[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.037219][ T27] audit: type=1800 audit(1558772981.625:25): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.070012][ T27] audit: type=1800 audit(1558772981.625:26): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.113915][ T27] audit: type=1800 audit(1558772981.625:27): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. 2019/05/25 08:30:24 parsed 1 programs 2019/05/25 08:30:27 executed programs: 0 syzkaller login: [ 105.553124][ T9055] IPVS: ftp: loaded support on port[0] = 21 [ 105.577183][ T9057] IPVS: ftp: loaded support on port[0] = 21 [ 105.643831][ T9060] IPVS: ftp: loaded support on port[0] = 21 [ 105.648107][ T9064] IPVS: ftp: loaded support on port[0] = 21 [ 105.653735][ T9062] IPVS: ftp: loaded support on port[0] = 21 [ 105.744842][ T9065] IPVS: ftp: loaded support on port[0] = 21 [ 105.775849][ T9055] chnl_net:caif_netlink_parms(): no params data found [ 105.805314][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.812700][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.820818][ T9055] device bridge_slave_0 entered promiscuous mode [ 105.851483][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.859937][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.868265][ T9055] device bridge_slave_1 entered promiscuous mode [ 105.899075][ T9057] chnl_net:caif_netlink_parms(): no params data found [ 105.920157][ T9055] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 105.930063][ T9055] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 105.978666][ T9055] team0: Port device team_slave_0 added [ 105.987174][ T9055] team0: Port device team_slave_1 added [ 106.036639][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.043788][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.051890][ T9057] device bridge_slave_0 entered promiscuous mode [ 106.060984][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.068605][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.076447][ T9057] device bridge_slave_1 entered promiscuous mode [ 106.089662][ T9064] chnl_net:caif_netlink_parms(): no params data found [ 106.110476][ T9060] chnl_net:caif_netlink_parms(): no params data found [ 106.148556][ T9065] chnl_net:caif_netlink_parms(): no params data found [ 106.163859][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.171044][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.179005][ T9060] device bridge_slave_0 entered promiscuous mode [ 106.190067][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.197643][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.205351][ T9060] device bridge_slave_1 entered promiscuous mode [ 106.218444][ T9057] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.276267][ T9055] device hsr_slave_0 entered promiscuous mode [ 106.314557][ T9055] device hsr_slave_1 entered promiscuous mode [ 106.379735][ T9057] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.408417][ T9060] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.431603][ T9064] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.439156][ T9064] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.447121][ T9064] device bridge_slave_0 entered promiscuous mode [ 106.458749][ T9060] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.471381][ T9062] chnl_net:caif_netlink_parms(): no params data found [ 106.486933][ T9057] team0: Port device team_slave_0 added [ 106.492689][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.500328][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.508259][ T9065] device bridge_slave_0 entered promiscuous mode [ 106.515666][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.522700][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.530723][ T9064] device bridge_slave_1 entered promiscuous mode [ 106.548352][ T9060] team0: Port device team_slave_0 added [ 106.555361][ T9057] team0: Port device team_slave_1 added [ 106.561918][ T9060] team0: Port device team_slave_1 added [ 106.567817][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.575497][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.583253][ T9065] device bridge_slave_1 entered promiscuous mode [ 106.617395][ T9064] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.628034][ T9064] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.662478][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.669759][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.677456][ T9062] device bridge_slave_0 entered promiscuous mode [ 106.699936][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.707185][ T9055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.714935][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.722024][ T9055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.731992][ T9064] team0: Port device team_slave_0 added [ 106.739635][ T9064] team0: Port device team_slave_1 added [ 106.751000][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.758594][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.767105][ T9062] device bridge_slave_1 entered promiscuous mode [ 106.791319][ T9065] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.818324][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.826807][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.846923][ T9062] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.897296][ T9057] device hsr_slave_0 entered promiscuous mode [ 106.944776][ T9057] device hsr_slave_1 entered promiscuous mode [ 106.993405][ T9065] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.075906][ T9060] device hsr_slave_0 entered promiscuous mode [ 107.144592][ T9060] device hsr_slave_1 entered promiscuous mode [ 107.215861][ T9062] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.267472][ T9064] device hsr_slave_0 entered promiscuous mode [ 107.304695][ T9064] device hsr_slave_1 entered promiscuous mode [ 107.362061][ T9065] team0: Port device team_slave_0 added [ 107.371617][ T9065] team0: Port device team_slave_1 added [ 107.409481][ T9062] team0: Port device team_slave_0 added [ 107.435012][ T9062] team0: Port device team_slave_1 added [ 107.507810][ T9065] device hsr_slave_0 entered promiscuous mode [ 107.564575][ T9065] device hsr_slave_1 entered promiscuous mode [ 107.677940][ T9062] device hsr_slave_0 entered promiscuous mode [ 107.744932][ T9062] device hsr_slave_1 entered promiscuous mode [ 