[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.684354][ T26] audit: type=1800 audit(1570952370.053:25): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.729140][ T26] audit: type=1800 audit(1570952370.063:26): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 59.766953][ T26] audit: type=1800 audit(1570952370.063:27): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. 2019/10/13 07:55:03 parsed 1 programs 2019/10/13 07:55:06 executed programs: 0 syzkaller login: [ 996.097300][ T9059] IPVS: ftp: loaded support on port[0] = 21 [ 996.097306][ T9066] IPVS: ftp: loaded support on port[0] = 21 [ 996.117187][ T9062] IPVS: ftp: loaded support on port[0] = 21 [ 996.117951][ T9064] IPVS: ftp: loaded support on port[0] = 21 [ 996.136752][ T9069] IPVS: ftp: loaded support on port[0] = 21 [ 996.161502][ T9068] IPVS: ftp: loaded support on port[0] = 21 [ 996.393685][ T9066] chnl_net:caif_netlink_parms(): no params data found [ 996.425747][ T9068] chnl_net:caif_netlink_parms(): no params data found [ 996.531394][ T9059] chnl_net:caif_netlink_parms(): no params data found [ 996.563551][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.572271][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.581086][ T9066] device bridge_slave_0 entered promiscuous mode [ 996.608662][ T9062] chnl_net:caif_netlink_parms(): no params data found [ 996.619676][ T9064] chnl_net:caif_netlink_parms(): no params data found [ 996.633703][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.642400][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.650828][ T9066] device bridge_slave_1 entered promiscuous mode [ 996.693145][ T9066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.727588][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.735069][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.743254][ T9059] device bridge_slave_0 entered promiscuous mode [ 996.751928][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.759154][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.766822][ T9068] device bridge_slave_0 entered promiscuous mode [ 996.776083][ T9066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.816329][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.823707][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.832375][ T9059] device bridge_slave_1 entered promiscuous mode [ 996.840286][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.847422][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.858220][ T9068] device bridge_slave_1 entered promiscuous mode [ 996.867739][ T9066] team0: Port device team_slave_0 added [ 996.886658][ T9064] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.894099][ T9064] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.902063][ T9064] device bridge_slave_0 entered promiscuous mode [ 996.910498][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.917636][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.925570][ T9064] device bridge_slave_1 entered promiscuous mode [ 996.954745][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.964935][ T9066] team0: Port device team_slave_1 added [ 996.998643][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.022726][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.034172][ T9064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.048877][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 997.075624][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.086609][ T9064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.096067][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.104100][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.112401][ T9062] device bridge_slave_0 entered promiscuous mode [ 997.162341][ T9066] device hsr_slave_0 entered promiscuous mode [ 997.199930][ T9066] device hsr_slave_1 entered promiscuous mode [ 997.244350][ T9068] team0: Port device team_slave_0 added [ 997.262697][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.271013][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.278751][ T9062] device bridge_slave_1 entered promiscuous mode [ 997.294374][ T9068] team0: Port device team_slave_1 added [ 997.323822][ T9062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.342013][ T9064] team0: Port device team_slave_0 added [ 997.354599][ T9059] team0: Port device team_slave_0 added [ 997.362305][ T9059] team0: Port device team_slave_1 added [ 997.369639][ T9062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.383506][ T9064] team0: Port device team_slave_1 added [ 997.389795][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.396857][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.404827][ T9069] device bridge_slave_0 entered promiscuous mode [ 997.447630][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.455468][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.463636][ T9069] device bridge_slave_1 entered promiscuous mode [ 997.509222][ T9062] team0: Port device team_slave_0 added [ 997.582171][ T9068] device hsr_slave_0 entered promiscuous mode [ 997.649630][ T9068] device hsr_slave_1 entered promiscuous mode [ 997.699256][ T9068] debugfs: Directory 'hsr0' with parent '/' already present! [ 997.762406][ T9059] device hsr_slave_0 entered promiscuous mode [ 997.809392][ T9059] device hsr_slave_1 entered promiscuous mode [ 997.849109][ T9059] debugfs: Directory 'hsr0' with parent '/' already present! [ 997.922205][ T9064] device hsr_slave_0 entered promiscuous mode [ 997.979413][ T9064] device hsr_slave_1 entered promiscuous mode [ 998.029190][ T9064] debugfs: Directory 'hsr0' with parent '/' already present! [ 998.037983][ T9062] team0: Port device team_slave_1 added [ 998.045642][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.060642][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.102594][ T9069] team0: Port device team_slave_0 added [ 998.110608][ T9069] team0: Port device team_slave_1 added [ 998.172500][ T9062] device hsr_slave_0 entered promiscuous mode [ 998.209405][ T9062] device hsr_slave_1 entered promiscuous mode [ 998.269230][ T9062] debugfs: Directory 'hsr0' with parent '/' already present! [ 998.340954][ T9069] device hsr_slave_0 entered promiscuous mode [ 998.389495][ T9069] device hsr_slave_1 entered promiscuous mode [ 998.429165][ T9069] debugfs: Directory 'hsr0' with parent '/' already present! [ 998.526119][ T9066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.565517][ T9066] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.580116][ T9064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.601208][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.612230][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.633792][ T9062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.655599][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.663975][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.673542][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.682132][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.689394][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.697308][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 998.707633][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 998.717646][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.724736][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.733059][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.741998][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.749818][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.758240][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 998.782306][ T9064] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.792816][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.803199][ T9068] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.811841][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.820175][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.827802][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 998.853382][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.866883][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 998.875892][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 998.885398][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.892510][ T9070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.900429][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 998.909115][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 998.917515][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 998.926649][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 998.935133][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.942220][ T9070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.949956][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.958554][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 998.967656][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.976376][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 998.984678][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 998.993031][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.002026][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.010047][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.017664][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.026312][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.034658][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.041776][ T9070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.050894][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.058884][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 999.066910][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.081672][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.090871][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.100239][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 999.110921][ T9062] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.125538][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.144457][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.155787][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.164394][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.171536][ T9070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.179981][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.187712][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.195576][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.204119][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 999.212826][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 999.221600][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 999.230389][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 999.238671][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 999.262515][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 999.281544][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.291718][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.300190][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.307240][ T9070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.314991][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.323997][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.332749][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.341275][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.348309][ T9070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.356624][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.365648][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.374320][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.382979][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.391948][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.400724][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.409239][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.416301][ T9070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.424448][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.433685][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.442178][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.449249][ T9070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.456825][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.464719][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.472693][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 999.481433][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 999.510279][ T9059] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.517477][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.525617][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 999.534516][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.543165][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.552768][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.561542][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.570612][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.579267][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 999.587548][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.596653][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 999.605296][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 999.614060][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 999.622446][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.631487][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.640408][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.648800][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.657334][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.666416][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 999.676521][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 999.684456][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 999.698710][ T9062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 999.711051][ T9062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.727790][ T9068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.739845][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 999.760408][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 999.768798][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 999.781127][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 999.794936][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 999.803693][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 999.812487][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 999.841285][ T9064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.854710][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 999.863697][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 999.872998][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 999.884231][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.893665][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.902604][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.909741][ T9081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.917503][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.926271][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.935136][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.942267][ T9081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.950232][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.970881][ T9062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.991118][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.003889][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.013399][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.023136][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.034087][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.043465][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.052045][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.061158][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.070345][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.086001][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.124656][ T9066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.147711][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.155895][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.171155][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.187881][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.197478][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.208494][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.270150][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.323661][ T9059] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/10/13 07:55:11 executed programs: 22 2019/10/13 07:55:16 executed programs: 236 2019/10/13 07:55:21 executed programs: 437 2019/10/13 07:55:26 executed programs: 636 2019/10/13 07:55:31 executed programs: 842 2019/10/13 07:55:36 executed programs: 1043 2019/10/13 07:55:41 executed programs: 1241 2019/10/13 07:55:46 executed programs: 1442 2019/10/13 07:55:51 executed programs: 1639 2019/10/13 07:55:56 executed programs: 1831 2019/10/13 07:56:01 executed programs: 2021 2019/10/13 07:56:06 executed programs: 2201 2019/10/13 07:56:11 executed programs: 2390 2019/10/13 07:56:16 executed programs: 2575 2019/10/13 07:56:21 executed programs: 2755 2019/10/13 07:56:26 executed programs: 2929 2019/10/13 07:56:31 executed programs: 3111 2019/10/13 07:56:36 executed programs: 3300 2019/10/13 07:56:41 executed programs: 3484 2019/10/13 