[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 47.567915][ T26] audit: type=1800 audit(1563296928.464:25): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 47.588785][ T26] audit: type=1800 audit(1563296928.464:26): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 47.609797][ T26] audit: type=1800 audit(1563296928.464:27): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. 2019/07/16 17:15:48 parsed 1 programs 2019/07/16 17:15:50 executed programs: 0 syzkaller login: [ 469.642888][ T8457] IPVS: ftp: loaded support on port[0] = 21 [ 469.701627][ T8460] IPVS: ftp: loaded support on port[0] = 21 [ 469.730356][ T8465] IPVS: ftp: loaded support on port[0] = 21 [ 469.746206][ T8466] IPVS: ftp: loaded support on port[0] = 21 [ 469.755872][ T8462] IPVS: ftp: loaded support on port[0] = 21 [ 469.808372][ T8467] IPVS: ftp: loaded support on port[0] = 21 [ 469.995073][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 470.053600][ T8465] chnl_net:caif_netlink_parms(): no params data found [ 470.063718][ T8460] chnl_net:caif_netlink_parms(): no params data found [ 470.182437][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.190370][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.198944][ T8460] device bridge_slave_0 entered promiscuous mode [ 470.212043][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.219294][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.226886][ T8460] device bridge_slave_1 entered promiscuous mode [ 470.252472][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.259615][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.267266][ T8465] device bridge_slave_0 entered promiscuous mode [ 470.276513][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.283645][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.292021][ T8465] device bridge_slave_1 entered promiscuous mode [ 470.303181][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.312605][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.320792][ T8457] device bridge_slave_0 entered promiscuous mode [ 470.337382][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.351125][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.384886][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.392085][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.400272][ T8457] device bridge_slave_1 entered promiscuous mode [ 470.407387][ T8466] chnl_net:caif_netlink_parms(): no params data found [ 470.415767][ T8462] chnl_net:caif_netlink_parms(): no params data found [ 470.437678][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.449448][ T8460] team0: Port device team_slave_0 added [ 470.462637][ T8460] team0: Port device team_slave_1 added [ 470.478922][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 470.490095][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.509260][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.543130][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.630717][ T8460] device hsr_slave_0 entered promiscuous mode [ 470.697591][ T8460] device hsr_slave_1 entered promiscuous mode [ 470.763578][ T8465] team0: Port device team_slave_0 added [ 470.770035][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.777101][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.785163][ T8466] device bridge_slave_0 entered promiscuous mode [ 470.810385][ T8457] team0: Port device team_slave_0 added [ 470.816482][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.824875][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.832768][ T8462] device bridge_slave_0 entered promiscuous mode [ 470.846985][ T8465] team0: Port device team_slave_1 added [ 470.853573][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.860853][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.868874][ T8466] device bridge_slave_1 entered promiscuous mode [ 470.883102][ T8457] team0: Port device team_slave_1 added [ 470.889693][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.896754][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.905017][ T8462] device bridge_slave_1 entered promiscuous mode [ 470.999924][ T8465] device hsr_slave_0 entered promiscuous mode [ 471.047881][ T8465] device hsr_slave_1 entered promiscuous mode [ 471.107461][ T8465] debugfs: Directory 'hsr0' with parent '/' already present! [ 471.118418][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.125527][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.134479][ T8467] device bridge_slave_0 entered promiscuous mode [ 471.143942][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.179335][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.186630][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.196403][ T8467] device bridge_slave_1 entered promiscuous mode [ 471.204997][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.222829][ T8462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.242962][ T8462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.289964][ T8457] device hsr_slave_0 entered promiscuous mode [ 471.328645][ T8457] device hsr_slave_1 entered promiscuous mode [ 471.367441][ T8457] debugfs: Directory 'hsr0' with parent '/' already present! [ 471.401546][ T8466] team0: Port device team_slave_0 added [ 471.409284][ T8466] team0: Port device team_slave_1 added [ 471.421444][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.432741][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.449040][ T8462] team0: Port device team_slave_0 added [ 471.456149][ T8462] team0: Port device team_slave_1 added [ 471.491380][ T8467] team0: Port device team_slave_0 added [ 471.533812][ T8466] device hsr_slave_0 entered promiscuous mode [ 471.587754][ T8466] device hsr_slave_1 entered promiscuous mode [ 471.637368][ T8466] debugfs: Directory 'hsr0' with parent '/' already present! [ 471.662909][ T8467] team0: Port device team_slave_1 added [ 471.719887][ T8462] device hsr_slave_0 entered promiscuous mode [ 471.777721][ T8462] device hsr_slave_1 entered promiscuous mode [ 471.837323][ T8462] debugfs: Directory 'hsr0' with parent '/' already present! [ 471.858662][ T8460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.889501][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.898195][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.911182][ T8460] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.990283][ T8467] device hsr_slave_0 entered promiscuous mode [ 472.027634][ T8467] device hsr_slave_1 entered promiscuous mode [ 472.107349][ T8467] debugfs: Directory 'hsr0' with parent '/' already present! [ 472.137009][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.146127][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.154898][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.162075][ T8469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.170733][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.180349][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.188830][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.195870][ T8469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.208271][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.216193][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 472.233603][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.260444][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.269101][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.279332][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.288387][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.302754][ T8457] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.316818][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.325211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.333056][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.341598][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.357520][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.366169][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.375095][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.382241][ T8479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.390235][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.398987][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.408047][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.415125][ T8479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.422837][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 472.431457][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.441088][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.465899][ T8460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.476542][ T8460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.490944][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.500097][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.509073][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.517374][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.525482][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.534098][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.542542][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.552730][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.561885][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.569634][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.595602][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.607836][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.616294][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.626427][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.645490][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.656227][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.665176][ T8457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.708242][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.739897][ T8465] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.748158][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.756298][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.785240][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.802567][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.812385][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.824001][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.832451][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.842841][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.851546][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.858674][ T8472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.866991][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.879501][ T8462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.917800][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.926481][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.950755][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.958179][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.966581][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.975500][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.984060][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.991189][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.999275][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.008292][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.016590][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.023697][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.031450][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.040423][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.051201][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.065790][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.089801][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.113385][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.155746][ T8462] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.188432][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.196394][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.211165][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.220100][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.229718][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.238271][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.246158][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.254842][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.263464][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.272797][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.282425][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.291426][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.302925][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.310879][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.318925][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.328432][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.336858][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.343995][ T8469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.356261][ T8466] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.373361][ T8467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.385390][ T8467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.410693][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.434996][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.445506][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.455275][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.464931][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.474848][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.482001][ T8478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.499521][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.509148][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.517716][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.525928][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.534981][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.543805][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.552928][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.560041][ T8478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.570563][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.579029][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.586555][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.595364][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.643594][ T8462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.658003][ T8462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.661686][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.725437][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.758339][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.769147][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.776276][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.786317][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.796253][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.805281][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.814113][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.822624][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.831971][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.840663][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.849367][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.858116][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.866318][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.874652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.883312][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.892168][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.901036][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.912999][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.957955][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.965901][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.976093][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.995476][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 474.010675][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.028038][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.061071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.077960][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.089110][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 474.098116][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.107692][ T8466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.118264][ T8462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.224229][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/16 17:15:55 executed programs: 26 [ 476.310924][ T8772] ================================================================== [ 476.310930][ T8772] BUG: KASAN: use-after-free in check_noncircular+0x91/0x560 [ 476.310934][ T8772] Write of size 56 at addr ffff888089815160 by task syz-executor.4/8772 [ 476.310936][ T8772] [ 476.310939][ T8772] CPU: 1 PID: 8772 Comm: syz-executor.4 Not tainted 5.2.0+ #31 [ 476.310943][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.310945][ T8772] Call Trace: [ 476.310947][ T8772] [ 476.310950][ T8772] Allocated by task 8457: [ 476.310953][ T8772] __kasan_kmalloc+0x11c/0x1b0 [ 476.310955][ T8772] kasan_kmalloc+0x9/0x10 [ 476.310957][ T8772] kmem_cache_alloc_trace+0x221/0x2f0 [ 476.310959][ T8772] tomoyo_init_log+0x176/0x1f20 [ 476.310961][ T8772] tomoyo_supervisor+0x39c/0x13f0 [ 476.310964][ T8772] tomoyo_check_open_permission+0x488/0x9e0 [ 476.310966][ T8772] tomoyo_file_open+0x141/0x190 [ 476.310969][ T8772] security_file_open+0x65/0x2f0 [ 476.310971][ T8772] do_dentry_open+0x397/0x1060 [ 476.310973][ T8772] vfs_open+0x73/0x80 [ 476.310975][ T8772] path_openat+0x136d/0x4400 [ 476.310977][ T8772] do_filp_open+0x1f7/0x430 [ 476.310979][ T8772] do_sys_open+0x343/0x620 [ 476.310981][ T8772] __x64_sys_open+0x87/0x90 [ 476.310984][ T8772] do_syscall_64+0xfe/0x140 [ 476.310986][ T8772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.310988][ T8772] [ 476.310991][ T8772] Freed by task 8457: [ 476.310993][ T8772] __kasan_slab_free+0x12a/0x1e0 [ 476.310996][ T8772] kasan_slab_free+0xe/0x10 [ 476.310998][ T8772] kfree+0x115/0x200 [ 476.311001][ T8772] tomoyo_init_log+0x1bf7/0x1f20 [ 476.311004][ T8772] tomoyo_supervisor+0x39c/0x13f0 [ 476.311007][ T8772] tomoyo_check_open_permission+0x488/0x9e0 [ 476.311010][ T8772] tomoyo_file_open+0x141/0x190 [ 476.311013][ T8772] security_file_open+0x65/0x2f0 [ 476.311015][ T8772] do_dentry_open+0x397/0x1060 [ 476.311018][ T8772] vfs_open+0x73/0x80 [ 476.311020][ T8772] path_openat+0x136d/0x4400 [ 476.311023][ T8772] do_filp_open+0x1f7/0x430 [ 476.311025][ T8772] do_sys_open+0x343/0x620 [ 476.311027][ T8772] __x64_sys_open+0x87/0x90 [ 476.311029][ T8772] do_syscall_64+0xfe/0x140 [ 476.311032][ T8772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.311034][ T8772] [ 476.311037][ T8772] The buggy address belongs to the object at ffff8880898146c0 [ 476.311040][ T8772] which belongs to the cache kmalloc-4k of size 4096 [ 476.311043][ T8772] The buggy address is located 2720 bytes inside of [ 476.311046][ T8772] 4096-byte region [ffff8880898146c0, ffff8880898156c0) [ 476.311049][ T8772] The buggy address belongs to the page: [ 476.311053][ T8772] page:ffffea0002260500 refcount:1 mapcount:0 mapping:ffff8880aa402000 index:0x0 compound_mapcount: 0 [ 476.311060][ T8772] flags: 0x1fffc0000010200(slab|head) [ 476.311064][ T8772] raw: 01fffc0000010200 ffffea0002263b08 ffffea0002916d08 ffff8880aa402000 [ 476.311069][ T8772] raw: 0000000000000000 ffff8880898146c0 0000000100000001 0000000000000000 [ 476.311072][ T8772] page dumped because: kasan: bad access detected [ 476.311074][ T8772] [ 476.311077][ T8772] Memory state around the buggy address: [ 476.311081][ T8772] ffff888089815000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.311085][ T8772] ffff888089815080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.311089][ T8772] >ffff888089815100: fb fb fb fb f1 f1 f1 f1 00 f2 f2 f2 fb fb fb fb [ 476.311092][ T8772] ^ [ 476.311096][ T8772] ffff888089815180: fb fb fb f3 f3 f3 f3 f3 fb fb fb fb fb fb fb fb [ 476.311100][ T8772] ffff888089815200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.311104][ T8772] ================================================================== [ 476.311108][ T8772] Disabling lock debugging due to kernel taint [ 476.311111][ T8772] Kernel panic - not syncing: panic_on_warn set ... [ 476.312008][ T8772] Kernel Offset: disabled