[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.269500][ T26] audit: type=1800 audit(1562757448.001:25): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 41.306489][ T26] audit: type=1800 audit(1562757448.001:26): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 41.344414][ T26] audit: type=1800 audit(1562757448.001:27): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.9' (ECDSA) to the list of known hosts. 2019/07/10 11:18:05 parsed 1 programs 2019/07/10 11:18:08 executed programs: 0 syzkaller login: [ 81.672157][ T7986] IPVS: ftp: loaded support on port[0] = 21 [ 81.675932][ T7992] IPVS: ftp: loaded support on port[0] = 21 [ 81.702821][ T7988] IPVS: ftp: loaded support on port[0] = 21 [ 81.703686][ T7984] IPVS: ftp: loaded support on port[0] = 21 [ 81.711278][ T7993] IPVS: ftp: loaded support on port[0] = 21 [ 81.733309][ T7990] IPVS: ftp: loaded support on port[0] = 21 [ 81.979991][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 82.022568][ T7986] chnl_net:caif_netlink_parms(): no params data found [ 82.096272][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.103976][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.112226][ T7984] device bridge_slave_0 entered promiscuous mode [ 82.122452][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.129625][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.137580][ T7984] device bridge_slave_1 entered promiscuous mode [ 82.145107][ T7993] chnl_net:caif_netlink_parms(): no params data found [ 82.168112][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 82.207456][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.215249][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.223104][ T7986] device bridge_slave_0 entered promiscuous mode [ 82.234394][ T7992] chnl_net:caif_netlink_parms(): no params data found [ 82.247388][ T7984] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.260942][ T7984] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.269509][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.276795][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.284655][ T7986] device bridge_slave_1 entered promiscuous mode [ 82.334635][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.341917][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.349905][ T7993] device bridge_slave_0 entered promiscuous mode [ 82.362455][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.370267][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.378550][ T7993] device bridge_slave_1 entered promiscuous mode [ 82.401661][ T7984] team0: Port device team_slave_0 added [ 82.414580][ T7984] team0: Port device team_slave_1 added [ 82.420681][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.428502][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.436088][ T7990] device bridge_slave_0 entered promiscuous mode [ 82.463187][ T7986] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.478786][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.485878][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.495824][ T7990] device bridge_slave_1 entered promiscuous mode [ 82.515764][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.522960][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.531078][ T7992] device bridge_slave_0 entered promiscuous mode [ 82.539709][ T7986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.560413][ T7993] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.572112][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.579508][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.588252][ T7992] device bridge_slave_1 entered promiscuous mode [ 82.629359][ T7984] device hsr_slave_0 entered promiscuous mode [ 82.686949][ T7984] device hsr_slave_1 entered promiscuous mode [ 82.732841][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 82.743132][ T7993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.769714][ T7990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.783446][ T7990] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.793443][ T7992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.804153][ T7992] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.813921][ T7986] team0: Port device team_slave_0 added [ 82.827537][ T7993] team0: Port device team_slave_0 added [ 82.863071][ T7986] team0: Port device team_slave_1 added [ 82.872488][ T7993] team0: Port device team_slave_1 added [ 82.900544][ T7990] team0: Port device team_slave_0 added [ 82.910259][ T7990] team0: Port device team_slave_1 added [ 82.989376][ T7986] device hsr_slave_0 entered promiscuous mode [ 83.046929][ T7986] device hsr_slave_1 entered promiscuous mode [ 83.106960][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.114064][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.121964][ T7988] device bridge_slave_0 entered promiscuous mode [ 83.131382][ T7992] team0: Port device team_slave_0 added [ 83.209449][ T7990] device hsr_slave_0 entered promiscuous mode [ 83.266920][ T7990] device hsr_slave_1 entered promiscuous mode [ 83.347220][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.354326][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.362288][ T7988] device bridge_slave_1 entered promiscuous mode [ 83.371504][ T7992] team0: Port device team_slave_1 added [ 83.430012][ T7993] device hsr_slave_0 entered promiscuous mode [ 83.467668][ T7993] device hsr_slave_1 entered promiscuous mode [ 83.529114][ T7988] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 83.544773][ T7988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 83.582517][ T7988] team0: Port device team_slave_0 added [ 83.679314][ T7992] device hsr_slave_0 entered promiscuous mode [ 83.716936][ T7992] device hsr_slave_1 entered promiscuous mode [ 83.778770][ T7988] team0: Port device team_slave_1 added [ 83.859592][ T7988] device hsr_slave_0 entered promiscuous mode [ 83.897593][ T7988] device hsr_slave_1 entered promiscuous mode [ 83.991390][ T7986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.010794][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.031229][ T7993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.048534][ T7986] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.064517][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.073891][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.098023][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.107473][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.116174][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.124308][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.150628][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.160726][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.168955][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.176868][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.184523][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.192689][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.201239][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.210204][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.218852][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.225897][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.236063][ T7993] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.262895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.273128][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.282668][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.289803][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.297610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.306113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.314613][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.321694][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.329362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.348003][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.371672][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.380489][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.389292][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.397848][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.404910][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.412952][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.421544][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.430265][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.438731][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.447899][ T3500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.462578][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.482477][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.492368][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.500497][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.511031][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.519777][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.528838][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.535898][ T8002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.543666][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.552129][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.560745][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.569278][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.577856][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.586994][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.596511][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.604300][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.638463][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.648835][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.662082][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.671152][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.680694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.689642][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.698154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.706755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.715444][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.724804][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.733252][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.741692][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.750156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.758715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.767279][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.775456][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.783852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.792096][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.800014][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.807855][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.816092][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.824481][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.841713][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.851845][ T7986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.868897][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.878729][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.895425][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.903368][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.912257][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.920950][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.928072][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.935816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.944488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.952997][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.960110][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.968283][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.977093][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.984745][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.993011][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.009884][ T7992] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.039624][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.048314][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.058868][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.070697][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.079710][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.088196][ T2844] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.095271][ T2844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.103115][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.112011][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.120482][ T2844] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.127564][ T2844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.135040][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.144133][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.152763][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.161121][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.170107][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.178839][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.187358][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.196019][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.204243][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.228373][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.237875][ T7993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.256827][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.265575][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.275868][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.285341][ T2844] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.292497][ T2844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.301464][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.310400][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.322194][ T2844] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.329370][ T2844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.337405][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.345908][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.354516][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.363205][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.372456][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.380582][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.395676][ T7986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.408864][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.418421][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.431071][ T7990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.445344][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.471161][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.480833][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.490485][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.501455][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.539420][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.550580][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.562464][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.572814][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.581798][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.592805][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.608366][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.617951][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.626329][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.635940][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.646843][ T7992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.663208][ T7996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.750590][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/10 11:18:13 executed programs: 34 2019/07/10 11:18:18 executed programs: 246 2019/07/10 11:18:23 executed programs: 466 2019/07/10 11:18:28 executed programs: 700 2019/07/10 