[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.708701][ T26] audit: type=1800 audit(1561660437.300:25): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.751688][ T26] audit: type=1800 audit(1561660437.300:26): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.788441][ T26] audit: type=1800 audit(1561660437.300:27): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.184' (ECDSA) to the list of known hosts. 2019/06/27 18:34:09 parsed 1 programs 2019/06/27 18:34:11 executed programs: 0 syzkaller login: [ 58.462698][ T8071] IPVS: ftp: loaded support on port[0] = 21 [ 58.484109][ T8069] IPVS: ftp: loaded support on port[0] = 21 [ 58.506499][ T8073] IPVS: ftp: loaded support on port[0] = 21 [ 58.564616][ T8076] IPVS: ftp: loaded support on port[0] = 21 [ 58.587401][ T8078] IPVS: ftp: loaded support on port[0] = 21 [ 58.622902][ T8079] IPVS: ftp: loaded support on port[0] = 21 [ 58.651173][ T8069] chnl_net:caif_netlink_parms(): no params data found [ 58.688571][ T8073] chnl_net:caif_netlink_parms(): no params data found [ 58.731674][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.740406][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.748496][ T8069] device bridge_slave_0 entered promiscuous mode [ 58.763078][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 58.784912][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.793369][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.801018][ T8069] device bridge_slave_1 entered promiscuous mode [ 58.821279][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.829208][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.837541][ T8073] device bridge_slave_0 entered promiscuous mode [ 58.848479][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.856370][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.865864][ T8073] device bridge_slave_1 entered promiscuous mode [ 58.890536][ T8069] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.901881][ T8069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.919364][ T8073] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.933970][ T8073] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.956680][ T8069] team0: Port device team_slave_0 added [ 58.963100][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.970972][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.979379][ T8071] device bridge_slave_0 entered promiscuous mode [ 58.989651][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.998368][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.006178][ T8071] device bridge_slave_1 entered promiscuous mode [ 59.022101][ T8071] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.033906][ T8069] team0: Port device team_slave_1 added [ 59.043142][ T8073] team0: Port device team_slave_0 added [ 59.065836][ T8071] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.082345][ T8071] team0: Port device team_slave_0 added [ 59.091618][ T8071] team0: Port device team_slave_1 added [ 59.098590][ T8073] team0: Port device team_slave_1 added [ 59.139736][ T8079] chnl_net:caif_netlink_parms(): no params data found [ 59.213839][ T8069] device hsr_slave_0 entered promiscuous mode [ 59.251839][ T8069] device hsr_slave_1 entered promiscuous mode [ 59.353874][ T8076] chnl_net:caif_netlink_parms(): no params data found [ 59.413336][ T8071] device hsr_slave_0 entered promiscuous mode [ 59.451973][ T8071] device hsr_slave_1 entered promiscuous mode [ 59.499544][ T8078] chnl_net:caif_netlink_parms(): no params data found [ 59.573466][ T8073] device hsr_slave_0 entered promiscuous mode [ 59.611981][ T8073] device hsr_slave_1 entered promiscuous mode [ 59.658242][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.666335][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.674809][ T8079] device bridge_slave_0 entered promiscuous mode [ 59.703252][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.710873][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.719160][ T8079] device bridge_slave_1 entered promiscuous mode [ 59.778544][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.787474][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.796084][ T8078] device bridge_slave_0 entered promiscuous mode [ 59.815849][ T8079] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.824647][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.831843][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.839458][ T8078] device bridge_slave_1 entered promiscuous mode [ 59.846966][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.854500][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.864380][ T8076] device bridge_slave_0 entered promiscuous mode [ 59.873474][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.880560][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.889166][ T8076] device bridge_slave_1 entered promiscuous mode [ 59.911737][ T8079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.923075][ T8076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.938841][ T8076] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.985748][ T8079] team0: Port device team_slave_0 added [ 59.994629][ T8078] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.009421][ T8078] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.021930][ T8079] team0: Port device team_slave_1 added [ 60.036055][ T8076] team0: Port device team_slave_0 added [ 60.044012][ T8076] team0: Port device team_slave_1 added [ 60.070884][ T8078] team0: Port device team_slave_0 added [ 60.124469][ T8079] device hsr_slave_0 entered promiscuous mode [ 60.171850][ T8079] device hsr_slave_1 entered promiscuous mode [ 60.212891][ T8078] team0: Port device team_slave_1 added [ 60.273791][ T8076] device hsr_slave_0 entered promiscuous mode [ 60.321978][ T8076] device hsr_slave_1 entered promiscuous mode [ 60.397697][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.454310][ T8078] device hsr_slave_0 entered promiscuous mode [ 60.511958][ T8078] device hsr_slave_1 entered promiscuous mode [ 60.564733][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.571975][ T8078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.579844][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.587178][ T8078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.604727][ T8073] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.614762][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.626407][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.645256][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.656182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.666304][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.682224][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.716699][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.724471][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.733718][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.742387][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.750993][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.758162][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.766322][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.776086][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.784903][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.792159][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.799847][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.808907][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.817929][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.826414][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.833606][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.841210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.849913][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.858371][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.865852][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.874660][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.882845][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.902536][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.932019][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.940777][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.950582][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.959736][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.969495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.978244][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.003619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.012865][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.020681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.030236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.044019][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.069061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.077996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.088538][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.097870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.106665][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.115697][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.124400][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.132941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.142024][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.153178][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.174825][ T8069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.186654][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.198300][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.210071][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.219209][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.226481][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.234448][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.243146][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.253613][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.260673][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.269718][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.278366][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.286812][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.296758][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.308476][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.321298][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.335938][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.354389][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.372496][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.381223][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.392271][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.402180][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.411042][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.421163][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.429395][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.437630][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.452108][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.462448][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.477991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.488165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.509247][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.523452][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.549151][ T8071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.563338][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.572141][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.580660][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.592941][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.603104][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.619301][ T8076] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.630868][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.658676][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.668433][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.678346][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.685645][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.694760][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.703610][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.712345][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.719679][ T8086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.727875][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.736830][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.745249][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.752366][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.760203][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.770439][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.793046][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.812704][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.822052][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.829136][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.838422][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.852946][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.862982][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.872180][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.879413][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.887488][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.896810][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.906271][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.914369][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.933509][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.943010][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.951947][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.959164][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.968431][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.977297][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.991694][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.000421][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.015856][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.029050][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.044071][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.065292][ T8078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.089932][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.114416][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.142036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.150746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.160800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.177679][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.195877][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.212010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.221275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.248315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.263453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.286895][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.299116][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.349292][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.358639][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.377570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.389204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.398337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.406963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.415424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.423750][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.432180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.440619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.452118][ T8079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.464325][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.474280][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.490628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.499375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.557196][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.618297][ T8076] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/27 18:34:17 executed programs: 42 [ 67.536492][ T8905] ================================================================== [ 67.545629][ T8905] BUG: KASAN: use-after-free in work_is_static_object+0x2c/0x50 [ 67.553714][ T8905] Read of size 8 at addr ffff8880a881e978 by task syz-executor.2/8905 [ 67.562136][ T8905] [ 67.564496][ T8905] CPU: 1 PID: 8905 Comm: syz-executor.2 Not tainted 5.2.0-rc6+ #7 [ 67.572506][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.583373][ T8905] Call Trace: [ 67.587217][ T8905] dump_stack+0x1d8/0x2f8 [ 67.591564][ T8905] print_address_description+0x6d/0x310 [ 67.597130][ T8905] __kasan_report+0x14b/0x1c0 [ 67.601839][ T8905] ? work_is_static_object+0x2c/0x50 [ 67.607145][ T8905] kasan_report+0x26/0x50 [ 67.611586][ T8905] __asan_report_load8_noabort+0x14/0x20 [ 67.611606][ T8905] work_is_static_object+0x2c/0x50 [ 67.611618][ T8905] debug_object_activate+0x136/0x700 [ 67.611629][ T8905] ? rcu_lock_release+0x9/0x30 [ 67.611641][ T8905] __queue_work+0xe9/0xc90 [ 67.611659][ T8905] ? rxrpc_release+0x360/0x4d0 [ 67.611670][ T8905] ? ___preempt_schedule_notrace+0x16/0x2b [ 67.611678][ T8905] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 67.611689][ T8905] queue_work_on+0xc3/0x1a0 [ 67.611697][ T8905] ? rxrpc_release+0x360/0x4d0 [ 67.611705][ T8905] rxrpc_put_local+0xac/0xc0 [ 67.611714][ T8905] rxrpc_release+0x360/0x4d0 [ 67.627982][ T8905] sock_close+0xdb/0x280 [ 67.627993][ T8905] ? sock_mmap+0xa0/0xa0 [ 67.628005][ T8905] __fput+0x2e4/0x740 [ 67.628022][ T8905] ____fput+0x15/0x20 [ 67.628033][ T8905] task_work_run+0x17e/0x1b0 [ 67.628049][ T8905] prepare_exit_to_usermode+0x402/0x4f0 [ 67.628071][ T8905] syscall_return_slowpath+0x110/0x440 [ 67.650541][ T3879] kobject: 'loop3' (000000006800b8ee): kobject_uevent_env [ 67.654390][ T8905] do_syscall_64+0x126/0x140 [ 67.654407][ T8905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.654417][ T8905] RIP: 0033:0x413201 [ 67.654427][ T8905] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 67.654432][ T8905] RSP: 