[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.616714][ T24] audit: type=1800 audit(1561964405.713:25): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.655426][ T24] audit: type=1800 audit(1561964405.713:26): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.711401][ T24] audit: type=1800 audit(1561964405.713:27): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. 2019/07/01 07:00:51 parsed 1 programs 2019/07/01 07:00:54 executed programs: 0 syzkaller login: [ 111.153636][ T8754] IPVS: ftp: loaded support on port[0] = 21 [ 111.164575][ T8755] IPVS: ftp: loaded support on port[0] = 21 [ 111.167834][ T8758] IPVS: ftp: loaded support on port[0] = 21 [ 111.223818][ T8760] IPVS: ftp: loaded support on port[0] = 21 [ 111.224489][ T8762] IPVS: ftp: loaded support on port[0] = 21 [ 111.260050][ T8763] IPVS: ftp: loaded support on port[0] = 21 [ 111.586323][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 111.643937][ T8760] chnl_net:caif_netlink_parms(): no params data found [ 111.679300][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 111.709850][ T8763] chnl_net:caif_netlink_parms(): no params data found [ 111.736685][ T8758] chnl_net:caif_netlink_parms(): no params data found [ 111.803489][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.812257][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.820432][ T8755] device bridge_slave_0 entered promiscuous mode [ 111.837526][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.844604][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.853130][ T8760] device bridge_slave_0 entered promiscuous mode [ 111.868050][ T8762] chnl_net:caif_netlink_parms(): no params data found [ 111.883062][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.890958][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.899108][ T8755] device bridge_slave_1 entered promiscuous mode [ 111.911684][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.918882][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.928009][ T8760] device bridge_slave_1 entered promiscuous mode [ 111.995509][ T8760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.030396][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.039205][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.047253][ T8754] device bridge_slave_0 entered promiscuous mode [ 112.054675][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.064708][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.073145][ T8758] device bridge_slave_0 entered promiscuous mode [ 112.082560][ T8760] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.091138][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.101331][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.109737][ T8758] device bridge_slave_1 entered promiscuous mode [ 112.120293][ T8755] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.129972][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.137175][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.148558][ T8763] device bridge_slave_0 entered promiscuous mode [ 112.163186][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.170645][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.179454][ T8754] device bridge_slave_1 entered promiscuous mode [ 112.211239][ T8755] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.219826][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.227161][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.236664][ T8763] device bridge_slave_1 entered promiscuous mode [ 112.244246][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.251674][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.260037][ T8762] device bridge_slave_0 entered promiscuous mode [ 112.273890][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.281325][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.290469][ T8762] device bridge_slave_1 entered promiscuous mode [ 112.314236][ T8754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.324758][ T8754] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.352090][ T8760] team0: Port device team_slave_0 added [ 112.361178][ T8758] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.382385][ T8755] team0: Port device team_slave_0 added [ 112.395800][ T8760] team0: Port device team_slave_1 added [ 112.403494][ T8758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.413874][ T8762] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.430990][ T8762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.442077][ T8755] team0: Port device team_slave_1 added [ 112.451186][ T8763] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.461567][ T8763] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.478479][ T8754] team0: Port device team_slave_0 added [ 112.498447][ T8758] team0: Port device team_slave_0 added [ 112.506344][ T8758] team0: Port device team_slave_1 added [ 112.530568][ T8754] team0: Port device team_slave_1 added [ 112.552702][ T8762] team0: Port device team_slave_0 added [ 112.586875][ T8763] team0: Port device team_slave_0 added [ 112.600920][ T8763] team0: Port device team_slave_1 added [ 112.609407][ T8762] team0: Port device team_slave_1 added [ 112.699087][ T8760] device hsr_slave_0 entered promiscuous mode [ 112.745854][ T8760] device hsr_slave_1 entered promiscuous mode [ 112.847436][ T8754] device hsr_slave_0 entered promiscuous mode [ 112.885850][ T8754] device hsr_slave_1 entered promiscuous mode [ 112.998498][ T8763] device hsr_slave_0 entered promiscuous mode [ 113.065649][ T8763] device hsr_slave_1 entered promiscuous mode [ 113.178713][ T8755] device hsr_slave_0 entered promiscuous mode [ 113.236092][ T8755] device hsr_slave_1 entered promiscuous mode [ 113.318838][ T8758] device hsr_slave_0 entered promiscuous mode [ 113.356008][ T8758] device hsr_slave_1 entered promiscuous mode [ 113.457639][ T8762] device hsr_slave_0 entered promiscuous mode [ 113.495996][ T8762] device hsr_slave_1 entered promiscuous mode [ 