[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.774812][ T26] audit: type=1800 audit(1571161719.861:25): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.796138][ T26] audit: type=1800 audit(1571161719.871:26): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.836479][ T26] audit: type=1800 audit(1571161719.871:27): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.244' (ECDSA) to the list of known hosts. 2019/10/15 17:50:37 parsed 1 programs 2019/10/15 17:50:40 executed programs: 0 syzkaller login: [ 175.348869][ T8760] IPVS: ftp: loaded support on port[0] = 21 [ 175.365417][ T8764] IPVS: ftp: loaded support on port[0] = 21 [ 175.365442][ T8765] IPVS: ftp: loaded support on port[0] = 21 [ 175.384598][ T8755] IPVS: ftp: loaded support on port[0] = 21 [ 175.392587][ T8759] IPVS: ftp: loaded support on port[0] = 21 [ 175.402350][ T8763] IPVS: ftp: loaded support on port[0] = 21 [ 175.596486][ T8760] chnl_net:caif_netlink_parms(): no params data found [ 175.708168][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 175.740673][ T8765] chnl_net:caif_netlink_parms(): no params data found [ 175.774670][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.782400][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.790392][ T8760] device bridge_slave_0 entered promiscuous mode [ 175.813249][ T8764] chnl_net:caif_netlink_parms(): no params data found [ 175.843847][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.853219][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.861032][ T8760] device bridge_slave_1 entered promiscuous mode [ 175.916039][ T8760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.932015][ T8763] chnl_net:caif_netlink_parms(): no params data found [ 175.948247][ T8759] chnl_net:caif_netlink_parms(): no params data found [ 175.965346][ T8760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.996297][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.004043][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.012438][ T8765] device bridge_slave_0 entered promiscuous mode [ 176.024412][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.031557][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.039785][ T8765] device bridge_slave_1 entered promiscuous mode [ 176.050826][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.059198][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.067130][ T8755] device bridge_slave_0 entered promiscuous mode [ 176.104637][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.112611][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.120900][ T8755] device bridge_slave_1 entered promiscuous mode [ 176.150757][ T8760] team0: Port device team_slave_0 added [ 176.156884][ T8764] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.163939][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.171749][ T8764] device bridge_slave_0 entered promiscuous mode [ 176.183474][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.190824][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.199031][ T8764] device bridge_slave_1 entered promiscuous mode [ 176.213351][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.220856][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.228598][ T8763] device bridge_slave_0 entered promiscuous mode [ 176.237499][ T8765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.249327][ T8765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.259953][ T8760] team0: Port device team_slave_1 added [ 176.266302][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.273629][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.281925][ T8759] device bridge_slave_0 entered promiscuous mode [ 176.294142][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.301357][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.309455][ T8759] device bridge_slave_1 entered promiscuous mode [ 176.317896][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.327169][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.334212][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.342760][ T8763] device bridge_slave_1 entered promiscuous mode [ 176.372200][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.387338][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.415685][ T8764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.427281][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.456792][ T8755] team0: Port device team_slave_0 added [ 176.463758][ T8765] team0: Port device team_slave_0 added [ 176.470721][ T8764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.481870][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.548727][ T8760] device hsr_slave_0 entered promiscuous mode [ 176.606679][ T8760] device hsr_slave_1 entered promiscuous mode [ 176.667799][ T8765] team0: Port device team_slave_1 added [ 176.674687][ T8755] team0: Port device team_slave_1 added [ 176.688696][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.703691][ T8763] team0: Port device team_slave_0 added [ 176.741564][ T8759] team0: Port device team_slave_0 added [ 176.748443][ T8763] team0: Port device team_slave_1 added [ 176.755017][ T8759] team0: Port device team_slave_1 added [ 176.819589][ T8765] device hsr_slave_0 entered promiscuous mode [ 176.856777][ T8765] device hsr_slave_1 entered promiscuous mode [ 176.906552][ T8765] debugfs: Directory 'hsr0' with parent '/' already present! [ 176.915361][ T8764] team0: Port device team_slave_0 added [ 176.922676][ T8764] team0: Port device team_slave_1 added [ 177.009456][ T8759] device hsr_slave_0 entered promiscuous mode [ 177.046885][ T8759] device hsr_slave_1 entered promiscuous mode [ 177.106462][ T8759] debugfs: Directory 'hsr0' with parent '/' already present! [ 177.159466][ T8755] device hsr_slave_0 entered promiscuous mode [ 177.226805][ T8755] device hsr_slave_1 entered promiscuous mode [ 177.279770][ T8755] debugfs: Directory 'hsr0' with parent '/' already present! [ 177.358331][ T8763] device hsr_slave_0 entered promiscuous mode [ 177.416907][ T8763] device hsr_slave_1 entered promiscuous mode [ 177.456667][ T8763] debugfs: Directory 'hsr0' with parent '/' already present! [ 177.519769][ T8764] device hsr_slave_0 entered promiscuous mode [ 177.566858][ T8764] device hsr_slave_1 entered promiscuous mode [ 177.606613][ T8764] debugfs: Directory 'hsr0' with parent '/' already present! [ 177.689589][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.732206][ T8760] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.754633][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.763616][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.777956][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.808316][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.818073][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.826627][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.833861][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.842465][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.852043][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.860546][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.867632][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.875142][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.883897][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.892923][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.914556][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.926128][ T8765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.943173][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.950392][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.958981][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.967883][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.976733][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.985083][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.005513][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.025982][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.038774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.048022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.055720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.063713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.072203][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.081227][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.090252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.098236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.107875][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.119154][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.131228][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.141285][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.150370][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.159134][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.168043][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.175198][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.185074][ T8765] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.203275][ T8760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.215123][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.225299][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.236001][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.244528][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.254856][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.263758][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.272726][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.281806][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.290617][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.297758][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.325905][ T8764] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.336178][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.344159][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.352754][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.361183][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.368272][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.376224][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.385250][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.393723][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.400837][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.408664][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.417440][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.426114][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.433206][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.440836][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.449774][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.458211][