[ 31.910203][ T26] audit: type=1800 audit(1558662974.046:22): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 66.814503][ T7338] IPVS: ftp: loaded support on port[0] = 21 [ 67.240736][ T7342] can: request_module (can-proto-0) failed. [ 68.088103][ T7342] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts. 2019/05/24 01:56:57 parsed 1 programs 2019/05/24 01:56:58 executed programs: 0 [ 76.476390][ T7414] IPVS: ftp: loaded support on port[0] = 21 [ 76.507308][ T7412] IPVS: ftp: loaded support on port[0] = 21 [ 76.508575][ T7418] IPVS: ftp: loaded support on port[0] = 21 [ 76.534615][ T7420] IPVS: ftp: loaded support on port[0] = 21 [ 76.550814][ T7417] IPVS: ftp: loaded support on port[0] = 21 [ 76.589224][ T7422] IPVS: ftp: loaded support on port[0] = 21 [ 76.747512][ T7412] chnl_net:caif_netlink_parms(): no params data found [ 76.768648][ T7414] chnl_net:caif_netlink_parms(): no params data found [ 76.887108][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.894885][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.903311][ T7414] device bridge_slave_0 entered promiscuous mode [ 76.912947][ T7418] chnl_net:caif_netlink_parms(): no params data found [ 76.921673][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.929099][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.936700][ T7412] device bridge_slave_0 entered promiscuous mode [ 76.943935][ T7417] chnl_net:caif_netlink_parms(): no params data found [ 76.966155][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.974747][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.982451][ T7414] device bridge_slave_1 entered promiscuous mode [ 76.995106][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.002710][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.010201][ T7412] device bridge_slave_1 entered promiscuous mode [ 77.047383][ T7414] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.059288][ T7414] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.077967][ T7412] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.091914][ T7412] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.101875][ T7420] chnl_net:caif_netlink_parms(): no params data found [ 77.135179][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.143002][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.150516][ T7417] device bridge_slave_0 entered promiscuous mode [ 77.184714][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.191792][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.199680][ T7417] device bridge_slave_1 entered promiscuous mode [ 77.231358][ T7417] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.240180][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.247745][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.255485][ T7418] device bridge_slave_0 entered promiscuous mode [ 77.264417][ T7414] team0: Port device team_slave_0 added [ 77.270258][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.277476][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.285400][ T7418] device bridge_slave_1 entered promiscuous mode [ 77.297795][ T7412] team0: Port device team_slave_0 added [ 77.307993][ T7417] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.321088][ T7414] team0: Port device team_slave_1 added [ 77.346062][ T7412] team0: Port device team_slave_1 added [ 77.403548][ T7414] device hsr_slave_0 entered promiscuous mode [ 77.472531][ T7414] device hsr_slave_1 entered promiscuous mode [ 77.544709][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.551794][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.560142][ T7420] device bridge_slave_0 entered promiscuous mode [ 77.578317][ T7418] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.589183][ T7418] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.600019][ T7422] chnl_net:caif_netlink_parms(): no params data found [ 77.608109][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.615666][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.623621][ T7420] device bridge_slave_1 entered promiscuous mode [ 77.631247][ T7417] team0: Port device team_slave_0 added [ 77.655505][ T7418] team0: Port device team_slave_0 added [ 77.666007][ T7418] team0: Port device team_slave_1 added [ 77.679976][ T7417] team0: Port device team_slave_1 added [ 77.754381][ T7412] device hsr_slave_0 entered promiscuous mode [ 77.822343][ T7412] device hsr_slave_1 entered promiscuous mode [ 77.944592][ T7417] device hsr_slave_0 entered promiscuous mode [ 77.982359][ T7417] device hsr_slave_1 entered promiscuous mode [ 78.044271][ T7420] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.058218][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.067715][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.075413][ T7422] device bridge_slave_0 entered promiscuous mode [ 78.083212][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.090252][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.097967][ T7422] device bridge_slave_1 entered promiscuous mode [ 78.154556][ T7418] device hsr_slave_0 entered promiscuous mode [ 78.222357][ T7418] device hsr_slave_1 entered promiscuous mode [ 78.276273][ T7420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.308875][ T7420] team0: Port device team_slave_0 added [ 78.319526][ T7422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.330550][ T7422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.351667][ T7420] team0: Port device team_slave_1 added [ 78.411360][ T7420] device hsr_slave_0 entered promiscuous mode [ 78.452467][ T7420] device hsr_slave_1 entered promiscuous mode [ 78.493669][ T7422] team0: Port device team_slave_0 added [ 78.508354][ T7422] team0: Port device team_slave_1 added [ 78.573724][ T7422] device hsr_slave_0 entered promiscuous mode [ 78.622343][ T7422] device hsr_slave_1 entered promiscuous mode [ 78.756790][ T7414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.796546][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.804703][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.816221][ T7414] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.830307][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.854826][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.867177][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.881651][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.902514][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.911077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.920978][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.928157][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.936851][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.945700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.953993][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.961012][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.968474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.976799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.985296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.993816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.002016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.010294][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.018534][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.026785][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.035001][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.043253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.051354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.059375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.075183][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.096719][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.105019][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.113043][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.120528][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.129182][ T7420] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.148487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.156292][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.164324][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.173012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.181205][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.188282][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.196059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.218572][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.227369][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.237466][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.244559][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.252226][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.260483][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.268815][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.277120][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.287367][ T7412] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.301677][ T7422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.316221][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.324128][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.332988][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.341182][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.348252][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.355977][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.363664][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.371190][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.379733][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.398926][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.407152][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.415193][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.423468][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.431648][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.447567][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.459158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.468138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.476855][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.483946][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.491488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.500018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.508348][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.515517][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.523055][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.531478][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.539876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.546948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.554445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.563048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.572347][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.579368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.587426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.595467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.609179][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.626450][ T7430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.635186][ T7430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.647834][ T7430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.656454][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.663704][ T7430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.671304][ T7430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.679327][ T7430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.693476][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.719643][ T7422] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.728689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.737609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.746992][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.755295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.764073][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.772878][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.781284][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.789895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.798249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.807114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.815196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.831608][ T7412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.843842][ T7412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.866826][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.878272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.889982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.898488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.906766][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.915004][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.923639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.931729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.940123][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.948624][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.957209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.965629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.974056][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.982653][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.990855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.997924][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.005461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.013998][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.022295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.029884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.038124][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.048318][ T7417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.059444][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.083276][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.090611][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.108501][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.129396][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.136598][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.145190][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.153855][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.162417][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.170814][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.178991][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.187154][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.211105][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.220257][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.229202][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.238312][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.247903][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.256932][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.268686][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.282846][ T7446] ================================================================== [ 80.290922][ T7446] BUG: KASAN: use-after-free in __lock_acquire+0x3c15/0x55b0 [ 80.298288][ T7446] Read of size 8 at addr ffff88809ee96e40 by task syz-executor.0/7446 [ 80.306441][ T7446] [ 80.308762][ T7446] CPU: 1 PID: 7446 Comm: syz-executor.0 Not tainted 5.1.0+ #1 [ 80.316184][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.326210][ T7446] Call Trace: [ 80.329475][ T7446] dump_stack+0x113/0x167 [ 80.333782][ T7446] print_address_description.cold.5+0x9/0x1ff [ 80.339841][ T7446] ? __lock_acquire+0x3c15/0x55b0 [ 80.344837][ T7446] __kasan_report.cold.6+0x1b/0x39 [ 80.349922][ T7446] ? __lock_acquire+0x3c15/0x55b0 [ 80.354925][ T7446] ? __lock_acquire+0x3c15/0x55b0 [ 80.359923][ T7446] kasan_report+0x12/0x20 [ 80.364229][ T7446] __asan_report_load8_noabort+0x14/0x20 [ 80.369839][ T7446] __lock_acquire+0x3c15/0x55b0 [ 80.374719][ T7446] ? netlink_rcv_skb+0x13f/0x380 [ 80.379649][ T7446] ? sock_diag_rcv+0x25/0x40 [ 80.384213][ T7446] ? netlink_unicast+0x444/0x640 [ 80.389122][ T7446] ? netlink_sendmsg+0x765/0xc50 [ 80.394023][ T7446] ? sock_sendmsg+0xd6/0x100 [ 80.398760][ T7446] ? ___sys_sendmsg+0x658/0x960 [ 80.403578][ T7446] ? __sys_sendmsg+0xd9/0x180 [ 80.408222][ T7446] ? __x64_sys_sendmsg+0x73/0xb0 [ 80.413128][ T7446] ? do_syscall_64+0xd6/0x530 [ 80.417776][ T7446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.423822][ T7446] ? mark_held_locks+0x130/0x130 [ 80.428745][ T7446] ? find_held_lock+0x36/0x1d0 [ 80.433504][ T7446] ? mark_held_locks+0xb8/0x130 [ 80.438331][ T7446] lock_acquire+0x173/0x3d0 [ 80.442817][ T7446] ? rhashtable_walk_enter+0xf4/0x300 [ 80.448173][ T7446] _raw_spin_lock+0x2d/0x40 [ 80.452648][ T7446] ? rhashtable_walk_enter+0xf4/0x300 [ 80.457998][ T7446] rhashtable_walk_enter+0xf4/0x300 [ 80.463169][ T7446] __tipc_dump_start+0x1bb/0x2c0 [ 80.468073][ T7446] tipc_dump_start+0x6e/0x90 [ 80.472638][ T7446] __netlink_dump_start+0x485/0x810 [ 80.477805][ T7446] ? lock_acquire+0x173/0x3d0 [ 80.482449][ T7446] tipc_sock_diag_handler_dump+0x186/0x260 [ 80.488226][ T7446] ? __tipc_diag_gen_cookie+0x90/0x90 [ 80.493572][ T7446] ? __tipc_dump_start+0x2c0/0x2c0 [ 80.498659][ T7446] ? tipc_unregister_sysctl+0x20/0x20 [ 80.504001][ T7446] ? tipc_ioctl+0x230/0x230 [ 80.508483][ T7446] sock_diag_rcv_msg+0x291/0x380 [ 80.513392][ T7446] netlink_rcv_skb+0x13f/0x380 [ 80.518148][ T7446] ? sock_diag_bind+0x50/0x50 [ 80.522887][ T7446] ? netlink_ack+0x980/0x980 [ 80.527446][ T7446] sock_diag_rcv+0x25/0x40 [ 80.531833][ T7446] netlink_unicast+0x444/0x640 [ 80.536566][ T7446] ? netlink_attachskb+0x6d0/0x6d0 [ 80.541649][ T7446] ? _copy_from_iter_full+0x19e/0x7f0 [ 80.546991][ T7446] ? __check_object_size+0x1ea/0x31c [ 80.552245][ T7446] netlink_sendmsg+0x765/0xc50 [ 80.556999][ T7446] ? netlink_unicast+0x640/0x640 [ 80.561913][ T7446] ? apparmor_socket_sendmsg+0x1b/0x20 [ 80.567367][ T7446] ? netlink_unicast+0x640/0x640 [ 80.572286][ T7446] sock_sendmsg+0xd6/0x100 [ 80.576669][ T7446] ___sys_sendmsg+0x658/0x960 [ 80.581336][ T7446] ? find_held_lock+0x36/0x1d0 [ 80.586171][ T7446] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 80.591606][ T7446] ? __fget+0x292/0x420 [ 80.595729][ T7446] ? lock_downgrade+0x860/0x860 [ 80.600562][ T7446] ? kasan_check_read+0x11/0x20 [ 80.605396][ T7446] ? __fget+0x2af/0x420 [ 80.609517][ T7446] ? ksys_dup3+0x2e0/0x2e0 [ 80.613922][ T7446] ? find_held_lock+0x36/0x1d0 [ 80.618685][ T7446] ? __fget_light+0x179/0x1f0 [ 80.623332][ T7446] ? lock_downgrade+0x860/0x860 [ 80.628148][ T7446] ? __fdget+0xe/0x10 [ 80.632099][ T7446] __sys_sendmsg+0xd9/0x180 [ 80.636568][ T7446] ? __ia32_sys_shutdown+0x70/0x70 [ 80.641651][ T7446] ? kasan_check_read+0x11/0x20 [ 80.646476][ T7446] ? _copy_to_user+0x91/0xb0 [ 80.651036][ T7446] ? put_timespec64+0xa9/0x100 [ 80.655772][ T7446] ? nsecs_to_jiffies+0x20/0x20 [ 80.660610][ T7446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.666645][ T7446] __x64_sys_sendmsg+0x73/0xb0 [ 80.671397][ T7446] do_syscall_64+0xd6/0x530 [ 80.675870][ T7446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.681737][ T7446] RIP: 0033:0x458da9 [ 80.685606][ T7446] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 80.705181][ T7446] RSP: 002b:00007fa7221dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.713566][ T7446] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 80.721509][ T7446] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 80.729450][ T7446] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 80.737398][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7221db6d4 [ 80.745340][ T7446] R13: 00000000004c6790 R14: 00000000004db3e8 R15: 00000000ffffffff [ 80.753289][ T7446] [ 80.755587][ T7446] Allocated by task 7342: [ 80.759908][ T7446] save_stack+0x21/0x90 [ 80.764037][ T7446] __kasan_kmalloc.constprop.8+0xc7/0xd0 [ 80.769632][ T7446] kasan_kmalloc+0x9/0x10 [ 80.773929][ T7446] kmem_cache_alloc_trace+0x154/0x750 [ 80.779270][ T7446] tomoyo_init_log+0x18e/0x1e00 [ 80.784096][ T7446] tomoyo_supervisor+0x30a/0xc00 [ 80.789026][ T7446] tomoyo_path_permission+0x24e/0x340 [ 80.794361][ T7446] tomoyo_check_open_permission+0x2c6/0x2f0 [ 80.800218][ T7446] tomoyo_file_open+0x81/0xa0 [ 80.804863][ T7446] security_file_open+0x4c/0x250 [ 80.809777][ T7446] do_dentry_open+0x2d1/0x1000 [ 80.814512][ T7446] vfs_open+0x9a/0xc0 [ 80.818463][ T7446] path_openat+0xb52/0x3d10 [ 80.822934][ T7446] do_filp_open+0x177/0x250 [ 80.827405][ T7446] do_sys_open+0x1dd/0x370 [ 80.831791][ T7446] __x64_sys_openat+0x98/0xf0 [ 80.836436][ T7446] do_syscall_64+0xd6/0x530 [ 80.840909][ T7446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.846774][ T7446] [ 80.849075][ T7446] Freed by task 7342: [ 80.853026][ T7446] save_stack+0x21/0x90 [ 80.857148][ T7446] __kasan_slab_free+0x102/0x150 [ 80.862052][ T7446] kasan_slab_free+0xe/0x10 [ 80.866522][ T7446] kfree+0xcf/0x230 [ 80.870301][ T7446] tomoyo_init_log+0x12e7/0x1e00 [ 80.875210][ T7446] tomoyo_supervisor+0x30a/0xc00 [ 80.880114][ T7446] tomoyo_path_permission+0x24e/0x340 [ 80.885468][ T7446] tomoyo_check_open_permission+0x2c6/0x2f0 [ 80.891331][ T7446] tomoyo_file_open+0x81/0xa0 [ 80.895971][ T7446] security_file_open+0x4c/0x250 [ 80.900875][ T7446] do_dentry_open+0x2d1/0x1000 [ 80.905612][ T7446] vfs_open+0x9a/0xc0 [ 80.909569][ T7446] path_openat+0xb52/0x3d10 [ 80.914036][ T7446] do_filp_open+0x177/0x250 [ 80.918506][ T7446] do_sys_open+0x1dd/0x370 [ 80.922888][ T7446] __x64_sys_openat+0x98/0xf0 [ 80.927532][ T7446] do_syscall_64+0xd6/0x530 [ 80.932005][ T7446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.937861][ T7446] [ 80.940159][ T7446] The buggy address belongs to the object at ffff88809ee96140 [ 80.940159][ T7446] which belongs to the cache kmalloc-4k of size 4096 [ 80.954179][ T7446] The buggy address is located 3328 bytes inside of [ 80.954179][ T7446] 4096-byte region [ffff88809ee96140, ffff88809ee97140) [ 80.967612][ T7446] The buggy address belongs to the page: [ 80.973228][ T7446] page:ffffea00027ba580 count:1 mapcount:0 mapping:ffff8880aa400dc0 index:0x0 compound_mapcount: 0 [ 80.983883][ T7446] flags: 0x1fffc0000010200(slab|head) [ 80.989229][ T7446] raw: 01fffc0000010200 ffffea000267d908 ffffea000223b888 ffff8880aa400dc0 [ 80.997784][ T7446] raw: 0000000000000000 ffff88809ee96140 0000000100000001 0000000000000000 [ 81.006333][ T7446] page dumped because: kasan: bad access detected [ 81.012712][ T7446] [ 81.015007][ T7446] Memory state around the buggy address: [ 81.020788][ T7446] ffff88809ee96d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.028816][ T7446] ffff88809ee96d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.036843][ T7446] >ffff88809ee96e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.044878][ T7446] ^ [ 81.051015][ T7446] ffff88809ee96e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.059053][ T7446] ffff88809ee96f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.067090][ T7446] ================================================================== [ 81.075122][ T7446] Disabling lock debugging due to kernel taint [ 81.081266][ T7446] Kernel panic - not syncing: panic_on_warn set ... [ 81.087858][ T7446] CPU: 1 PID: 7446 Comm: syz-executor.0 Tainted: G B 5.1.0+ #1 [ 81.096674][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.106702][ T7446] Call Trace: [ 81.109967][ T7446] dump_stack+0x113/0x167 [ 81.114302][ T7446] ? __lock_acquire+0x3b60/0x55b0 [ 81.119299][ T7446] panic+0x212/0x41d [ 81.123186][ T7446] ? __warn_printk+0xd6/0xd6 [ 81.127749][ T7446] ? lock_downgrade+0x860/0x860 [ 81.132579][ T7446] ? _raw_spin_unlock_irqrestore+0x63/0xd0 [ 81.138355][ T7446] ? kasan_check_read+0x11/0x20 [ 81.143174][ T7446] ? __lock_acquire+0x3c15/0x55b0 [ 81.148167][ T7446] end_report+0x47/0x4f [ 81.152300][ T7446] __kasan_report.cold.6+0xe/0x39 [ 81.157319][ T7446] ? __lock_acquire+0x3c15/0x55b0 [ 81.162317][ T7446] ? __lock_acquire+0x3c15/0x55b0 [ 81.167308][ T7446] kasan_report+0x12/0x20 [ 81.171735][ T7446] __asan_report_load8_noabort+0x14/0x20 [ 81.177348][ T7446] __lock_acquire+0x3c15/0x55b0 [ 81.182166][ T7446] ? netlink_rcv_skb+0x13f/0x380 [ 81.187070][ T7446] ? sock_diag_rcv+0x25/0x40 [ 81.191633][ T7446] ? netlink_unicast+0x444/0x640 [ 81.196546][ T7446] ? netlink_sendmsg+0x765/0xc50 [ 81.201471][ T7446] ? sock_sendmsg+0xd6/0x100 [ 81.206032][ T7446] ? ___sys_sendmsg+0x658/0x960 [ 81.210869][ T7446] ? __sys_sendmsg+0xd9/0x180 [ 81.215512][ T7446] ? __x64_sys_sendmsg+0x73/0xb0 [ 81.220442][ T7446] ? do_syscall_64+0xd6/0x530 [ 81.225089][ T7446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.231126][ T7446] ? mark_held_locks+0x130/0x130 [ 81.236052][ T7446] ? find_held_lock+0x36/0x1d0 [ 81.240794][ T7446] ? mark_held_locks+0xb8/0x130 [ 81.245611][ T7446] lock_acquire+0x173/0x3d0 [ 81.250103][ T7446] ? rhashtable_walk_enter+0xf4/0x300 [ 81.255448][ T7446] _raw_spin_lock+0x2d/0x40 [ 81.259921][ T7446] ? rhashtable_walk_enter+0xf4/0x300 [ 81.265292][ T7446] rhashtable_walk_enter+0xf4/0x300 [ 81.270547][ T7446] __tipc_dump_start+0x1bb/0x2c0 [ 81.275454][ T7446] tipc_dump_start+0x6e/0x90 [ 81.280020][ T7446] __netlink_dump_start+0x485/0x810 [ 81.285188][ T7446] ? lock_acquire+0x173/0x3d0 [ 81.289832][ T7446] tipc_sock_diag_handler_dump+0x186/0x260 [ 81.295627][ T7446] ? __tipc_diag_gen_cookie+0x90/0x90 [ 81.301060][ T7446] ? __tipc_dump_start+0x2c0/0x2c0 [ 81.306159][ T7446] ? tipc_unregister_sysctl+0x20/0x20 [ 81.311507][ T7446] ? tipc_ioctl+0x230/0x230 [ 81.315980][ T7446] sock_diag_rcv_msg+0x291/0x380 [ 81.320888][ T7446] netlink_rcv_skb+0x13f/0x380 [ 81.325647][ T7446] ? sock_diag_bind+0x50/0x50 [ 81.330329][ T7446] ? netlink_ack+0x980/0x980 [ 81.334892][ T7446] sock_diag_rcv+0x25/0x40 [ 81.339292][ T7446] netlink_unicast+0x444/0x640 [ 81.344025][ T7446] ? netlink_attachskb+0x6d0/0x6d0 [ 81.349103][ T7446] ? _copy_from_iter_full+0x19e/0x7f0 [ 81.354450][ T7446] ? __check_object_size+0x1ea/0x31c [ 81.359726][ T7446] netlink_sendmsg+0x765/0xc50 [ 81.364477][ T7446] ? netlink_unicast+0x640/0x640 [ 81.369384][ T7446] ? apparmor_socket_sendmsg+0x1b/0x20 [ 81.374812][ T7446] ? netlink_unicast+0x640/0x640 [ 81.379737][ T7446] sock_sendmsg+0xd6/0x100 [ 81.392017][ T7446] ___sys_sendmsg+0x658/0x960 [ 81.396671][ T7446] ? find_held_lock+0x36/0x1d0 [ 81.401407][ T7446] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 81.406940][ T7446] ? __fget+0x292/0x420 [ 81.411073][ T7446] ? lock_downgrade+0x860/0x860 [ 81.415895][ T7446] ? kasan_check_read+0x11/0x20 [ 81.420718][ T7446] ? __fget+0x2af/0x420 [ 81.424841][ T7446] ? ksys_dup3+0x2e0/0x2e0 [ 81.429247][ T7446] ? find_held_lock+0x36/0x1d0 [ 81.433984][ T7446] ? __fget_light+0x179/0x1f0 [ 81.439529][ T7446] ? lock_downgrade+0x860/0x860 [ 81.444350][ T7446] ? __fdget+0xe/0x10 [ 81.448300][ T7446] __sys_sendmsg+0xd9/0x180 [ 81.452779][ T7446] ? __ia32_sys_shutdown+0x70/0x70 [ 81.457872][ T7446] ? kasan_check_read+0x11/0x20 [ 81.462701][ T7446] ? _copy_to_user+0x91/0xb0 [ 81.467260][ T7446] ? put_timespec64+0xa9/0x100 [ 81.471994][ T7446] ? nsecs_to_jiffies+0x20/0x20 [ 81.476814][ T7446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.482851][ T7446] __x64_sys_sendmsg+0x73/0xb0 [ 81.487585][ T7446] do_syscall_64+0xd6/0x530 [ 81.492058][ T7446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.497920][ T7446] RIP: 0033:0x458da9 [ 81.501806][ T7446] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 81.521513][ T7446] RSP: 002b:00007fa7221dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.529924][ T7446] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 81.537883][ T7446] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 81.545829][ T7446] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 81.553778][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7221db6d4 [ 81.561724][ T7446] R13: 00000000004c6790 R14: 00000000004db3e8 R15: 00000000ffffffff [ 81.570812][ T7446] Kernel Offset: disabled [ 81.575130][ T7446] Rebooting in 86400 seconds..