[ 53.807067][ T25] audit: type=1800 audit(1558390988.286:25): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 53.828624][ T25] audit: type=1800 audit(1558390988.286:26): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 53.865716][ T25] audit: type=1800 audit(1558390988.286:27): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts. 2019/05/20 22:23:18 parsed 1 programs 2019/05/20 22:23:20 executed programs: 0 syzkaller login: [ 66.200145][ T8695] IPVS: ftp: loaded support on port[0] = 21 [ 66.217776][ T8691] IPVS: ftp: loaded support on port[0] = 21 [ 66.220312][ T8689] IPVS: ftp: loaded support on port[0] = 21 [ 66.232099][ T8697] IPVS: ftp: loaded support on port[0] = 21 [ 66.237243][ T8696] IPVS: ftp: loaded support on port[0] = 21 [ 66.242347][ T8698] IPVS: ftp: loaded support on port[0] = 21 [ 66.506609][ T8698] chnl_net:caif_netlink_parms(): no params data found [ 66.576313][ T8695] chnl_net:caif_netlink_parms(): no params data found [ 66.598360][ T8697] chnl_net:caif_netlink_parms(): no params data found [ 66.607207][ T8696] chnl_net:caif_netlink_parms(): no params data found [ 66.622426][ T8691] chnl_net:caif_netlink_parms(): no params data found [ 66.724278][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.731358][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.744055][ T8698] device bridge_slave_0 entered promiscuous mode [ 66.770906][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.778135][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.785797][ T8695] device bridge_slave_0 entered promiscuous mode [ 66.795508][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.802715][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.810527][ T8695] device bridge_slave_1 entered promiscuous mode [ 66.817859][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.825375][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.833145][ T8697] device bridge_slave_0 entered promiscuous mode [ 66.841142][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.848320][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.856272][ T8697] device bridge_slave_1 entered promiscuous mode [ 66.867254][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.875186][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.882927][ T8698] device bridge_slave_1 entered promiscuous mode [ 66.890036][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.899788][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.907808][ T8691] device bridge_slave_0 entered promiscuous mode [ 66.915853][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.922902][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.930805][ T8691] device bridge_slave_1 entered promiscuous mode [ 66.955410][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.962613][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.970499][ T8696] device bridge_slave_0 entered promiscuous mode [ 66.982159][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 66.997236][ T8695] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.014807][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.021896][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.030295][ T8696] device bridge_slave_1 entered promiscuous mode [ 67.051807][ T8695] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.061797][ T8697] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.072155][ T8697] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.083218][ T8691] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.093577][ T8698] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.112149][ T8696] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.138174][ T8691] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.149360][ T8698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.158955][ T8696] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.172494][ T8697] team0: Port device team_slave_0 added [ 67.185121][ T8697] team0: Port device team_slave_1 added [ 67.218405][ T8695] team0: Port device team_slave_0 added [ 67.231329][ T8691] team0: Port device team_slave_0 added [ 67.249872][ T8695] team0: Port device team_slave_1 added [ 67.266704][ T8691] team0: Port device team_slave_1 added [ 67.273431][ T8698] team0: Port device team_slave_0 added [ 67.280584][ T8696] team0: Port device team_slave_0 added [ 67.287737][ T8696] team0: Port device team_slave_1 added [ 67.293518][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.301100][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.309003][ T8689] device bridge_slave_0 entered promiscuous mode [ 67.317221][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.324365][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.332070][ T8689] device bridge_slave_1 entered promiscuous mode [ 67.346231][ T8698] team0: Port device team_slave_1 added [ 67.396974][ T8697] device