[ 57.287805] audit: type=1800 audit(1540042692.315:26): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.307202] audit: type=1800 audit(1540042692.345:27): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 57.326825] audit: type=1800 audit(1540042692.365:28): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.312801] sshd (6160) used greatest stack depth: 53280 bytes left Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. 2018/10/20 13:38:25 parsed 1 programs 2018/10/20 13:38:41 executed programs: 0 syzkaller login: [ 87.350819] IPVS: ftp: loaded support on port[0] = 21 [ 87.383973] IPVS: ftp: loaded support on port[0] = 21 [ 87.412742] IPVS: ftp: loaded support on port[0] = 21 [ 87.432714] IPVS: ftp: loaded support on port[0] = 21 [ 87.437806] IPVS: ftp: loaded support on port[0] = 21 [ 87.472702] IPVS: ftp: loaded support on port[0] = 21 [ 90.576141] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.582766] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.591467] device bridge_slave_0 entered promiscuous mode [ 90.627911] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.634624] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.643366] device bridge_slave_0 entered promiscuous mode [ 90.779342] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.785952] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.794723] device bridge_slave_1 entered promiscuous mode [ 90.823186] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.829677] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.838434] device bridge_slave_0 entered promiscuous mode [ 90.852113] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.858554] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.867375] device bridge_slave_0 entered promiscuous mode [ 90.892959] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.899417] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.908129] device bridge_slave_1 entered promiscuous mode [ 90.932425] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.938872] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.947561] device bridge_slave_0 entered promiscuous mode [ 90.977069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 90.991850] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.998304] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.007018] device bridge_slave_0 entered promiscuous mode [ 91.038812] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.045582] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.054413] device bridge_slave_1 entered promiscuous mode [ 91.074997] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.081437] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.090081] device bridge_slave_1 entered promiscuous mode [ 91.120784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.137269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.166558] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.173275] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.181898] device bridge_slave_1 entered promiscuous mode [ 91.245262] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.251903] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.260410] device bridge_slave_1 entered promiscuous mode [ 91.279049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.293008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.326992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.435233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.468008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.478644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.548654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.625969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.719027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.737409] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.914281] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.927622] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.994488] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.154697] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.164053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 92.187687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.201921] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.242214] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.256664] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.330529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 92.340496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.365858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.393552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 92.410349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.429850] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.457134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.570197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.650438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 92.657617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.669880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 92.677543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.695003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 92.717332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.796086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 92.803518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.821426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 92.828770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.912073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 92.919197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.041056] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.049704] team0: Port device team_slave_0 added [ 93.075851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.083081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.131445] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.140137] team0: Port device team_slave_0 added [ 93.324810] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.333048] team0: Port device team_slave_0 added [ 93.341964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.350044] team0: Port device team_slave_1 added [ 93.372731] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.380905] team0: Port device team_slave_1 added [ 93.522531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.557973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.566131] team0: Port device team_slave_1 added [ 93.573114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.581095] team0: Port device team_slave_0 added [ 93.604150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.620278] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.628473] team0: Port device team_slave_0 added [ 93.643000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 93.653282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.661984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.769171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.776931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.786602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.799154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.807410] team0: Port device team_slave_1 added [ 93.828630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 93.837718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.846868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.856931] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.865126] team0: Port device team_slave_0 added [ 93.878156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 93.912475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.921351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.943453] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.951515] team0: Port device team_slave_1 added [ 93.971110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.982607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.991951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.039280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.046654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.055702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.077752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.089469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.097907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.106868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.115456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.124558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.134570] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.142893] team0: Port device team_slave_1 added [ 94.156942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.233576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.242685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.261403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 94.273747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.282827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.298380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.311993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.320897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.348284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.374862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.383962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.405624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.424444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.458265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.467386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.476293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.485484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.540699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.549328] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.569537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 94.583524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.592577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.600854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.610087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.619180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.628299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.649038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.720552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.779032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.788264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.797067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.806548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.843059] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 