055] ? do_syscall_64+0x26/0x610 [ 217.716159][ T8055] __x64_sys_setsockopt+0xbe/0x150 [ 217.721297][ T8055] do_syscall_64+0x103/0x610 [ 217.725916][ T8055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.731824][ T8055] RIP: 0033:0x458079 [ 217.735734][ T8055] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.755354][ T8055] RSP: 002b:00007f4c28cc7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.763783][ T8055] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 217.771771][ T8055] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 217.779759][ T8055] RBP: 000000000073bf00 R08: 000000000000feda R09: 0000000000000000 [ 217.787785][ T8055] R10: 0000000020000040 R11: 0000000000000246 R12: 00007f4c28cc86d4 [ 217.795778][ T8055] R13: 00000000004c6175 R14: 00000000004db1e0 R15: 00000000ffffffff [ 217.803781][ T8055] [ 217.806125][ T8055] Allocated by task 21: [ 217.810297][ T8055] save_stack+0x45/0xd0 [ 217.814470][ T8055] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 217.820115][ T8055] kasan_kmalloc+0x9/0x10 [ 217.824464][ T8055] __kmalloc_node_track_caller+0x4e/0x70 [ 217.830110][ T8055] __kmalloc_reserve.isra.0+0x40/0xf0 [ 217.835491][ T8055] __alloc_skb+0x10b/0x5e0 [ 217.839916][ T8055] tipc_buf_acquire+0x2f/0x100 [ 217.844705][ T8055] tipc_msg_create+0x38/0x270 [ 217.849407][ T8055] tipc_topsrv_kern_evt+0x2a7/0x580 [ 217.854613][ T8055] tipc_conn_send_to_sock+0x43e/0x5f0 [ 217.854637][ T8055] tipc_conn_send_work+0x65/0x80 [ 217.854652][ T8055] process_one_work+0x98e/0x1790 [ 217.854665][ T8055] worker_thread+0x98/0xe40 [ 217.854676][ T8055] kthread+0x357/0x430 [ 217.854690][ T8055] ret_from_fork+0x3a/0x50 [ 217.854694][ T8055] [ 217.854700][ T8055] Freed by task 8055: [ 217.854714][ T8055] save_stack+0x45/0xd0 [ 217.854728][ T8055] __kasan_slab_free+0x102/0x150 [ 217.854739][ T8055] kasan_slab_free+0xe/0x10 [ 217.854751][ T8055] kfree+0xcf/0x230 [ 217.854766][ T8055] skb_free_head+0x93/0xb0 [ 217.854777][ T8055] skb_release_data+0x576/0x7a0 [ 217.854787][ T8055] skb_release_all+0x4d/0x60 [ 217.854796][ T8055] kfree_skb+0xe8/0x390 [ 217.854809][ T8055] tipc_sk_filter_rcv+0x1e6a/0x34f0 [ 217.854821][ T8055] tipc_sk_backlog_rcv+0xeb/0x1e0 [ 217.854833][ T8055] __release_sock+0x12e/0x3a0 [ 217.854844][ T8055] release_sock+0x59/0x1c0 [ 217.854856][ T8055] tipc_setsockopt+0x496/0xb60 [ 217.854866][ T8055] __sys_setsockopt+0x180/0x280 [ 217.854877][ T8055] __x64_sys_setsockopt+0xbe/0x150 [ 217.854891][ T8055] do_syscall_64+0x103/0x610 [ 217.854905][ T8055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.854909][ T8055] [ 217.854920][ T8055] The buggy address belongs to the object at ffff888099d7a900 [ 217.854920][ T8055] which belongs to the cache kmalloc-1k of size 1024 [ 217.854931][ T8055] The buggy address is located 180 bytes inside of [ 217.854931][ T8055] 1024-byte region [ffff888099d7a900, ffff888099d7ad00) [ 217.854936][ T8055] The buggy address belongs to the page: [ 217.854949][ T8055] page:ffffea0002675e80 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0xffff888099d7a000 compound_mapcount: 0 [ 217.854965][ T8055] flags: 0x1fffc0000010200(slab|head) [ 217.854985][ T8055] raw: 01fffc0000010200 ffffea00026c5d08 ffffea0002751f08 ffff88812c3f0ac0 [ 217.855001][ T8055] raw: ffff888099d7a000 ffff888099d7a000 0000000100000003 0000000000000000 [ 217.855025][ T8055] page dumped because: kasan: bad access detected [ 217.870638][ T3877] kobject: 'loop5' (000000004427debc): kobject_uevent_env [ 217.874741][ T8055] [ 217.874746][ T8055] Memory state around the buggy address: [ 217.874759][ T8055] ffff888099d7a880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.874768][ T8055] ffff888099d7a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.874777][ T8055] >ffff888099d7a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.874783][ T8055] ^ [ 217.874792][ T8055] ffff888099d7aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.874802][ T8055] ffff888099d7aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.874806][ T8055] ================================================================== [ 217.874811][ T8055] Disabling lock debugging due to kernel taint [ 217.898987][ T8055] Kernel panic - not syncing: panic_on_warn set ... [ 217.907197][ T3877] kobject: 'loop5' (000000004427debc): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.911517][ T8055] CPU: 1 PID: 8055 Comm: syz-executor.2 Tainted: G B 5.1.0-rc1-next-20190320 #7 [ 218.147820][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.157860][ T8055] Call Trace: [ 218.161137][ T8055] dump_stack+0x172/0x1f0 [ 218.165483][ T8055] panic+0x2cb/0x65c [ 218.169409][ T8055] ? __warn_printk+0xf3/0xf3 [ 218.174012][ T8055] ? tipc_sk_filter_rcv+0x2166/0x34f0 [ 218.179372][ T8055] ? preempt_schedule+0x4b/0x60 [ 218.184218][ T8055] ? ___preempt_schedule+0x16/0x18 [ 218.189323][ T8055] ? trace_hardirqs_on+0x5e/0x230 [ 218.194335][ T8055] ? tipc_sk_filter_rcv+0x2166/0x34f0 [ 218.199694][ T8055] end_report+0x47/0x4f [ 218.203847][ T8055] ? tipc_sk_filter_rcv+0x2166/0x34f0 [ 218.209234][ T8055] kasan_report.cold+0xe/0x40 [ 218.213900][ T8055] ? tipc_sk_filter_rcv+0x2166/0x34f0 [ 218.219255][ T8055] __asan_report_load4_noabort+0x14/0x20 [ 218.224886][ T8055] tipc_sk_filter_rcv+0x2166/0x34f0 [ 218.230104][ T8055] ? debug_check_no_obj_freed+0x211/0x444 [ 218.235819][ T8055] ? tipc_sk_overlimit2+0xa0/0xa0 [ 218.240830][ T8055] ? kasan_check_write+0x14/0x20 [ 218.245752][ T8055] ? graph_lock+0x7b/0x200 [ 218.250177][ T8055] ? __lockdep_reset_lock+0x450/0x450 [ 218.255538][ T8055] ? kasan_check_read+0x11/0x20 [ 218.260394][ T8055] ? __lock_acquire+0x242a/0x3fb0 [ 218.265402][ T8055] ? __release_sock+0xca/0x3a0 [ 218.270144][ T8055] tipc_sk_backlog_rcv+0xeb/0x1e0 [ 218.275154][ T8055] ? tipc_sk_mcast_rcv+0x1020/0x1020 [ 218.280421][ T8055] ? __local_bh_enable_ip+0x15a/0x270 [ 218.285816][ T8055] ? lockdep_hardirqs_on+0x418/0x5d0 [ 218.291095][ T8055] ? __release_sock+0xca/0x3a0 [ 218.295864][ T8055] ? trace_hardirqs_on+0x67/0x230 [ 218.300902][ T8055] ? __release_sock+0xca/0x3a0 [ 218.305653][ T8055] ? __local_bh_enable_ip+0x15a/0x270 [ 218.311034][ T8055] __release_sock+0x12e/0x3a0 [ 218.315702][ T8055] release_sock+0x59/0x1c0 [ 218.320105][ T8055] tipc_setsockopt+0x496/0xb60 [ 218.324865][ T8055] ? tipc_sk_finish_conn+0x640/0x640 [ 218.330183][ T8055] ? apparmor_socket_setsockopt+0x22/0x30 [ 218.335890][ T8055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.342115][ T8055] ? security_socket_setsockopt+0x93/0xc0 [ 218.347825][ T8055] __sys_setsockopt+0x180/0x280 [ 218.352661][ T8055] ? kernel_accept+0x310/0x310 [ 218.357413][ T8055] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 218.362861][ T8055] ? do_syscall_64+0x26/0x610 [ 218.367537][ T8055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.373608][ T8055] ? do_syscall_64+0x26/0x610 [ 218.378279][ T8055] __x64_sys_setsockopt+0xbe/0x150 [ 218.383389][ T8055] do_syscall_64+0x103/0x610 [ 218.388003][ T8055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.393883][ T8055] RIP: 0033:0x458079 [ 218.397755][ T8055] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 218.417344][ T8055] RSP: 002b:00007f4c28cc7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.425777][ T8055] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 218.433741][ T8055] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 218.441697][ T8055] RBP: 000000000073bf00 R08: 000000000000feda R09: 0000000000000000 [ 218.449661][ T8055] R10: 0000000020000040 R11: 0000000000000246 R12: 00007f4c28cc86d4 [ 218.457624][ T8055] R13: 00000000004c6175 R14: 00000000004db1e0 R15: 00000000ffffffff [ 218.466471][ T8055] Kernel Offset: disabled [ 218.470803][ T8055] Rebooting in 86400 seconds..