[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.388071][ T24] audit: type=1800 audit(1561526460.073:25): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.433843][ T24] audit: type=1800 audit(1561526460.073:26): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.481163][ T24] audit: type=1800 audit(1561526460.083:27): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.196' (ECDSA) to the list of known hosts. 2019/06/26 05:37:03 parsed 1 programs 2019/06/26 05:37:05 executed programs: 0 syzkaller login: [ 1030.803532][ T9131] IPVS: ftp: loaded support on port[0] = 21 [ 1030.803542][ T9132] IPVS: ftp: loaded support on port[0] = 21 [ 1030.893994][ T9135] IPVS: ftp: loaded support on port[0] = 21 [ 1030.907697][ T9136] IPVS: ftp: loaded support on port[0] = 21 [ 1030.933365][ T9139] IPVS: ftp: loaded support on port[0] = 21 [ 1030.987069][ T9140] IPVS: ftp: loaded support on port[0] = 21 [ 1031.074608][ T9132] chnl_net:caif_netlink_parms(): no params data found [ 1031.097738][ T9131] chnl_net:caif_netlink_parms(): no params data found [ 1031.175174][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.183540][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.191902][ T9132] device bridge_slave_0 entered promiscuous mode [ 1031.226649][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.233720][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.242410][ T9132] device bridge_slave_1 entered promiscuous mode [ 1031.250528][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.258455][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.267327][ T9131] device bridge_slave_0 entered promiscuous mode [ 1031.275397][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.282558][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.290439][ T9131] device bridge_slave_1 entered promiscuous mode [ 1031.311271][ T9131] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1031.343999][ T9131] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1031.364775][ T9132] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1031.373577][ T9136] chnl_net:caif_netlink_parms(): no params data found [ 1031.404376][ T9131] team0: Port device team_slave_0 added [ 1031.411538][ T9131] team0: Port device team_slave_1 added [ 1031.418786][ T9132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1031.467368][ T9135] chnl_net:caif_netlink_parms(): no params data found [ 1031.516046][ T9132] team0: Port device team_slave_0 added [ 1031.568136][ T9131] device hsr_slave_0 entered promiscuous mode [ 1031.626072][ T9131] device hsr_slave_1 entered promiscuous mode [ 1031.685064][ T9132] team0: Port device team_slave_1 added [ 1031.695234][ T9140] chnl_net:caif_netlink_parms(): no params data found [ 1031.707252][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 1031.731028][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.738934][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.746983][ T9136] device bridge_slave_0 entered promiscuous mode [ 1031.778553][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.786763][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.794758][ T9136] device bridge_slave_1 entered promiscuous mode [ 1031.817268][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.824529][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.833088][ T9135] device bridge_slave_0 entered promiscuous mode [ 1031.927665][ T9132] device hsr_slave_0 entered promiscuous mode [ 1031.965954][ T9132] device hsr_slave_1 entered promiscuous mode [ 1032.048313][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.055891][ T9131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.064044][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.071217][ T9131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.085265][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.092826][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.100919][ T9135] device bridge_slave_1 entered promiscuous mode [ 1032.107987][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.115060][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.127151][ T9139] device bridge_slave_0 entered promiscuous mode [ 1032.134403][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.141915][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.149717][ T9140] device bridge_slave_0 entered promiscuous mode [ 1032.159564][ T9142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.168547][ T9142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.193009][ T9136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1032.206769][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.213849][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.222043][ T9139] device bridge_slave_1 entered promiscuous mode [ 1032.229587][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.237435][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.245232][ T9140] device bridge_slave_1 entered promiscuous mode [ 1032.257510][ T9136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1032.275960][ T9135] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1032.287759][ T9135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1032.339044][ T9136] team0: Port device team_slave_0 added [ 1032.346694][ T9139] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1032.359875][ T9140] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1032.373270][ T9140] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1032.386488][ T9135] team0: Port device team_slave_0 added [ 1032.396835][ T9135] team0: Port device team_slave_1 added [ 1032.403637][ T9136] team0: Port device team_slave_1 added [ 1032.410888][ T9139] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1032.434577][ T9140] team0: Port device team_slave_0 added [ 1032.448836][ T9139] team0: Port device team_slave_0 added [ 1032.457955][ T9140] team0: Port device team_slave_1 added [ 1032.473773][ T9139] team0: Port device team_slave_1 added [ 1032.547856][ T9135] device hsr_slave_0 entered promiscuous mode [ 1032.586822][ T9135] device hsr_slave_1 entered promiscuous mode [ 1032.669167][ T9136] device hsr_slave_0 entered promiscuous mode [ 1032.736203][ T9136] device hsr_slave_1 entered promiscuous mode [ 1032.840039][ T9140] device hsr_slave_0 entered promiscuous mode [ 1032.905935][ T9140] device hsr_slave_1 entered promiscuous mode [ 1032.965004][ T9131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.031213][ T9139] device hsr_slave_0 entered promiscuous mode [ 1033.086067][ T9139] device