[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 69.877932][ T26] audit: type=1800 audit(1560688305.448:25): pid=8942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 69.914114][ T26] audit: type=1800 audit(1560688305.448:26): pid=8942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 69.952889][ T26] audit: type=1800 audit(1560688305.448:27): pid=8942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.57' (ECDSA) to the list of known hosts. 2019/06/16 12:46:21 parsed 1 programs 2019/06/16 12:46:23 executed programs: 0 syzkaller login: [ 948.209467][ T9117] IPVS: ftp: loaded support on port[0] = 21 [ 948.227455][ T9119] IPVS: ftp: loaded support on port[0] = 21 [ 948.234361][ T9121] IPVS: ftp: loaded support on port[0] = 21 [ 948.250257][ T9122] IPVS: ftp: loaded support on port[0] = 21 [ 948.252588][ T9125] IPVS: ftp: loaded support on port[0] = 21 [ 948.321256][ T9126] IPVS: ftp: loaded support on port[0] = 21 [ 948.592222][ T9126] chnl_net:caif_netlink_parms(): no params data found [ 948.608098][ T9122] chnl_net:caif_netlink_parms(): no params data found [ 948.779682][ T9119] chnl_net:caif_netlink_parms(): no params data found [ 948.831547][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.839298][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.853788][ T9126] device bridge_slave_0 entered promiscuous mode [ 948.862298][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 948.884217][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 948.901864][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.909067][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.918465][ T9126] device bridge_slave_1 entered promiscuous mode [ 948.949066][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.956243][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.966638][ T9122] device bridge_slave_0 entered promiscuous mode [ 948.974574][ T9117] chnl_net:caif_netlink_parms(): no params data found [ 949.017310][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.024638][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.032365][ T9122] device bridge_slave_1 entered promiscuous mode [ 949.076537][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.083667][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.093321][ T9119] device bridge_slave_0 entered promiscuous mode [ 949.118868][ T9126] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.142719][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.150381][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.158832][ T9119] device bridge_slave_1 entered promiscuous mode [ 949.182745][ T9122] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.194110][ T9126] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.217198][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.224372][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.232164][ T9125] device bridge_slave_0 entered promiscuous mode [ 949.258136][ T9122] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.287377][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.294966][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.302943][ T9125] device bridge_slave_1 entered promiscuous mode [ 949.319797][ T9119] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.339628][ T9126] team0: Port device team_slave_0 added [ 949.348353][ T9126] team0: Port device team_slave_1 added [ 949.354496][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.361748][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.370325][ T9121] device bridge_slave_0 entered promiscuous mode [ 949.383879][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.390993][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.399662][ T9117] device bridge_slave_0 entered promiscuous mode [ 949.408880][ T9119] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.419411][ T9122] team0: Port device team_slave_0 added [ 949.427816][ T9122] team0: Port device team_slave_1 added [ 949.434973][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.442661][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.450679][ T9121] device bridge_slave_1 entered promiscuous mode [ 949.465330][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.472796][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.481416][ T9117] device bridge_slave_1 entered promiscuous mode [ 949.515300][ T9119] team0: Port device team_slave_0 added [ 949.523037][ T9125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.540426][ T9125] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.564707][ T9119] team0: Port device team_slave_1 added [ 949.573145][ T9121] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.602632][ T9117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 949.697781][ T9126] device hsr_slave_0 entered promiscuous mode [ 949.754274][ T9126] device hsr_slave_1 entered promiscuous mode [ 949.816674][ T9121] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.826885][ T9117] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 949.898994][ T9119] device hsr_slave_0 entered promiscuous mode [ 949.947008][ T9119] device hsr_slave_1 entered promiscuous mode [ 950.047628][ T9122] device hsr_slave_0 entered promiscuous mode [ 950.105185][ T9122] device hsr_slave_1 entered promiscuous mode [ 950.145740][ T9125] team0: Port device team_slave_0 added [ 950.164548][ T9121] team0: Port device team_slave_0 added [ 950.181456][ T9125] team0: Port device team_slave_1 added [ 950.199480][ T9121] team0: Port device team_slave_1 added [ 950.208604][ T9117] team0: Port device team_slave_0 