107.809961][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.880989][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.890105][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.901172][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.926276][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.954218][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.962876][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.971972][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.979183][ T9072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.987656][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.996587][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.005088][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.012184][ T9072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.022449][ T9064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.033726][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.050303][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.060188][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.080267][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.093885][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.106126][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.130610][ T9057] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.140639][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.148764][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.157041][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.166269][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.175115][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.182900][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.190814][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.199357][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.208192][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.226355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.235176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.243473][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.250592][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.261470][ T9064] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.278988][ T9055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.289875][ T9055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.306734][ T9065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.325895][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.333722][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.342255][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.351110][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.361968][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.370606][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.377696][ T9074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.385857][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.394199][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.402327][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.411065][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.419902][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.428416][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.435538][ T9074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.443217][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.452215][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.461181][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.468308][ T9074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.476246][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.485321][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.494328][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.502030][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.525869][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.538232][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.547070][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.555447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.563830][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.572567][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.608244][ T9065] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.617064][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.626033][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.634846][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.641885][ T9073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.652500][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.662194][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.670726][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.677815][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.686350][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.694962][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.703192][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.712134][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.720534][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.729011][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.737771][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.746163][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.754776][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.762692][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.778040][ T9062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.791855][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.801149][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.822637][ T9055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.837059][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.847441][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.856784][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.866595][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.875585][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.886036][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.904229][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.913768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.931591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.940668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.949118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.957999][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.966359][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.973406][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.981654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.995044][ T9062] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.018511][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.064504][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.073919][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.090354][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.097496][ T9074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.108966][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.117654][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.126688][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.135308][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.143583][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.150773][ T9074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.158460][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.168795][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.177542][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.186852][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.195331][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.210945][ T9074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.218887][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.227402][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.237162][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.245610][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.260689][ T9060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.291674][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.315560][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.354891][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.377830][ T9064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.391895][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.422137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.431916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.455315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.470048][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.479365][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.488178][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.497226][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.506426][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.517202][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.533724][ T9065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.549635][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.631766][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.648508][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.671165][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.703979][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.727406][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.747893][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.760446][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.769653][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.778863][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.787931][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.796890][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.812540][ T9064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.823964][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.849754][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.878848][ T9065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.953081][ T9062] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/05/25 08:30:32 executed programs: 25 2019/05/25 08:30:37 executed programs: 198 2019/05/25 08:30:42 executed programs: 365 2019/05/25 08:30:47 executed programs: 528 2019/05/25 08:30:52 executed programs: 691 2019/05/25 08:30:57 executed programs: 851 2019/05/25 08:31:02 executed programs: 1012 2019/05/25 08:31:07 executed programs: 1169 2019/05/25 08:31:12 executed programs: 1333 2019/05/25 08:31:17 executed programs: 1494 2019/05/25 08:31:22 executed programs: 1661 2019/05/25 08:31:27 executed programs: 1825 2019/05/25 08:31:32 executed programs: 1977 2019/05/25 08:31:37 executed programs: 2132 2019/05/25 08:31:42 executed programs: 2280 2019/05/25 08:31:47 executed programs: 2433 2019/05/25 08:31:52 executed programs: 2585 2019/05/25 08:31:57 executed programs: 2737 2019/05/25 08:32:02 executed programs: 2886 2019/05/25 08:32:07 executed programs: 3035 2019/05/25 08:32:12 executed programs: 3182 2019/05/25 08:32:17 executed programs: 3330 2019/05/25 08:32:22 executed programs: 3483 2019/05/25 08:32:27 executed programs: 3635 2019/05/25 08:32:32 executed programs: 3780 2019/05/25 08:32:37 executed programs: 3928 2019/05/25 08:32:42 executed programs: 4069 2019/05/25 08:32:47 executed programs: 4217 2019/05/25 08:32:52 executed programs: 4369 2019/05/25 08:32:57 executed programs: 4527 2019/05/25 08:33:02 executed programs: 4673 2019/05/25 08:33:08 executed programs: 4816 2019/05/25 08:33:13 executed programs: 4960 2019/05/25 08:33:18 executed programs: 5095 2019/05/25 08:33:23 executed programs: 5251 [ 284.607055][T30216] ================================================================== [ 284.615451][T30216] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 284.615474][T30216] Read of size 4 at addr ffff888095c08a98 by task syz-executor.1/30216 [ 284.615477][T30216] [ 284.615490][T30216] CPU: 0 PID: 30216 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #26 [ 284.615496][T30216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.615528][T30216] Call Trace: [ 284.654891][T30216] dump_stack+0x172/0x1f0 [ 284.659346][T30216] ? sk_psock_unlink+0x3dd/0x4b0 [ 284.664383][T30216] ? tcp_check_oom+0x560/0x560 [ 284.664407][T30216] print_address_description.cold+0x7c/0x20d [ 284.675158][T30216] ? sk_psock_unlink+0x3dd/0x4b0 [ 284.680117][T30216] ? sk_psock_unlink+0x3dd/0x4b0 [ 284.685084][T30216] ? tcp_check_oom+0x560/0x560 [ 284.689871][T30216] __kasan_report.cold+0x1b/0x40 [ 284.694826][T30216] ? sk_psock_unlink+0x3dd/0x4b0 [ 284.699776][T30216] kasan_report+0x12/0x20 [ 284.704124][T30216] __asan_report_load4_noabort+0x14/0x20 [ 284.709765][T30216] sk_psock_unlink+0x3dd/0x4b0 [ 284.714606][T30216] ? sk_psock_link_pop+0x186/0x1f0 [ 284.719747][T30216] ? tcp_check_oom+0x560/0x560 [ 284.724590][T30216] tcp_bpf_remove+0x21/0x50 [ 284.729132][T30216] tcp_bpf_close+0x130/0x390 [ 284.733839][T30216] inet_release+0xff/0x1e0 [ 284.738330][T30216] inet6_release+0x53/0x80 [ 284.742825][T30216] __sock_release+0xce/0x2a0 [ 284.747430][T30216] sock_close+0x1b/0x30 [ 284.751607][T30216] __fput+0x2ff/0x890 [ 284.755627][T30216] ? __sock_release+0x2a0/0x2a0 [ 284.760499][T30216] ____fput+0x16/0x20 [ 284.764500][T30216] task_work_run+0x145/0x1c0 [ 284.769118][T30216] exit_to_usermode_loop+0x273/0x2c0 [ 284.774425][T30216] do_syscall_64+0x58e/0x680 [ 284.779100][T30216] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.785008][T30216] RIP: 0033:0x412f61 [ 284.788917][T30216] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 