[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 63.783496][ T26] audit: type=1800 audit(1563526269.508:25): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 63.826941][ T26] audit: type=1800 audit(1563526269.518:26): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 63.860903][ T26] audit: type=1800 audit(1563526269.518:27): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. 2019/07/19 08:51:21 parsed 1 programs 2019/07/19 08:51:24 executed programs: 0 syzkaller login: [ 78.593192][ T9178] IPVS: ftp: loaded support on port[0] = 21 [ 78.617468][ T9180] IPVS: ftp: loaded support on port[0] = 21 [ 78.682436][ T9183] IPVS: ftp: loaded support on port[0] = 21 [ 78.684359][ T9186] IPVS: ftp: loaded support on port[0] = 21 [ 78.700122][ T9185] IPVS: ftp: loaded support on port[0] = 21 [ 78.731614][ T9188] IPVS: ftp: loaded support on port[0] = 21 [ 78.925573][ T9178] chnl_net:caif_netlink_parms(): no params data found [ 79.039156][ T9180] chnl_net:caif_netlink_parms(): no params data found [ 79.107275][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.114354][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.123323][ T9178] device bridge_slave_0 entered promiscuous mode [ 79.178741][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.185827][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.193907][ T9178] device bridge_slave_1 entered promiscuous mode [ 79.221846][ T9183] chnl_net:caif_netlink_parms(): no params data found [ 79.230256][ T9186] chnl_net:caif_netlink_parms(): no params data found [ 79.299857][ T9185] chnl_net:caif_netlink_parms(): no params data found [ 79.311002][ T9178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.366873][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.374019][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.381842][ T9183] device bridge_slave_0 entered promiscuous mode [ 79.390992][ T9178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.400364][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.407515][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.415133][ T9180] device bridge_slave_0 entered promiscuous mode [ 79.425654][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.432769][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.440816][ T9180] device bridge_slave_1 entered promiscuous mode [ 79.459838][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.467010][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.474581][ T9183] device bridge_slave_1 entered promiscuous mode [ 79.491364][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 79.555210][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.562808][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.571274][ T9186] device bridge_slave_0 entered promiscuous mode [ 79.580858][ T9178] team0: Port device team_slave_0 added [ 79.591436][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.602374][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.622494][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.639629][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.647289][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.654960][ T9186] device bridge_slave_1 entered promiscuous mode [ 79.663425][ T9178] team0: Port device team_slave_1 added [ 79.679608][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.729219][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.736291][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.745094][ T9185] device bridge_slave_0 entered promiscuous mode [ 79.761377][ T9183] team0: Port device team_slave_0 added [ 79.840277][ T9178] device hsr_slave_0 entered promiscuous mode [ 79.897032][ T9178] device hsr_slave_1 entered promiscuous mode [ 79.977701][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.984776][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.993238][ T9185] device bridge_slave_1 entered promiscuous mode [ 80.001625][ T9183] team0: Port device team_slave_1 added [ 80.010319][ T9180] team0: Port device team_slave_0 added [ 80.016077][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.023318][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.033880][ T9188] device bridge_slave_0 entered promiscuous mode [ 80.042999][ T9186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.063138][ T9186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.087686][ T9185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.097989][ T9180] team0: Port device team_slave_1 added [ 80.105214][ T9185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.114544][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.122060][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.129946][ T9188] device bridge_slave_1 entered promiscuous mode [ 80.199929][ T9185] team0: Port device team_slave_0 added [ 80.209893][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.220709][ T9186] team0: Port device team_slave_0 added [ 80.235182][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.279908][ T9183] device hsr_slave_0 entered promiscuous mode [ 80.347016][ T9183] device hsr_slave_1 entered promiscuous mode [ 80.426838][ T9183] debugfs: Directory 'hsr0' with parent '/' already present! [ 80.435750][ T9185] team0: Port device team_slave_1 added [ 80.467658][ T9186] team0: Port device team_slave_1 added [ 80.538783][ T9180] device hsr_slave_0 entered promiscuous mode [ 80.577071][ T9180] device hsr_slave_1 entered promiscuous mode [ 80.626814][ T9180] debugfs: Directory 'hsr0' with parent '/' already present! [ 80.688671][ T9185] device hsr_slave_0 entered promiscuous mode [ 80.727115][ T9185] device hsr_slave_1 entered promiscuous mode [ 80.786809][ T9185] debugfs: Directory 'hsr0' with parent '/' already present! [ 80.818692][ T9188] team0: Port device team_slave_0 added [ 80.826110][ T9188] team0: Port device team_slave_1 added [ 80.909855][ T9186] device hsr_slave_0 entered promiscuous mode [ 80.957369][ T9186] device hsr_slave_1 entered promiscuous mode [ 81.026887][ T9186] debugfs: Directory 'hsr0' with parent '/' already present! [ 81.100185][ T9188] device hsr_slave_0 entered promiscuous mode [ 81.137290][ T9188] device hsr_slave_1 entered promiscuous mode [ 81.206807][ T9188] debugfs: Directory 'hsr0' with parent '/' already present! [ 81.301742][ T9178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.378731][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.387989][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.403560][ T9178] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.413345][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.456090][ T9180] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.475424][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.484870][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.492923][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.506016][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.522834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.531886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.540493][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.547698][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.555797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.565323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.573859][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.580949][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.601476][ T9186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.618650][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.627146][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.635218][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.644210][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.653292][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.660403][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.668816][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.676393][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.684126][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.692604][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.701214][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.709709][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.716809][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.724473][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.733383][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.741128][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.751244][ T9188] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.771682][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.787732][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.796454][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.805403][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.813869][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.824019][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.845271][ T9186] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.861337][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.870008][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.880441][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.889296][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.897607][ T9196] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.904717][ T9196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.912371][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.921037][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.929478][ T9196] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.936500][ T9196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.944128][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.952586][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.961017][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.970150][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.979062][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.987524][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.995675][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.003931][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.012195][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.020268][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.051680][ T9180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.064026][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.077918][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.086619][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.095244][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.102332][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.113360][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.122242][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.131088][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.139555][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.146588][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.154259][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.162757][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.171260][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.178436][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.186961][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.195470][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.204876][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.214856][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.223147][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.232400][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.252497][ T9185] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.272373][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.281381][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.291137][ T2823] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.298245][ T2823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.305755][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.314898][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.322744][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.330342][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.339236][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.347947][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.356323][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.365729][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.374333][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.383219][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.412291][ T9186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.428195][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.458071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.466634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.476052][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.484867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.493286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.502360][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.510761][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.519654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.528358][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.537058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.545337][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.554318][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.562941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.571333][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.578434][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.585883][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.594526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.603140][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.611948][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.620432][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.627544][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.635032][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.643666][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.651994][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.660829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.669134][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.687064][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.694982][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.703096][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.711480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.720561][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.730217][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.739180][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.767025][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.775828][ T9183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.787466][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.795914][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.804612][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.813246][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.821582][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.832537][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.847644][ T9186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.904171][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.929858][ T9178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.938875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.953583][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.963031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.972314][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.981205][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.999497][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.021836][ T9185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.046518][ T9185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.068911][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.079706][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.091124][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.100642][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.110798][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.121167][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.192831][ T9185] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/19 08:51:29 executed programs: 10 2019/07/19 08:51:34 executed programs: 204 [ 92.326183][ T9804] ================================================================== [ 92.334432][ T9804] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 92.341714][ T9804] Read of size 4 at addr ffff8880a456e558 by task syz-executor.1/9804 [ 92.349859][ T9804] [ 92.352197][ T9804] CPU: 0 PID: 9804 Comm: syz-executor.1 Not tainted 5.2.0+ #69 [ 92.359739][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.369793][ T9804] Call Trace: [ 92.373094][ T9804] dump_stack+0x172/0x1f0 [ 92.377436][ T9804] ? sk_psock_unlink+0x3dd/0x4b0 [ 92.382386][ T9804] ? tcp_check_oom+0x560/0x560 [ 92.387163][ T9804] print_address_description.cold+0xd4/0x306 [ 92.393152][ T9804] ? sk_psock_unlink+0x3dd/0x4b0 [ 92.398094][ T9804] ? sk_psock_unlink+0x3dd/0x4b0 [ 92.403041][ T9804] ? tcp_check_oom+0x560/0x560 [ 92.407816][ T9804] __kasan_report.cold+0x1b/0x36 [ 92.412768][ T9804] ? sk_psock_unlink+0x3dd/0x4b0 [ 92.417719][ T9804] kasan_report+0x12/0x17 [ 92.422145][ T9804] __asan_report_load4_noabort+0x14/0x20 [ 92.427786][ T9804] sk_psock_unlink+0x3dd/0x4b0 [ 92.432554][ T9804] ? sk_psock_link_pop+0x186/0x1f0 [ 92.437667][ T9804] ? tcp_check_oom+0x560/0x560 [ 92.437690][ T9804] tcp_bpf_remove+0x21/0x50 [ 92.437705][ T9804] tcp_bpf_close+0x130/0x390 [ 92.437725][ T9804] tls_sk_proto_close+0x2f8/0x6b0 [ 92.437739][ T9804] ? __sock_release+0x89/0x280 [ 92.461421][ T9804] ? tcp_bpf_recvmsg+0xa70/0xa70 [ 92.466362][ T9804] ? wait_on_pending_writer+0x420/0x420 [ 92.471919][ T9804] ? ip_mc_drop_socket+0x211/0x270 [ 92.477037][ T9804] ? down_write+0xdf/0x150 [ 92.481477][ T9804] inet_release+0xed/0x200 [ 92.485904][ T9804] inet6_release+0x53/0x80 [ 92.490328][ T9804] __sock_release+0xce/0x280 [ 92.494928][ T9804] sock_close+0x1e/0x30 [ 92.499093][ T9804] __fput+0x2ff/0x890 [ 92.503088][ T9804] ? __sock_release+0x280/0x280 [ 92.507949][ T9804] ____fput+0x16/0x20 [ 92.511936][ T9804] task_work_run+0x145/0x1c0 [ 92.516541][ T9804] exit_to_usermode_loop+0x316/0x380 [ 92.521834][ T9804] do_syscall_64+0x5a9/0x6a0 [ 92.526447][ T9804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.532340][ T9804] RIP: 0033:0x4134e0 [ 92.536238][ T9804] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ad 2d 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 92.555839][ T9804] RSP: 