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.465233][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.472862][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.481468][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.491321][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.500244][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.509061][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.517579][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.524617][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.532438][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.541385][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.550455][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.559237][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.567728][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.574782][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.583288][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.591383][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.599391][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.635605][ T8759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.649371][ T8759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.670285][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.681648][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.691604][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.698723][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.707368][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.715984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.724602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.733213][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.742150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.751204][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.760283][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.769013][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.777723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.786237][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.794671][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.803554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.812273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.820893][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.829591][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.837205][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.844817][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.854236][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.863326][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.905359][ T8755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.916401][ T8755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.932655][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.943995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.951654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.960516][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.969177][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.977937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.986170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.994549][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.003596][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.012006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.021562][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.030005][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.038722][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.047141][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.055557][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.064969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.073333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.081731][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.090363][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.099047][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.107737][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.116102][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.125080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.133587][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.142368][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.150783][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.159255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.167550][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.175727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.183870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.192479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.206047][ T8764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.218542][ T8764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.241379][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.250021][ T8772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.273044][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.285502][ T8760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.304488][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.313112][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.337045][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.354402][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.363078][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.372342][ T8765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.390486][ T8763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.420426][ T8764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.453409][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.474300][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.689815][ C1] hrtimer: interrupt took 46965 ns 2019/10/15 17:50:45 executed programs: 10 2019/10/15 17:50:50 executed programs: 82 2019/10/15 17:50:55 executed programs: 153 2019/10/15 17:51:00 executed programs: 220 2019/10/15 17:51:05 executed programs: 290 2019/10/15 17:51:10 executed programs: 359 2019/10/15 17:51:15 executed programs: 428 2019/10/15 17:51:20 executed programs: 496 2019/10/15 17:51:26 executed programs: 565 2019/10/15 17:51:31 executed programs: 631 2019/10/15 17:51:36 executed programs: 703 2019/10/15 17:51:41 executed programs: 776 2019/10/15 17:51:46 executed programs: 850 2019/10/15 17:51:51 executed programs: 920 2019/10/15 17:51:56 executed programs: 988 2019/10/15 17:52:01 executed programs: 1060 2019/10/15 17:52:06 executed programs: 1130 2019/10/15 17:52:11 executed programs: 1203 2019/10/15 17:52:16 executed programs: 1276 2019/10/15 17:52:21 executed programs: 1347 2019/10/15 17:52:26 executed programs: 1418 2019/10/15 17:52:31 executed programs: 1493 2019/10/15 17:52:36 executed programs: 1566 2019/10/15 17:52:41 executed programs: 1638 2019/10/15 17:52:47 executed programs: 1716 2019/10/15 17:52:52 executed programs: 1791 2019/10/15 17:52:57 executed programs: 1869 2019/10/15 17:53:02 executed programs: 1945 2019/10/15 17:53:07 executed programs: 2021 2019/10/15 17:53:12 executed programs: 2094 2019/10/15 17:53:17 executed programs: 2173 2019/10/15 17:53:22 executed programs: 2249 2019/10/15 17:53:27 executed programs: 2323 2019/10/15 17:53:32 executed programs: 2399 2019/10/15 17:53:37 executed programs: 2471 2019/10/15 17:53:42 executed programs: 2545 2019/10/15 17:53:47 executed programs: 2621 2019/10/15 17:53:52 executed programs: 2695 2019/10/15 17:53:57 executed programs: 2774 2019/10/15 17:54:02 executed programs: 2853 2019/10/15 17:54:07 executed programs: 2932 2019/10/15 17:54:12 executed programs: 3008 2019/10/15 17:54:18 executed programs: 3088 2019/10/15 17:54:23 executed programs: 3168 2019/10/15 17:54:28 executed programs: 3246 2019/10/15 17:54:33 executed programs: 3320 2019/10/15 17:54:38 executed programs: 3395 2019/10/15 17:54:43 executed programs: 3466 2019/10/15 17:54:48 executed programs: 3541 2019/10/15 17:54:53 executed programs: 3615 2019/10/15 17:54:58 executed programs: 3690 2019/10/15 17:55:03 executed programs: 3766 2019/10/15 17:55:08 executed programs: 3839 2019/10/15 17:55:13 executed programs: 3913 2019/10/15 17:55:18 executed programs: 3989 2019/10/15 17:55:23 executed programs: 4064 2019/10/15 17:55:28 executed programs: 4143 2019/10/15 17:55:33 executed programs: 4217 2019/10/15 17:55:38 executed programs: 4286 2019/10/15 17:55:43 executed programs: 4358 2019/10/15 17:55:49 executed programs: 4433 2019/10/15 17:55:54 executed programs: 4509 2019/10/15 17:55:59 executed programs: 4587 2019/10/15 17:56:04 executed programs: 4659 2019/10/15 17:56:09 executed programs: 4727 2019/10/15 17:56:14 executed programs: 4795 2019/10/15 17:56:19 executed programs: 4862 2019/10/15 17:56:24 executed programs: 4926 2019/10/15 17:56:29 executed programs: 4993 2019/10/15 17:56:34 executed programs: 5063 2019/10/15 17:56:39 executed programs: 5136 2019/10/15 17:56:44 executed programs: 5203 2019/10/15 17:56:49 executed programs: 5273 2019/10/15 17:56:54 executed programs: 5347 2019/10/15 17:56:59 executed programs: 5417 2019/10/15 17:57:04 executed programs: 5488 [ 560.541212][ T6243] ================================================================== [ 560.549889][ T6243] BUG: KASAN: use-after-free in do_mount+0x1b5f/0x1d10 [ 560.556977][ T6243] Read of size 8 at addr ffff8880972929a8 by task syz-executor.1/6243 [ 560.565129][ T6243] [ 560.567485][ T6243] CPU: 0 PID: 6243 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 560.575279][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.585325][ T6243] Call Trace: [ 560.588686][ T6243] dump_stack+0x172/0x1f0 [ 560.593014][ T6243] ? do_mount+0x1b5f/0x1d10 [ 560.597517][ T6243] print_address_description.constprop.0.cold+0xd4/0x30b [ 560.604542][ T6243] ? do_mount+0x1b5f/0x1d10 [ 560.609042][ T6243] ? do_mount+0x1b5f/0x1d10 [ 560.613712][ T6243] __kasan_report.cold+0x1b/0x41 [ 560.618670][ T6243] ? unlock_mount+0x50/0xa0 [ 560.623184][ T6243] ? do_mount+0x1b5f/0x1d10 [ 560.627687][ T6243] kasan_report+0x12/0x20 [ 560.632011][ T6243] __asan_report_load8_noabort+0x14/0x20 [ 560.637724][ T6243] do_mount+0x1b5f/0x1d10 [ 560.642052][ T6243] ? copy_mount_string+0x40/0x40 [ 560.646986][ T6243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 560.653220][ T6243] ? _copy_from_user+0x12c/0x1a0 [ 560.658154][ T6243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 560.664384][ T6243] ? copy_mount_options+0x2e8/0x3f0 [ 560.670047][ T6243] ksys_mount+0xdb/0x150 [ 560.675018][ T6243] __x64_sys_mount+0xbe/0x150 [ 560.679693][ T6243] do_syscall_64+0xfa/0x760 [ 560.684442][ T6243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 560.690566][ T6243] RIP: 0033:0x459a59 [ 560.694454][ T6243] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 