added [ 950.218575][ T9117] team0: Port device team_slave_1 added [ 950.336264][ T9125] device hsr_slave_0 entered promiscuous mode [ 950.384147][ T9125] device hsr_slave_1 entered promiscuous mode [ 950.515987][ T9121] device hsr_slave_0 entered promiscuous mode [ 950.574127][ T9121] device hsr_slave_1 entered promiscuous mode [ 950.727485][ T9117] device hsr_slave_0 entered promiscuous mode [ 950.764290][ T9117] device hsr_slave_1 entered promiscuous mode [ 950.893064][ T9126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.969058][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 950.980912][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.006540][ T9126] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.027910][ T9119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.063386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.072833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.081974][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.089291][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.098059][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.132276][ T9119] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.151049][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.170970][ T9117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.183584][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.196441][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.204430][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.213227][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.222462][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.229668][ T9127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.241814][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.252677][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.261209][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.268285][ T9127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.297227][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.304173][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.312245][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.322556][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.331221][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.340172][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.347380][ T9127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.363672][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.379296][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.388480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.397899][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.406633][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.418188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.437620][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.447622][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.457123][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.466651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.475508][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.482565][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.490561][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.499183][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.509821][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.517921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.542862][ T9117] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.551995][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.561686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.571355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.581303][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.588404][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.596549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.604550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.612257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.620074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.637166][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.650082][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.658845][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.668666][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.677405][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 951.686232][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 951.696263][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.705280][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.712929][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 951.721677][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.761439][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.771690][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.780888][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.789812][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.798805][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.807311][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.814429][ T9139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.822097][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.830762][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.839254][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.848017][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.857701][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.864820][ T9139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.872464][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 951.881883][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 