[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.770345][ T26] audit: type=1800 audit(1572191234.841:25): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.815859][ T26] audit: type=1800 audit(1572191234.841:26): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.853833][ T26] audit: type=1800 audit(1572191234.851:27): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.2' (ECDSA) to the list of known hosts. 2019/10/27 15:47:40 parsed 1 programs 2019/10/27 15:47:43 executed programs: 0 syzkaller login: [ 86.135250][ T9002] IPVS: ftp: loaded support on port[0] = 21 [ 86.158042][ T9003] IPVS: ftp: loaded support on port[0] = 21 [ 86.169749][ T9005] IPVS: ftp: loaded support on port[0] = 21 [ 86.169756][ T9006] IPVS: ftp: loaded support on port[0] = 21 [ 86.178550][ T9004] IPVS: ftp: loaded support on port[0] = 21 [ 86.184059][ T9001] IPVS: ftp: loaded support on port[0] = 21 [ 86.478078][ T9004] chnl_net:caif_netlink_parms(): no params data found [ 86.504283][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 86.558711][ T9005] chnl_net:caif_netlink_parms(): no params data found [ 86.570622][ T9006] chnl_net:caif_netlink_parms(): no params data found [ 86.580375][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.588821][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.597162][ T9001] device bridge_slave_0 entered promiscuous mode [ 86.609068][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.616243][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.623922][ T9001] device bridge_slave_1 entered promiscuous mode [ 86.672689][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.683518][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.731637][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.738842][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.746770][ T9004] device bridge_slave_0 entered promiscuous mode [ 86.791490][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.798979][ T9005] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.806998][ T9005] device bridge_slave_0 entered promiscuous mode [ 86.814416][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.822553][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.832008][ T9004] device bridge_slave_1 entered promiscuous mode [ 86.851170][ T9001] team0: Port device team_slave_0 added [ 86.857341][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.864394][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.872315][ T9006] device bridge_slave_0 entered promiscuous mode [ 86.880430][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.887655][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.895265][ T9005] device bridge_slave_1 entered promiscuous mode [ 86.923733][ T9001] team0: Port device team_slave_1 added [ 86.931755][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.938949][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.946944][ T9006] device bridge_slave_1 entered promiscuous mode [ 86.958406][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 86.970087][ T9004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.982560][ T9004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.031480][ T9005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.043498][ T9005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.056771][ T9004] team0: Port device team_slave_0 added [ 87.062849][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 87.076629][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.103162][ T9004] team0: Port device team_slave_1 added [ 87.178120][ T9001] device hsr_slave_0 entered promiscuous mode [ 87.217174][ T9001] device hsr_slave_1 entered promiscuous mode [ 87.258065][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.268333][ T9005] team0: Port device team_slave_0 added [ 87.293866][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.301500][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.309564][ T9003] device bridge_slave_0 entered promiscuous mode [ 87.322931][ T9005] team0: Port device team_slave_1 added [ 87.353466][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.361185][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.369012][ T9003] device bridge_slave_1 entered promiscuous mode [ 87.399720][ T9006] team0: Port device team_slave_0 added [ 87.469466][ T9004] device hsr_slave_0 entered promiscuous mode [ 87.506716][ T9004] device hsr_slave_1 entered promiscuous mode [ 87.564347][ T9004] debugfs: Directory 'hsr0' with parent '/' already present! [ 87.624571][ T9006] team0: Port device team_slave_1 added [ 87.680946][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.698819][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.734375][ T9002] device bridge_slave_0 entered promiscuous mode [ 87.782063][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.817941][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.909085][ T9005] device hsr_slave_0 entered promiscuous mode [ 87.963185][ T9005] device hsr_slave_1 entered promiscuous mode [ 88.003196][ T9005] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.024660][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.032519][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.067118][ T9002] device bridge_slave_1 entered promiscuous mode [ 88.259739][ T9006] device hsr_slave_0 entered promiscuous mode [ 88.306645][ T9006] device hsr_slave_1 entered promiscuous mode [ 88.347197][ T9006] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.512444][ T9003] team0: Port device team_slave_0 added [ 88.527956][ T9003] team0: Port device team_slave_1 added [ 88.722905][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.880159][ T9003] device hsr_slave_0 entered promiscuous mode [ 88.997238][ T9003] device hsr_slave_1 entered promiscuous mode [ 89.036332][ T9003] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.088157][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.290661][ T9002] team0: Port device team_slave_0 added [ 89.424096][ T9002] team0: Port device team_slave_1 added [ 89.845842][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.020617][ T9002] device hsr_slave_0 entered promiscuous mode [ 90.121470][ T9002] device hsr_slave_1 entered promiscuous mode [ 90.177797][ T9002] debugfs: Directory 'hsr0' with parent '/' already present! [ 90.223979][ T9004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.335368][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.518799][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.525848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.549099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.633612][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.791725][ T9005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.842647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.876913][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.884880][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.053163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.176973][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.184301][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.347019][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.355827][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.522915][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.530110][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.665179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.747268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.837033][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.907727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.971922][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.012811][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.112950][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.142801][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.227664][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.317947][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.325070][ T9079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.407169][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.415948][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.488166][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.495275][ T9079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.556459][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.565318][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.627445][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.647719][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.661310][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.677680][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.750985][ T9005] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.775066][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.809111][ T9001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.837237][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.855805][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.871661][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.887129][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.932934][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.941946][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.967235][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.975857][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.006993][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.015596][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.036825][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.051000][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.058209][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.066842][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.075583][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.095020][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.102219][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.110370][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.119548][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.128845][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.137133][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.145535][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.153643][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.161416][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.169979][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.179156][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.187253][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.219045][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.228063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.237216][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.245690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.254344][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.262757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.271114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.279490][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.287994][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.296368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.304756][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.328768][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.342169][ T9004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.357172][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.365280][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.374540][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.383061][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.390162][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.399211][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.407955][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.416375][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.423423][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.431063][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.439626][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.448430][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.456926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.465547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.479560][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.503233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.512170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.521165][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.528344][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.536652][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.545436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.554245][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.562990][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.571625][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.578744][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.586861][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.595659][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.603691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.627956][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.647959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.662890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.678289][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.691801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.701512][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.713517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.726756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.735394][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.745800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.754803][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.770685][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 