002b:00007ffd5f38be80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 67.654441][ T8905] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413201 [ 67.654446][ T8905] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000004 [ 67.654452][ T8905] RBP: 0000000000000000 R08: 00000000007607d8 R09: ffffffffffffffff [ 67.654458][ T8905] R10: 00007ffd5f38bf50 R11: 0000000000000293 R12: 00000000007607e0 [ 67.654464][ T8905] R13: 0000000000000003 R14: 0000000000000000 R15: ffffffffffffffff [ 67.654480][ T8905] [ 67.654487][ T8905] Allocated by task 8910: [ 67.654503][ T8905] __kasan_kmalloc+0x11c/0x1b0 [ 67.661206][ T3879] kobject: 'loop3' (000000006800b8ee): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 67.663810][ T8905] kasan_kmalloc+0x9/0x10 [ 67.663820][ T8905] kmem_cache_alloc_trace+0x209/0x2c0 [ 67.663829][ T8905] rxrpc_lookup_local+0x762/0x1710 [ 67.663838][ T8905] rxrpc_bind+0x3a0/0x6e0 [ 67.663846][ T8905] __sys_bind+0x305/0x400 [ 67.663854][ T8905] __x64_sys_bind+0x7a/0x90 [ 67.663865][ T8905] do_syscall_64+0xfe/0x140 [ 67.663876][ T8905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.663880][ T8905] [ 67.663885][ T8905] Freed by task 9: [ 67.663894][ T8905] __kasan_slab_free+0x12a/0x1e0 [ 67.663902][ T8905] kasan_slab_free+0xe/0x10 [ 67.663909][ T8905] kfree+0xae/0x120 [ 67.663916][ T8905] rxrpc_local_rcu+0x56/0x70 [ 67.663924][ T8905] rcu_core+0x8d6/0xf90 [ 67.663939][ T8905] __do_softirq+0x340/0x7b0 [ 67.680474][ T3879] kobject: 'loop0' (00000000373f3b35): kobject_uevent_env [ 67.682937][ T8905] [ 67.682949][ T8905] The buggy address belongs to the object at ffff8880a881e940 [ 67.682949][ T8905] which belongs to the cache kmalloc-1k of size 1024 [ 67.682957][ T8905] The buggy address is located 56 bytes inside of [ 67.682957][ T8905] 1024-byte region [ffff8880a881e940, ffff8880a881ed40) [ 67.682961][ T8905] The buggy address belongs to the page: [ 67.682989][ T8905] page:ffffea0002a20780 refcount:1 mapcount:0 mapping:ffff8880aa400ac0 index:0x0 compound_mapcount: 0 [ 67.683001][ T8905] flags: 0x1fffc0000010200(slab|head) [ 67.683014][ T8905] raw: 01fffc0000010200 ffffea0002307d88 ffffea000242af08 ffff8880aa400ac0 [ 67.683024][ T8905] raw: 0000000000000000 ffff8880a881e040 0000000100000007 0000000000000000 [ 67.683028][ T8905] page dumped because: kasan: bad access detected [ 67.683030][ T8905] [ 67.683033][ T8905] Memory state around the buggy address: [ 67.683041][ T8905] ffff8880a881e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.683047][ T8905] ffff8880a881e880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 67.683053][ T8905] >ffff8880a881e900: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 67.683065][ T8905] ^ [ 67.689764][ T3879] kobject: 'loop0' (00000000373f3b35): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 67.691592][ T8905] ffff8880a881e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.691601][ T8905] ffff8880a881ea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.691606][ T8905] ================================================================== [ 67.691610][ T8905] Disabling lock debugging due to kernel taint [ 67.691616][ T8905] Kernel panic - not syncing: panic_on_warn set ... [ 67.691628][ T8905] CPU: 1 PID: 8905 Comm: syz-executor.2 Tainted: G B 5.2.0-rc6+ #7 [ 67.691632][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.691636][ T8905] Call Trace: [ 67.691652][ T8905] dump_stack+0x1d8/0x2f8 [ 67.691668][ T8905] panic+0x28a/0x7c9 [ 67.705725][ T3879] kobject: 'loop0' (00000000373f3b35): kobject_uevent_env [ 67.707950][ T8905] ? trace_hardirqs_off+0x1a/0x80 [ 67.707961][ T8905] ? nmi_panic+0x97/0x97 [ 67.707976][ T8905] __kasan_report+0x1bb/0x1c0 [ 67.707995][ T8905] ? work_is_static_object+0x2c/0x50 [ 67.731535][ T3879] kobject: 'loop0' (00000000373f3b35): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 67.734458][ T8905] kasan_report+0x26/0x50 [ 67.734471][ T8905] __asan_report_load8_noabort+0x14/0x20 [ 67.734482][ T8905] work_is_static_object+0x2c/0x50 [ 67.734493][ T8905] debug_object_activate+0x136/0x700 [ 67.734503][ T8905] ? rcu_lock_release+0x9/0x30 [ 67.734518][ T8905] __queue_work+0xe9/0xc90 [ 67.755546][ T3879] kobject: 'loop0' (00000000373f3b35): kobject_uevent_env [ 67.760037][ T8905] ? rxrpc_release+0x360/0x4d0 [ 67.760049][ T8905] ? ___preempt_schedule_notrace+0x16/0x2b [ 67.760059][ T8905] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 67.760071][ T8905] queue_work_on+0xc3/0x1a0 [ 67.760080][ T8905] ? rxrpc_release+0x360/0x4d0 [ 67.760089][ T8905] rxrpc_put_local+0xac/0xc0 [ 67.760104][ T8905] rxrpc_release+0x360/0x4d0 [ 67.797799][ T3879] kobject: 'loop0' (00000000373f3b35): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 67.800954][ T8905] sock_close+0xdb/0x280 [ 67.800964][ T8905] ? sock_mmap+0xa0/0xa0 [ 67.800976][ T8905] __fput+0x2e4/0x740 [ 67.800988][ T8905] ____fput+0x15/0x20 [ 67.800997][ T8905] task_work_run+0x17e/0x1b0 [ 67.801016][ T8905] prepare_exit_to_usermode+0x402/0x4f0 [ 67.900344][ T3879] kobject: 'loop3' (000000006800b8ee): kobject_uevent_env [ 67.904194][ T8905] syscall_return_slowpath+0x110/0x440 [ 67.904206][ T8905] do_syscall_64+0x126/0x140 [ 67.904219][ T8905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.904227][ T8905] RIP: 0033:0x413201 [ 67.904236][ T8905] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 67.904241][ T8905] RSP: 002b:00007ffd5f38be80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 67.904249][ T8905] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413201 [ 67.904253][ T8905] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000004 [ 67.904258][ T8905] RBP: 0000000000000000 R08: 00000000007607d8 R09: ffffffffffffffff [ 67.904270][ T8905] R10: 00007ffd5f38bf50 R11: 0000000000000293 R12: 00000000007607e0 [ 67.914359][ T3879] kobject: 'loop3' (000000006800b8ee): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 67.927961][ T8905] R13: 0000000000000003 R14: 0000000000000000 R15: ffffffffffffffff [ 67.929143][ T8905] Kernel Offset: disabled [ 68.371387][ T8905] Rebooting in 86400 seconds..