[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 70.534558][ T24] audit: type=1800 audit(1575582004.044:25): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 70.563699][ T24] audit: type=1800 audit(1575582004.044:26): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 70.563722][ T24] audit: type=1800 audit(1575582004.044:27): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. 2019/12/05 21:44:35 parsed 1 programs 2019/12/05 21:44:38 executed programs: 0 syzkaller login: [ 345.003258][ T9019] IPVS: ftp: loaded support on port[0] = 21 [ 345.036287][ T9017] IPVS: ftp: loaded support on port[0] = 21 [ 345.037672][ T9027] IPVS: ftp: loaded support on port[0] = 21 [ 345.069207][ T9023] IPVS: ftp: loaded support on port[0] = 21 [ 345.087691][ T9026] IPVS: ftp: loaded support on port[0] = 21 [ 345.096735][ T9022] IPVS: ftp: loaded support on port[0] = 21 [ 345.371859][ T9017] chnl_net:caif_netlink_parms(): no params data found [ 345.399361][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 345.430434][ T9017] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.438076][ T9017] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.446114][ T9017] device bridge_slave_0 entered promiscuous mode [ 345.462193][ T9023] chnl_net:caif_netlink_parms(): no params data found [ 345.511878][ T9017] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.519523][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.528537][ T9017] device bridge_slave_1 entered promiscuous mode [ 345.561263][ T9027] chnl_net:caif_netlink_parms(): no params data found [ 345.607516][ T9026] chnl_net:caif_netlink_parms(): no params data found [ 345.634094][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.642111][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.650348][ T9019] device bridge_slave_0 entered promiscuous mode [ 345.661065][ T9017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.672604][ T9017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.691050][ T9022] chnl_net:caif_netlink_parms(): no params data found [ 345.706119][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.713196][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.721320][ T9019] device bridge_slave_1 entered promiscuous mode [ 345.778260][ T9017] team0: Port device team_slave_0 added [ 345.785271][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.792354][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.800957][ T9023] device bridge_slave_0 entered promiscuous mode [ 345.812507][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.819670][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.827502][ T9023] device bridge_slave_1 entered promiscuous mode [ 345.851435][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.862823][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.870673][ T9027] device bridge_slave_0 entered promiscuous mode [ 345.882349][ T9017] team0: Port device team_slave_1 added [ 345.900411][ T9023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.912403][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.921970][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.931018][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.941156][ T9026] device bridge_slave_0 entered promiscuous mode [ 345.948894][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.956746][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.964561][ T9027] device bridge_slave_1 entered promiscuous mode [ 345.992078][ T9023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.009695][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.019025][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.026607][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.035236][ T9026] device bridge_slave_1 entered promiscuous mode [ 346.075607][ T9023] team0: Port device team_slave_0 added [ 346.088269][ T9023] team0: Port device team_slave_1 added [ 346.102207][ T9027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.146905][ T9017] device hsr_slave_0 entered promiscuous mode [ 346.183937][ T9017] device hsr_slave_1 entered promiscuous mode [ 346.238693][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.249564][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.256960][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.265566][ T9022] device bridge_slave_0 entered promiscuous mode [ 346.274285][ T9027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.290440][ T9019] team0: Port device team_slave_0 added [ 346.308469][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.322865][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.334039][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.341866][ T9022] device bridge_slave_1 entered promiscuous mode [ 346.373762][ T9019] team0: Port device team_slave_1 added [ 346.388609][ T9026] team0: Port device team_slave_0 added [ 346.421421][ T9026] team0: Port device team_slave_1 added [ 346.465591][ T9023] device hsr_slave_0 entered promiscuous mode [ 346.524448][ T9023] device hsr_slave_1 entered promiscuous mode [ 346.603545][ T9023] debugfs: Directory 'hsr0' with parent '/' already present! [ 346.613580][ T9027] team0: Port device team_slave_0 added [ 346.630620][ T9022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.658592][ T9027] team0: Port device team_slave_1 added [ 346.664763][ T9017] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 346.717126][ T9022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.776908][ T9019] device hsr_slave_0 entered promiscuous mode [ 346.823926][ T9019] device hsr_slave_1 entered promiscuous mode [ 346.883558][ T9019] debugfs: Directory 'hsr0' with parent '/' already present! [ 346.956985][ T9026] device hsr_slave_0 entered promiscuous mode [ 347.014020][ T9026] device hsr_slave_1 entered promiscuous mode [ 347.073495][ T9026] debugfs: Directory 'hsr0' with parent '/' already present! [ 347.082049][ T9017] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.148676][ T9017] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.198333][ T9022] team0: Port device team_slave_0 added [ 347.226088][ T9017] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.291332][ T9022] team0: Port device team_slave_1 added [ 347.346721][ T9027] device hsr_slave_0 entered promiscuous mode [ 347.384737][ T9027] device hsr_slave_1 entered promiscuous mode [ 347.423503][ T9027] debugfs: Directory 'hsr0' with parent '/' already present! [ 347.431175][ T9023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.478017][ T9023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.536557][ T9023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.598502][ T9023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.692847][ T9026] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 