560.714109][ T6243] RSP: 002b:00007fea83ea6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 560.722799][ T6243] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459a59 [ 560.730767][ T6243] RDX: 0000000020000a40 RSI: 00000000200005c0 RDI: 0000000000000000 [ 560.738817][ T6243] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 560.746843][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fea83ea76d4 [ 560.754814][ T6243] R13: 00000000004c6293 R14: 00000000004db2f8 R15: 00000000ffffffff [ 560.762915][ T6243] [ 560.765238][ T6243] Allocated by task 6243: [ 560.769570][ T6243] save_stack+0x23/0x90 [ 560.773824][ T6243] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 560.779450][ T6243] kasan_slab_alloc+0xf/0x20 [ 560.784032][ T6243] kmem_cache_alloc+0x121/0x710 [ 560.788870][ T6243] alloc_vfsmnt+0x28/0x680 [ 560.793281][ T6243] vfs_create_mount+0x96/0x500 [ 560.798037][ T6243] do_mount+0x17ae/0x1d10 [ 560.802361][ T6243] ksys_mount+0xdb/0x150 [ 560.806595][ T6243] __x64_sys_mount+0xbe/0x150 [ 560.811273][ T6243] do_syscall_64+0xfa/0x760 [ 560.815819][ T6243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 560.821707][ T6243] [ 560.824024][ T6243] Freed by task 16: [ 560.827823][ T6243] save_stack+0x23/0x90 [ 560.831967][ T6243] __kasan_slab_free+0x102/0x150 [ 560.836967][ T6243] kasan_slab_free+0xe/0x10 [ 560.841464][ T6243] kmem_cache_free+0x86/0x320 [ 560.846131][ T6243] free_vfsmnt+0x6f/0x90 [ 560.850366][ T6243] delayed_free_vfsmnt+0x16/0x20 [ 560.855299][ T6243] rcu_core+0x581/0x1560 [ 560.859596][ T6243] rcu_core_si+0x9/0x10 [ 560.863801][ T6243] __do_softirq+0x262/0x98c [ 560.868294][ T6243] [ 560.870616][ T6243] The buggy address belongs to the object at ffff888097292980 [ 560.870616][ T6243] which belongs to the cache mnt_cache of size 312 [ 560.884818][ T6243] The buggy address is located 40 bytes inside of [ 560.884818][ T6243] 312-byte region [ffff888097292980, ffff888097292ab8) [ 560.897995][ T6243] The buggy address belongs to the page: [ 560.903622][ T6243] page:ffffea00025ca480 refcount:1 mapcount:0 mapping:ffff8880aa5a88c0 index:0x0 [ 560.912866][ T6243] flags: 0x1fffc0000000200(slab) [ 560.917801][ T6243] raw: 01fffc0000000200 ffffea0002a4d148 ffffea00020c4e48 ffff8880aa5a88c0 [ 560.926381][ T6243] raw: 0000000000000000 ffff888097292080 000000010000000a 0000000000000000 [ 560.935299][ T6243] page dumped because: kasan: bad access detected [ 560.941820][ T6243] [ 560.944140][ T6243] Memory state around the buggy address: [ 560.949823][ T6243] ffff888097292880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.957898][ T6243] ffff888097292900: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 560.965957][ T6243] >ffff888097292980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.974014][ T6243] ^ [ 560.979382][ T6243] ffff888097292a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 560.987527][ T6243] ffff888097292a80: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 560.995592][ T6243] ================================================================== [ 561.003641][ T6243] Disabling lock debugging due to kernel taint [ 561.194557][ T6243] Kernel panic - not syncing: panic_on_warn set ... [ 561.201566][ T6243] CPU: 1 PID: 6243 Comm: syz-executor.1 Tainted: G B 5.4.0-rc3+ #0 [ 561.210773][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.220930][ T6243] Call Trace: [ 561.224348][ T6243] dump_stack+0x172/0x1f0 [ 561.228712][ T6243] panic+0x2e3/0x75c [ 561.232701][ T6243] ? add_taint.cold+0x16/0x16 [ 561.237548][ T6243] ? do_mount+0x1b5f/0x1d10 [ 561.242375][ T6243] ? preempt_schedule+0x4b/0x60 [ 561.247259][ T6243] ? ___preempt_schedule+0x16/0x20 [ 561.252704][ T6243] ? trace_hardirqs_on+0x5e/0x240 [ 561.258654][ T6243] ? do_mount+0x1b5f/0x1d10 [ 561.263574][ T6243] end_report+0x47/0x4f [ 561.267948][ T6243] ? do_mount+0x1b5f/0x1d10 [ 561.272940][ T6243] __kasan_report.cold+0xe/0x41 [ 561.278216][ T6243] ? unlock_mount+0x50/0xa0 [ 561.282710][ T6243] ? do_mount+0x1b5f/0x1d10 [ 561.287397][ T6243] kasan_report+0x12/0x20 [ 561.291735][ T6243] __asan_report_load8_noabort+0x14/0x20 [ 561.297663][ T6243] do_mount+0x1b5f/0x1d10 [ 561.302002][ T6243] ? copy_mount_string+0x40/0x40 [ 561.307066][ T6243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 561.313319][ T6243] ? _copy_from_user+0x12c/0x1a0 [ 561.318269][ T6243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 561.324521][ T6243] ? copy_mount_options+0x2e8/0x3f0 [ 561.329907][ T6243] ksys_mount+0xdb/0x150 [ 561.334159][ T6243] __x64_sys_mount+0xbe/0x150 [ 561.338849][ T6243] do_syscall_64+0xfa/0x760 [ 561.343356][ T6243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.349360][ T6243] RIP: 0033:0x459a59 [ 561.353422][ T6243] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 561.373275][ T6243] RSP: 002b:00007fea83ea6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 561.381950][ T6243] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459a59 [ 561.389949][ T6243] RDX: 0000000020000a40 RSI: 00000000200005c0 RDI: 0000000000000000 [ 561.397930][ T6243] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 561.405914][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fea83ea76d4 [ 561.413894][ T6243] R13: 00000000004c6293 R14: 00000000004db2f8 R15: 00000000ffffffff [ 561.423844][ T6243] Kernel Offset: disabled [ 561.428336][ T6243] Rebooting in 86400 seconds..