951.890324][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.897382][ T9139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.906016][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.914844][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.923183][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.930292][ T9139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.938204][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.947219][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.956275][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.963328][ T9139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.971032][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 951.979860][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 951.988913][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.996952][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.005165][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 952.012961][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 952.040497][ T9119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 952.065013][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.073451][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.082856][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.092467][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 952.101335][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.110527][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.119390][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.127967][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.136280][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.144764][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.153059][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.162408][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.171066][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 952.179970][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 952.188390][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.195529][ T9130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.206268][ T9126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.228895][ T9121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.243697][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.259640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.268614][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.327706][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.337226][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.346351][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.356945][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 952.366320][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.375935][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.385834][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.394549][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.403194][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.412077][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 952.420501][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.429144][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.437867][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.446875][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.455947][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.468609][ T9117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.497687][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.506291][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.514416][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.522309][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.531206][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 952.540107][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.548945][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.557454][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.566087][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.584347][ T9126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.599572][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.615415][ T9122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.649951][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.668093][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.699783][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.712573][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.736076][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.785620][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.798366][ T9119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.813632][ T9117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.012706][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/16 12:46:28 executed programs: 6 2019/06/16 12:46:33 executed programs: 211 2019/06/16 12:46:38 executed programs: 404 2019/06/16 12:46:43 executed programs: 608 2019/06/16 12:46:48 executed programs: 817 2019/06/16 12:46:53 executed programs: 1026 2019/06/16 12:46:59 executed programs: 1228 2019/06/16 12:47:04 executed programs: 1422 2019/06/16 12:47:09 executed programs: 1618 2019/06/16 12:47:14 executed programs: 1814 2019/06/16 12:47:19 executed programs: 2013 2019/06/16 12:47:24 executed programs: 2204 2019/06/16 12:47:29 executed programs: 2393 2019/06/16 12:47:34 executed programs: 2581 2019/06/16 12:47:39 executed programs: 2756 2019/06/16 12:47:44 executed programs: 2945 2019/06/16 12:47:49 executed programs: 3154 2019/06/16 12:47:54 executed programs: 3342 2019/06/16 12:47:59 executed