[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.791659][ T27] audit: type=1800 audit(1561461225.331:25): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.832250][ T27] audit: type=1800 audit(1561461225.331:26): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.882219][ T27] audit: type=1800 audit(1561461225.331:27): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.197' (ECDSA) to the list of known hosts. 2019/06/25 11:28:29 parsed 1 programs 2019/06/25 11:28:32 executed programs: 0 syzkaller login: [ 952.648919][ T8938] IPVS: ftp: loaded support on port[0] = 21 [ 952.648931][ T8940] IPVS: ftp: loaded support on port[0] = 21 [ 952.658071][ T8939] IPVS: ftp: loaded support on port[0] = 21 [ 952.723071][ T8943] IPVS: ftp: loaded support on port[0] = 21 [ 952.756412][ T8945] IPVS: ftp: loaded support on port[0] = 21 [ 952.775744][ T8946] IPVS: ftp: loaded support on port[0] = 21 [ 952.919135][ T8938] chnl_net:caif_netlink_parms(): no params data found [ 952.951989][ T8939] chnl_net:caif_netlink_parms(): no params data found [ 952.969844][ T8940] chnl_net:caif_netlink_parms(): no params data found [ 952.996194][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.003934][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.012224][ T8938] device bridge_slave_0 entered promiscuous mode [ 953.038468][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.045670][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.053604][ T8939] device bridge_slave_0 entered promiscuous mode [ 953.061748][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.069016][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.077457][ T8939] device bridge_slave_1 entered promiscuous mode [ 953.093424][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.100487][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.108569][ T8938] device bridge_slave_1 entered promiscuous mode [ 953.125469][ T8938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.136158][ T8938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.170595][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.178809][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.186920][ T8940] device bridge_slave_0 entered promiscuous mode [ 953.196150][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.203335][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.211237][ T8940] device bridge_slave_1 entered promiscuous mode [ 953.221750][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.253287][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.270170][ T8938] team0: Port device team_slave_0 added [ 953.299565][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.317774][ T8939] team0: Port device team_slave_0 added [ 953.326262][ T8938] team0: Port device team_slave_1 added [ 953.332910][ T8939] team0: Port device team_slave_1 added [ 953.355930][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.454474][ T8938] device hsr_slave_0 entered promiscuous mode [ 953.502639][ T8938] device hsr_slave_1 entered promiscuous mode [ 953.551587][ T8940] team0: Port device team_slave_0 added [ 953.558488][ T8940] team0: Port device team_slave_1 added [ 953.569461][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 953.646621][ T8940] device hsr_slave_0 entered promiscuous mode [ 953.682711][ T8940] device hsr_slave_1 entered promiscuous mode [ 953.733117][ T8945] chnl_net:caif_netlink_parms(): no params data found [ 953.784392][ T8939] device hsr_slave_0 entered promiscuous mode [ 953.812503][ T8939] device hsr_slave_1 entered promiscuous mode [ 953.862542][ T8943] chnl_net:caif_netlink_parms(): no params data found [ 953.888777][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.896004][ T8938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.903875][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.910977][ T8938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.921744][ T2821] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.930066][ T2821] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.990145][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.999252][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.007907][ T8946] device bridge_slave_0 entered promiscuous mode [ 954.020045][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.027727][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.036612][ T8946] device bridge_slave_1 entered promiscuous mode [ 954.066070][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.073294][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.081140][ T8943] device bridge_slave_0 entered promiscuous mode [ 954.089953][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.097207][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.105640][ T8943] device bridge_slave_1 entered promiscuous mode [ 954.120037][ T8945] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.127473][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.135775][ T8945] device bridge_slave_0 entered promiscuous mode [ 954.144699][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.151854][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.159769][ T8945] device bridge_slave_1 entered promiscuous mode [ 954.181885][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.218514][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.232012][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.244164][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.297061][ T8945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.320708][ T8945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.352976][ T8938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.366129][ T8943] team0: Port device team_slave_0 added [ 954.382592][ T8946] team0: Port device team_slave_0 added [ 954.389799][ T8945] team0: Port device team_slave_0 added [ 954.407128][ T8943] team0: Port device team_slave_1 added [ 954.416891][ T8946] team0: Port device team_slave_1 added [ 954.424767][ T8945] team0: Port device team_slave_1 added [ 954.504285][ T8943] device hsr_slave_0 entered promiscuous mode [ 954.542633][ T8943] device hsr_slave_1 entered promiscuous mode [ 954.655724][ T8945] device hsr_slave_0 entered promiscuous mode [ 954.712522][ T8945] device hsr_slave_1 entered promiscuous mode [ 954.797556][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 954.806479][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 954.839237][ T8938] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.862903][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.926402][ T8946] device hsr_slave_0 entered promiscuous mode [ 954.972745][ T8946] device hsr_slave_1 entered promiscuous mode [ 955.016610][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.057897][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.068107][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.077755][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.084898][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.095790][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.103993][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.115455][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 955.124886][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.134057][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.141246][ T8947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.151233][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.189994][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.199291][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.207331][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.221683][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.231042][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.240340][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.249175][ T2821] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.256564][ T2821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.266769][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.287935][ T8938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 955.298684][ T8938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.311142][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.319395][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.328322][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.338533][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.345634][ T8951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.354622][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 955.363561][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 955.371898][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 955.380750][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 955.389471][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 955.398178][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 955.407026][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 955.415480][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 955.426734][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.434871][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 955.443765][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 955.473275][ T8938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.501106][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 955.510540][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.520057][ T2821] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.527166][ T2821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.536149][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.565122][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 955.574292][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.589962][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.597143][ T8952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.605838][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.614519][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.623331][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.650480][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.664731][ T8945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.682443][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 955.691310][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 955.700597][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 955.710248][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 955.719063][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 955.729854][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 955.739890][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 955.749312][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 955.759036][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 955.767306][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 955.792614][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 955.801551][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 955.824472][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 