347.765630][ T9026] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.834529][ T9026] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.865299][ T9026] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.926917][ T9019] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.026881][ T9022] device hsr_slave_0 entered promiscuous mode [ 348.075000][ T9022] device hsr_slave_1 entered promiscuous mode [ 348.123533][ T9022] debugfs: Directory 'hsr0' with parent '/' already present! [ 348.144375][ T9019] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.195541][ T9027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.227890][ T9027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.286468][ T9027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.351436][ T9027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.407959][ T9019] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.455794][ T9019] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.571074][ T9022] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.625545][ T9022] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.686255][ T9022] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.725953][ T9022] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.854451][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.873297][ T9017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.890128][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.920384][ T9017] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.929209][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.939219][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.948069][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.955933][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.967374][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.977011][ T9023] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.994972][ T9019] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.009565][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.019645][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.027817][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.038096][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.047126][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.054372][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.063300][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.089951][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.100237][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.110224][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.117337][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.125400][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.133089][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.140900][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.149459][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.158207][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.165297][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.173673][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.181615][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.193549][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.202140][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.211298][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.218531][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.249995][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.258756][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.268703][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.277445][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.284703][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.292984][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.301671][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.310327][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.319035][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.327381][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.334488][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.367784][ T9027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.382641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.393175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.402235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.411030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.420036][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.428697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.438666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.446820][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.456682][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.465359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.475095][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.495584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.504321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.512659][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.521405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.530232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.545568][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.554002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.562364][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.571158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.580920][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.590059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.598143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.608862][ T9022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.621616][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.644726][ T9027] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.665726][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.675453][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.684400][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.691467][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.699605][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.707962][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.716509][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.725029][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.733483][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.742154][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.750990][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.759406][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.768014][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.786055][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.800310][ T9022] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.808062][ T9019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.823237][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.831740][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.840753][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.849836][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.856977][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.865340][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.874238][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.882589][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.892663][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.901482][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.908613][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.916466][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.924617][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.932396][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.952177][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.962711][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.971660][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.978782][ T9040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.987275][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.996175][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.005152][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.013835][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.056669][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.067635][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.076603][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.085708][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.094596][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.103059][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.111556][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.120229][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.129178][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.137815][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.146649][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.155426][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.164270][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.172161][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.185197][ T9017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.211976][ T9027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.226643][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.234666][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.243656][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.252131][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.259425][ T9037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.268573][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.276337][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.284337][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.292629][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.301302][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.308907][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.316621][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.325790][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.334938][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.357923][ T9026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.370793][ T9026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.387027][ T9019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.407747][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.416877][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.436936][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.444139][ T9040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.452480][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.463797][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.472622][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.481281][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.505387][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.513853][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.522778][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.532147][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.544360][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.553500][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.560995][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.571237][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.587159][ T9027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.606848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.636736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.678437][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.687757][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.698200][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.707351][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.719057][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.736293][ T9022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.850487][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.859714][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.872127][ T9022] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/05 21:44:44 executed programs: 6 2019/12/05 21:44:49 executed programs: 39 2019/12/05 21:44:54 executed programs: 73 2019/12/05 21:44:59 executed programs: 106 2019/12/05 21:45:05 executed programs: 140 2019/12/05 21:45:10 executed programs: 173 [ 379.835313][T10378] ================================================================== [ 379.843866][T10378] BUG: KASAN: slab-out-of-bounds in pipe_write+0xe30/0x1000 [ 379.851155][T10378] Write of size 8 at addr ffff88809782dda8 by task syz-executor.5/10378 [ 379.859579][T10378] [ 379.861896][T10378] CPU: 1 PID: 10378 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 379.870198][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.880304][T10378] Call Trace: [ 379.883679][T10378] dump_stack+0x197/0x210 [ 379.888189][T10378] ? pipe_write+0xe30/0x1000 [ 379.892805][T10378] print_address_description.constprop.0.cold+0xd4/0x30b [ 379.899808][T10378] ? pipe_write+0xe30/0x1000 [ 379.904389][T10378] ? pipe_write+0xe30/0x1000 [ 379.908987][T10378] __kasan_report.cold+0x1b/0x41 [ 379.913922][T10378] ? pipe_write+0xe30/0x1000 [ 379.918497][T10378] kasan_report+0x12/0x20 [ 379.922864][T10378] __asan_report_store8_noabort+0x17/0x20 [ 379.928580][T10378] pipe_write+0xe30/0x1000 [ 379.932995][T10378] new_sync_write+0x4d3/0x770 [ 379.937668][T10378] ? new_sync_read+0x800/0x800 [ 379.942457][T10378] ? __fget+0x37f/0x550 [ 379.946684][T10378] ? apparmor_file_permission+0x27/0x30 [ 379.952268][T10378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.958602][T10378] ? security_file_permission+0x8f/0x380 [ 379.964243][T10378] __vfs_write+0xe1/0x110 [ 379.968573][T10378] vfs_write+0x268/0x5d0 [ 379.972867][T10378] ksys_write+0x220/0x290 [ 379.977266][T10378] ? __ia32_sys_read+0xb0/0xb0 [ 379.982099][T10378] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 379.987608][T10378] ? do_syscall_64+0x26/0x790 [ 379.992321][T10378] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.998367][T10378] ? do_syscall_64+0x26/0x790 [ 380.003036][T10378] __x64_sys_write+0x73/0xb0 [ 380.007621][T10378] do_syscall_64+0xfa/0x790 [ 380.012119][T10378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.018027][T10378] RIP: 0033:0x45a679 [ 380.021912][T10378] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.041507][T10378] RSP: 002b:00007f6d84399c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.049913][T10378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 380.057876][T10378] RDX: 00000001000000f4 RSI: 0000000020000000 RDI: 0000000000000004 [ 380.065841][T10378] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 380.073811][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d8439a6d4 [ 380.081765][T10378] R13: 00000000004cba8e R14: 00000000004e56a0 R15: 00000000ffffffff [ 380.089736][T10378] [ 380.092123][T10378] Allocated by task 10376: [ 380.096524][T10378] save_stack+0x23/0x90 [ 380.100677][T10378] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 380.106297][T10378] kasan_kmalloc+0x9/0x10 [ 380.110672][T10378] __kmalloc+0x163/0x770 [ 380.114899][T10378] pipe_fcntl+0x3f7/0x8e0 [ 380.119210][T10378] do_fcntl+0x255/0x1030 [ 380.123456][T10378] __x64_sys_fcntl+0x16d/0x1e0 [ 380.128228][T10378] do_syscall_64+0xfa/0x790 [ 380.132722][T10378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.138590][T10378] [ 380.140908][T10378] Freed by task 9634: [ 380.144878][T10378] save_stack+0x23/0x90 [ 380.149027][T10378] __kasan_slab_free+0x102/0x150 [ 380.153954][T10378] kasan_slab_free+0xe/0x10 [ 380.158436][T10378] kfree+0x10a/0x2c0 [ 380.162321][T10378] __free_fdtable+0x62/0x80 [ 380.166809][T10378] put_files_struct+0x253/0x2f0 [ 380.171645][T10378] exit_files+0x83/0xb0 [ 380.175873][T10378] do_exit+0x8b5/0x2ef0 [ 380.180010][T10378] do_group_exit+0x135/0x360 [ 380.184629][T10378] get_signal+0x47c/0x24f0 [ 380.189082][T10378] do_signal+0x87/0x1700 [ 380.193322][T10378] exit_to_usermode_loop+0x286/0x380 [ 380.198596][T10378] do_syscall_64+0x676/0x790 [ 380.203177][T10378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.209046][T10378] [ 380.211384][T10378] The buggy address belongs to the object at ffff88809782dd80 [ 380.211384][T10378] which belongs to the cache kmalloc-64(76:syz5) of size 64 [ 380.226040][T10378] The buggy address is located 40 bytes inside of [ 380.226040][T10378] 64-byte region [ffff88809782dd80, ffff88809782ddc0) [ 380.239134][T10378] The buggy address belongs to the page: [ 380.244762][T10378] page:ffffea00025e0b40 refcount:1 mapcount:0 mapping:ffff88809996f540 index:0x0 [ 380.254303][T10378] raw: 00fffe0000000200 ffffea00023fb0c8 ffffea0002956fc8 ffff88809996f540 [ 380.262881][T10378] raw: 0000000000000000 ffff88809782d000 0000000100000020 0000000000000000 [ 380.271447][T10378] page dumped because: kasan: bad access detected [ 380.277942][T10378] [ 380.280248][T10378] Memory state around the buggy address: [ 380.285870][T10378] ffff88809782dc80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 380.293934][T10378] ffff88809782dd00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 380.302012][T10378] >ffff88809782dd80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 380.310068][T10378] ^ [ 380.315439][T10378] ffff88809782de00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 380.323496][T10378] ffff88809782de80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 380.331546][T10378] ================================================================== [ 380.339594][T10378] Disabling lock debugging due to kernel taint [ 380.349813][T10378] Kernel panic - not syncing: panic_on_warn set ... [ 380.356602][T10378] CPU: 1 PID: 10378 Comm: syz-executor.5 Tainted: G B 5.4.0-syzkaller #0 [ 380.366312][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.376362][T10378] Call Trace: [ 380.379646][T10378] dump_stack+0x197/0x210 [ 380.383965][T10378] panic+0x2e3/0x75c [ 380.387854][T10378] ? add_taint.cold+0x16/0x16 [ 380.392528][T10378] ? pipe_write+0xe30/0x1000 [ 380.397129][T10378] ? preempt_schedule+0x4b/0x60 [ 380.401961][T10378] ? ___preempt_schedule+0x16/0x18 [ 380.407094][T10378] ? trace_hardirqs_on+0x5e/0x240 [ 380.412122][T10378] ? pipe_write+0xe30/0x1000 [ 380.416695][T10378] end_report+0x47/0x4f [ 380.420830][T10378] ? pipe_write+0xe30/0x1000 [ 380.425412][T10378] __kasan_report.cold+0xe/0x41 [ 380.430787][T10378] ? pipe_write+0xe30/0x1000 [ 380.435372][T10378] kasan_report+0x12/0x20 [ 380.439697][T10378] __asan_report_store8_noabort+0x17/0x20 [ 380.445422][T10378] pipe_write+0xe30/0x1000 [ 380.447557][ T4088] kobject: 'loop1' (00000000be5b5c3e): kobject_uevent_env [ 380.449848][T10378] new_sync_write+0x4d3/0x770 [ 380.461606][T10378] ? new_sync_read+0x800/0x800 [ 380.465070][ T4088] kobject: 'loop1' (00000000be5b5c3e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 380.466397][T10378] ? __fget+0x37f/0x550 [ 380.466413][T10378] ? apparmor_file_permission+0x27/0x30 [ 380.466432][T10378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.492527][T10378] ? security_file_permission+0x8f/0x380 [ 380.498170][T10378] __vfs_write+0xe1/0x110 [ 380.502513][T10378] vfs_write+0x268/0x5d0 [ 380.506764][T10378] ksys_write+0x220/0x290 [ 380.511105][T10378] ? __ia32_sys_read+0xb0/0xb0 [ 380.515878][T10378] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.521330][T10378] ? do_syscall_64+0x26/0x790 [ 380.526097][T10378] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.532162][T10378] ? do_syscall_64+0x26/0x790 [ 380.536893][T10378] __x64_sys_write+0x73/0xb0 [ 380.541520][T10378] do_syscall_64+0xfa/0x790 [ 380.546010][T10378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.551882][T10378] RIP: 0033:0x45a679 [ 380.555763][T10378] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.575352][T10378] RSP: 002b:00007f6d84399c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.583764][T10378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 380.591761][T10378] RDX: 00000001000000f4 RSI: 0000000020000000 RDI: 0000000000000004 [ 380.599735][T10378] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 380.607694][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d8439a6d4 [ 380.615663][T10378] R13: 00000000004cba8e R14: 00000000004e56a0 R15: 00000000ffffffff [ 380.625187][T10378] Kernel Offset: disabled [ 380.629531][T10378] Rebooting in 86400 seconds..