[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.579504][ T7349] IPVS: ftp: loaded support on port[0] = 21 [ 42.989181][ T7336] can: request_module (can-proto-0) failed. [ 44.203130][ T7336] can: request_module (can-proto-0) failed. [ 44.214156][ T7336] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts. 2019/11/07 17:55:54 parsed 1 programs 2019/11/07 17:55:55 executed programs: 0 [ 51.620121][ T7425] IPVS: ftp: loaded support on port[0] = 21 [ 51.629137][ T7423] IPVS: ftp: loaded support on port[0] = 21 [ 51.684258][ T7429] IPVS: ftp: loaded support on port[0] = 21 [ 51.700639][ T7428] IPVS: ftp: loaded support on port[0] = 21 [ 51.728808][ T7432] IPVS: ftp: loaded support on port[0] = 21 [ 51.757991][ T7433] IPVS: ftp: loaded support on port[0] = 21 [ 51.821844][ T7423] chnl_net:caif_netlink_parms(): no params data found [ 51.879971][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 51.903491][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.911304][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.919114][ T7423] device bridge_slave_0 entered promiscuous mode [ 51.969250][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.976438][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.984045][ T7423] device bridge_slave_1 entered promiscuous mode [ 52.001894][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.009859][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.017773][ T7425] device bridge_slave_0 entered promiscuous mode [ 52.045609][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.069966][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.077728][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.085469][ T7425] device bridge_slave_1 entered promiscuous mode [ 52.102960][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.138096][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 52.148119][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.158297][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 52.168303][ T7423] team0: Port device team_slave_0 added [ 52.175799][ T7423] team0: Port device team_slave_1 added [ 52.181752][ T7433] chnl_net:caif_netlink_parms(): no params data found [ 52.206928][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.229079][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 52.250195][ T7425] team0: Port device team_slave_0 added [ 52.290361][ T7425] team0: Port device team_slave_1 added [ 52.301998][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.309121][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.317024][ T7433] device bridge_slave_0 entered promiscuous mode [ 52.327885][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.335036][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.342833][ T7433] device bridge_slave_1 entered promiscuous mode [ 52.413283][ T7423] device hsr_slave_0 entered promiscuous mode [ 52.481112][ T7423] device hsr_slave_1 entered promiscuous mode [ 52.531272][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.538613][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.546383][ T7429] device bridge_slave_0 entered promiscuous mode [ 52.556765][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.563943][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.571831][ T7429] device bridge_slave_1 entered promiscuous mode [ 52.583218][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.590355][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.598480][ T7432] device bridge_slave_0 entered promiscuous mode [ 52.608885][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.616039][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.623740][ T7432] device bridge_slave_1 entered promiscuous mode [ 52.637060][ T7433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.693360][ T7425] device hsr_slave_0 entered promiscuous mode [ 52.741123][ T7425] device hsr_slave_1 entered promiscuous mode [ 52.801053][ T7425] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.816428][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.831210][ T7433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.842163][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.888858][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.919336][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.941722][ T7428] device bridge_slave_0 entered promiscuous mode [ 52.996208][ T7433] team0: Port device team_slave_0 added [ 53.025781][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.040560][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.056399][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.076829][ T7428] device bridge_slave_1 entered promiscuous mode [ 53.115639][ T7433] team0: Port device team_slave_1 added [ 53.126985][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.172903][ T7429] team0: Port device team_slave_0 added [ 53.217425][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.273603][ T7429] team0: Port device team_slave_1 added [ 53.355536][ T7433] device hsr_slave_0 entered promiscuous mode [ 53.427308][ T7433] device hsr_slave_1 entered promiscuous mode [ 53.491623][ T7433] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.557192][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.581875][ T7432] team0: Port device team_slave_0 added [ 53.748731][ T7429] device hsr_slave_0 entered promiscuous mode [ 53.851249][ T7429] device hsr_slave_1 entered promiscuous mode [ 53.871102][ T7429] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.887068][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.956584][ T7432] team0: Port device team_slave_1 added [ 54.022406][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.120384][ T7428] team0: Port device team_slave_0 added [ 54.149189][ T7423] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.209397][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.228693][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.305351][ T7428] team0: Port device team_slave_1 added [ 54.334154][ T7432] device hsr_slave_0 entered promiscuous mode [ 54.357539][ T7432] device hsr_slave_1 entered promiscuous mode [ 54.431487][ T7432] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.516483][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.556797][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.573322][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.622066][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.629426][ T7458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.706240][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.731376][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.791391][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.798477][ T7458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.852689][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.890142][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.913246][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.003291][ T7428] device hsr_slave_0 entered promiscuous mode [ 55.061293][ T7428] device hsr_slave_1 entered promiscuous mode [ 55.100923][ T7428] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.118252][ T7423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.128927][ T7423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.142045][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.150115][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.158536][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.167118][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.176387][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.185012][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.193368][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.201793][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.210026][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.217103][ T7437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.224573][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.233228][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.241917][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.250425][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.314223][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.323252][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.340975][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.348621][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.366285][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.375266][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.382389][ T7437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.395441][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.406001][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.424484][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.458438][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.490221][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.559561][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.600703][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.625467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.662016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.686563][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.706380][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.736390][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.805060][ T7425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.840886][ T7425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.893290][ T7433] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.918439][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.944712][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.985365][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.030674][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.063778][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.085937][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.116744][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.137223][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.176889][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.186381][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.212162][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.220598][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.227727][ T7437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.236381][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.244087][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.268046][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.277306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.287177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.294308][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.302992][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.311685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.320345][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.327485][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.337201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.349546][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.400492][ T7429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.416923][ T7429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.458993][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.474339][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.496722][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.507867][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 56.507872][ T26] audit: type=1800 audit(1573149360.324:31): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16522 res=0 [ 56.509929][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.519634][ T26] audit: type=1804 audit(1573149360.324:32): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir895318884/syzkaller.2VSmOM/0/file0" dev="sda1" ino=16522 res=1 [ 56.541529][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.575984][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.585175][ T26] audit: type=1804 audit(1573149360.404:33): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir895318884/syzkaller.2VSmOM/0/file0" dev="sda1" ino=16522 res=1 [ 56.585194][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.618565][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.627072][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.635489][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.644284][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.653157][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.660200][ T7458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.667748][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.676385][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.685589][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.694187][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.702652][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.711292][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.727072][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.748517][ T7433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.759452][ T7433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.774178][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.784872][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.793895][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.802090][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.809544][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.817399][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.826079][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.835000][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.843720][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.864586][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.878241][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.896720][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.905036][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.919015][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.932482][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.956185][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.972793][ T7433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.980158][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.988564][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.996478][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.005601][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.016628][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.042301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.049997][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.065637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.076993][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.085928][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.093051][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.101312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.109807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.118323][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.125426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.133256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.155331][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.163863][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.173107][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.191942][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.199029][ T7437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.208753][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.218758][ T26] audit: type=1800 audit(1573149361.034:34): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16527 res=0 [ 57.220081][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.249579][ T26] audit: type=1804 audit(1573149361.034:35): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir250560883/syzkaller.9Di4ZP/0/file0" dev="sda1" ino=16527 res=1 [ 57.256441][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.284666][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.291867][ T7437] bridge0: port 2(bridge_slave_1) entered forwarding state 2019/11/07 17:56:01 executed programs: 6 [ 57.299988][ T26] audit: type=1804 audit(1573149361.114:36): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir895318884/syzkaller.2VSmOM/0/file0" dev="sda1" ino=16522 res=1 [ 57.300141][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.333898][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.342713][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.352559][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.361434][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.368991][ T26] audit: type=1804 audit(1573149361.144:37): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir895318884/syzkaller.2VSmOM/0/file0" dev="sda1" ino=16522 res=1 [ 57.427036][ T26] audit: type=1804 audit(1573149361.154:38): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir250560883/syzkaller.9Di4ZP/0/file0" dev="sda1" ino=16527 res=1 [ 57.452258][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.464058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.473401][ T26] audit: type=1800 audit(1573149361.214:39): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16522 res=0 [ 57.477860][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.504114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.508994][ T26] audit: type=1804 audit(1573149361.214:40): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir895318884/syzkaller.2VSmOM/1/file0" dev="sda1" ino=16522 res=1 [ 57.513240][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.546435][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.555362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.568673][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.577543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.591711][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.600066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.608700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.624810][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.633996][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.642652][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.653661][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.671868][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.687947][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.734649][ T7644] ------------[ cut here ]------------ [ 57.740307][ T7644] WARNING: CPU: 1 PID: 7644 at lib/iov_iter.c:1162 iov_iter_pipe+0x20c/0x320 [ 57.749057][ T7644] Kernel panic - not syncing: panic_on_warn set ... [ 57.755650][ T7644] CPU: 1 PID: 7644 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 57.763453][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.765401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.773498][ T7644] Call Trace: [ 57.773525][ T7644] dump_stack+0x113/0x167 [ 57.773537][ T7644] ? iov_iter_pipe+0x20c/0x320 [ 57.773543][ T7644] panic+0x22a/0x4e3 [ 57.773548][ T7644] ? add_taint.cold.8+0x11/0x11 [ 57.773564][ T7644] __warn.cold.11+0x25/0x30 [ 57.773570][ T7644] ? iov_iter_pipe+0x20c/0x320 [ 57.773576][ T7644] report_bug+0x1b0/0x270 [ 57.773585][ T7644] do_error_trap+0x11b/0x200 [ 57.773592][ T7644] do_invalid_op+0x36/0x40 [ 57.773595][ T7644] ? iov_iter_pipe+0x20c/0x320 [ 57.773603][ T7644] invalid_op+0x23/0x30 [ 57.773609][ T7644] RIP: 0010:iov_iter_pipe+0x20c/0x320 [ 57.773615][ T7644] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 37 44 89 63 24 48 83 c4 10 5b 41 5c 41 5d 41 5e 5d c3 0f 0b <0f> 0b e9 6b fe ff ff 4c 89 ef 48 89 4d d0 48 89 55 d8 e8 ed 71 93 [ 57.773618][ T7644] RSP: 0018:ffff88807f68f9a8 EFLAGS: 00010246 [ 57.773623][ T7644] RAX: 0000000000000000 RBX: ffff88807f68fa30 RCX: 0000000000000000 [ 57.773626][ T7644] RDX: ffff8880a1442800 RSI: 1ffff1101428851a RDI: ffff88807f68fa30 [ 57.773628][ T7644] RBP: ffff88807f68f9d8 R08: 0000000000000000 R09: dffffc0000000000 [ 57.773636][ T7644] R10: ffff8880a4be9598 R11: ffffffff891bbd07 R12: 0000000000000010 [ 57.773639][ T7644] R13: ffff8880a14428c8 R14: ffff8880a14428d0 R15: ffff8880a4be95f8 [ 57.773662][ T7644] generic_file_splice_read+0x95/0x7b0 [ 57.773669][ T7644] ? fsnotify_first_mark+0x130/0x130 [ 57.773676][ T7644] ? add_to_pipe+0x330/0x330 [ 57.773683][ T7644] ? common_file_perm+0x153/0x590 [ 57.773694][ T7644] ? security_file_permission+0x173/0x290 [ 57.773703][ T7644] ? rw_verify_area+0xc5/0x2b0 [ 57.773712][ T7644] do_splice_to+0xe3/0x120 [ 57.773720][ T7644] splice_direct_to_actor+0x295/0x870 [ 57.773726][ T7644] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 57.773734][ T7644] ? pipe_to_sendpage+0x430/0x430 [ 57.773743][ T7644] ? do_splice_to+0x120/0x120 [ 57.773748][ T7644] ? rw_verify_area+0xc5/0x2b0 [ 57.773756][ T7644] do_splice_direct+0x14c/0x270 [ 57.773760][ T7644] ? rcu_read_lock_any_held+0xcd/0xf0 [ 57.773766][ T7644] ? splice_direct_to_actor+0x870/0x870 [ 57.773777][ T7644] ? __sb_start_write+0x222/0x330 [ 57.773784][ T7644] do_sendfile+0x481/0xd10 [ 57.773795][ T7644] ? do_compat_pwritev64+0x190/0x190 [ 57.773805][ T7644] ? put_timespec64+0xa9/0x100 [ 57.773810][ T7644] ? nsecs_to_jiffies+0x20/0x20 [ 57.773820][ T7644] __x64_sys_sendfile64+0x198/0x1e0 [ 57.773825][ T7644] ? __ia32_sys_sendfile+0x1d0/0x1d0 [ 57.773830][ T7644] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.773837][ T7644] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 57.773844][ T7644] ? do_syscall_64+0x21/0x5d0 [ 57.773850][ T7644] ? trace_hardirqs_on+0x28/0x1a0 [ 57.773858][ T7644] do_syscall_64+0xca/0x5d0 [ 57.773867][ T7644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.773872][ T7644] RIP: 0033:0x45a219 [ 57.773877][ T7644] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.773880][ T7644] RSP: 002b:00007f4fd7e0fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 57.773886][ T7644] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219 [ 57.773889][ T7644] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 57.773892][ T7644] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 57.773896][ T7644] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f4fd7e106d4 [ 57.773899][ T7644] R13: 00000000004c7f94 R14: 00000000004de3b0 R15: 00000000ffffffff [ 57.775486][ T7644] Kernel Offset: disabled [ 58.128845][ T7644] Rebooting in 86400 seconds..