955.840869][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 955.868244][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 955.877752][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 955.897663][ T8945] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.977979][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.002061][ T8940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.014185][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 956.028843][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.040490][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.054071][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.062802][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 956.070457][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.083189][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.091869][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.104250][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.111397][ T8967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.147013][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.157054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 956.165371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.174773][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.185163][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.192293][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.200149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.209488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 956.217932][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.225037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.233443][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 956.242657][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 956.268938][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.295553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 956.304764][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 956.314341][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.322864][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.331325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.340073][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 956.348459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.357114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.369973][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.381194][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.407956][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.430801][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.439581][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.448620][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 956.457283][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.464391][ T8951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.492282][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.501157][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.519969][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.527138][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.540587][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 956.549593][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.558614][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.567061][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 956.576913][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 956.586220][ T8945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.602636][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 956.611355][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.623383][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.631831][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.649734][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.717887][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.734174][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 956.752989][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.760118][ T8951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.768620][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 956.777797][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 956.787132][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.795616][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.824925][ T8945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.840438][ T8943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 956.890701][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.939114][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 956.958682][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.979386][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.989141][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.998439][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 957.007148][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 957.017197][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 957.036754][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 957.051414][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 957.068467][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.086947][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 957.103159][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 957.114724][ T8946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 957.139749][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/25 11:28:37 executed programs: 30 2019/06/25 11:28:42 executed programs: 246 2019/06/25 11:28:47 executed