94.912919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.921942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.933290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 94.949024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.957992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.986152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.017719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.026963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.330316] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.336944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.344095] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.350582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.359562] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.368238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.812561] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.819091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.826141] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.832756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.841478] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.092277] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.098862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.106062] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.112623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.121427] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.243832] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.250369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.257489] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.264052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.273100] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.350775] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.357409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.364489] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.370983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.379857] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.386476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.395168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.403523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.411786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.466506] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.473098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.480134] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.486762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.496029] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 98.422646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.479027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.963330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.985198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.277928] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 105.452477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.492118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.671981] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 105.727421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.825639] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 105.927756] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 105.934450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.942864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.122508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 106.261454] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 106.448133] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 106.455047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.463495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.605109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 106.639619] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 106.646456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.654637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.800656] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.905575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 106.912311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.920450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.934423] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 106.972627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.980811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.187133] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.235274] ip (7410) used greatest stack depth: 53152 bytes left [ 107.406943] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 107.413639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.422366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.526787] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.672712] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.691900] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.161278] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.303190] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 2018/10/20 13:39:06 executed programs: 6 [ 112.677470] ================================================================== [ 112.684907] BUG: KMSAN: kernel-infoleak in kvm_vcpu_write_guest_page+0x383/0x500 [ 112.692487] CPU: 1 PID: 7771 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #70 [ 112.699694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.709067] Call Trace: [ 112.711691] dump_stack+0x306/0x460 [ 112.715362] ? kvm_vcpu_write_guest_page+0x383/0x500 [ 112.720514] kmsan_report+0x1a2/0x2e0 [ 112.724357] kmsan_internal_check_memory+0x374/0x460 [ 112.729511] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 112.735006] kmsan_copy_to_user+0x89/0xe0 [ 112.739195] kvm_vcpu_write_guest_page+0x383/0x500 [ 112.744186] handle_vmptrld+0x22ad/0x25e0 [ 112.748379] ? handle_vmlaunch+0x60/0x60 [ 112.752492] vmx_handle_exit+0x20f5/0xb900 [ 112.756792] ? vmx_flush_tlb_gva+0x450/0x450 [ 112.761238] kvm_arch_vcpu_ioctl_run+0xa22b/0x10ab0 [ 112.766462] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 112.771865] ? __list_del_entry_valid+0x123/0x440 [ 112.776760] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 112.782281] ? wait_for_common+0x791/0x960 [ 112.786608] ? kmsan_set_origin+0x83/0x140 [ 112.790894] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 112.796304] ? __msan_get_context_state+0x9/0x30 [ 112.801091] ? INIT_BOOL+0x17/0x30 [ 112.804662] ? put_pid+0x3de/0x410 [ 112.808260] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 112.812466] ? do_vfs_ioctl+0x187/0x2ca0 [ 112.816570] ? __se_sys_ioctl+0x1da/0x270 [ 112.820760] ? kvm_vm_release+0x90/0x90 [ 112.824765] do_vfs_ioctl+0xf28/0x2ca0 [ 112.828703] ? security_file_ioctl+0x92/0x200 [ 112.833264] __se_sys_ioctl+0x1da/0x270 [ 112.837293] __x64_sys_ioctl+0x4a/0x70 [ 112.841217] do_syscall_64+0xbe/0x100 [ 112.845068] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 112.850291] RIP: 0033:0x457569 [ 112.853534] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 112.872458] RSP: 002b:00007f4a03614c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.880209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 112.887512] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 112.894820] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 112.902127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a036156d4 [ 112.909422] R13: 00000000004c0027 R14: 00000000004d0108 R15: 00000000ffffffff [ 112.916756] [ 112.918426] Uninit was created at: [ 112.921995] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 112.927135] kmsan_kmalloc+0xa4/0x120 [ 112.930961] __kmalloc+0x14b/0x440 [ 112.934519] enter_vmx_operation+0x601/0x1660 [ 112.939043] vmx_set_nested_state+0xca3/0x1590 [ 112.943654] kvm_arch_vcpu_ioctl+0x5224/0x75a0 [ 112.948270] kvm_vcpu_ioctl+0xd6e/0x20b0 [ 112.952359] do_vfs_ioctl+0xf28/0x2ca0 [ 112.956281] __se_sys_ioctl+0x1da/0x270 [ 112.960300] __x64_sys_ioctl+0x4a/0x70 [ 112.964212] do_syscall_64+0xbe/0x100 [ 112.968082] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 112.973289] [ 112.974966] Bytes 1000-4095 of 4096 are uninitialized [ 112.980175] Memory access of size 4096 starts at ffff88019151c000 [ 112.986422] ================================================================== [ 112.993792] Disabling lock debugging due to kernel taint [ 112.999267] Kernel panic - not syncing: panic_on_warn set ... [ 112.999267] [ 113.006666] CPU: 1 PID: 7771 Comm: syz-executor1 Tainted: G B 4.19.0-rc8+ #70 [ 113.015267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.024655] Call Trace: [ 113.027295] dump_stack+0x306/0x460 [ 113.030973] panic+0x54c/0xafa [ 113.034278] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 113.039776] kmsan_report+0x2d3/0x2e0 [ 113.043646] kmsan_internal_check_memory+0x374/0x460 [ 113.048778] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 113.054297] kmsan_copy_to_user+0x89/0xe0 [ 113.058488] kvm_vcpu_write_guest_page+0x383/0x500 [ 113.063475] handle_vmptrld+0x22ad/0x25e0 [ 113.067677] ? handle_vmlaunch+0x60/0x60 [ 113.071786] vmx_handle_exit+0x20f5/0xb900 [ 113.076091] ? vmx_flush_tlb_gva+0x450/0x450 [ 113.080553] kvm_arch_vcpu_ioctl_run+0xa22b/0x10ab0 [ 113.085748] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 113.091166] ? __list_del_entry_valid+0x123/0x440 [ 113.096058] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 113.101542] ? wait_for_common+0x791/0x960 [ 113.105837] ? kmsan_set_origin+0x83/0x140 [ 113.110119] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 113.115525] ? __msan_get_context_state+0x9/0x30 [ 113.120316] ? INIT_BOOL+0x17/0x30 [ 113.123886] ? put_pid+0x3de/0x410 [ 113.127477] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 113.131681] ? do_vfs_ioctl+0x187/0x2ca0 [ 113.135774] ? __se_sys_ioctl+0x1da/0x270 [ 113.139956] ? kvm_vm_release+0x90/0x90 [ 113.143958] do_vfs_ioctl+0xf28/0x2ca0 [ 113.147897] ? security_file_ioctl+0x92/0x200 [ 113.152438] __se_sys_ioctl+0x1da/0x270 [ 113.156464] __x64_sys_ioctl+0x4a/0x70 [ 113.160388] do_syscall_64+0xbe/0x100 [ 113.164237] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 113.169460] RIP: 0033:0x457569 [ 113.172689] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 113.191621] RSP: 002b:00007f4a03614c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.199364] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 113.206657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 113.213954] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 113.221268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a036156d4 [ 113.228564] R13: 00000000004c0027 R14: 00000000004d0108 R15: 00000000ffffffff [ 113.236686] Kernel Offset: disabled [ 113.240324] Rebooting in 86400 seconds..