002b:00007ffd115a5df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 92.564251][ T9804] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004134e0 [ 92.572225][ T9804] RDX: 0000001b31c20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 92.580198][ T9804] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 92.588169][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 92.596136][ T9804] R13: 0000000000000005 R14: 0000000000761178 R15: ffffffffffffffff [ 92.596158][ T9804] [ 92.606437][ T9804] Allocated by task 9804: [ 92.610773][ T9804] save_stack+0x23/0x90 [ 92.614935][ T9804] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 92.620570][ T9804] kasan_kmalloc+0x9/0x10 [ 92.624898][ T9804] kmem_cache_alloc_trace+0x158/0x790 [ 92.624914][ T9804] sock_hash_alloc+0x1e3/0x5b0 [ 92.624929][ T9804] __do_sys_bpf+0x475/0x42f0 [ 92.624942][ T9804] __x64_sys_bpf+0x73/0xb0 [ 92.624957][ T9804] do_syscall_64+0xfd/0x6a0 [ 92.624976][ T9804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.654429][ T9804] [ 92.656754][ T9804] Freed by task 9385: [ 92.660745][ T9804] save_stack+0x23/0x90 [ 92.664906][ T9804] __kasan_slab_free+0x102/0x150 [ 92.669847][ T9804] kasan_slab_free+0xe/0x10 [ 92.674354][ T9804] kfree+0x10a/0x2c0 [ 92.678255][ T9804] sock_hash_free+0x327/0x4a0 [ 92.682937][ T9804] bpf_map_free_deferred+0xb3/0x100 [ 92.688144][ T9804] process_one_work+0x9af/0x1740 [ 92.693518][ T9804] worker_thread+0x98/0xe40 [ 92.698019][ T9804] kthread+0x361/0x430 [ 92.702101][ T9804] ret_from_fork+0x24/0x30 [ 92.706510][ T9804] [ 92.708838][ T9804] The buggy address belongs to the object at ffff8880a456e540 [ 92.708838][ T9804] which belongs to the cache kmalloc-512 of size 512 [ 92.722893][ T9804] The buggy address is located 24 bytes inside of [ 92.722893][ T9804] 512-byte region [ffff8880a456e540, ffff8880a456e740) [ 92.736074][ T9804] The buggy address belongs to the page: [ 92.736090][ T9804] page:ffffea0002915b80 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0xffff8880a456e2c0 [ 92.736102][ T9804] flags: 0x1fffc0000000200(slab) [ 92.736127][ T9804] raw: 01fffc0000000200 ffffea000274a448 ffffea000263e988 ffff8880aa400a80 [ 92.752151][ T9804] raw: ffff8880a456e2c0 ffff8880a456e040 0000000100000005 0000000000000000 [ 92.752158][ T9804] page dumped because: kasan: bad access detected [ 92.752162][ T9804] [ 92.752167][ T9804] Memory state around the buggy address: [ 92.752181][ T9804] ffff8880a456e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.752191][ T9804] ffff8880a456e480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 92.752203][ T9804] >ffff8880a456e500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 92.752209][ T9804] ^ [ 92.752220][ T9804] ffff8880a456e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.752237][ T9804] ffff8880a456e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.812759][ T9804] ================================================================== [ 92.822248][ T3900] kobject: 'loop5' (000000009543fd26): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 92.827740][ T9804] Disabling lock debugging due to kernel taint [ 92.839950][ T9804] Kernel panic - not syncing: panic_on_warn set ... [ 92.854482][ T3900] kobject: 'loop4' (000000006b6adbfe): kobject_uevent_env [ 92.860193][ T9804] CPU: 0 PID: 9804 Comm: syz-executor.1 Tainted: G B 5.2.0+ #69 [ 92.860201][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.860206][ T9804] Call Trace: [ 92.860229][ T9804] dump_stack+0x172/0x1f0 [ 92.881843][ T3900] kobject: 'loop4' (000000006b6adbfe): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 92.882821][ T9804] ? tcp_check_oom+0x560/0x560 [ 92.915314][ T9804] panic+0x2dc/0x755 [ 92.919214][ T9804] ? add_taint.cold+0x16/0x16 [ 92.923885][ T9804] ? sk_psock_unlink+0x3dd/0x4b0 [ 92.928804][ T9804] ? tcp_check_oom+0x560/0x560 [ 92.933540][ T9804] ? preempt_schedule+0x4b/0x60 [ 92.938369][ T9804] ? ___preempt_schedule+0x16/0x18 [ 92.943467][ T9804] ? trace_hardirqs_on+0x5e/0x240 [ 92.948469][ T9804] ? sk_psock_unlink+0x3dd/0x4b0 [ 92.953379][ T9804] ? tcp_check_oom+0x560/0x560 [ 92.958117][ T9804] end_report+0x47/0x4f [ 92.962245][ T9804] ? sk_psock_unlink+0x3dd/0x4b0 [ 92.967160][ T9804] __kasan_report.cold+0xe/0x36 [ 92.971992][ T9804] ? sk_psock_unlink+0x3dd/0x4b0 [ 92.976906][ T9804] kasan_report+0x12/0x17 [ 92.981211][ T9804] __asan_report_load4_noabort+0x14/0x20 [ 92.986819][ T9804] sk_psock_unlink+0x3dd/0x4b0 [ 92.991563][ T9804] ? sk_psock_link_pop+0x186/0x1f0 [ 92.996648][ T9804] ? tcp_check_oom+0x560/0x560 [ 93.001387][ T9804] tcp_bpf_remove+0x21/0x50 [ 93.005864][ T9804] tcp_bpf_close+0x130/0x390 [ 93.010432][ T9804] tls_sk_proto_close+0x2f8/0x6b0 [ 93.015468][ T9804] ? __sock_release+0x89/0x280 [ 93.020210][ T9804] ? tcp_bpf_recvmsg+0xa70/0xa70 [ 93.025122][ T9804] ? wait_on_pending_writer+0x420/0x420 [ 93.030643][ T9804] ? ip_mc_drop_socket+0x211/0x270 [ 93.035773][ T9804] ? down_write+0xdf/0x150 [ 93.040166][ T9804] inet_release+0xed/0x200 [ 93.044561][ T9804] inet6_release+0x53/0x80 [ 93.048958][ T9804] __sock_release+0xce/0x280 [ 93.053522][ T9804] sock_close+0x1e/0x30 [ 93.057654][ T9804] __fput+0x2ff/0x890 [ 93.061614][ T9804] ? __sock_release+0x280/0x280 [ 93.066456][ T9804] ____fput+0x16/0x20 [ 93.070414][ T9804] task_work_run+0x145/0x1c0 [ 93.074983][ T9804] exit_to_usermode_loop+0x316/0x380 [ 93.080244][ T9804] do_syscall_64+0x5a9/0x6a0 [ 93.084808][ T9804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.090695][ T9804] RIP: 0033:0x4134e0 [ 93.094571][ T9804] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ad 2d 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 93.114870][ T9804] RSP: 002b:00007ffd115a5df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 93.123259][ T9804] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004134e0 [ 93.131202][ T9804] RDX: 0000001b31c20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 93.139148][ T9804] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 93.147092][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 93.155065][ T9804] R13: 0000000000000005 R14: 0000000000761178 R15: ffffffffffffffff [ 93.163923][ T9804] Kernel Offset: disabled [ 93.168244][ T9804] Rebooting in 86400 seconds..