programs: 446 2019/06/25 11:28:52 executed programs: 651 2019/06/25 11:28:57 executed programs: 869 2019/06/25 11:29:02 executed programs: 1068 2019/06/25 11:29:07 executed programs: 1270 2019/06/25 11:29:12 executed programs: 1468 2019/06/25 11:29:17 executed programs: 1666 2019/06/25 11:29:22 executed programs: 1859 2019/06/25 11:29:27 executed programs: 2073 2019/06/25 11:29:32 executed programs: 2280 2019/06/25 11:29:37 executed programs: 2480 2019/06/25 11:29:42 executed programs: 2674 2019/06/25 11:29:47 executed programs: 2858 2019/06/25 11:29:52 executed programs: 3042 2019/06/25 11:29:57 executed programs: 3240 2019/06/25 11:30:02 executed programs: 3432 2019/06/25 11:30:07 executed programs: 3605 2019/06/25 11:30:12 executed programs: 3778 2019/06/25 11:30:17 executed programs: 3949 2019/06/25 11:30:22 executed programs: 4124 2019/06/25 11:30:27 executed programs: 4321 2019/06/25 11:30:32 executed programs: 4499 2019/06/25 11:30:37 executed programs: 4672 2019/06/25 11:30:42 executed programs: 4833 2019/06/25 11:30:47 executed programs: 4993 2019/06/25 11:30:52 executed programs: 5149 2019/06/25 11:30:57 executed programs: 5336 2019/06/25 11:31:03 executed programs: 5517 2019/06/25 11:31:08 executed programs: 5689 2019/06/25 11:31:13 executed programs: 5851 2019/06/25 11:31:18 executed programs: 6010 2019/06/25 11:31:23 executed programs: 6170 2019/06/25 11:31:28 executed programs: 6364 2019/06/25 11:31:33 executed programs: 6533 2019/06/25 11:31:38 executed programs: 6695 2019/06/25 11:31:43 executed programs: 6861 2019/06/25 11:31:48 executed programs: 7018 2019/06/25 11:31:53 executed programs: 7174 2019/06/25 11:31:58 executed programs: 7362 2019/06/25 11:32:03 executed programs: 7554 2019/06/25 11:32:08 executed programs: 7734 2019/06/25 11:32:13 executed programs: 7902 2019/06/25 11:32:18 executed programs: 8056 2019/06/25 11:32:23 executed programs: 8208 2019/06/25 11:32:28 executed programs: 8390 2019/06/25 11:32:33 executed programs: 8566 2019/06/25 11:32:38 executed programs: 8721 2019/06/25 11:32:43 executed programs: 8864 2019/06/25 11:32:48 executed programs: 9005 2019/06/25 11:32:53 executed programs: 9152 2019/06/25 11:32:58 executed programs: 9330 2019/06/25 11:33:03 executed programs: 9513 2019/06/25 11:33:08 executed programs: 9685 2019/06/25 11:33:13 executed programs: 9839 2019/06/25 11:33:18 executed programs: 9979 2019/06/25 11:33:23 executed programs: 10117 2019/06/25 11:33:28 executed programs: 10300 [ 1252.236148][T27160] ================================================================== [ 1252.252675][T27160] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 1252.259989][T27160] Read of size 4 at addr ffff88808f5d5318 by task syz-executor.3/27160 [ 1252.268314][T27160] [ 1252.270657][T27160] CPU: 1 PID: 27160 Comm: syz-executor.3 Not tainted 5.2.0-rc5+ #42 [ 1252.278641][T27160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.288891][T27160] Call Trace: [ 1252.292295][T27160] dump_stack+0x172/0x1f0 [ 1252.296646][T27160] ? sk_psock_unlink+0x3dd/0x4b0 [ 1252.301683][T27160] ? tcp_check_oom+0x560/0x560 [ 1252.306479][T27160] print_address_description.cold+0x7c/0x20d [ 1252.312472][T27160] ? sk_psock_unlink+0x3dd/0x4b0 [ 1252.317448][T27160] ? sk_psock_unlink+0x3dd/0x4b0 [ 1252.323450][T27160] ? tcp_check_oom+0x560/0x560 [ 1252.323477][T27160] __kasan_report.cold+0x1b/0x40 [ 1252.323493][T27160] ? sk_psock_unlink+0x3dd/0x4b0 [ 1252.323508][T27160] kasan_report+0x12/0x20 [ 1252.323522][T27160] __asan_report_load4_noabort+0x14/0x20 [ 1252.323535][T27160] sk_psock_unlink+0x3dd/0x4b0 [ 1252.323617][T27160] ? sk_psock_link_pop+0x186/0x1f0 [ 1252.358463][T27160] ? tcp_check_oom+0x560/0x560 [ 1252.363310][T27160] tcp_bpf_remove+0x21/0x50 [ 1252.367833][T27160] tcp_bpf_close+0x130/0x390 [ 1252.372581][T27160] tls_sk_proto_close+0x181/0x750 [ 1252.377634][T27160] ? tcp_bpf_stream_read+0x270/0x270 [ 1252.382933][T27160] ? tls_push_sg+0x670/0x670 [ 1252.387585][T27160] ? ip_mc_drop_socket+0x211/0x270 [ 1252.392714][T27160] inet_release+0xe0/0x1f0 [ 1252.397224][T27160] inet6_release+0x53/0x80 [ 1252.401814][T27160] __sock_release+0xce/0x2a0 [ 1252.406433][T27160] sock_close+0x1b/0x30 [ 1252.410613][T27160] __fput+0x2ff/0x890 [ 1252.414625][T27160] ? __sock_release+0x2a0/0x2a0 [ 1252.419489][T27160] ____fput+0x16/0x20 [ 1252.423504][T27160] task_work_run+0x145/0x1c0 [ 1252.428115][T27160] exit_to_usermode_loop+0x273/0x2c0 [ 1252.433426][T27160] do_syscall_64+0x58e/0x680 [ 1252.438057][T27160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1252.443976][T27160] RIP: 0033:0x4131e0 [ 1252.447893][T27160] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ad 30 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1252.467601][T27160] RSP: 002b:00007fff2eb39378 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1252.476025][T27160] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004131e0 [ 1252.484005][T27160] RDX: 0000001b32320000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1252.484014][T27160] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1252.484021][T27160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000761178 [ 1252.484028][T27160] R13: 0000000000000005 R14: 0000000000000000 R15: ffffffffffffffff [ 1252.484048][T27160] [ 1252.484056][T27160] Allocated by task 27160: [ 1252.484075][T27160] save_stack+0x23/0x90 [ 1252.484089][T27160] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1252.484101][T27160] kasan_kmalloc+0x9/0x10 [ 