113.732732][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.758404][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.776314][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.799031][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.813510][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.821215][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.830733][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.850462][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.862542][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.870371][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.878683][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.888017][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.896812][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.911530][ T8760] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.929642][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.937938][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.946483][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.955026][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.964096][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.971738][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.982099][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.013323][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.020794][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.030874][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.040883][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.049810][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.057420][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.066725][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.075874][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.084567][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.092965][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.101600][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.109590][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.117390][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.126511][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.135238][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.144414][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.151608][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.161206][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.170496][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.179097][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.187876][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.195682][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.204888][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.212992][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.243380][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.261585][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.271178][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.280775][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.288839][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.296663][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.305235][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.314936][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.323550][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.332536][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.341162][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.349949][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.358882][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.367880][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.377007][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.386436][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.394408][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.428793][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.438379][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.450221][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.459415][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.468203][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.475707][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.483575][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.492640][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.500838][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.511884][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.524022][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.532583][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.541194][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.550031][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.558952][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.566495][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.574557][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.583480][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.592088][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.602936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.611798][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.619227][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.628130][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.636352][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.654285][ T8755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.663959][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.672861][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.681395][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.690985][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.699606][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.708696][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.718667][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.727977][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.736668][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.745108][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.752241][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.774053][ T8760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.785742][ T8760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.821411][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.832041][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.844599][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.853542][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.861886][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.870489][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.880999][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.889121][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.902679][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.919281][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.951630][ T8754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.966876][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.977606][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.986550][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.999412][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.008547][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.017478][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.026906][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.037123][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.044342][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.052436][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.061442][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.070089][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.077356][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.090506][ T8760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.121623][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.131429][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.144903][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.159980][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.170709][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.180377][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.189385][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.198482][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.207260][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.215867][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.224587][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.234497][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.243673][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.252469][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.261468][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.269616][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.281450][ T8763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.292848][ T8763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.325888][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.342396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.364603][ T8758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.384139][ T8758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.403009][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.411973][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.422018][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.431258][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.464193][ T8762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.491201][ T8762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.530746][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.555996][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.591647][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.608907][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.640128][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.649743][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.710570][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.806158][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/01 07:00:59 executed programs: 15 2019/07/01 07:01:04 executed programs: 195 2019/07/01 07:01:09 executed programs: 370 2019/07/01 07:01:14 executed programs: 530 2019/07/01 07:01:19 executed programs: 658 2019/07/01 07:01:24 executed programs: 835 2019/07/01 07:01:29 executed programs: 1014 2019/07/01 07:01:34 executed programs: 1193 2019/07/01 07:01:39 executed programs: 1357 2019/07/01 07:01:44 executed programs: 1524 2019/07/01 07:01:49 executed programs: 1685 2019/07/01 07:01:54 executed programs: 1861 2019/07/01 07:01:59 executed programs: 2030 2019/07/01 07:02:04 executed programs: 2196 2019/07/01 07:02:09 executed programs: 2362 2019/07/01 07:02:14 executed programs: 2525 2019/07/01 07:02:19 executed programs: 2689 2019/07/01 07:02:24 executed programs: 2860 2019/07/01 07:02:29 executed programs: 3023 2019/07/01 07:02:34 executed programs: 3185 2019/07/01 07:02:39 executed programs: 3345 2019/07/01 07:02:44 executed programs: 3506 2019/07/01 07:02:49 executed programs: 3663 2019/07/01 07:02:54 executed programs: 3829 2019/07/01 07:02:59 executed programs: 3980 [ 238.971996][T24585] ================================================================== [ 238.980628][T24585] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 238.987929][T24585] Read of size 4 at addr ffff8880a0c23318 by task syz-executor.3/24585 [ 238.996166][T24585] [ 238.998502][T24585] CPU: 0 PID: 24585 Comm: syz-executor.3 Not tainted 5.2.0-rc7 #46 [ 239.006461][T24585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.016538][T24585] Call Trace: [ 239.019869][T24585] dump_stack+0x172/0x1f0 [ 239.024205][T24585] ? sk_psock_unlink+0x3dd/0x4b0 [ 239.029180][T24585] ? tcp_check_oom+0x560/0x560 [ 239.033990][T24585] print_address_description.cold+0x7c/0x20d [ 239.039984][T24585] ? sk_psock_unlink+0x3dd/0x4b0 [ 239.044931][T24585] ? sk_psock_unlink+0x3dd/0x4b0 [ 239.049882][T24585] ? tcp_check_oom+0x560/0x560 [ 239.054676][T24585] __kasan_report.cold+0x1b/0x40 [ 239.059647][T24585] ? sk_psock_unlink+0x3dd/0x4b0 [ 239.064599][T24585] kasan_report+0x12/0x20 [ 239.068939][T24585] __asan_report_load4_noabort+0x14/0x20 [ 239.074584][T24585] sk_psock_unlink+0x3dd/0x4b0 [ 239.079355][T24585] ? sk_psock_link_pop+0x186/0x1f0 [ 239.084496][T24585] ? tcp_check_oom+0x560/0x560 [ 239.089280][T24585] tcp_bpf_remove+0x21/0x50 [ 239.093820][T24585] tcp_bpf_close+0x130/0x390 [ 239.098449][T24585] inet_release+0xe0/0x1f0 [ 239.102897][T24585] inet6_release+0x53/0x80 [ 239.107342][T24585] __sock_release+0xce/0x2a0 [ 239.111949][T24585] sock_close+0x1b/0x30 [ 239.116127][T24585] __fput+0x2ff/0x890 [ 239.120135][T24585] ? __sock_release+0x2a0/0x2a0 [ 239.124990][T24585] ____fput+0x16/0x20 [ 239.128988][T24585] task_work_run+0x145/0x1c0 [ 239.129016][T24585] exit_to_usermode_loop+0x273/0x2c0 [ 239.129027][T24585] do_syscall_64+0x58e/0x680 [ 239.129043][T24585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.129056][T24585] RIP: 0033:0x413201 [ 