programs: 3522 2019/06/16 12:48:04 executed programs: 3705 2019/06/16 12:48:09 executed programs: 3890 2019/06/16 12:48:14 executed programs: 4058 2019/06/16 12:48:19 executed programs: 4254 2019/06/16 12:48:24 executed programs: 4433 2019/06/16 12:48:29 executed programs: 4602 2019/06/16 12:48:34 executed programs: 4768 2019/06/16 12:48:39 executed programs: 4939 2019/06/16 12:48:44 executed programs: 5102 2019/06/16 12:48:49 executed programs: 5287 2019/06/16 12:48:54 executed programs: 5471 2019/06/16 12:48:59 executed programs: 5637 2019/06/16 12:49:04 executed programs: 5794 2019/06/16 12:49:09 executed programs: 5948 2019/06/16 12:49:14 executed programs: 6098 2019/06/16 12:49:19 executed programs: 6284 2019/06/16 12:49:24 executed programs: 6463 2019/06/16 12:49:29 executed programs: 6623 2019/06/16 12:49:34 executed programs: 6781 2019/06/16 12:49:39 executed programs: 6932 2019/06/16 12:49:44 executed programs: 7085 2019/06/16 12:49:49 executed programs: 7263 2019/06/16 12:49:54 executed programs: 7441 2019/06/16 12:49:59 executed programs: 7603 2019/06/16 12:50:04 executed programs: 7759 2019/06/16 12:50:09 executed programs: 7904 2019/06/16 12:50:14 executed programs: 8049 2019/06/16 12:50:19 executed programs: 8226 2019/06/16 12:50:24 executed programs: 8405 2019/06/16 12:50:29 executed programs: 8551 2019/06/16 12:50:35 executed programs: 8693 2019/06/16 12:50:40 executed programs: 8839 2019/06/16 12:50:45 executed programs: 8988 2019/06/16 12:50:50 executed programs: 9173 2019/06/16 12:50:55 executed programs: 9353 2019/06/16 12:51:00 executed programs: 9517 2019/06/16 12:51:05 executed programs: 9662 2019/06/16 12:51:10 executed programs: 9832 2019/06/16 12:51:15 executed programs: 10010 2019/06/16 12:51:20 executed programs: 10171 2019/06/16 12:51:25 executed programs: 10320 2019/06/16 12:51:30 executed programs: 10464 2019/06/16 12:51:35 executed programs: 10627 2019/06/16 12:51:40 executed programs: 10830 [ 1266.995737][T28125] ================================================================== [ 1267.004195][T28125] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 1267.012279][T28125] Read of size 4 at addr ffff88808f9dc0d8 by task syz-executor.1/28125 [ 1267.024598][T28125] [ 1267.026981][T28125] CPU: 1 PID: 28125 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #33 [ 1267.035064][T28125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.045169][T28125] Call Trace: [ 1267.048561][T28125] dump_stack+0x172/0x1f0 [ 1267.052913][T28125] ? sk_psock_unlink+0x3dd/0x4b0 [ 1267.057951][T28125] ? tcp_check_oom+0x560/0x560 [ 1267.062809][T28125] print_address_description.cold+0x7c/0x20d [ 1267.068808][T28125] ? sk_psock_unlink+0x3dd/0x4b0 [ 1267.073755][T28125] ? sk_psock_unlink+0x3dd/0x4b0 [ 1267.078708][T28125] ? tcp_check_oom+0x560/0x560 [ 1267.083511][T28125] __kasan_report.cold+0x1b/0x40 [ 1267.088479][T28125] ? sk_psock_unlink+0x3dd/0x4b0 [ 1267.093430][T28125] kasan_report+0x12/0x20 [ 1267.097837][T28125] __asan_report_load4_noabort+0x14/0x20 [ 1267.103495][T28125] sk_psock_unlink+0x3dd/0x4b0 [ 1267.108835][T28125] ? sk_psock_link_pop+0x186/0x1f0 [ 1267.113965][T28125] ? tcp_check_oom+0x560/0x560 [ 1267.118808][T28125] tcp_bpf_remove+0x21/0x50 [ 1267.123327][T28125] tcp_bpf_close+0x130/0x390 [ 1267.127950][T28125] tls_sk_proto_close+0x18a/0x770 [ 1267.132986][T28125] ? tcp_bpf_stream_read+0x270/0x270 [ 1267.138285][T28125] ? tls_push_sg+0x680/0x680 [ 1267.142944][T28125] ? ip_mc_drop_socket+0x211/0x270 [ 1267.148119][T28125] inet_release+0xe0/0x1f0 [ 1267.152589][T28125] inet6_release+0x53/0x80 [ 1267.157071][T28125] __sock_release+0xce/0x2a0 [ 1267.161677][T28125] sock_close+0x1b/0x30 [ 1267.165894][T28125] __fput+0x2ff/0x890 [ 1267.169888][T28125] ? __sock_release+0x2a0/0x2a0 [ 1267.174756][T28125] ____fput+0x16/0x20 [ 1267.178829][T28125] task_work_run+0x145/0x1c0 [ 1267.183511][T28125] exit_to_usermode_loop+0x273/0x2c0 [ 1267.188861][T28125] do_syscall_64+0x58e/0x680 [ 1267.193489][T28125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1267.199384][T28125] RIP: 0033:0x412f90 [ 1267.199411][T28125] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 32 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1267.199418][T28125] RSP: 002b:00007ffe334d6818 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1267.199474][T28125] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f90 [ 1267.199481][T28125] RDX: 0000001b2da20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1267.199487][T28125] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1267.199494][T28125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000761178 [ 1267.199500][T28125] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1267.199515][T28125] [ 1267.199550][T28125] Allocated by task 28125: [ 1267.255560][T28125] save_stack+0x23/0x90 [ 1267.255573][T28125] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1267.255584][T28125] kasan_kmalloc+0x9/0x10 [ 1267.255595][T28125] kmem_cache_alloc_trace+0x151/0x750 [ 1267.255607][T28125] sock_map_alloc+0x1b9/0x3f0 [ 1267.255673][T28125] __do_sys_bpf+0x730/0x43d0 [ 1267.255684][T28125] __x64_sys_bpf+0x73/0xb0 [ 1267.255697][T28125] do_syscall_64+0xfd/0x680 [ 1267.255719][T28125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1267.321875][T28125] [ 1267.324206][T28125] Freed by task 9140: [ 1267.328193][T28125] save_stack+0x23/0x90 [ 1267.332356][T28125] __kasan_slab_free+0x102/0x150 [ 1267.337297][T28125] kasan_slab_free+0xe/0x10 [ 1267.341990][T28125] kfree+0xcf/0x220 [ 1267.345808][T28125] sock_map_free+0x22a/0x310 [ 1267.350408][T28125] bpf_map_free_deferred+0xb4/0xe0 [ 1267.355526][T28125] process_one_work+0x989/0x1790 [ 1267.360476][T28125] worker_thread+0x98/0xe40 [ 1267.364985][T28125] kthread+0x354/0x420 [ 1267.369061][T28125] ret_from_fork+0x24/0x30 [ 1267.373485][T28125] [ 1267.375832][T28125] The buggy address belongs to the object at ffff88808f9dc0c0 [ 1267.375832][T28125] which belongs to the cache kmalloc-512 of size 512 [ 1267.389894][T28125] The buggy address is located 24 bytes inside of [ 1267.389894][T28125] 512-byte region [ffff88808f9dc0c0, ffff88808f9dc2c0) [ 1267.403161][T28125] The buggy address belongs to the page: [ 1267.408846][T28125] page:ffffea00023e7700 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0xffff88808f9dcd40 [ 1267.419303][T28125] flags: 0x1fffc0000000200(slab) [ 1267.424273][T28125] raw: 01fffc0000000200 ffffea0002798188 ffffea00022bc548 ffff8880aa400940 [ 1267.432869][T28125] raw: ffff88808f9dcd40 ffff88808f9dc0c0 0000000100000004 0000000000000000 [ 1267.441476][T28125] page dumped because: kasan: bad access detected [ 1267.447895][T28125] [ 1267.450226][T28125] Memory state around the buggy address: [ 1267.455869][T28125] ffff88808f9dbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1267.463941][T28125] ffff88808f9dc000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1267.472012][T28125] >ffff88808f9dc080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1267.480162][T28125] ^ [ 1267.487195][T28125] ffff88808f9dc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1267.495257][T28125] ffff88808f9dc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1267.495262][T28125] ================================================================== [ 1267.495266][T28125] Disabling lock debugging due to kernel taint [ 1267.508743][T28125] Kernel panic - not syncing: panic_on_warn set ... [ 1267.520463][ T3879] kobject: 'loop3' (000000006894b6a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1267.524274][T28125] CPU: 1 PID: 28125 Comm: syz-executor.1 Tainted: G B 5.2.0-rc4+ #33 [ 1267.524283][T28125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.524287][T28125] Call Trace: [ 1267.524310][T28125] dump_stack+0x172/0x1f0 [ 1267.524328][T28125] ? tcp_check_oom+0x560/0x560 [ 1267.524405][T28125] panic+0x2cb/0x744 [ 1267.524427][T28125] ? __warn_printk+0xf3/0xf3 [ 1267.559021][ T3879] kobject: 'loop5' (000000000f6f55ae): kobject_uevent_env [ 1267.561671][T28125] ? sk_psock_unlink+0x3dd/0x4b0 [ 1267.561686][T28125] ? tcp_check_oom+0x560/0x560 [ 1267.561708][T28125] ? preempt_schedule+0x4b/0x60 [ 1267.572529][ T3879] kobject: 'loop5' (000000000f6f55ae): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1267.574979][T28125] ? ___preempt_schedule+0x16/0x18 [ 1267.575022][T28125] ? trace_hardirqs_on+0x5e/0x220 [ 1267.575039][T28125] ? sk_psock_unlink+0x3dd/0x4b0 [ 1267.575060][T28125] ? tcp_check_oom+0x560/0x560 [ 1267.590931][ T3879] kobject: 'loop2' (00000000d9462081): kobject_uevent_env [ 1267.591953][T28125] end_report+0x47/0x4f [ 1267.591969][T28125] ? sk_psock_unlink+0x3dd/0x4b0 [ 1267.591987][T28125] __kasan_report.cold+0xe/0x40 [ 1267.623000][ T3879] kobject: 'loop2' (00000000d9462081): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1267.626761][T28125] ? sk_psock_unlink+0x3dd/0x4b0 [ 1267.626777][T28125] kasan_report+0x12/0x20 [ 1267.626792][T28125] __asan_report_load4_noabort+0x14/0x20 [ 1267.626804][T28125] sk_psock_unlink+0x3dd/0x4b0 [ 1267.626817][T28125] ? sk_psock_link_pop+0x186/0x1f0 [ 1267.626832][T28125] ? tcp_check_oom+0x560/0x560 [ 1267.626851][T28125] tcp_bpf_remove+0x21/0x50 [ 1267.649283][ T3879] kobject: 'loop4' (00000000c86fc0f0): kobject_uevent_env [ 1267.658194][T28125] tcp_bpf_close+0x130/0x390 [ 1267.658212][T28125] tls_sk_proto_close+0x18a/0x770 [ 1267.658224][T28125] ? tcp_bpf_stream_read+0x270/0x270 [ 1267.658236][T28125] ? tls_push_sg+0x680/0x680 [ 1267.658248][T28125] ? ip_mc_drop_socket+0x211/0x270 [ 1267.658264][T28125] inet_release+0xe0/0x1f0 [ 1267.658278][T28125] inet6_release+0x53/0x80 [ 1267.658291][T28125] __sock_release+0xce/0x2a0 [ 1267.658310][T28125] sock_close+0x1b/0x30 [ 1267.689410][ T3879] kobject: 'loop4' (00000000c86fc0f0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1267.692470][T28125] __fput+0x2ff/0x890 [ 1267.692491][T28125] ? __sock_release+0x2a0/0x2a0 [ 1267.726253][ T3879] kobject: 'loop0' (00000000298ecac3): kobject_uevent_env [ 1267.728813][T28125] ____fput+0x16/0x20 [ 1267.728834][T28125] task_work_run+0x145/0x1c0 [ 1267.733344][ T3879] kobject: 'loop0' (00000000298ecac3): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1267.737830][T28125] exit_to_usermode_loop+0x273/0x2c0 [ 1267.737846][T28125] do_syscall_64+0x58e/0x680 [ 1267.737862][T28125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1267.737872][T28125] RIP: 0033:0x412f90 [ 1267.737886][T28125] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 32 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1267.737892][T28125] RSP: 002b:00007ffe334d6818 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1267.737902][T28125] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f90 [ 1267.737908][T28125] RDX: 0000001b2da20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1267.737914][T28125] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1267.737920][T28125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000761178 [ 1267.737927][T28125] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1267.743305][T28125] Kernel Offset: disabled [ 1267.884404][T28125] Rebooting in 86400 seconds..