hsr_slave_1 entered promiscuous mode [ 1033.245017][ T9131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.292123][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1033.303382][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1033.335895][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1033.344822][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1033.358457][ T9142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.365576][ T9142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.395723][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.407399][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1033.416390][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1033.424788][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.431893][ T9145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.440337][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1033.455906][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1033.492077][ T9132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.508467][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1033.518431][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1033.527170][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1033.534906][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1033.543413][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1033.571960][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1033.580880][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1033.589821][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.596929][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.604809][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1033.613478][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1033.621823][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.628920][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.636555][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1033.648507][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1033.657970][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1033.675531][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1033.684271][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1033.704691][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.737506][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.747919][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1033.760406][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1033.769310][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1033.777813][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1033.785927][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1033.793487][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1033.801393][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1033.810231][ T9142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1033.824821][ T9131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1033.837439][ T9131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1033.860791][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1033.868899][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1033.877668][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1033.889132][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1033.897989][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1033.913980][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.924916][ T9135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.941585][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.967676][ T9136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.975044][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1033.984621][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1033.993540][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1034.001916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1034.015036][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1034.023057][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1034.056843][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.067776][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.077091][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.085503][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.092567][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.101256][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1034.109840][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1034.118378][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.125432][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.133057][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.141805][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1034.150293][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1034.158115][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1034.166350][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.174873][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.183471][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.190591][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.200461][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1034.211986][ T9131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.222772][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.247567][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1034.260172][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1034.268364][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1034.278096][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1034.289835][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1034.298792][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1034.308053][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.315113][ T9152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.323103][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.331703][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.340421][ T9152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.347531][ T9152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.355245][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1034.363871][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1034.372417][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.379505][ T9152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.421885][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1034.430381][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1034.441433][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1034.453807][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1034.462354][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1034.471966][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1034.480453][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.489105][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1034.497886][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.506935][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.515193][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.522305][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.530003][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1034.539061][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1034.548253][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.557216][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1034.574276][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.616282][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1034.624234][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1034.643147][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1034.653609][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1034.664563][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1034.673573][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1034.682594][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1034.691442][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1034.700008][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.707140][ T9152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.715163][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.724295][ T9152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1034.735879][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1034.744624][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1034.757303][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1034.784465][ T9136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1034.806223][ T9136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1034.841746][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1034.856311][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1034.870467][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1034.880379][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1034.889532][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1034.898120][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1034.906601][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1034.915119][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1034.923870][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1034.932191][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1034.940937][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1034.949504][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1034.958154][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1034.969922][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1034.979735][ T9147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1035.003923][ T9140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1035.022994][ T9140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1035.050269][ T9139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1035.064636][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1035.099600][ T9135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.116139][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1035.124606][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1035.157166][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1035.174026][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1035.212186][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1035.220990][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1035.254289][ T9136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.276314][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1035.307169][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.320523][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/26 05:37:10 executed programs: 17 2019/06/26 05:37:15 executed programs: 236 2019/06/26 05:37:20 executed programs: 439 2019/06/26 05:37:25 executed programs: 648 2019/06/26 05:37:30 executed programs: 868 2019/06/26 05:37:35 executed programs: 1095 2019/06/26 05:37:40 executed programs: 1307 2019/06/26 05:37:45 executed programs: 1521 2019/06/26 05:37:50 executed programs: 1715 [ 1080.765788][T12373] ================================================================== [ 1080.774479][T12373] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 1080.781795][T12373] Read of size 4 at addr ffff88808f93f098 by task syz-executor.4/12373 [ 1080.790224][T12373] [ 1080.792601][T12373] CPU: 1 PID: 12373 Comm: syz-executor.4 Not tainted 5.2.0-rc5+ #62 [ 1080.800771][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.810909][T12373] Call Trace: [ 1080.814276][T12373] dump_stack+0x172/0x1f0 [ 1080.818836][T12373] ? sk_psock_unlink+0x3dd/0x4b0 [ 1080.823927][T12373] ? tcp_check_oom+0x560/0x560 [ 1080.829015][T12373] print_address_description.cold+0x7c/0x20d [ 1080.835098][T12373] ? sk_psock_unlink+0x3dd/0x4b0 [ 1080.840390][T12373] ? sk_psock_unlink+0x3dd/0x4b0 [ 1080.845648][T12373] ? tcp_check_oom+0x560/0x560 [ 1080.850598][T12373] __kasan_report.cold+0x1b/0x40 [ 1080.855890][T12373] ? sk_psock_unlink+0x3dd/0x4b0 [ 1080.860963][T12373] kasan_report+0x12/0x20 [ 1080.865643][T12373] __asan_report_load4_noabort+0x14/0x20 [ 1080.871495][T12373] sk_psock_unlink+0x3dd/0x4b0 [ 1080.876743][T12373] ? sk_psock_link_pop+0x186/0x1f0 [ 1080.882547][T12373] ? tcp_check_oom+0x560/0x560 [ 1080.887460][T12373] tcp_bpf_remove+0x21/0x50 [ 1080.891991][T12373] tcp_bpf_close+0x130/0x390 [ 1080.896878][T12373] tls_sk_proto_close+0x2f0/0x6d0 [ 1080.896906][T12373] ? tcp_bpf_stream_read+0x270/0x270 [ 1080.896921][T12373] ? wait_on_pending_writer+0x3f0/0x3f0 2019/06/26 05:37:55 executed programs: 1921 [ 1080.896947][T12373] ? ip_mc_drop_socket+0x211/0x270 [ 1080.896968][T12373] inet_release+0xe0/0x1f0 [ 1080.896990][T12373] inet6_release+0x53/0x80 [ 1080.897011][T12373] __sock_release+0xce/0x2a0 [ 1080.897023][T12373] sock_close+0x1b/0x30 [ 1080.897043][T12373] __fput+0x2ff/0x890 [ 1080.897058][T12373] ? __sock_release+0x2a0/0x2a0 [ 1080.947997][T12373] ____fput+0x16/0x20 [ 1080.952029][T12373] task_work_run+0x145/0x1c0 [ 1080.956934][T12373] exit_to_usermode_loop+0x273/0x2c0 [ 1080.962259][T12373] do_syscall_64+0x58e/0x680 [ 1080.966899][T12373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1080.972850][T12373] RIP: 