239.129066][T24585] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 239.129070][T24585] RSP: 002b:00007ffcde765880 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 239.129084][T24585] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413201 [ 239.129088][T24585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 239.129093][T24585] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 239.129098][T24585] R10: 00007ffcde765960 R11: 0000000000000293 R12: 00000000007610a8 [ 239.129102][T24585] R13: 000000000003a545 R14: 000000000003a572 R15: ffffffffffffffff [ 239.129113][T24585] [ 239.129122][T24585] Allocated by task 24590: [ 239.129132][T24585] save_stack+0x23/0x90 [ 239.129139][T24585] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 239.129145][T24585] kasan_kmalloc+0x9/0x10 [ 239.129152][T24585] kmem_cache_alloc_trace+0x151/0x750 [ 239.129159][T24585] sock_map_alloc+0x1b9/0x3f0 [ 239.129171][T24585] __do_sys_bpf+0x730/0x43d0 [ 239.129177][T24585] __x64_sys_bpf+0x73/0xb0 [ 239.129184][T24585] do_syscall_64+0xfd/0x680 [ 239.129191][T24585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.129193][T24585] [ 239.129196][T24585] Freed by task 2995: [ 239.129203][T24585] save_stack+0x23/0x90 [ 239.129209][T24585] __kasan_slab_free+0x102/0x150 [ 239.129215][T24585] kasan_slab_free+0xe/0x10 [ 239.129221][T24585] kfree+0xcf/0x220 [ 239.129227][T24585] sock_map_free+0x22a/0x310 [ 239.129233][T24585] bpf_map_free_deferred+0xb4/0xe0 [ 239.129241][T24585] process_one_work+0x989/0x1790 [ 239.129248][T24585] worker_thread+0x98/0xe40 [ 239.129254][T24585] kthread+0x354/0x420 [ 239.129260][T24585] ret_from_fork+0x24/0x30 [ 239.129262][T24585] [ 239.129268][T24585] The buggy address belongs to the object at ffff8880a0c23300 [ 239.129268][T24585] which belongs to the cache kmalloc-512 of size 512 [ 239.129274][T24585] The buggy address is located 24 bytes inside of [ 239.129274][T24585] 512-byte region [ffff8880a0c23300, ffff8880a0c23500) [ 239.129277][T24585] The buggy address belongs to the page: [ 239.129329][T24585] page:ffffea00028308c0 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0x0 [ 239.129353][T24585] flags: 0x1fffc0000000200(slab) [ 239.129371][T24585] raw: 01fffc0000000200 ffffea00023d53c8 ffffea00028ea388 ffff8880aa400940 [ 239.129384][T24585] raw: 0000000000000000 ffff8880a0c23080 0000000100000006 0000000000000000 [ 239.129389][T24585] page dumped because: kasan: bad access detected [ 239.129392][T24585] [ 239.129396][T24585] Memory state around the buggy address: [ 239.129406][T24585] ffff8880a0c23200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.129415][T24585] ffff8880a0c23280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 239.129424][T24585] >ffff8880a0c23300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.129428][T24585] ^ [ 239.129437][T24585] ffff8880a0c23380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.129446][T24585] ffff8880a0c23400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.129451][T24585] ================================================================== [ 239.129456][T24585] Disabling lock debugging due to kernel taint [ 239.316960][T24585] Kernel panic - not syncing: panic_on_warn set ... [ 239.330142][ T3880] kobject: 'loop1' (00000000da97a780): kobject_uevent_env [ 239.340462][T24585] CPU: 0 PID: 24585 Comm: syz-executor.3 Tainted: G B 5.2.0-rc7 #46 [ 239.340474][T24585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.340478][T24585] Call Trace: [ 239.340517][T24585] dump_stack+0x172/0x1f0 [ 239.354846][ T3880] kobject: 'loop1' (00000000da97a780): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 239.359522][T24585] ? tcp_check_oom+0x560/0x560 [ 239.359563][T24585] panic+0x2cb/0x744 [ 239.359583][T24585] ? __warn_printk+0xf3/0xf3 [ 239.370166][ T3880] kobject: 'loop2' (00000000b243a03e): kobject_uevent_env [ 239.373666][T24585] ? sk_psock_unlink+0x3dd/0x4b0 [ 239.382312][ T3880] kobject: 'loop2' (00000000b243a03e): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 239.390819][T24585] ? tcp_check_oom+0x560/0x560 [ 239.390834][T24585] ? preempt_schedule+0x4b/0x60 [ 239.390863][T24585] ? ___preempt_schedule+0x16/0x18 [ 239.398751][ T3880] kobject: 'loop4' (000000009cd634df): kobject_uevent_env [ 239.399615][T24585] ? trace_hardirqs_on+0x5e/0x220 [ 239.405239][ T3880] kobject: 'loop4' (000000009cd634df): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 239.413273][T24585] ? sk_psock_unlink+0x3dd/0x4b0 [ 239.413288][T24585] ? tcp_check_oom+0x560/0x560 [ 239.413301][T24585] end_report+0x47/0x4f [ 239.413320][T24585] ? sk_psock_unlink+0x3dd/0x4b0 [ 239.617559][T24585] __kasan_report.cold+0xe/0x40 [ 239.622909][T24585] ? sk_psock_unlink+0x3dd/0x4b0 [ 239.627940][T24585] kasan_report+0x12/0x20 [ 239.632411][T24585] __asan_report_load4_noabort+0x14/0x20 [ 239.638142][T24585] sk_psock_unlink+0x3dd/0x4b0 [ 239.642932][T24585] ? sk_psock_link_pop+0x186/0x1f0 [ 239.648083][T24585] ? tcp_check_oom+0x560/0x560 [ 239.653246][T24585] tcp_bpf_remove+0x21/0x50 [ 239.657763][T24585] tcp_bpf_close+0x130/0x390 [ 239.662384][T24585] inet_release+0xe0/0x1f0 [ 239.667094][T24585] inet6_release+0x53/0x80 [ 239.671559][T24585] __sock_release+0xce/0x2a0 [ 239.676155][T24585] sock_close+0x1b/0x30 [ 239.680308][T24585] __fput+0x2ff/0x890 [ 239.684322][T24585] ? __sock_release+0x2a0/0x2a0 [ 239.689172][T24585] ____fput+0x16/0x20 [ 239.693314][T24585] task_work_run+0x145/0x1c0 [ 239.697916][T24585] exit_to_usermode_loop+0x273/0x2c0 [ 239.703226][T24585] do_syscall_64+0x58e/0x680 [ 239.707825][T24585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.713828][T24585] RIP: 0033:0x413201 [ 239.717907][T24585] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 239.739006][T24585] RSP: 002b:00007ffcde765880 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 239.747626][T24585] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413201 [ 239.762420][T24585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 239.787145][T24585] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 239.796482][T24585] R10: 00007ffcde765960 R11: 0000000000000293 R12: 00000000007610a8 [ 239.804670][T24585] R13: 000000000003a545 R14: 000000000003a572 R15: ffffffffffffffff [ 239.815540][T24585] Kernel Offset: disabled [ 239.822107][T24585] Rebooting in 86400 seconds..