11:18:33 executed programs: 939 2019/07/10 11:18:38 executed programs: 1164 2019/07/10 11:18:43 executed programs: 1384 2019/07/10 11:18:48 executed programs: 1613 2019/07/10 11:18:53 executed programs: 1833 2019/07/10 11:18:58 executed programs: 2053 2019/07/10 11:19:03 executed programs: 2269 2019/07/10 11:19:08 executed programs: 2490 2019/07/10 11:19:13 executed programs: 2699 2019/07/10 11:19:18 executed programs: 2907 2019/07/10 11:19:23 executed programs: 3120 2019/07/10 11:19:28 executed programs: 3331 2019/07/10 11:19:33 executed programs: 3548 2019/07/10 11:19:38 executed programs: 3755 2019/07/10 11:19:43 executed programs: 3963 2019/07/10 11:19:48 executed programs: 4165 2019/07/10 11:19:53 executed programs: 4370 2019/07/10 11:19:58 executed programs: 4577 2019/07/10 11:20:03 executed programs: 4799 2019/07/10 11:20:08 executed programs: 5007 2019/07/10 11:20:13 executed programs: 5206 2019/07/10 11:20:18 executed programs: 5403 2019/07/10 11:20:23 executed programs: 5602 2019/07/10 11:20:28 executed programs: 5794 2019/07/10 11:20:33 executed programs: 6014 2019/07/10 11:20:38 executed programs: 6217 2019/07/10 11:20:43 executed programs: 6409 2019/07/10 11:20:49 executed programs: 6607 2019/07/10 11:20:54 executed programs: 6805 2019/07/10 11:20:59 executed programs: 6994 2019/07/10 11:21:04 executed programs: 7208 2019/07/10 11:21:09 executed programs: 7412 2019/07/10 11:21:14 executed programs: 7613 2019/07/10 11:21:19 executed programs: 7807 2019/07/10 11:21:24 executed programs: 7999 2019/07/10 11:21:29 executed programs: 8190 2019/07/10 11:21:34 executed programs: 8417 2019/07/10 11:21:39 executed programs: 8621 2019/07/10 11:21:44 executed programs: 8818 2019/07/10 11:21:49 executed programs: 9010 2019/07/10 11:21:54 executed programs: 9196 2019/07/10 11:21:59 executed programs: 9383 2019/07/10 11:22:04 executed programs: 9612 2019/07/10 11:22:09 executed programs: 9826 2019/07/10 11:22:14 executed programs: 10018 2019/07/10 11:22:19 executed programs: 10200 2019/07/10 11:22:24 executed programs: 10378 2019/07/10 11:22:29 executed programs: 10558 2019/07/10 11:22:34 executed programs: 10772 2019/07/10 11:22:39 executed programs: 10977 2019/07/10 11:22:44 executed programs: 11162 2019/07/10 11:22:49 executed programs: 11339 2019/07/10 11:22:54 executed programs: 11515 2019/07/10 11:22:59 executed programs: 11689 2019/07/10 11:23:04 executed programs: 11906 2019/07/10 11:23:09 executed programs: 12109 2019/07/10 11:23:14 executed programs: 12292 2019/07/10 11:23:19 executed programs: 12492 2019/07/10 11:23:24 executed programs: 12727 2019/07/10 11:23:29 executed programs: 12953 2019/07/10 11:23:34 executed programs: 13188 2019/07/10 11:23:39 executed programs: 13419 2019/07/10 11:23:44 executed programs: 13651 2019/07/10 11:23:49 executed programs: 13881 2019/07/10 11:23:54 executed programs: 14106 2019/07/10 11:23:59 executed programs: 14325 2019/07/10 11:24:04 executed programs: 14545 2019/07/10 11:24:09 executed programs: 14773 [ 445.247660][ T2144] ================================================================== [ 445.256020][ T2144] BUG: KASAN: use-after-free in sk_psock_unlink+0x4fa/0x580 [ 445.263301][ T2144] Read of size 4 at addr ffff8880a3736ad8 by task syz-executor.1/2144 [ 445.271433][ T2144] [ 445.271450][ T2144] CPU: 1 PID: 2144 Comm: syz-executor.1 Not tainted 5.2.0+ #21 [ 445.271456][ T2144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.271460][ T2144] Call Trace: [ 445.271545][ T2144] dump_stack+0x1d8/0x2f8 [ 445.271584][ T2144] print_address_description+0x6d/0x310 [ 445.304674][ T2144] __kasan_report+0x14b/0x1c0 [ 445.309361][ T2144] ? sk_psock_unlink+0x4fa/0x580 [ 445.314311][ T2144] kasan_report+0x26/0x50 [ 445.318726][ T2144] ? __local_bh_enable_ip+0x17d/0x240 [ 445.324104][ T2144] __asan_report_load4_noabort+0x14/0x20 [ 445.329743][ T2144] sk_psock_unlink+0x4fa/0x580 [ 445.334532][ T2144] ? sk_psock_link_pop+0x138/0x150 [ 445.339718][ T2144] ? tcp_check_oom+0x370/0x370 [ 445.339755][ T2144] tcp_bpf_close+0x183/0x2f0 [ 445.349173][ T2144] inet_release+0x158/0x1b0 [ 445.353743][ T2144] inet6_release+0x57/0x70 [ 445.358202][ T2144] sock_close+0xdb/0x280 [ 445.362451][ T2144] ? sock_mmap+0xa0/0xa0 [ 445.366748][ T2144] __fput+0x2e4/0x740 [ 445.370743][ T2144] ____fput+0x15/0x20 [ 445.374855][ T2144] task_work_run+0x17e/0x1b0 [ 445.379481][ T2144] prepare_exit_to_usermode+0x43a/0x560 [ 445.385038][ T2144] syscall_return_slowpath+0x110/0x440 [ 445.390505][ T2144] do_syscall_64+0x126/0x140 [ 445.395144][ T2144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.401040][ T2144] RIP: 0033:0x4134b1 [ 445.405195][ T2144] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 445.424974][ T2144] RSP: 002b:00007ffccd6963e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 445.433478][ T2144] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004134b1 [ 445.441489][ T2144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 445.449467][ T2144] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 445.457547][ T2144] R10: 00007ffccd6964c0 R11: 0000000000000293 R12: 000000000075bfc8 [ 445.465528][ T2144] R13: 000000000006cb04 R14: 00000000007610a8 R15: ffffffffffffffff [ 445.465545][ T2144] [ 445.465551][ T2144] Allocated by task 2149: [ 445.465566][ T2144] __kasan_kmalloc+0x11c/0x1b0 [ 445.465574][ T2144] kasan_kmalloc+0x9/0x10 [ 445.465588][ T2144] kmem_cache_alloc_trace+0x20b/0x2c0 [ 445.494661][ T2144] sock_map_alloc+0x156/0x3b0 [ 445.499409][ T2144] __do_sys_bpf+0x39ec/0xc5d0 [ 445.504087][ T2144] __x64_sys_bpf+0x7a/0x90 [ 445.508502][ T2144] do_syscall_64+0xfe/0x140 [ 445.513189][ T2144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.519249][ T2144] [ 445.521574][ T2144] Freed by task 30119: [ 445.525642][ T2144] __kasan_slab_free+0x12a/0x1e0 [ 445.530803][ T2144] kasan_slab_free+0xe/0x10 [ 445.536343][ T2144] kfree+0xae/0x120 [ 445.547537][ T2144] sock_map_free+0x276/0x2b0 [ 445.547548][ T2144] bpf_map_free_deferred+0xaf/0xd0 [ 445.547620][ T2144] process_one_work+0x82b/0x1140 [ 445.547634][ T2144] worker_thread+0xc01/0x1640 [ 445.572731][ T2144] kthread+0x325/0x350 [ 445.576800][ T2144] ret_from_fork+0x24/0x30 [ 445.581210][ T2144] [ 445.583539][ T2144] The buggy address belongs to the object at ffff8880a3736ac0 [ 445.583539][ T2144] which belongs to the cache kmalloc-512 of size 512 [ 445.597593][ T2144] The buggy address is located 24 bytes inside of [ 445.597593][ T2144] 512-byte region [ffff8880a3736ac0, ffff8880a3736cc0) [ 445.610798][ T2144] The buggy address belongs to the page: [ 445.616499][ T2144] page:ffffea00028dcd80 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0xffff8880a3736340 [ 445.627094][ T2144] flags: 0x1fffc0000000200(slab) [ 445.627117][ T2144] raw: 01fffc0000000200 ffffea00024e0588 ffffea0002a4bec8 ffff8880aa400940 [ 445.627128][ T2144] raw: ffff8880a3736340 ffff8880a37360c0 0000000100000002 0000000000000000 [ 445.627132][ T2144] page dumped because: kasan: bad access detected [ 445.627141][ T2144] [ 445.635548][ T3890] kobject: 'loop4' (0000000030a58a2a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 445.640646][ T2144] Memory state around the buggy address: [ 445.640657][ T2144] ffff8880a3736980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.640664][ T2144] ffff8880a3736a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 445.640671][ T2144] >ffff8880a3736a80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 445.640677][ T2144] ^ [ 445.640684][ T2144] ffff8880a3736b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.640691][ T2144] ffff8880a3736b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.640694][ T2144] ================================================================== [ 445.640698][ T2144] Disabling lock debugging due to kernel taint [ 445.641276][ T2144] Kernel panic - not syncing: panic_on_warn set ... [ 445.668755][ T3890] kobject: 'loop2' (0000000012548832): kobject_uevent_env [ 445.673993][ T2144] CPU: 1 PID: 2144 Comm: syz-executor.1 Tainted: G B 5.2.0+ #21 [ 445.673999][ T2144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.674010][ T2144] Call Trace: [ 445.693944][ T3890] kobject: 'loop2' (0000000012548832): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 445.698217][ T2144] dump_stack+0x1d8/0x2f8 [ 445.698229][ T2144] panic+0x28a/0x7c9 [ 445.698302][ T2144] ? check_preemption_disabled+0x3a/0x2a0 [ 445.698318][ T2144] ? __kasan_report+0x195/0x1c0 [ 445.759482][ T3890] kobject: 'loop0' (00000000738694d4): kobject_uevent_env [ 445.768330][ T2144] ? trace_hardirqs_on+0x34/0x80 [ 445.768346][ T2144] ? nmi_panic+0x97/0x97 [ 445.773182][ T3890] kobject: 'loop0' (00000000738694d4): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 445.781802][ T2144] ? ___preempt_schedule+0x16/0x18 [ 445.781813][ T2144] ? trace_hardirqs_on+0x34/0x80 [ 445.781822][ T2144] ? __kasan_report+0x195/0x1c0 [ 445.781831][ T2144] __kasan_report+0x1bb/0x1c0 [ 445.781847][ T2144] ? sk_psock_unlink+0x4fa/0x580 [ 445.874674][ T2144] kasan_report+0x26/0x50 [ 445.883463][ T2144] ? __local_bh_enable_ip+0x17d/0x240 [ 445.889278][ T2144] __asan_report_load4_noabort+0x14/0x20 [ 445.896037][ T2144] sk_psock_unlink+0x4fa/0x580 [ 445.904723][ T2144] ? sk_psock_link_pop+0x138/0x150 [ 445.912772][ T2144] ? tcp_check_oom+0x370/0x370 [ 445.918242][ T2144] tcp_bpf_close+0x183/0x2f0 [ 445.923204][ T2144] inet_release+0x158/0x1b0 [ 445.928008][ T2144] inet6_release+0x57/0x70 [ 445.933197][ T2144] sock_close+0xdb/0x280 [ 445.937421][ T2144] ? sock_mmap+0xa0/0xa0 [ 445.941650][ T2144] __fput+0x2e4/0x740 [ 445.946084][ T2144] ____fput+0x15/0x20 [ 445.950327][ T2144] task_work_run+0x17e/0x1b0 [ 445.955377][ T2144] prepare_exit_to_usermode+0x43a/0x560 [ 445.961459][ T2144] syscall_return_slowpath+0x110/0x440 [ 445.967358][ T2144] do_syscall_64+0x126/0x140 [ 445.972216][ T2144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.978105][ T2144] RIP: 0033:0x4134b1 [ 445.981996][ T2144] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 446.001597][ T2144] RSP: 002b:00007ffccd6963e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 446.009985][ T2144] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004134b1 [ 446.017931][ T2144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 446.025874][ T2144] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 446.033826][ T2144] R10: 00007ffccd6964c0 R11: 0000000000000293 R12: 000000000075bfc8 [ 446.041789][ T2144] R13: 000000000006cb04 R14: 00000000007610a8 R15: ffffffffffffffff [ 446.051444][ T2144] Kernel Offset: disabled [ 446.055941][ T2144] Rebooting in 86400 seconds..