0033:0x4131e0 [ 1080.976952][T12373] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ad 30 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1080.997022][T12373] RSP: 002b:00007ffc6d0c5c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1081.005663][T12373] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004131e0 [ 1081.013835][T12373] RDX: 0000001b2ed20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1081.022016][T12373] RBP: 0000000000000001 R08: 0000000000000009 R09: ffffffffffffffff [ 1081.030109][T12373] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000761208 [ 1081.038360][T12373] R13: 0000000000000005 R14: 0000000000000000 R15: ffffffffffffffff [ 1081.046380][T12373] [ 1081.048774][T12373] Allocated by task 12373: [ 1081.053223][T12373] save_stack+0x23/0x90 [ 1081.057404][T12373] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1081.063232][T12373] kasan_kmalloc+0x9/0x10 [ 1081.063250][T12373] kmem_cache_alloc_trace+0x151/0x750 [ 1081.073321][T12373] sock_map_alloc+0x1b9/0x3f0 [ 1081.078299][T12373] __do_sys_bpf+0x730/0x43d0 [ 1081.083138][T12373] __x64_sys_bpf+0x73/0xb0 [ 1081.083156][T12373] do_syscall_64+0xfd/0x680 [ 1081.083172][T12373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1081.083177][T12373] [ 1081.083183][T12373] Freed by task 9424: [ 1081.083204][T12373] save_stack+0x23/0x90 [ 1081.108875][T12373] __kasan_slab_free+0x102/0x150 [ 1081.113839][T12373] kasan_slab_free+0xe/0x10 [ 1081.118379][T12373] kfree+0xcf/0x220 [ 1081.122211][T12373] sock_map_free+0x22a/0x310 [ 1081.126827][T12373] bpf_map_free_deferred+0xb4/0xe0 [ 1081.132117][T12373] process_one_work+0x989/0x1790 [ 1081.137279][T12373] worker_thread+0x98/0xe40 [ 1081.141980][T12373] kthread+0x354/0x420 [ 1081.146241][T12373] ret_from_fork+0x24/0x30 [ 1081.151067][T12373] [ 1081.153417][T12373] The buggy address belongs to the object at ffff88808f93f080 [ 1081.153417][T12373] which belongs to the cache kmalloc-512 of size 512 [ 1081.167487][T12373] The buggy address is located 24 bytes inside of [ 1081.167487][T12373] 512-byte region [ffff88808f93f080, ffff88808f93f280) [ 1081.180732][T12373] The buggy address belongs to the page: [ 1081.186399][T12373] page:ffffea00023e4fc0 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0xffff88808f93fd00 [ 1081.197106][T12373] flags: 0x1fffc0000000200(slab) [ 1081.202075][T12373] raw: 01fffc0000000200 ffffea0002255408 ffffea00026d7fc8 ffff8880aa400940 [ 1081.210963][T12373] raw: ffff88808f93fd00 ffff88808f93f080 0000000100000005 0000000000000000 [ 1081.219728][T12373] page dumped because: kasan: bad access detected [ 1081.219733][T12373] [ 1081.219738][T12373] Memory state around the buggy address: [ 1081.219750][T12373] ffff88808f93ef80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1081.219760][T12373] ffff88808f93f000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1081.219769][T12373] >ffff88808f93f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1081.219775][T12373] ^ [ 1081.219785][T12373] ffff88808f93f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1081.219800][T12373] ffff88808f93f180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1081.280412][T12373] ================================================================== [ 1081.288505][T12373] Disabling lock debugging due to kernel taint [ 1081.309434][T12373] Kernel panic - not syncing: panic_on_warn set ... [ 1081.316383][T12373] CPU: 1 PID: 12373 Comm: syz-executor.4 Tainted: G B 5.2.0-rc5+ #62 [ 1081.325955][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.329400][ T3879] kobject: 'loop5' (000000003726d4dc): kobject_uevent_env [ 1081.336138][T12373] Call Trace: [ 1081.336170][T12373] dump_stack+0x172/0x1f0 [ 1081.336188][T12373] ? tcp_check_oom+0x560/0x560 [ 1081.336230][T12373] panic+0x2cb/0x744 [ 1081.336253][T12373] ? __warn_printk+0xf3/0xf3 [ 1081.344360][ T3879] kobject: 'loop5' (000000003726d4dc): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1081.346697][T12373] ? sk_psock_unlink+0x3dd/0x4b0 [ 1081.346713][T12373] ? tcp_check_oom+0x560/0x560 [ 1081.346728][T12373] ? preempt_schedule+0x4b/0x60 [ 1081.346745][T12373] ? ___preempt_schedule+0x16/0x18 [ 1081.346767][T12373] ? trace_hardirqs_on+0x5e/0x220 [ 1081.400685][T12373] ? sk_psock_unlink+0x3dd/0x4b0 [ 1081.406055][T12373] ? tcp_check_oom+0x560/0x560 [ 1081.411186][T12373] end_report+0x47/0x4f [ 1081.415589][T12373] ? sk_psock_unlink+0x3dd/0x4b0 [ 1081.420760][T12373] __kasan_report.cold+0xe/0x40 [ 1081.425721][T12373] ? sk_psock_unlink+0x3dd/0x4b0 [ 1081.431028][T12373] kasan_report+0x12/0x20 [ 1081.435653][T12373] __asan_report_load4_noabort+0x14/0x20 [ 1081.441308][T12373] sk_psock_unlink+0x3dd/0x4b0 [ 1081.446076][T12373] ? sk_psock_link_pop+0x186/0x1f0 [ 1081.451388][T12373] ? tcp_check_oom+0x560/0x560 [ 1081.456148][T12373] tcp_bpf_remove+0x21/0x50 [ 1081.460801][T12373] tcp_bpf_close+0x130/0x390 [ 1081.465708][T12373] tls_sk_proto_close+0x2f0/0x6d0 [ 1081.470961][T12373] ? tcp_bpf_stream_read+0x270/0x270 [ 1081.476370][T12373] ? wait_on_pending_writer+0x3f0/0x3f0 [ 1081.482610][T12373] ? ip_mc_drop_socket+0x211/0x270 [ 1081.487800][T12373] inet_release+0xe0/0x1f0 [ 1081.492228][T12373] inet6_release+0x53/0x80 [ 1081.496732][T12373] __sock_release+0xce/0x2a0 [ 1081.501340][T12373] sock_close+0x1b/0x30 [ 1081.505505][T12373] __fput+0x2ff/0x890 [ 1081.509705][T12373] ? __sock_release+0x2a0/0x2a0 [ 1081.514711][T12373] ____fput+0x16/0x20 [ 1081.518720][T12373] task_work_run+0x145/0x1c0 [ 1081.523314][T12373] exit_to_usermode_loop+0x273/0x2c0 [ 1081.528596][T12373] do_syscall_64+0x58e/0x680 [ 1081.533431][T12373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1081.539318][T12373] RIP: 0033:0x4131e0 [ 1081.543346][T12373] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ad 30 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1081.563878][T12373] RSP: 002b:00007ffc6d0c5c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1081.572555][T12373] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004131e0 [ 1081.580647][T12373] RDX: 0000001b2ed20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1081.590497][T12373] RBP: 0000000000000001 R08: 0000000000000009 R09: ffffffffffffffff [ 1081.598463][T12373] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000761208 [ 1081.606431][T12373] R13: 0000000000000005 R14: 0000000000000000 R15: ffffffffffffffff [ 1081.616708][T12373] Kernel Offset: disabled [ 1081.621058][T12373] Rebooting in 86400 seconds..