[ 36.059801][ T26] audit: type=1800 audit(1555731858.173:27): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.091908][ T26] audit: type=1800 audit(1555731858.183:28): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.935616][ T26] audit: type=1800 audit(1555731859.113:29): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.956127][ T26] audit: type=1800 audit(1555731859.113:30): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.255' (ECDSA) to the list of known hosts. 2019/04/20 03:45:09 parsed 1 programs 2019/04/20 03:45:12 executed programs: 0 syzkaller login: [ 90.037375][ T7726] IPVS: ftp: loaded support on port[0] = 21 [ 90.050088][ T7724] IPVS: ftp: loaded support on port[0] = 21 [ 90.051814][ T7729] IPVS: ftp: loaded support on port[0] = 21 [ 90.060138][ T7727] IPVS: ftp: loaded support on port[0] = 21 [ 90.085123][ T7731] IPVS: ftp: loaded support on port[0] = 21 [ 90.117619][ T7732] IPVS: ftp: loaded support on port[0] = 21 [ 90.436154][ T7727] chnl_net:caif_netlink_parms(): no params data found [ 90.452436][ T7726] chnl_net:caif_netlink_parms(): no params data found [ 90.468364][ T7729] chnl_net:caif_netlink_parms(): no params data found [ 90.494990][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 90.529820][ T7731] chnl_net:caif_netlink_parms(): no params data found [ 90.585907][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 90.672175][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.680120][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.688367][ T7729] device bridge_slave_0 entered promiscuous mode [ 90.701515][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.708816][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.716736][ T7729] device bridge_slave_1 entered promiscuous mode [ 90.724709][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.731797][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.739866][ T7724] device bridge_slave_0 entered promiscuous mode [ 90.760283][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.767467][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.775777][ T7727] device bridge_slave_0 entered promiscuous mode [ 90.783860][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.790965][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.800280][ T7726] device bridge_slave_0 entered promiscuous mode [ 90.811648][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.818851][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.826888][ T7726] device bridge_slave_1 entered promiscuous mode [ 90.839476][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.848031][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.856705][ T7724] device bridge_slave_1 entered promiscuous mode [ 90.864215][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.871832][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.880238][ T7731] device bridge_slave_0 entered promiscuous mode [ 90.889147][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.896848][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.905253][ T7727] device bridge_slave_1 entered promiscuous mode [ 90.943726][ T7729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.952219][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.959510][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.968126][ T7731] device bridge_slave_1 entered promiscuous mode [ 91.004662][ T7729] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.020108][ T7727] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.030946][ T7727] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.045945][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.053508][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.061391][ T7732] device bridge_slave_0 entered promiscuous mode [ 91.070673][ T7726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.081988][ T7726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.092146][ T7724] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.115691][ T7729] team0: Port device team_slave_0 added [ 91.123268][ T7731] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.134263][ T7729] team0: Port device team_slave_1 added [ 91.140454][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.148243][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.156468][ T7732] device bridge_slave_1 entered promiscuous mode [ 91.177178][ T7724] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.190809][ T7731] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.238249][ T7727] team0: Port device team_slave_0 added [ 91.250299][ T7726] team0: Port device team_slave_0 added [ 91.258221][ T7726] team0: Port device team_slave_1 added [ 91.265675][ T7732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.280391][ T7732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.335266][ T7729] device hsr_slave_0 entered promiscuous mode [ 91.392866][ T7729] device hsr_slave_1 entered promiscuous mode [ 91.464194][ T7727] team0: Port device team_slave_1 added [ 91.471455][ T7731] team0: Port device team_slave_0 added [ 91.479696][ T7731] team0: Port device team_slave_1 added [ 91.486833][ T7724] team0: Port device team_slave_0 added [ 91.516401][ T7724] team0: Port device team_slave_1 added [ 91.526952][ T7732] team0: Port device team_slave_0 added [ 91.534309][ T7732] team0: Port device team_slave_1 added [ 91.585497][ T7726] device hsr_slave_0 entered promiscuous mode [ 91.642648][ T7726] device hsr_slave_1 entered promiscuous mode [ 91.754091][ T7727] device hsr_slave_0 entered promiscuous mode [ 91.812623][ T7727] device hsr_slave_1 entered promiscuous mode [ 91.965413][ T7724] device hsr_slave_0 entered promiscuous mode [ 92.032669][ T7724] device hsr_slave_1 entered promiscuous mode [ 92.144198][ T7731] device hsr_slave_0 entered promiscuous mode [ 92.202682][ T7731] device hsr_slave_1 entered promiscuous mode [ 92.304374][ T7732] device hsr_slave_0 entered promiscuous mode [ 92.362600][ T7732] device hsr_slave_1 entered promiscuous mode [ 92.525753][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.554437][ T7726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.565466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.574722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.584736][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.608936][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.617771][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.636628][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.670430][ T7726] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.681461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.691552][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.702823][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.710056][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.718622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.727517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.736096][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.743215][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.750749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.759729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.768384][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.776911][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.785550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.794327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.802916][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.811228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.819794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.828228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.839640][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.854693][ T7729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.868199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.879241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.887710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.895615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.909106][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.926349][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.941244][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.950123][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.959070][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.966200][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.975869][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.984641][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.993153][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.000212][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.007891][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.016007][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.040788][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.057104][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.066268][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.075618][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.085661][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.094624][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.101686][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.109764][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.118712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.127644][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.136642][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.145393][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.152537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.160256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.169446][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.178287][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.186862][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.195920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.203043][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.211884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.245024][ T7731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.255736][ T7731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.268311][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.278683][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.287519][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.296106][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.305176][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.314008][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.322863][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.331188][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.339595][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.348821][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.357558][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.364688][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.373279][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.381890][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.393182][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.402098][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.410922][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.422164][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.430872][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.440048][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.449081][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.457537][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.479516][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.495011][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.503839][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.512020][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.522162][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.530479][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.538409][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.547366][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.556344][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.565075][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.573938][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.581621][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.589664][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.598211][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.614543][ T7724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.651534][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.674858][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.683469][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.692595][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.701076][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.708251][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.716250][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.725039][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.733586][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.740764][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.749636][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.772971][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.782214][ T7726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.804230][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.814038][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.823617][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.838387][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.848940][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.876709][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.889881][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.898856][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.915359][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.930664][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.958942][ T7727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.971046][ T7727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.994569][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.013462][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.054643][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.078951][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.097076][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.111191][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.120423][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.176011][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.197922][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.209883][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.217076][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.225114][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.245130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.268037][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.275175][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.283384][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.296941][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.327690][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.339291][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.364194][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.380352][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.404843][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.439391][ T7732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.471474][ T7732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.485764][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.506491][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.521051][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.536345][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.546519][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.555557][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.567202][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.595826][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/04/20 03:45:17 executed programs: 40 2019/04/20 03:45:22 executed programs: 335 [ 100.907724][ T9204] ================================================================== [ 100.916093][ T9204] BUG: KASAN: stack-out-of-bounds in __ip_options_echo+0x294/0x1120 [ 100.924097][ T9204] Write of size 69 at addr ffff888096abf068 by task syz-executor.4/9204 [ 100.932427][ T9204] [ 100.934779][ T9204] CPU: 0 PID: 9204 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #77 [ 100.942677][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.952751][ T9204] Call Trace: [ 100.956063][ T9204] dump_stack+0x172/0x1f0 [ 100.960410][ T9204] ? __ip_options_echo+0x294/0x1120 [ 100.965635][ T9204] print_address_description.cold+0x7c/0x20d [ 100.965677][ T9204] ? __ip_options_echo+0x294/0x1120 [ 100.965689][ T9204] ? __ip_options_echo+0x294/0x1120 [ 100.965700][ T9204] kasan_report.cold+0x1b/0x40 [ 100.965715][ T9204] ? find_held_lock+0x1/0x130 [ 100.965725][ T9204] ? __ip_options_echo+0x294/0x1120 [ 100.965740][ T9204] check_memory_region+0x123/0x190 [ 100.965757][ T9204] memcpy+0x38/0x50 [ 100.965771][ T9204] __ip_options_echo+0x294/0x1120 [ 100.965794][ T9204] __icmp_send+0x725/0x1400 [ 100.965822][ T9204] ? icmp_route_lookup.constprop.0+0x1570/0x1570 [ 100.965835][ T9204] ? __lock_acquire+0x548/0x3fb0 [ 101.026957][ T9204] ? __lock_acquire+0x548/0x3fb0 [ 101.031933][ T9204] ? ipv4_link_failure+0x210/0x550 [ 101.037077][ T9204] ? find_held_lock+0x35/0x130 [ 101.041873][ T9204] ? ipv4_link_failure+0x210/0x550 [ 101.047022][ T9204] ? lock_downgrade+0x880/0x880 [ 101.051895][ T9204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.058175][ T9204] ipv4_link_failure+0x29f/0x550 [ 101.063144][ T9204] ? ipv4_link_failure+0x29f/0x550 [ 101.068280][ T9204] ? update_or_create_fnhe+0x16d0/0x16d0 [ 101.073957][ T9204] ? kasan_check_read+0x11/0x20 [ 101.078845][ T9204] ? update_or_create_fnhe+0x16d0/0x16d0 [ 101.084507][ T9204] vti6_tnl_xmit+0x10d4/0x1c0c [ 101.089304][ T9204] ? __lock_acquire+0x548/0x3fb0 [ 101.094293][ T9204] ? vti6_rcv+0x970/0x970 [ 101.098682][ T9204] dev_hard_start_xmit+0x1b2/0x980 [ 101.103833][ T9204] __dev_queue_xmit+0x271d/0x3060 [ 101.108888][ T9204] ? __lock_acquire+0x548/0x3fb0 [ 101.113868][ T9204] ? netdev_pick_tx+0x300/0x300 [ 101.118755][ T9204] ? mark_held_locks+0xf0/0xf0 [ 101.123552][ T9204] ? lockdep_hardirqs_on+0x418/0x5d0 [ 101.128868][ T9204] ? __local_bh_enable_ip+0x15a/0x270 [ 101.134269][ T9204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.140541][ T9204] dev_queue_xmit+0x18/0x20 [ 101.145075][ T9204] ? dev_queue_xmit+0x18/0x20 [ 101.145090][ T9204] neigh_direct_output+0x16/0x20 [ 101.145105][ T9204] ip_finish_output2+0x949/0x1740 [ 101.145118][ T9204] ? ip_output+0x44b/0x670 [ 101.145134][ T9204] ? ip_copy_metadata+0xcb0/0xcb0 [ 101.145153][ T9204] ip_finish_output+0x73c/0xd50 [ 101.145163][ T9204] ? ip_finish_output+0x73c/0xd50 [ 101.145178][ T9204] ip_output+0x21f/0x670 [ 101.145193][ T9204] ? ip_mc_output+0xf70/0xf70 [ 101.145209][ T9204] ? ip_fragment.constprop.0+0x240/0x240 [ 101.145236][ T9204] ? kasan_check_read+0x11/0x20 [ 101.154873][ T9204] raw_sendmsg+0x1d2b/0x2f20 [ 101.154899][ T9204] ? compat_raw_getsockopt+0x100/0x100 [ 101.154922][ T9204] ? __switch_to_asm+0x34/0x70 [ 101.213467][ T9204] ? __switch_to_asm+0x40/0x70 [ 101.218260][ T9204] ? aa_profile_af_perm+0x320/0x320 [ 101.223492][ T9204] ? __schedule+0x81b/0x1cc0 [ 101.228115][ T9204] ? raw_bind+0x5d0/0x5d0 [ 101.232488][ T9204] ? ___might_sleep+0x163/0x280 [ 101.237382][ T9204] ? __might_sleep+0x95/0x190 [ 101.242100][ T9204] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 101.247768][ T9204] ? aa_sk_perm+0x288/0x880 [ 101.252305][ T9204] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 101.257896][ T9204] inet_sendmsg+0x147/0x5d0 [ 101.262427][ T9204] ? inet_sendmsg+0x147/0x5d0 [ 101.267140][ T9204] ? ipip_gro_receive+0x100/0x100 [ 101.272193][ T9204] sock_sendmsg+0xdd/0x130 [ 101.276648][ T9204] sock_write_iter+0x27c/0x3e0 [ 101.281454][ T9204] ? sock_sendmsg+0x130/0x130 [ 101.286172][ T9204] ? aa_path_link+0x460/0x460 [ 101.290876][ T9204] ? find_held_lock+0x35/0x130 [ 101.295668][ T9204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 101.301960][ T9204] ? iov_iter_init+0xee/0x220 [ 101.301981][ T9204] new_sync_write+0x4c7/0x760 [ 101.301998][ T9204] ? default_llseek+0x2e0/0x2e0 [ 101.302025][ T9204] ? common_file_perm+0x238/0x720 [ 101.321284][ T9204] ? __fget+0x381/0x550 [ 101.325487][ T9204] ? apparmor_file_permission+0x25/0x30 [ 101.331057][ T9204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.331076][ T9204] ? security_file_permission+0x94/0x380 [ 101.331102][ T9204] __vfs_write+0xe4/0x110 [ 101.347365][ T9204] vfs_write+0x20c/0x580 [ 101.351640][ T9204] ksys_write+0x14f/0x2d0 [ 101.355998][ T9204] ? __ia32_sys_read+0xb0/0xb0 [ 101.360794][ T9204] ? do_syscall_64+0x26/0x610 [ 101.365503][ T9204] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 101.365520][ T9204] ? do_syscall_64+0x26/0x610 [ 101.365539][ T9204] __x64_sys_write+0x73/0xb0 [ 101.365554][ T9204] do_syscall_64+0x103/0x610 [ 101.365569][ T9204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 101.365580][ T9204] RIP: 0033:0x458c29 [ 101.365595][ T9204] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 101.365601][ T9204] RSP: 002b:00007f293b44bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.365614][ T9204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 101.365621][ T9204] RDX: 0000000000000014 RSI: 00000000200002c0 RDI: 0000000000000003 [ 101.365628][ T9204] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 101.365636][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f293b44c6d4 [ 101.365644][ T9204] R13: 00000000004c8623 R14: 00000000004ded68 R15: 00000000ffffffff [ 101.365664][ T9204] [ 101.365669][ T9204] The buggy address belongs to the page: [ 101.365682][ T9204] page:ffffea00025aafc0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 101.365692][ T9204] flags: 0x1fffc0000000000() [ 101.365714][ T9204] raw: 01fffc0000000000 0000000000000000 ffffffff025a0101 0000000000000000 [ 101.495887][ T9204] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 101.504473][ T9204] page dumped because: kasan: bad access detected [ 101.510896][ T9204] [ 101.513222][ T9204] Memory state around the buggy address: [ 101.518856][ T9204] ffff888096abef80: 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 f2 [ 101.526926][ T9204] ffff888096abf000: f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.535003][ T9204] >ffff888096abf080: 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 101.543075][ T9204] ^ [ 101.547665][ T9204] ffff888096abf100: 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 00 [ 101.555739][ T9204] ffff888096abf180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.563803][ T9204] ================================================================== [ 101.571855][ T9204] Disabling lock debugging due to kernel taint [ 101.578112][ T9204] Kernel panic - not syncing: panic_on_warn set ... [ 101.584734][ T9204] CPU: 0 PID: 9204 Comm: syz-executor.4 Tainted: G B 5.1.0-rc5+ #77 [ 101.594203][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.604261][ T9204] Call Trace: [ 101.607549][ T9204] dump_stack+0x172/0x1f0 [ 101.611877][ T9204] panic+0x2cb/0x65c [ 101.616211][ T9204] ? __warn_printk+0xf3/0xf3 [ 101.620821][ T9204] ? trace_hardirqs_on+0x5e/0x230 [ 101.625845][ T9204] ? trace_hardirqs_on+0x5e/0x230 [ 101.630964][ T9204] ? __ip_options_echo+0x294/0x1120 [ 101.636177][ T9204] end_report+0x47/0x4f [ 101.640352][ T9204] ? __ip_options_echo+0x294/0x1120 [ 101.645545][ T9204] kasan_report.cold+0xe/0x40 [ 101.650226][ T9204] ? find_held_lock+0x1/0x130 [ 101.654895][ T9204] ? __ip_options_echo+0x294/0x1120 [ 101.660084][ T9204] check_memory_region+0x123/0x190 [ 101.665188][ T9204] memcpy+0x38/0x50 [ 101.668984][ T9204] __ip_options_echo+0x294/0x1120 [ 101.674012][ T9204] __icmp_send+0x725/0x1400 [ 101.678532][ T9204] ? icmp_route_lookup.constprop.0+0x1570/0x1570 [ 101.684879][ T9204] ? __lock_acquire+0x548/0x3fb0 [ 101.689841][ T9204] ? __lock_acquire+0x548/0x3fb0 [ 101.694793][ T9204] ? ipv4_link_failure+0x210/0x550 [ 101.699913][ T9204] ? find_held_lock+0x35/0x130 [ 101.704687][ T9204] ? ipv4_link_failure+0x210/0x550 [ 101.709814][ T9204] ? lock_downgrade+0x880/0x880 [ 101.714678][ T9204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.720942][ T9204] ipv4_link_failure+0x29f/0x550 [ 101.725899][ T9204] ? ipv4_link_failure+0x29f/0x550 [ 101.731031][ T9204] ? update_or_create_fnhe+0x16d0/0x16d0 [ 101.736681][ T9204] ? kasan_check_read+0x11/0x20 [ 101.741560][ T9204] ? update_or_create_fnhe+0x16d0/0x16d0 [ 101.747217][ T9204] vti6_tnl_xmit+0x10d4/0x1c0c [ 101.752009][ T9204] ? __lock_acquire+0x548/0x3fb0 [ 101.756965][ T9204] ? vti6_rcv+0x970/0x970 [ 101.761337][ T9204] dev_hard_start_xmit+0x1b2/0x980 [ 101.766833][ T9204] __dev_queue_xmit+0x271d/0x3060 [ 101.771883][ T9204] ? __lock_acquire+0x548/0x3fb0 [ 101.776843][ T9204] ? netdev_pick_tx+0x300/0x300 [ 101.781713][ T9204] ? mark_held_locks+0xf0/0xf0 [ 101.786500][ T9204] ? lockdep_hardirqs_on+0x418/0x5d0 [ 101.791812][ T9204] ? __local_bh_enable_ip+0x15a/0x270 [ 101.797207][ T9204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.803476][ T9204] dev_queue_xmit+0x18/0x20 [ 101.807998][ T9204] ? dev_queue_xmit+0x18/0x20 [ 101.812695][ T9204] neigh_direct_output+0x16/0x20 [ 101.817662][ T9204] ip_finish_output2+0x949/0x1740 [ 101.822706][ T9204] ? ip_output+0x44b/0x670 [ 101.827138][ T9204] ? ip_copy_metadata+0xcb0/0xcb0 [ 101.832187][ T9204] ip_finish_output+0x73c/0xd50 [ 101.837059][ T9204] ? ip_finish_output+0x73c/0xd50 [ 101.842111][ T9204] ip_output+0x21f/0x670 [ 101.846385][ T9204] ? ip_mc_output+0xf70/0xf70 [ 101.851092][ T9204] ? ip_fragment.constprop.0+0x240/0x240 [ 101.856756][ T9204] ? kasan_check_read+0x11/0x20 [ 101.861648][ T9204] raw_sendmsg+0x1d2b/0x2f20 [ 101.866271][ T9204] ? compat_raw_getsockopt+0x100/0x100 [ 101.871749][ T9204] ? __switch_to_asm+0x34/0x70 [ 101.876536][ T9204] ? __switch_to_asm+0x40/0x70 [ 101.881333][ T9204] ? aa_profile_af_perm+0x320/0x320 [ 101.886567][ T9204] ? __schedule+0x81b/0x1cc0 [ 101.891186][ T9204] ? raw_bind+0x5d0/0x5d0 [ 101.895548][ T9204] ? ___might_sleep+0x163/0x280 [ 101.900426][ T9204] ? __might_sleep+0x95/0x190 [ 101.905161][ T9204] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 101.910819][ T9204] ? aa_sk_perm+0x288/0x880 [ 101.915357][ T9204] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 101.920930][ T9204] inet_sendmsg+0x147/0x5d0 [ 101.925456][ T9204] ? inet_sendmsg+0x147/0x5d0 [ 101.930161][ T9204] ? ipip_gro_receive+0x100/0x100 [ 101.935202][ T9204] sock_sendmsg+0xdd/0x130 [ 101.939634][ T9204] sock_write_iter+0x27c/0x3e0 [ 101.944409][ T9204] ? sock_sendmsg+0x130/0x130 [ 101.949109][ T9204] ? aa_path_link+0x460/0x460 [ 101.953794][ T9204] ? find_held_lock+0x35/0x130 [ 101.958570][ T9204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 101.964835][ T9204] ? iov_iter_init+0xee/0x220 [ 101.969526][ T9204] new_sync_write+0x4c7/0x760 [ 101.974209][ T9204] ? default_llseek+0x2e0/0x2e0 [ 101.979073][ T9204] ? common_file_perm+0x238/0x720 [ 101.984115][ T9204] ? __fget+0x381/0x550 [ 101.988284][ T9204] ? apparmor_file_permission+0x25/0x30 [ 101.994020][ T9204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 102.000285][ T9204] ? security_file_permission+0x94/0x380 [ 102.005944][ T9204] __vfs_write+0xe4/0x110 [ 102.010284][ T9204] vfs_write+0x20c/0x580 [ 102.014549][ T9204] ksys_write+0x14f/0x2d0 [ 102.018885][ T9204] ? __ia32_sys_read+0xb0/0xb0 [ 102.023653][ T9204] ? do_syscall_64+0x26/0x610 [ 102.028342][ T9204] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 102.034434][ T9204] ? do_syscall_64+0x26/0x610 [ 102.039129][ T9204] __x64_sys_write+0x73/0xb0 [ 102.043725][ T9204] do_syscall_64+0x103/0x610 [ 102.048332][ T9204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 102.054241][ T9204] RIP: 0033:0x458c29 [ 102.058134][ T9204] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 102.077741][ T9204] RSP: 002b:00007f293b44bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.086166][ T9204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 102.094155][ T9204] RDX: 0000000000000014 RSI: 00000000200002c0 RDI: 0000000000000003 [ 102.102754][ T9204] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 102.110750][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f293b44c6d4 [ 102.118737][ T9204] R13: 00000000004c8623 R14: 00000000004ded68 R15: 00000000ffffffff [ 102.127529][ T9204] Kernel Offset: disabled [ 102.131871][ T9204] Rebooting in 86400 seconds..