hsr_slave_0 entered promiscuous mode [ 67.437104][ T8697] device hsr_slave_1 entered promiscuous mode [ 67.586885][ T8695] device hsr_slave_0 entered promiscuous mode [ 67.624802][ T8695] device hsr_slave_1 entered promiscuous mode [ 67.716363][ T8691] device hsr_slave_0 entered promiscuous mode [ 67.764409][ T8691] device hsr_slave_1 entered promiscuous mode [ 67.805801][ T8689] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.817195][ T8689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.886880][ T8696] device hsr_slave_0 entered promiscuous mode [ 67.924372][ T8696] device hsr_slave_1 entered promiscuous mode [ 68.006016][ T8698] device hsr_slave_0 entered promiscuous mode [ 68.044225][ T8698] device hsr_slave_1 entered promiscuous mode [ 68.123626][ T8689] team0: Port device team_slave_0 added [ 68.133174][ T8689] team0: Port device team_slave_1 added [ 68.217362][ T8689] device hsr_slave_0 entered promiscuous mode [ 68.255336][ T8689] device hsr_slave_1 entered promiscuous mode [ 68.377828][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.387690][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.400302][ T8696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.435275][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.443656][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.452281][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.460515][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.472014][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.486136][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.496071][ T8696] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.507805][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.518707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.526945][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.536076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.545221][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.553692][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.560870][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.570143][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.593272][ T8695] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.605705][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.617815][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.627712][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.634938][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.643020][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.651751][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.660060][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.667153][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.674966][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.682649][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.690407][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.699006][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.707848][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.716189][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.723210][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.731292][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.739185][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.776175][ T8698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.794970][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.803579][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.812789][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.821208][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.828301][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.836560][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.845360][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.853646][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.860736][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.868542][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.877348][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.885876][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.893125][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.900865][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.909556][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.919702][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.928655][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.937301][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.945765][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.954610][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.962985][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.971616][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.980276][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.989359][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.998133][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.006701][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.013744][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.021566][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.030771][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.038831][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.047347][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.055816][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.063586][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.079190][ T8695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.093162][ T8695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.120404][ T8698] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.132789][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.142036][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.151101][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.160040][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.169492][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.178038][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.186633][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.195420][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.204589][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.221531][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.231285][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.240949][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.249789][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.258539][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.267238][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.275872][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.288797][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.311297][ T8696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.323627][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.331904][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.340093][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.349061][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.358129][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.366810][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.383547][ T8697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.397893][ T8697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.422574][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.430511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.440093][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.450231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.458949][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.468194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.476589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.485375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.493631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.502018][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.510959][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.519769][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.527029][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.536562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.544870][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.552630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.563599][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.573239][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.582043][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.589256][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.610657][ T8696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.627950][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.640173][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.649305][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.659481][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.673766][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.687448][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.704326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.713081][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.723157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.732529][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.761112][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.781603][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.801540][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.810984][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.818221][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.827034][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.835964][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.845096][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.852536][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.861536][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.894965][ T8698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.914284][ T8698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.936273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.961854][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.974593][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.983009][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.992189][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.000975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.009573][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.017941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.027974][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.035770][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.044693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.056080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.081090][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.092249][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.101403][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.122841][ T8726] ================================================================== [ 70.122967][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.130963][ T8726] BUG: KASAN: slab-out-of-bounds in __lock_acquire+0x3ba2/0x5490 [ 70.130974][ T8726] Read of size 8 at addr ffff888093cca4c0 by task syz-executor.0/8726 [ 70.130976][ T8726] [ 70.130989][ T8726] CPU: 0 PID: 8726 Comm: syz-executor.0 Not tainted 5.2.0-rc1+ #1 [ 70.130995][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.130998][ T8726] Call Trace: [ 70.131013][ T8726] dump_stack+0x172/0x1f0 [ 70.131046][ T8726] ? __lock_acquire+0x3ba2/0x5490 [ 70.178490][ T8726] print_address_description.cold+0x7c/0x20d [ 70.187953][ T8726] ? __lock_acquire+0x3ba2/0x5490 [ 70.187963][ T8726] ? __lock_acquire+0x3ba2/0x5490 [ 70.187973][ T8726] __kasan_report.cold+0x1b/0x40 [ 70.187984][ T8726] ? __lock_acquire+0x3ba2/0x5490 [ 70.187995][ T8726] kasan_report+0x12/0x20 [ 70.188012][ T8726] __asan_report_load8_noabort+0x14/0x20 [ 70.224341][ T8726] __lock_acquire+0x3ba2/0x5490 [ 70.229520][ T8726] ? sock_diag_rcv+0x2b/0x40 [ 70.234300][ T8726] ? netlink_unicast+0x531/0x710 [ 70.239262][ T8726] ? netlink_sendmsg+0x8ae/0xd70 [ 70.244301][ T8726] ? sock_sendmsg+0xd7/0x130 [ 70.248920][ T8726] ? ___sys_sendmsg+0x803/0x920 [ 70.248933][ T8726] ? __sys_sendmsg+0x105/0x1d0 [ 70.248946][ T8726] ? __x64_sys_sendmsg+0x78/0xb0 [ 70.248961][ T8726] ? do_syscall_64+0xfd/0x680 [ 70.248974][ T8726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.248992][ T8726] ? mark_held_locks+0xf0/0xf0 [ 70.258605][ T8726] ? mark_held_locks+0xf0/0xf0 [ 70.258618][ T8726] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 70.258630][ T8726] ? find_held_lock+0x35/0x130 [ 70.258641][ T8726] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 70.258658][ T8726] lock_acquire+0x16f/0x3f0 [ 70.268427][ T8726] ? rhashtable_walk_enter+0xf9/0x390 [ 70.268443][ T8726] _raw_spin_lock+0x2f/0x40 [ 70.268461][ T8726] ? rhashtable_walk_enter+0xf9/0x390 [ 70.279422][ T8726] rhashtable_walk_enter+0xf9/0x390 [ 70.279437][ T8726] __tipc_dump_start+0x1fa/0x3c0 [ 70.279450][ T8726] tipc_dump_start+0x70/0x90 [ 70.279466][ T8726] __netlink_dump_start+0x4f8/0x7d0 [ 70.279475][ T8726] ? __tipc_dump_start+0x3c0/0x3c0 [ 70.279493][ T8726] tipc_sock_diag_handler_dump+0x1d9/0x270 [ 70.353482][ T8726] ? __tipc_diag_gen_cookie+0x90/0x90 [ 70.359403][ T8726] ? preempt_schedule+0x4b/0x60 [ 70.364462][ T8726] ? __tipc_dump_start+0x3c0/0x3c0 [ 70.369744][ T8726] ? tipc_unregister_sysctl+0x20/0x20 [ 70.375243][ T8726] ? tipc_ioctl+0x2e0/0x2e0 [ 70.379737][ T8726] sock_diag_rcv_msg+0x319/0x410 [ 70.384676][ T8726] netlink_rcv_skb+0x177/0x450 [ 70.390207][ T8726] ? sock_diag_bind+0x80/0x80 [ 70.394877][ T8726] ? netlink_ack+0xb50/0xb50 [ 70.399565][ T8726] ? kasan_check_read+0x11/0x20 [ 70.404733][ T8726] ? netlink_deliver_tap+0x254/0xbf0 [ 70.410263][ T8726] sock_diag_rcv+0x2b/0x40 [ 70.414888][ T8726] netlink_unicast+0x531/0x710 [ 70.419648][ T8726] ? netlink_attachskb+0x770/0x770 [ 70.424918][ T8726] ? _copy_from_iter_full+0x25d/0x8c0 [ 70.430394][ T8726] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 70.436100][ T8726] ? __check_object_size+0x3d/0x42f [ 70.441386][ T8726] netlink_sendmsg+0x8ae/0xd70 [ 70.446163][ T8726] ? netlink_unicast+0x710/0x710 [ 70.451093][ T8726] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 70.456647][ T8726] ? apparmor_socket_sendmsg+0x2a/0x30 [ 70.462115][ T8726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.468455][ T8726] ? security_socket_sendmsg+0x8d/0xc0 [ 70.473929][ T8726] ? netlink_unicast+0x710/0x710 [ 70.478856][ T8726] sock_sendmsg+0xd7/0x130 [ 70.483260][ T8726] ___sys_sendmsg+0x803/0x920 [ 70.487920][ T8726] ? copy_msghdr_from_user+0x430/0x430 [ 70.493414][ T8726] ? kasan_check_read+0x11/0x20 [ 70.498379][ T8726] ? __fget+0x381/0x550 [ 70.502556][ T8726] ? ksys_dup3+0x3e0/0x3e0 [ 70.506971][ T8726] ? lock_downgrade+0x880/0x880 [ 70.512272][ T8726] ? __fget_light+0x1a9/0x230 [ 70.517030][ T8726] ? __fdget+0x1b/0x20 [ 70.521080][ T8726] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 70.527317][ T8726] __sys_sendmsg+0x105/0x1d0 [ 70.531904][ T8726] ? __ia32_sys_shutdown+0x80/0x80 [ 70.537004][ T8726] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 70.542457][ T8726] ? do_syscall_64+0x26/0x680 [ 70.547126][ T8726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.553187][ T8726] ? do_syscall_64+0x26/0x680 [ 70.557853][ T8726] __x64_sys_sendmsg+0x78/0xb0 [ 70.562777][ T8726] do_syscall_64+0xfd/0x680 [ 70.567264][ T8726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.573141][ T8726] RIP: 0033:0x459279 [ 70.577034][ T8726] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.596889][ T8726] RSP: 002b:00007f38879d7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.605311][ T8726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 70.613371][ T8726] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 70.621338][ T8726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 70.629489][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38879d86d4 [ 70.637467][ T8726] R13: 00000000004c6cdf R14: 00000000004dbb08 R15: 00000000ffffffff [ 70.645733][ T8726] [ 70.648047][ T8726] Allocated by task 8372: [ 70.652366][ T8726] save_stack+0x23/0x90 [ 70.656513][ T8726] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 70.662140][ T8726] kasan_kmalloc+0x9/0x10 [ 70.666464][ T8726] __kmalloc_node_track_caller+0x4e/0x70 [ 70.672091][ T8726] __kmalloc_reserve.isra.0+0x40/0xf0 [ 70.677473][ T8726] __alloc_skb+0x10b/0x5e0 [ 70.681873][ T8726] alloc_skb_with_frags+0x93/0x580 [ 70.686970][ T8726] sock_alloc_send_pskb+0x72d/0x8a0 [ 70.692160][ T8726] unix_dgram_sendmsg+0x3de/0x11e0 [ 70.697287][ T8726] sock_sendmsg+0xd7/0x130 [ 70.701792][ T8726] __sys_sendto+0x262/0x380 [ 70.706282][ T8726] __x64_sys_sendto+0xe1/0x1a0 [ 70.711039][ T8726] do_syscall_64+0xfd/0x680 [ 70.715546][ T8726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.721417][ T8726] [ 70.724459][ T8726] Freed by task 3880: [ 70.728438][ T8726] save_stack+0x23/0x90 [ 70.732576][ T8726] __kasan_slab_free+0x102/0x150 [ 70.737501][ T8726] kasan_slab_free+0xe/0x10 [ 70.741991][ T8726] kfree+0xcf/0x220 [ 70.745809][ T8726] skb_free_head+0x93/0xb0 [ 70.751535][ T8726] skb_release_data+0x42d/0x7c0 [ 70.756377][ T8726] skb_release_all+0x4d/0x60 [ 70.761025][ T8726] consume_skb+0xe2/0x380 [ 70.765339][ T8726] skb_free_datagram+0x1b/0x100 [ 70.770183][ T8726] unix_dgram_recvmsg+0x893/0xee0 [ 70.775189][ T8726] sock_recvmsg+0xce/0x110 [ 70.779597][ T8726] __sys_recvfrom+0x1ff/0x350 [ 70.784278][ T8726] __x64_sys_recvfrom+0xe1/0x1a0 [ 70.789221][ T8726] do_syscall_64+0xfd/0x680 [ 70.793707][ T8726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.799589][ T8726] [ 70.801919][ T8726] The buggy address belongs to the object at ffff888093cca280 [ 70.801919][ T8726] which belongs to the cache kmalloc-512 of size 512 [ 70.815959][ T8726] The buggy address is located 64 bytes to the right of [ 70.815959][ T8726] 512-byte region [ffff888093cca280, ffff888093cca480) [ 70.829639][ T8726] The buggy address belongs to the page: [ 70.835255][ T8726] page:ffffea00024f3280 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0x0 [ 70.844440][ T8726] flags: 0x1fffc0000000200(slab) [ 70.849373][ T8726] raw: 01fffc0000000200 ffffea00023e6908 ffffea0002636448 ffff8880aa400940 [ 70.857960][ T8726] raw: 0000000000000000 ffff888093cca000 0000000100000006 0000000000000000 [ 70.866524][ T8726] page dumped because: kasan: bad access detected [ 70.872917][ T8726] [ 70.875236][ T8726] Memory state around the buggy address: [ 70.880862][ T8726] ffff888093cca380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.888900][ T8726] ffff888093cca400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.896958][ T8726] >ffff888093cca480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.905174][ T8726] ^ [ 70.911698][ T8726] ffff888093cca500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.919773][ T8726] ffff888093cca580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.927812][ T8726] ================================================================== [ 70.935850][ T8726] Disabling lock debugging due to kernel taint [ 70.941977][ T8726] Kernel panic - not syncing: panic_on_warn set ... [ 70.948561][ T8726] CPU: 0 PID: 8726 Comm: syz-executor.0 Tainted: G B 5.2.0-rc1+ #1 [ 70.957767][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.967885][ T8726] Call Trace: [ 70.971161][ T8726] dump_stack+0x172/0x1f0 [ 70.975504][ T8726] panic+0x2cb/0x744 [ 70.979379][ T8726] ? __warn_printk+0xf3/0xf3 [ 70.984044][ T8726] ? lock_downgrade+0x880/0x880 [ 70.988876][ T8726] ? __lock_acquire+0x3ba2/0x5490 [ 70.993881][ T8726] ? trace_hardirqs_off+0x62/0x220 [ 70.998979][ T8726] ? trace_hardirqs_off+0x59/0x220 [ 71.004067][ T8726] ? __lock_acquire+0x3ba2/0x5490 [ 71.009093][ T8726] end_report+0x47/0x4f [ 71.013224][ T8726] ? __lock_acquire+0x3ba2/0x5490 [ 71.018233][ T8726] __kasan_report.cold+0xe/0x40 [ 71.023072][ T8726] ? __lock_acquire+0x3ba2/0x5490 [ 71.028075][ T8726] kasan_report+0x12/0x20 [ 71.032383][ T8726] __asan_report_load8_noabort+0x14/0x20 [ 71.037996][ T8726] __lock_acquire+0x3ba2/0x5490 [ 71.042845][ T8726] ? sock_diag_rcv+0x2b/0x40 [ 71.047413][ T8726] ? netlink_unicast+0x531/0x710 [ 71.052339][ T8726] ? netlink_sendmsg+0x8ae/0xd70 [ 71.057351][ T8726] ? sock_sendmsg+0xd7/0x130 [ 71.061917][ T8726] ? ___sys_sendmsg+0x803/0x920 [ 71.066745][ T8726] ? __sys_sendmsg+0x105/0x1d0 [ 71.071832][ T8726] ? __x64_sys_sendmsg+0x78/0xb0 [ 71.076839][ T8726] ? do_syscall_64+0xfd/0x680 [ 71.081581][ T8726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.087982][ T8726] ? mark_held_locks+0xf0/0xf0 [ 71.092722][ T8726] ? mark_held_locks+0xf0/0xf0 [ 71.097465][ T8726] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 71.103072][ T8726] ? find_held_lock+0x35/0x130 [ 71.107824][ T8726] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 71.113437][ T8726] lock_acquire+0x16f/0x3f0 [ 71.117928][ T8726] ? rhashtable_walk_enter+0xf9/0x390 [ 71.123280][ T8726] _raw_spin_lock+0x2f/0x40 [ 71.127781][ T8726] ? rhashtable_walk_enter+0xf9/0x390 [ 71.133132][ T8726] rhashtable_walk_enter+0xf9/0x390 [ 71.138315][ T8726] __tipc_dump_start+0x1fa/0x3c0 [ 71.143239][ T8726] tipc_dump_start+0x70/0x90 [ 71.147811][ T8726] __netlink_dump_start+0x4f8/0x7d0 [ 71.153089][ T8726] ? __tipc_dump_start+0x3c0/0x3c0 [ 71.158382][ T8726] tipc_sock_diag_handler_dump+0x1d9/0x270 [ 71.164167][ T8726] ? __tipc_diag_gen_cookie+0x90/0x90 [ 71.169520][ T8726] ? preempt_schedule+0x4b/0x60 [ 71.174347][ T8726] ? __tipc_dump_start+0x3c0/0x3c0 [ 71.179436][ T8726] ? tipc_unregister_sysctl+0x20/0x20 [ 71.184786][ T8726] ? tipc_ioctl+0x2e0/0x2e0 [ 71.189269][ T8726] sock_diag_rcv_msg+0x319/0x410 [ 71.194190][ T8726] netlink_rcv_skb+0x177/0x450 [ 71.199017][ T8726] ? sock_diag_bind+0x80/0x80 [ 71.203670][ T8726] ? netlink_ack+0xb50/0xb50 [ 71.208253][ T8726] ? kasan_check_read+0x11/0x20 [ 71.213092][ T8726] ? netlink_deliver_tap+0x254/0xbf0 [ 71.218355][ T8726] sock_diag_rcv+0x2b/0x40 [ 71.222761][ T8726] netlink_unicast+0x531/0x710 [ 71.227508][ T8726] ? netlink_attachskb+0x770/0x770 [ 71.232598][ T8726] ? _copy_from_iter_full+0x25d/0x8c0 [ 71.237950][ T8726] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 71.243649][ T8726] ? __check_object_size+0x3d/0x42f [ 71.248827][ T8726] netlink_sendmsg+0x8ae/0xd70 [ 71.254005][ T8726] ? netlink_unicast+0x710/0x710 [ 71.258932][ T8726] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 71.264467][ T8726] ? apparmor_socket_sendmsg+0x2a/0x30 [ 71.269907][ T8726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.276124][ T8726] ? security_socket_sendmsg+0x8d/0xc0 [ 71.281647][ T8726] ? netlink_unicast+0x710/0x710 [ 71.286565][ T8726] sock_sendmsg+0xd7/0x130 [ 71.290971][ T8726] ___sys_sendmsg+0x803/0x920 [ 71.295637][ T8726] ? copy_msghdr_from_user+0x430/0x430 [ 71.301079][ T8726] ? kasan_check_read+0x11/0x20 [ 71.305994][ T8726] ? __fget+0x381/0x550 [ 71.310151][ T8726] ? ksys_dup3+0x3e0/0x3e0 [ 71.314567][ T8726] ? lock_downgrade+0x880/0x880 [ 71.319396][ T8726] ? __fget_light+0x1a9/0x230 [ 71.324050][ T8726] ? __fdget+0x1b/0x20 [ 71.328097][ T8726] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 71.334319][ T8726] __sys_sendmsg+0x105/0x1d0 [ 71.338889][ T8726] ? __ia32_sys_shutdown+0x80/0x80 [ 71.343985][ T8726] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 71.349420][ T8726] ? do_syscall_64+0x26/0x680 [ 71.354084][ T8726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.360127][ T8726] ? do_syscall_64+0x26/0x680 [ 71.364808][ T8726] __x64_sys_sendmsg+0x78/0xb0 [ 71.369638][ T8726] do_syscall_64+0xfd/0x680 [ 71.374133][ T8726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.380001][ T8726] RIP: 0033:0x459279 [ 71.383876][ T8726] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.403553][ T8726] RSP: 002b:00007f38879d7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.411950][ T8726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 71.419909][ T8726] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 71.427857][ T8726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 71.435814][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38879d86d4 [ 71.443774][ T8726] R13: 00000000004c6cdf R14: 00000000004dbb08 R15: 00000000ffffffff [ 71.452968][ T8726] Kernel Offset: disabled [ 71.457294][ T8726] Rebooting in 86400 seconds..