07:56:46 executed programs: 3662 2019/10/13 07:56:51 executed programs: 3836 2019/10/13 07:56:56 executed programs: 4002 2019/10/13 07:57:01 executed programs: 4178 2019/10/13 07:57:06 executed programs: 4358 2019/10/13 07:57:11 executed programs: 4521 2019/10/13 07:57:16 executed programs: 4686 2019/10/13 07:57:21 executed programs: 4853 2019/10/13 07:57:26 executed programs: 5018 2019/10/13 07:57:31 executed programs: 5199 2019/10/13 07:57:36 executed programs: 5374 2019/10/13 07:57:41 executed programs: 5540 2019/10/13 07:57:47 executed programs: 5702 2019/10/13 07:57:52 executed programs: 5863 2019/10/13 07:57:57 executed programs: 6020 2019/10/13 07:58:02 executed programs: 6189 2019/10/13 07:58:07 executed programs: 6374 2019/10/13 07:58:12 executed programs: 6535 2019/10/13 07:58:17 executed programs: 6697 2019/10/13 07:58:22 executed programs: 6853 2019/10/13 07:58:27 executed programs: 7002 2019/10/13 07:58:32 executed programs: 7171 2019/10/13 07:58:37 executed programs: 7348 2019/10/13 07:58:42 executed programs: 7512 2019/10/13 07:58:47 executed programs: 7663 2019/10/13 07:58:52 executed programs: 7820 2019/10/13 07:58:57 executed programs: 7965 2019/10/13 07:59:02 executed programs: 8128 2019/10/13 07:59:07 executed programs: 8307 2019/10/13 07:59:12 executed programs: 8473 2019/10/13 07:59:17 executed programs: 8625 2019/10/13 07:59:22 executed programs: 8771 2019/10/13 07:59:27 executed programs: 8915 2019/10/13 07:59:32 executed programs: 9078 2019/10/13 07:59:37 executed programs: 9260 2019/10/13 07:59:42 executed programs: 9419 2019/10/13 07:59:47 executed programs: 9568 2019/10/13 07:59:52 executed programs: 9717 2019/10/13 07:59:57 executed programs: 9862 2019/10/13 08:00:02 executed programs: 10024 2019/10/13 08:00:07 executed programs: 10214 2019/10/13 08:00:12 executed programs: 10384 2019/10/13 08:00:17 executed programs: 10569 2019/10/13 08:00:22 executed programs: 10774 2019/10/13 08:00:27 executed programs: 10975 2019/10/13 08:00:32 executed programs: 11180 2019/10/13 08:00:37 executed programs: 11379 2019/10/13 08:00:42 executed programs: 11587 2019/10/13 08:00:47 executed programs: 11788 2019/10/13 08:00:52 executed programs: 11977 2019/10/13 08:00:57 executed programs: 12173 2019/10/13 08:01:02 executed programs: 12359 2019/10/13 08:01:07 executed programs: 12560 2019/10/13 08:01:12 executed programs: 12749 2019/10/13 08:01:17 executed programs: 12938 2019/10/13 08:01:23 executed programs: 13124 2019/10/13 08:01:28 executed programs: 13300 2019/10/13 08:01:33 executed programs: 13483 2019/10/13 08:01:38 executed programs: 13670 2019/10/13 08:01:43 executed programs: 13842 2019/10/13 08:01:48 executed programs: 14013 2019/10/13 08:01:53 executed programs: 14186 2019/10/13 08:01:58 executed programs: 14351 2019/10/13 08:02:03 executed programs: 14519 2019/10/13 08:02:08 executed programs: 14698 2019/10/13 08:02:13 executed programs: 14867 2019/10/13 08:02:18 executed programs: 15033 2019/10/13 08:02:23 executed programs: 15188 2019/10/13 08:02:28 executed programs: 15347 2019/10/13 08:02:33 executed programs: 15511 2019/10/13 08:02:38 executed programs: 15693 2019/10/13 08:02:43 executed programs: 15852 2019/10/13 08:02:48 executed programs: 16012 2019/10/13 08:02:53 executed programs: 16175 2019/10/13 08:02:58 executed programs: 16334 2019/10/13 08:03:03 executed programs: 16496 2019/10/13 08:03:08 executed programs: 16671 [ 1478.459796][T24245] ================================================================== [ 1478.468265][T24245] BUG: KASAN: use-after-free in sk_psock_unlink+0x370/0x440 [ 1478.475564][T24245] Read of size 4 at addr ffff888093eda798 by task syz-executor.4/24245 [ 1478.483801][T24245] [ 1478.486143][T24245] CPU: 1 PID: 24245 Comm: syz-executor.4 Not tainted 5.4.0-rc1+ #0 [ 1478.494022][T24245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.494035][T24245] Call Trace: [ 1478.494125][T24245] dump_stack+0x172/0x1f0 [ 1478.494147][T24245] ? sk_psock_unlink+0x370/0x440 [ 1478.516914][T24245] ? tcp_check_oom+0x560/0x560 [ 1478.521694][T24245] print_address_description.constprop.0.cold+0xd4/0x30b [ 1478.528739][T24245] ? sk_psock_unlink+0x370/0x440 [ 1478.528754][T24245] ? sk_psock_unlink+0x370/0x440 [ 1478.528771][T24245] __kasan_report.cold+0x1b/0x41 [ 1478.528793][T24245] ? sk_psock_unlink+0x370/0x440 [ 1478.548509][T24245] kasan_report+0x12/0x20 [ 1478.552855][T24245] __asan_report_load4_noabort+0x14/0x20 [ 1478.558500][T24245] sk_psock_unlink+0x370/0x440 [ 1478.563270][T24245] ? sk_psock_link_pop+0x186/0x1f0 [ 1478.568392][T24245] ? tcp_check_oom+0x560/0x560 [ 1478.573253][T24245] tcp_bpf_remove+0x21/0x50 [ 1478.577781][T24245] tcp_bpf_close+0x130/0x390 [ 1478.582403][T24245] inet_release+0xed/0x200 [ 1478.586915][T24245] inet6_release+0x53/0x80 [ 1478.591385][T24245] __sock_release+0xce/0x280 [ 1478.595998][T24245] sock_close+0x1e/0x30 [ 1478.600161][T24245] __fput+0x2ff/0x890 [ 1478.604187][T24245] ? __sock_release+0x280/0x280 [ 1478.609052][T24245] ____fput+0x16/0x20 [ 1478.613047][T24245] task_work_run+0x145/0x1c0 [ 1478.617663][T24245] exit_to_usermode_loop+0x316/0x380 [ 1478.622976][T24245] do_syscall_64+0x65f/0x760 [ 1478.627635][T24245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1478.633543][T24245] RIP: 0033:0x413741 [ 1478.637450][T24245] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1478.657184][T24245] RSP: 002b:00007ffd099e6b00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1478.665615][T24245] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413741 [ 1478.673600][T24245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1478.681593][T24245] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 1478.689598][T24245] R10: 00007ffd099e6be0 R11: 0000000000000293 R12: 000000000075bf20 [ 1478.697683][T24245] R13: 0000000000168f08 R14: 00000000007610a8 R15: 000000000075bf2c [ 1478.705723][T24245] [ 1478.708063][T24245] Allocated by task 24251: [ 1478.712498][T24245] save_stack+0x23/0x90 [ 1478.716688][T24245] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1478.722323][T24245] kasan_kmalloc+0x9/0x10 [ 1478.722337][T24245] kmem_cache_alloc_trace+0x158/0x790 [ 1478.722351][T24245] sock_hash_alloc+0x1e3/0x5b0 [ 1478.722365][T24245] __do_sys_bpf+0x475/0x3350 [ 1478.722381][T24245] __x64_sys_bpf+0x73/0xb0 [ 1478.741384][T24245] do_syscall_64+0xfa/0x760 [ 1478.741402][T24245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1478.741413][T24245] [ 1478.758526][T24245] Freed by task 16035: [ 1478.762610][T24245] save_stack+0x23/0x90 [ 1478.766779][T24245] __kasan_slab_free+0x102/0x150 [ 1478.766792][T24245] kasan_slab_free+0xe/0x10 [ 1478.766802][T24245] kfree+0x10a/0x2c0 [ 1478.766817][T24245] sock_hash_free+0x327/0x4a0 [ 1478.766836][T24245] bpf_map_free_deferred+0xb3/0x100 [ 1478.789972][T24245] process_one_work+0x9af/0x1740 [ 1478.794916][T24245] worker_thread+0x98/0xe40 [ 1478.799429][T24245] kthread+0x361/0x430 [ 1478.803512][T24245] ret_from_fork+0x24/0x30 [ 1478.807923][T24245] [ 1478.810260][T24245] The buggy address belongs to the object at ffff888093eda780 [ 1478.810260][T24245] which belongs to the cache kmalloc-512 of size 512 [ 1478.824426][T24245] The buggy address is located 24 bytes inside of [ 1478.824426][T24245] 512-byte region [ffff888093eda780, ffff888093eda980) [ 1478.837738][T24245] The buggy address belongs to the page: [ 1478.843563][T24245] page:ffffea00024fb680 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0xffff888093edaa00 [ 1478.854072][T24245] flags: 0x1fffc0000000200(slab) [ 1478.859030][T24245] raw: 01fffc0000000200 ffffea00025c3388 ffffea000261d008 ffff8880aa400a80 [ 1478.867631][T24245] raw: ffff888093edaa00 ffff888093eda000 0000000100000003 0000000000000000 [ 1478.876223][T24245] page dumped because: kasan: bad access detected [ 1478.882640][T24245] [ 1478.884978][T24245] Memory state around the buggy address: [ 1478.890621][T24245] ffff888093eda680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.898695][T24245] ffff888093eda700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1478.906753][T24245] >ffff888093eda780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.906759][T24245] ^ [ 1478.906768][T24245] ffff888093eda800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.906776][T24245] ffff888093eda880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1478.906782][T24245] ================================================================== [ 1478.906786][T24245] Disabling lock debugging due to kernel taint [ 1478.928265][T24245] Kernel panic - not syncing: panic_on_warn set ... [ 1478.954577][ T3879] kobject: 'loop0' (000000002c07cdb3): kobject_uevent_env [ 1478.957057][T24245] CPU: 1 PID: 24245 Comm: syz-executor.4 Tainted: G B 5.4.0-rc1+ #0 [ 1478.957064][T24245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.957075][T24245] Call Trace: [ 1478.972826][ T3879] kobject: 'loop0' (000000002c07cdb3): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1478.973434][T24245] dump_stack+0x172/0x1f0 [ 1478.973457][T24245] ? tcp_check_oom+0x560/0x560 [ 1479.005974][T24245] panic+0x2dc/0x755 [ 1479.009878][T24245] ? add_taint.cold+0x16/0x16 [ 1479.014554][T24245] ? sk_psock_unlink+0x370/0x440 [ 1479.019477][T24245] ? tcp_check_oom+0x560/0x560 [ 1479.024308][T24245] ? preempt_schedule+0x4b/0x60 [ 1479.029163][T24245] ? ___preempt_schedule+0x16/0x20 [ 1479.033901][ T3879] kobject: 'loop5' (00000000212ee2c7): kobject_uevent_env [ 1479.034279][T24245] ? trace_hardirqs_on+0x5e/0x240 [ 1479.042892][ T3879] kobject: 'loop5' (00000000212ee2c7): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1479.046368][T24245] ? sk_psock_unlink+0x370/0x440 [ 1479.046387][T24245] ? tcp_check_oom+0x560/0x560 [ 1479.066189][T24245] end_report+0x47/0x4f [ 1479.070330][T24245] ? sk_psock_unlink+0x370/0x440 [ 1479.075242][T24245] __kasan_report.cold+0xe/0x41 [ 1479.080074][T24245] ? sk_psock_unlink+0x370/0x440 [ 1479.084988][T24245] kasan_report+0x12/0x20 [ 1479.089300][T24245] __asan_report_load4_noabort+0x14/0x20 [ 1479.094910][T24245] sk_psock_unlink+0x370/0x440 [ 1479.099652][T24245] ? sk_psock_link_pop+0x186/0x1f0 [ 1479.104746][T24245] ? tcp_check_oom+0x560/0x560 [ 1479.109499][T24245] tcp_bpf_remove+0x21/0x50 [ 1479.113979][T24245] tcp_bpf_close+0x130/0x390 [ 1479.118543][T24245] inet_release+0xed/0x200 [ 1479.122939][T24245] inet6_release+0x53/0x80 [ 1479.127333][T24245] __sock_release+0xce/0x280 [ 1479.131906][T24245] sock_close+0x1e/0x30 [ 1479.136051][T24245] __fput+0x2ff/0x890 [ 1479.140012][T24245] ? __sock_release+0x280/0x280 [ 1479.144841][T24245] ____fput+0x16/0x20 [ 1479.148822][T24245] task_work_run+0x145/0x1c0 [ 1479.153395][T24245] exit_to_usermode_loop+0x316/0x380 [ 1479.158659][T24245] do_syscall_64+0x65f/0x760 [ 1479.163228][T24245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1479.169095][T24245] RIP: 0033:0x413741 [ 1479.172967][T24245] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1479.192550][T24245] RSP: 002b:00007ffd099e6b00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1479.200965][T24245] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413741 [ 1479.208922][T24245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1479.216874][T24245] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 1479.224835][T24245] R10: 00007ffd099e6be0 R11: 0000000000000293 R12: 000000000075bf20 [ 1479.232796][T24245] R13: 0000000000168f08 R14: 00000000007610a8 R15: 000000000075bf2c [ 1479.242198][T24245] Kernel Offset: disabled [ 1479.246526][T24245] Rebooting in 86400 seconds..