2019/10/27 15:47:50 executed programs: 6 [ 93.784253][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.796430][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.819311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.843803][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.884066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.892964][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.901486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.910303][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.919268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.926380][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.934229][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.943018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.952128][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.959248][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.967429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.975865][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.984314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.995011][ T9006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.017368][ T9005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.026930][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.035143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.068205][ T9003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.095944][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.107600][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.117475][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.128813][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.142398][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.152352][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.161940][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.175806][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.186980][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.201443][ T9002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.234709][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.271989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.286996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.295849][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.338494][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.418654][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/10/27 15:47:55 executed programs: 140 2019/10/27 15:48:00 executed programs: 298 2019/10/27 15:48:05 executed programs: 446 2019/10/27 15:48:10 executed programs: 603 2019/10/27 15:48:16 executed programs: 761 2019/10/27 15:48:21 executed programs: 923 2019/10/27 15:48:26 executed programs: 1082 2019/10/27 15:48:31 executed programs: 1243 2019/10/27 15:48:36 executed programs: 1407 2019/10/27 15:48:41 executed programs: 1571 2019/10/27 15:48:46 executed programs: 1730 2019/10/27 15:48:51 executed programs: 1888 2019/10/27 15:48:56 executed programs: 2044 2019/10/27 15:49:01 executed programs: 2200 2019/10/27 15:49:06 executed programs: 2362 2019/10/27 15:49:11 executed programs: 2521 2019/10/27 15:49:16 executed programs: 2680 2019/10/27 15:49:21 executed programs: 2838 2019/10/27 15:49:26 executed programs: 3001 2019/10/27 15:49:31 executed programs: 3159 2019/10/27 15:49:36 executed programs: 3329 2019/10/27 15:49:41 executed programs: 3494 2019/10/27 15:49:46 executed programs: 3651 2019/10/27 15:49:51 executed programs: 3814 2019/10/27 15:49:56 executed programs: 3979 2019/10/27 15:50:01 executed programs: 4139 2019/10/27 15:50:06 executed programs: 4298 2019/10/27 15:50:11 executed programs: 4457 2019/10/27 15:50:16 executed programs: 4618 2019/10/27 15:50:21 executed programs: 4782 2019/10/27 15:50:26 executed programs: 4944 2019/10/27 15:50:31 executed programs: 5104 2019/10/27 15:50:36 executed programs: 5266 2019/10/27 15:50:41 executed programs: 5425 2019/10/27 15:50:46 executed programs: 5588 2019/10/27 15:50:52 executed programs: 5749 2019/10/27 15:50:57 executed programs: 5911 2019/10/27 15:51:02 executed programs: 6067 2019/10/27 15:51:07 executed programs: 6222 2019/10/27 15:51:12 executed programs: 6384 2019/10/27 15:51:17 executed programs: 6540 2019/10/27 15:51:22 executed programs: 6704 2019/10/27 15:51:27 executed programs: 6866 2019/10/27 15:51:32 executed programs: 7026 2019/10/27 15:51:37 executed programs: 7189 2019/10/27 15:51:42 executed programs: 7348 2019/10/27 15:51:47 executed programs: 7511 2019/10/27 15:51:52 executed programs: 7669 2019/10/27 15:51:57 executed programs: 7830 2019/10/27 15:52:02 executed programs: 7993 2019/10/27 15:52:07 executed programs: 8154 2019/10/27 15:52:12 executed programs: 8315 2019/10/27 15:52:17 executed programs: 8477 2019/10/27 15:52:22 executed programs: 8627 2019/10/27 15:52:27 executed programs: 8783 2019/10/27 15:52:32 executed programs: 8946 [ 376.621117][T11342] ================================================================== [ 376.629430][T11342] BUG: KASAN: use-after-free in io_uring_setup+0x1877/0x18c0 [ 376.636816][T11342] Read of size 8 at addr ffff888082284048 by task syz-executor.5/11342 [ 376.645052][T11342] [ 376.647398][T11342] CPU: 1 PID: 11342 Comm: syz-executor.5 Not tainted 5.4.0-rc4+ #0 [ 376.655286][T11342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.665353][T11342] Call Trace: [ 376.668754][T11342] dump_stack+0x172/0x1f0 [ 376.673099][T11342] ? io_uring_setup+0x1877/0x18c0 [ 376.678124][T11342] print_address_description.constprop.0.cold+0xd4/0x30b [ 376.678148][T11342] ? io_uring_setup+0x1877/0x18c0 [ 376.678161][T11342] ? io_uring_setup+0x1877/0x18c0 [ 376.678174][T11342] __kasan_report.cold+0x1b/0x41 [ 376.678190][T11342] ? io_uring_setup+0x1877/0x18c0 [ 376.678203][T11342] kasan_report+0x12/0x20 [ 376.678216][T11342] __asan_report_load8_noabort+0x14/0x20 [ 376.678232][T11342] io_uring_setup+0x1877/0x18c0 [ 376.678247][T11342] ? io_uring_release+0x50/0x50 [ 376.678262][T11342] ? nsecs_to_jiffies+0x30/0x30 [ 376.690404][T11342] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 376.690420][T11342] ? do_syscall_64+0x26/0x760 [ 376.690504][T11342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.690522][T11342] ? do_syscall_64+0x26/0x760 [ 376.700442][T11342] ? lockdep_hardirqs_on+0x421/0x5e0 [ 376.700463][T11342] __x64_sys_io_uring_setup+0x54/0x80 [ 376.700478][T11342] do_syscall_64+0xfa/0x760 [ 376.700498][T11342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.700511][T11342] RIP: 0033:0x459f39 [ 376.700528][T11342] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.700536][T11342] RSP: 002b:00007f313e126c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 376.700552][T11342] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459f39 [ 376.811730][T11342] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 000000040000000e [ 376.819705][T11342] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 376.831673][T11342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f313e1276d4 [ 376.839630][T11342] R13: 00000000004c1512 R14: 00000000004d4da8 R15: 00000000ffffffff [ 376.847605][T11342] [ 376.850005][T11342] Allocated by task 11342: [ 376.854411][T11342] save_stack+0x23/0x90 [ 376.858546][T11342] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 376.864166][T11342] kasan_kmalloc+0x9/0x10 [ 376.868487][T11342] kmem_cache_alloc_trace+0x158/0x790 [ 376.873846][T11342] io_uring_setup+0xec6/0x18c0 [ 376.878598][T11342] __x64_sys_io_uring_setup+0x54/0x80 [ 376.883951][T11342] do_syscall_64+0xfa/0x760 [ 376.888449][T11342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.894317][T11342] [ 376.896675][T11342] Freed by task 11335: [ 376.900739][T11342] save_stack+0x23/0x90 [ 376.904932][T11342] __kasan_slab_free+0x102/0x150 [ 376.909858][T11342] kasan_slab_free+0xe/0x10 [ 376.914358][T11342] kfree+0x10a/0x2c0 [ 376.918244][T11342] io_ring_ctx_wait_and_kill+0x4d7/0x6c0 [ 376.923860][T11342] io_uring_release+0x42/0x50 [ 376.928514][T11342] __fput+0x2ff/0x890 [ 376.932471][T11342] ____fput+0x16/0x20 [ 376.936429][T11342] task_work_run+0x145/0x1c0 [ 376.941001][T11342] exit_to_usermode_loop+0x316/0x380 [ 376.946277][T11342] do_syscall_64+0x65f/0x760 [ 376.950845][T11342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.956728][T11342] [ 376.959050][T11342] The buggy address belongs to the object at ffff888082284000 [ 376.959050][T11342] which belongs to the cache kmalloc-2k of size 2048 [ 376.973115][T11342] The buggy address is located 72 bytes inside of [ 376.973115][T11342] 2048-byte region [ffff888082284000, ffff888082284800) [ 376.986361][T11342] The buggy address belongs to the page: [ 376.991990][T11342] page:ffffea000208a100 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 377.001079][T11342] flags: 0x1fffc0000000200(slab) [ 377.006029][T11342] raw: 01fffc0000000200 ffffea0002a1bc88 ffffea00023fa248 ffff8880aa400e00 [ 377.014609][T11342] raw: 0000000000000000 ffff888082284000 0000000100000001 0000000000000000 [ 377.023177][T11342] page dumped because: kasan: bad access detected [ 377.029574][T11342] [ 377.031906][T11342] Memory state around the buggy address: [ 377.037532][T11342] ffff888082283f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 377.045586][T11342] ffff888082283f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 377.053657][T11342] >ffff888082284000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.061710][T11342] ^ [ 377.068113][T11342] ffff888082284080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.076274][T11342] ffff888082284100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.084320][T11342] ================================================================== [ 377.092365][T11342] Disabling lock debugging due to kernel taint [ 377.099188][T11342] Kernel panic - not syncing: panic_on_warn set ... [ 377.104257][ T3900] kobject: 'loop0' (00000000c81ba8ce): kobject_uevent_env [ 377.105804][T11342] CPU: 1 PID: 11342 Comm: syz-executor.5 Tainted: G B 5.4.0-rc4+ #0 [ 377.122166][T11342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.132231][T11342] Call Trace: [ 377.135520][T11342] dump_stack+0x172/0x1f0 [ 377.139857][T11342] panic+0x2e3/0x75c [ 377.140805][ T3900] kobject: 'loop0' (00000000c81ba8ce): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 377.143753][T11342] ? add_taint.cold+0x16/0x16 [ 377.143771][T11342] ? io_uring_setup+0x1877/0x18c0 [ 377.143793][T11342] ? preempt_schedule+0x4b/0x60 [ 377.168725][T11342] ? ___preempt_schedule+0x16/0x20 [ 377.173845][T11342] ? trace_hardirqs_on+0x5e/0x240 [ 377.178988][T11342] ? io_uring_setup+0x1877/0x18c0 [ 377.184105][T11342] end_report+0x47/0x4f [ 377.188261][T11342] ? io_uring_setup+0x1877/0x18c0 [ 377.193285][T11342] __kasan_report.cold+0xe/0x41 [ 377.198215][T11342] ? io_uring_setup+0x1877/0x18c0 [ 377.203244][T11342] kasan_report+0x12/0x20 [ 377.207570][T11342] __asan_report_load8_noabort+0x14/0x20 [ 377.213206][T11342] io_uring_setup+0x1877/0x18c0 [ 377.218045][T11342] ? io_uring_release+0x50/0x50 [ 377.222879][T11342] ? nsecs_to_jiffies+0x30/0x30 [ 377.227715][T11342] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 377.233242][T11342] ? do_syscall_64+0x26/0x760 [ 377.237919][T11342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.243982][T11342] ? do_syscall_64+0x26/0x760 [ 377.248753][T11342] ? lockdep_hardirqs_on+0x421/0x5e0 [ 377.254053][T11342] __x64_sys_io_uring_setup+0x54/0x80 [ 377.259431][T11342] do_syscall_64+0xfa/0x760 [ 377.263922][T11342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.269818][T11342] RIP: 0033:0x459f39 [ 377.273695][T11342] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.293301][T11342] RSP: 002b:00007f313e126c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 377.301710][T11342] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459f39 [ 377.309673][T11342] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 000000040000000e [ 377.317634][T11342] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 377.325636][T11342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f313e1276d4 [ 377.333592][T11342] R13: 00000000004c1512 R14: 00000000004d4da8 R15: 00000000ffffffff [ 377.342861][T11342] Kernel Offset: disabled [ 377.347215][T11342] Rebooting in 86400 seconds..