284.808534][T30216] RSP: 002b:00007ffd949a4010 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 284.817126][T30216] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f61 [ 284.825110][T30216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 284.833093][T30216] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 284.833110][T30216] R10: 00007ffd949a40f0 R11: 0000000000000293 R12: 00000000007610a8 [ 284.849074][T30216] R13: 0000000000045798 R14: 00000000000457c5 R15: 000000000075bf2c [ 284.857092][T30216] [ 284.859428][T30216] Allocated by task 30222: [ 284.863851][T30216] save_stack+0x23/0x90 [ 284.868024][T30216] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 284.873667][T30216] kasan_kmalloc+0x9/0x10 [ 284.873680][T30216] kmem_cache_alloc_trace+0x151/0x750 [ 284.873692][T30216] sock_hash_alloc+0x1e3/0x5b0 [ 284.873704][T30216] __do_sys_bpf+0x730/0x43d0 [ 284.873722][T30216] __x64_sys_bpf+0x73/0xb0 [ 284.897177][T30216] do_syscall_64+0xfd/0x680 [ 284.901695][T30216] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.901700][T30216] [ 284.901707][T30216] Freed by task 10021: [ 284.901720][T30216] save_stack+0x23/0x90 [ 284.901739][T30216] __kasan_slab_free+0x102/0x150 [ 284.918200][T30216] kasan_slab_free+0xe/0x10 [ 284.918212][T30216] kfree+0xcf/0x220 [ 284.918225][T30216] sock_hash_free+0x327/0x4a0 [ 284.918237][T30216] bpf_map_free_deferred+0xb4/0xe0 [ 284.918258][T30216] process_one_work+0x989/0x1790 [ 284.946302][T30216] worker_thread+0x98/0xe40 [ 284.950836][T30216] kthread+0x354/0x420 [ 284.954914][T30216] ret_from_fork+0x24/0x30 [ 284.959328][T30216] [ 284.961679][T30216] The buggy address belongs to the object at ffff888095c08a80 [ 284.961679][T30216] which belongs to the cache kmalloc-512 of size 512 [ 284.975741][T30216] The buggy address is located 24 bytes inside of [ 284.975741][T30216] 512-byte region [ffff888095c08a80, ffff888095c08c80) [ 284.988936][T30216] The buggy address belongs to the page: [ 284.994583][T30216] page:ffffea0002570200 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0xffff888095c08080 [ 285.005012][T30216] flags: 0x1fffc0000000200(slab) [ 285.009960][T30216] raw: 01fffc0000000200 ffffea00025c28c8 ffffea0002405408 ffff8880aa400940 [ 285.018569][T30216] raw: ffff888095c08080 ffff888095c08080 0000000100000003 0000000000000000 [ 285.027160][T30216] page dumped because: kasan: bad access detected [ 285.033584][T30216] [ 285.035923][T30216] Memory state around the buggy address: [ 285.041556][T30216] ffff888095c08980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.049745][T30216] ffff888095c08a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 285.049755][T30216] >ffff888095c08a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.049760][T30216] ^ [ 285.049769][T30216] ffff888095c08b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.049778][T30216] ffff888095c08b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 285.049783][T30216] ================================================================== [ 285.049787][T30216] Disabling lock debugging due to kernel taint [ 285.111841][T30216] Kernel panic - not syncing: panic_on_warn set ... [ 285.118500][T30216] CPU: 0 PID: 30216 Comm: syz-executor.1 Tainted: G B 5.2.0-rc1+ #26 [ 285.125764][ T3876] kobject: 'loop4' (00000000348e559d): kobject_uevent_env [ 285.127876][T30216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.127881][T30216] Call Trace: [ 285.127902][T30216] dump_stack+0x172/0x1f0 [ 285.127925][T30216] ? tcp_check_oom+0x560/0x560 [ 285.141825][ T3876] kobject: 'loop4' (00000000348e559d): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 285.145091][T30216] panic+0x2cb/0x744 [ 285.145107][T30216] ? __warn_printk+0xf3/0xf3 [ 285.145121][T30216] ? sk_psock_unlink+0x3dd/0x4b0 [ 285.145134][T30216] ? tcp_check_oom+0x560/0x560 [ 285.145186][T30216] ? preempt_schedule+0x4b/0x60 [ 285.145209][T30216] ? ___preempt_schedule+0x16/0x18 [ 285.161311][ T3876] kobject: 'loop2' (00000000355feacb): kobject_uevent_env [ 285.167736][T30216] ? trace_hardirqs_on+0x5e/0x220 [ 285.167752][T30216] ? sk_psock_unlink+0x3dd/0x4b0 [ 285.167765][T30216] ? tcp_check_oom+0x560/0x560 [ 285.167777][T30216] end_report+0x47/0x4f [ 285.167788][T30216] ? sk_psock_unlink+0x3dd/0x4b0 [ 285.167801][T30216] __kasan_report.cold+0xe/0x40 [ 285.167820][T30216] ? sk_psock_unlink+0x3dd/0x4b0 [ 285.172252][ T3876] kobject: 'loop2' (00000000355feacb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 285.176300][T30216] kasan_report+0x12/0x20 [ 285.176317][T30216] __asan_report_load4_noabort+0x14/0x20 [ 285.176329][T30216] sk_psock_unlink+0x3dd/0x4b0 [ 285.176350][T30216] ? sk_psock_link_pop+0x186/0x1f0 [ 285.176370][T30216] ? tcp_check_oom+0x560/0x560 [ 285.238990][ T3876] kobject: 'loop0' (000000005df7bdf7): kobject_uevent_env [ 285.248387][T30216] tcp_bpf_remove+0x21/0x50 [ 285.248402][T30216] tcp_bpf_close+0x130/0x390 [ 285.248424][T30216] inet_release+0xff/0x1e0 [ 285.255828][ T3876] kobject: 'loop0' (000000005df7bdf7): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 285.258380][T30216] inet6_release+0x53/0x80 [ 285.258394][T30216] __sock_release+0xce/0x2a0 [ 285.258412][T30216] sock_close+0x1b/0x30 [ 285.317051][T30216] __fput+0x2ff/0x890 [ 285.321291][T30216] ? __sock_release+0x2a0/0x2a0 [ 285.322350][ T3876] kobject: 'loop3' (000000003f46b045): kobject_uevent_env [ 285.332868][T30216] ____fput+0x16/0x20 [ 285.332883][T30216] task_work_run+0x145/0x1c0 [ 285.332909][T30216] exit_to_usermode_loop+0x273/0x2c0 [ 285.348808][ T3876] kobject: 'loop3' (000000003f46b045): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 285.353878][T30216] do_syscall_64+0x58e/0x680 [ 285.368661][T30216] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.373143][ T3876] kobject: 'loop5' (00000000f2e6fcb0): kobject_uevent_env [ 285.374562][T30216] RIP: 0033:0x412f61 [ 285.374576][T30216] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 285.374583][T30216] RSP: 002b:00007ffd949a4010 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 285.374594][T30216] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f61 [ 285.374600][T30216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 285.374623][T30216] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 285.381952][ T3876] kobject: 'loop5' (00000000f2e6fcb0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 285.385623][T30216] R10: 00007ffd949a40f0 R11: 0000000000000293 R12: 00000000007610a8 [ 285.385630][T30216] R13: 0000000000045798 R14: 00000000000457c5 R15: 000000000075bf2c [ 285.406554][T30216] Kernel Offset: disabled [ 285.469896][T30216] Rebooting in 86400 seconds..