1252.484119][T27160] kmem_cache_alloc_trace+0x151/0x750 [ 1252.522736][T27160] sock_map_alloc+0x1bb/0x3a0 [ 1252.522766][T27160] __do_sys_bpf+0x44f/0x42c0 [ 1252.522778][T27160] __x64_sys_bpf+0x73/0xb0 [ 1252.522792][T27160] do_syscall_64+0xfd/0x680 [ 1252.522804][T27160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1252.522809][T27160] [ 1252.522815][T27160] Freed by task 10160: [ 1252.522828][T27160] save_stack+0x23/0x90 [ 1252.522840][T27160] __kasan_slab_free+0x102/0x150 [ 1252.522852][T27160] kasan_slab_free+0xe/0x10 [ 1252.522862][T27160] kfree+0xcf/0x220 [ 1252.522888][T27160] sock_map_free+0x22a/0x310 [ 1252.555977][T27160] bpf_map_free_deferred+0xb3/0x100 [ 1252.555993][T27160] process_one_work+0x989/0x1790 [ 1252.556004][T27160] worker_thread+0x98/0xe40 [ 1252.556015][T27160] kthread+0x354/0x420 [ 1252.556026][T27160] ret_from_fork+0x24/0x30 [ 1252.556030][T27160] [ 1252.556042][T27160] The buggy address belongs to the object at ffff88808f5d5300 [ 1252.556042][T27160] which belongs to the cache kmalloc-512 of size 512 [ 1252.556053][T27160] The buggy address is located 24 bytes inside of [ 1252.556053][T27160] 512-byte region [ffff88808f5d5300, ffff88808f5d5500) [ 1252.556058][T27160] The buggy address belongs to the page: [ 1252.556070][T27160] page:ffffea00023d7540 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0xffff88808f5d5080 [ 1252.586586][T27160] flags: 0x1fffc0000000200(slab) [ 1252.586606][T27160] raw: 01fffc0000000200 ffffea00024f5ec8 ffffea000292aac8 ffff8880aa400940 [ 1252.586622][T27160] raw: ffff88808f5d5080 ffff88808f5d5080 0000000100000003 0000000000000000 [ 1252.586627][T27160] page dumped because: kasan: bad access detected [ 1252.586638][T27160] [ 1252.695126][T27160] Memory state around the buggy address: [ 1252.700765][T27160] ffff88808f5d5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1252.708831][T27160] ffff88808f5d5280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1252.716906][T27160] >ffff88808f5d5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1252.716912][T27160] ^ [ 1252.716921][T27160] ffff88808f5d5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1252.716930][T27160] ffff88808f5d5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1252.716934][T27160] ================================================================== [ 1252.716939][T27160] Disabling lock debugging due to kernel taint [ 1252.740249][T27160] Kernel panic - not syncing: panic_on_warn set ... [ 1252.766916][T27160] CPU: 1 PID: 27160 Comm: syz-executor.3 Tainted: G B 5.2.0-rc5+ #42 [ 1252.774622][ T3879] kobject: 'loop4' (00000000bceec71e): kobject_uevent_env [ 1252.776290][T27160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.776295][T27160] Call Trace: [ 1252.776316][T27160] dump_stack+0x172/0x1f0 [ 1252.776339][T27160] ? tcp_check_oom+0x560/0x560 [ 1252.785104][ T3879] kobject: 'loop4' (00000000bceec71e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1252.793501][T27160] panic+0x2cb/0x744 [ 1252.793515][T27160] ? __warn_printk+0xf3/0xf3 [ 1252.793530][T27160] ? sk_psock_unlink+0x3dd/0x4b0 [ 1252.793544][T27160] ? tcp_check_oom+0x560/0x560 [ 1252.793557][T27160] ? preempt_schedule+0x4b/0x60 [ 1252.793572][T27160] ? ___preempt_schedule+0x16/0x18 [ 1252.793594][T27160] ? trace_hardirqs_on+0x5e/0x220 [ 1252.849526][T27160] ? sk_psock_unlink+0x3dd/0x4b0 [ 1252.854474][T27160] ? tcp_check_oom+0x560/0x560 [ 1252.859240][T27160] end_report+0x47/0x4f [ 1252.863398][T27160] ? sk_psock_unlink+0x3dd/0x4b0 [ 1252.868421][T27160] __kasan_report.cold+0xe/0x40 [ 1252.873264][T27160] ? sk_psock_unlink+0x3dd/0x4b0 [ 1252.878272][T27160] kasan_report+0x12/0x20 [ 1252.882595][T27160] __asan_report_load4_noabort+0x14/0x20 [ 1252.888221][T27160] sk_psock_unlink+0x3dd/0x4b0 [ 1252.892982][T27160] ? sk_psock_link_pop+0x186/0x1f0 [ 1252.898111][T27160] ? tcp_check_oom+0x560/0x560 [ 1252.903479][T27160] tcp_bpf_remove+0x21/0x50 [ 1252.907998][T27160] tcp_bpf_close+0x130/0x390 [ 1252.912616][T27160] tls_sk_proto_close+0x181/0x750 [ 1252.917648][T27160] ? tcp_bpf_stream_read+0x270/0x270 [ 1252.922935][T27160] ? tls_push_sg+0x670/0x670 [ 1252.927525][T27160] ? ip_mc_drop_socket+0x211/0x270 [ 1252.932633][T27160] inet_release+0xe0/0x1f0 [ 1252.937047][T27160] inet6_release+0x53/0x80 [ 1252.941453][T27160] __sock_release+0xce/0x2a0 [ 1252.946052][T27160] sock_close+0x1b/0x30 [ 1252.950194][T27160] __fput+0x2ff/0x890 [ 1252.954180][T27160] ? __sock_release+0x2a0/0x2a0 [ 1252.959016][T27160] ____fput+0x16/0x20 [ 1252.962985][T27160] task_work_run+0x145/0x1c0 [ 1252.967917][T27160] exit_to_usermode_loop+0x273/0x2c0 [ 1252.973193][T27160] do_syscall_64+0x58e/0x680 [ 1252.977768][T27160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1252.983651][T27160] RIP: 0033:0x4131e0 [ 1252.987542][T27160] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ad 30 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1253.007243][T27160] RSP: 002b:00007fff2eb39378 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1253.015641][T27160] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004131e0 [ 1253.023601][T27160] RDX: 0000001b32320000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1253.031568][T27160] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1253.039523][T27160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000761178 [ 1253.047481][T27160] R13: 0000000000000005 R14: 0000000000000000 R15: ffffffffffffffff [ 1253.056638][T27160] Kernel Offset: disabled [ 1253.060989][T27160] Rebooting in 86400 seconds..