[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.789602][ T24] audit: type=1800 audit(1564235952.598:25): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.830941][ T24] audit: type=1800 audit(1564235952.608:26): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.874727][ T24] audit: type=1800 audit(1564235952.608:27): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.76' (ECDSA) to the list of known hosts. 2019/07/27 13:59:41 parsed 1 programs 2019/07/27 13:59:44 executed programs: 0 syzkaller login: [ 90.398545][ T8671] IPVS: ftp: loaded support on port[0] = 21 [ 90.408051][ T8674] IPVS: ftp: loaded support on port[0] = 21 [ 90.449846][ T8675] IPVS: ftp: loaded support on port[0] = 21 [ 90.525673][ T8680] IPVS: ftp: loaded support on port[0] = 21 [ 90.525926][ T8679] IPVS: ftp: loaded support on port[0] = 21 [ 90.544482][ T8681] IPVS: ftp: loaded support on port[0] = 21 [ 90.696381][ T8671] chnl_net:caif_netlink_parms(): no params data found [ 90.762225][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 90.839863][ T8675] chnl_net:caif_netlink_parms(): no params data found [ 90.849056][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.857235][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.865774][ T8671] device bridge_slave_0 entered promiscuous mode [ 90.914540][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.921610][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.931269][ T8671] device bridge_slave_1 entered promiscuous mode [ 90.957167][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.964804][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.973000][ T8674] device bridge_slave_0 entered promiscuous mode [ 91.007730][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.014949][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.023176][ T8674] device bridge_slave_1 entered promiscuous mode [ 91.080042][ T8671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.089546][ T8681] chnl_net:caif_netlink_parms(): no params data found [ 91.104521][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.125756][ T8680] chnl_net:caif_netlink_parms(): no params data found [ 91.146089][ T8671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.167866][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.184774][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.191851][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.199908][ T8675] device bridge_slave_0 entered promiscuous mode [ 91.211461][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.218921][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.227045][ T8675] device bridge_slave_1 entered promiscuous mode [ 91.239111][ T8679] chnl_net:caif_netlink_parms(): no params data found [ 91.283954][ T8671] team0: Port device team_slave_0 added [ 91.292165][ T8675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.303154][ T8674] team0: Port device team_slave_0 added [ 91.330986][ T8675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.341296][ T8671] team0: Port device team_slave_1 added [ 91.358902][ T8674] team0: Port device team_slave_1 added [ 91.366189][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.373527][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.381147][ T8680] device bridge_slave_0 entered promiscuous mode [ 91.410427][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.417937][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.425924][ T8679] device bridge_slave_0 entered promiscuous mode [ 91.434484][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.441647][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.450370][ T8680] device bridge_slave_1 entered promiscuous mode [ 91.457494][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.468370][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.476350][ T8681] device bridge_slave_0 entered promiscuous mode [ 91.484777][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.491835][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.499796][ T8681] device bridge_slave_1 entered promiscuous mode [ 91.509488][ T8675] team0: Port device team_slave_0 added [ 91.516842][ T8675] team0: Port device team_slave_1 added [ 91.531287][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.538721][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.546912][ T8679] device bridge_slave_1 entered promiscuous mode [ 91.634596][ T8675] device hsr_slave_0 entered promiscuous mode [ 91.683231][ T8675] device hsr_slave_1 entered promiscuous mode [ 91.767927][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.835458][ T8671] device hsr_slave_0 entered promiscuous mode [ 91.893014][ T8671] device hsr_slave_1 entered promiscuous mode [ 91.942639][ T8671] debugfs: Directory 'hsr0' with parent '/' already present! [ 91.967322][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.978168][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.988529][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.054211][ T8674] device hsr_slave_0 entered promiscuous mode [ 92.092913][ T8674] device hsr_slave_1 entered promiscuous mode [ 92.142536][ T8674] debugfs: Directory 'hsr0' with parent '/' already present! [ 92.156235][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.166558][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.189997][ T8679] team0: Port device team_slave_0 added [ 92.214901][ T8679] team0: Port device team_slave_1 added [ 92.224618][ T8680] team0: Port device team_slave_0 added [ 92.238736][ T8681] team0: Port device team_slave_0 added [ 92.247326][ T8681] team0: Port device team_slave_1 added [ 92.270430][ T8680] team0: Port device team_slave_1 added [ 92.346017][ T8679] device hsr_slave_0 entered promiscuous mode [ 92.383079][ T8679] device hsr_slave_1 entered promiscuous mode [ 92.422484][ T8679] debugfs: Directory 'hsr0' with parent '/' already present! [ 92.485825][ T8680] device hsr_slave_0 entered promiscuous mode [ 92.532859][ T8680] device hsr_slave_1 entered promiscuous mode [ 92.572675][ T8680] debugfs: Directory 'hsr0' with parent '/' already present! [ 92.655992][ T8681] device hsr_slave_0 entered promiscuous mode [ 92.703065][ T8681] device hsr_slave_1 entered promiscuous mode [ 92.743637][ T8681] debugfs: Directory 'hsr0' with parent '/' already present! [ 92.839230][ T8671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.863558][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.884344][ T8671] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.909621][ T8675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.922250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.932895][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.940684][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.951275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.960133][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.967466][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.991138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.999112][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.009117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.017656][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.024818][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.034544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.060217][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.073387][ T8675] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.080223][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.089455][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.098953][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.108429][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.117722][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.126536][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.134492][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.142143][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.150006][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.158094][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.173538][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.185607][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.194715][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.204165][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.214611][ T2835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.221666][ T2835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.229491][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.238098][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.246570][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.255359][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.264542][ T2835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.271582][ T2835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.280982][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.305812][ T8671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.335704][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.347073][ T8680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.357543][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.367083][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.375684][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.382873][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.390714][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.400141][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.408934][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.416051][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.424206][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.433290][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.442199][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.467205][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.475009][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.485009][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.494649][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.503533][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.512134][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.521040][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.529667][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.538390][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.547258][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.555465][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.575940][ T8675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.587777][ T8675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.608143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.620191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.629038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.638160][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.646711][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.655032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.663706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.671952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.680588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.688389][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.703436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.711106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.719720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.733923][ T8680] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.743450][ T8671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.750718][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.758995][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.774762][ T8679] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.782984][ T8674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.812411][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.820145][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.833708][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.842217][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.850992][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.858211][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.866477][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.875265][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.883580][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.890615][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.898312][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.907708][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.916658][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.928386][ T8675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.950722][ T8681] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.959682][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.973157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.981637][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.988792][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.997036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.005864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.014504][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.021530][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.029364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.038080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.046875][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.077928][ T8680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.088487][ T8680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.101836][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.116716][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.125580][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.135150][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.145532][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.154707][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.163699][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.172006][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.181256][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.189917][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.199510][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.208180][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.217020][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.225455][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.234205][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.242929][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.249980][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.257657][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.266371][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.274873][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.281921][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.291217][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.306174][ T8679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.318409][ T8679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.351626][ T8679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.368657][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.378246][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.398658][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.407129][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.416046][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.424931][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.434209][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.442633][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.452730][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.469664][ T8680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.510094][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.523397][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.541865][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.550732][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.559573][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.568148][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.576603][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.585950][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.601739][ T8681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.620283][ T8681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.671937][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.698502][ T2835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.786427][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/27 13:59:49 executed programs: 23 2019/07/27 13:59:54 executed programs: 209 2019/07/27 13:59:59 executed programs: 396 2019/07/27 14:00:04 executed programs: 579 2019/07/27 14:00:09 executed programs: 766 [ 117.562793][T11975] ================================================================== [ 117.571139][T11975] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 117.578437][T11975] Read of size 4 at addr ffff8880a8b8c798 by task syz-executor.4/11975 [ 117.586675][T11975] [ 117.589015][T11975] CPU: 0 PID: 11975 Comm: syz-executor.4 Not tainted 5.2.0+ #97 [ 117.596644][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.606705][T11975] Call Trace: [ 117.610011][T11975] dump_stack+0x172/0x1f0 [ 117.614353][T11975] ? sk_psock_unlink+0x3dd/0x4b0 [ 117.619308][T11975] ? tcp_check_oom+0x560/0x560 [ 117.624079][T11975] print_address_description.cold+0xd4/0x306 [ 117.630049][T11975] ? sk_psock_unlink+0x3dd/0x4b0 [ 117.635000][T11975] ? sk_psock_unlink+0x3dd/0x4b0 [ 117.639962][T11975] ? tcp_check_oom+0x560/0x560 [ 117.644737][T11975] __kasan_report.cold+0x1b/0x36 [ 117.649688][T11975] ? swapgs_restore_regs_and_return_to_usermode+0x3b/0x40 [ 117.656811][T11975] ? sk_psock_unlink+0x3dd/0x4b0 [ 117.661762][T11975] kasan_report+0x12/0x17 [ 117.666105][T11975] __asan_report_load4_noabort+0x14/0x20 [ 117.672182][T11975] sk_psock_unlink+0x3dd/0x4b0 [ 117.676968][T11975] ? tcp_check_oom+0x560/0x560 [ 117.681738][T11975] tcp_bpf_remove+0x21/0x50 [ 117.686251][T11975] tcp_bpf_close+0x130/0x390 [ 117.690854][T11975] inet_release+0xed/0x200 [ 117.695285][T11975] inet6_release+0x53/0x80 [ 117.699711][T11975] __sock_release+0xce/0x280 [ 117.704313][T11975] sock_close+0x1e/0x30 [ 117.708492][T11975] __fput+0x2ff/0x890 [ 117.712481][T11975] ? __sock_release+0x280/0x280 [ 117.717355][T11975] ____fput+0x16/0x20 [ 117.721362][T11975] task_work_run+0x145/0x1c0 [ 117.725975][T11975] exit_to_usermode_loop+0x316/0x380 [ 117.731276][T11975] do_syscall_64+0x5a9/0x6a0 [ 117.735985][T11975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.741885][T11975] RIP: 0033:0x413511 [ 117.745785][T11975] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 117.765390][T11975] RSP: 002b:00007fffc0389c30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 117.765415][T11975] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 117.765422][T11975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 117.765430][T11975] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 117.765437][T11975] R10: 00007fffc0389d10 R11: 0000000000000293 R12: 000000000075bf20 [ 117.765445][T11975] R13: 000000000001cafd R14: 00000000007610a8 R15: ffffffffffffffff [ 117.765465][T11975] [ 117.765472][T11975] Allocated by task 11976: [ 117.765488][T11975] save_stack+0x23/0x90 [ 117.790061][T11975] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 117.790074][T11975] kasan_kmalloc+0x9/0x10 [ 117.790087][T11975] kmem_cache_alloc_trace+0x158/0x790 [ 117.790104][T11975] sock_hash_alloc+0x1e3/0x5b0 [ 117.790119][T11975] __do_sys_bpf+0x475/0x42f0 [ 117.790131][T11975] __x64_sys_bpf+0x73/0xb0 [ 117.790145][T11975] do_syscall_64+0xfd/0x6a0 [ 117.790165][T11975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.858438][T11975] [ 117.866635][T11975] Freed by task 9122: [ 117.870621][T11975] save_stack+0x23/0x90 [ 117.870635][T11975] __kasan_slab_free+0x102/0x150 [ 117.870647][T11975] kasan_slab_free+0xe/0x10 [ 117.870658][T11975] kfree+0x10a/0x2c0 [ 117.870674][T11975] sock_hash_free+0x327/0x4a0 [ 117.870692][T11975] bpf_map_free_deferred+0xb3/0x100 [ 117.897977][T11975] process_one_work+0x9af/0x1740 [ 117.902927][T11975] worker_thread+0x98/0xe40 [ 117.907467][T11975] kthread+0x361/0x430 [ 117.911538][T11975] ret_from_fork+0x24/0x30 [ 117.915950][T11975] [ 117.918284][T11975] The buggy address belongs to the object at ffff8880a8b8c780 [ 117.918284][T11975] which belongs to the cache kmalloc-512 of size 512 [ 117.932336][T11975] The buggy address is located 24 bytes inside of [ 117.932336][T11975] 512-byte region [ffff8880a8b8c780, ffff8880a8b8c980) [ 117.932341][T11975] The buggy address belongs to the page: [ 117.932354][T11975] page:ffffea0002a2e300 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0xffff8880a8b8c280 [ 117.932366][T11975] flags: 0x1fffc0000000200(slab) [ 117.932385][T11975] raw: 01fffc0000000200 ffffea0002a3ae48 ffffea000251bf88 ffff8880aa400a80 [ 117.966513][T11975] raw: ffff8880a8b8c280 ffff8880a8b8c000 0000000100000001 0000000000000000 [ 117.966519][T11975] page dumped because: kasan: bad access detected [ 117.966524][T11975] [ 117.966528][T11975] Memory state around the buggy address: [ 117.966539][T11975] ffff8880a8b8c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.966550][T11975] ffff8880a8b8c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 117.966561][T11975] >ffff8880a8b8c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.966566][T11975] ^ [ 117.966577][T11975] ffff8880a8b8c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.966588][T11975] ffff8880a8b8c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.966592][T11975] ================================================================== [ 117.966601][T11975] Disabling lock debugging due to kernel taint [ 118.008058][ T3902] kobject: 'loop3' (00000000d46b651f): kobject_uevent_env [ 118.027360][T11975] Kernel panic - not syncing: panic_on_warn set ... [ 118.028208][ T3902] kobject: 'loop3' (00000000d46b651f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 118.035635][T11975] CPU: 0 PID: 11975 Comm: syz-executor.4 Tainted: G B 5.2.0+ #97 [ 118.035643][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.035647][T11975] Call Trace: [ 118.035666][T11975] dump_stack+0x172/0x1f0 [ 118.035682][T11975] ? tcp_check_oom+0x560/0x560 [ 118.035701][T11975] panic+0x2dc/0x755 [ 118.053064][ T3902] kobject: 'loop2' (000000006a298f3e): kobject_uevent_env [ 118.053257][T11975] ? add_taint.cold+0x16/0x16 [ 118.059535][ T3902] kobject: 'loop2' (000000006a298f3e): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 118.066562][T11975] ? sk_psock_unlink+0x3dd/0x4b0 [ 118.066576][T11975] ? tcp_check_oom+0x560/0x560 [ 118.066596][T11975] ? preempt_schedule+0x4b/0x60 [ 118.155377][T11975] ? ___preempt_schedule+0x16/0x18 [ 118.160497][T11975] ? trace_hardirqs_on+0x5e/0x240 [ 118.165510][T11975] ? sk_psock_unlink+0x3dd/0x4b0 [ 118.170425][T11975] ? tcp_check_oom+0x560/0x560 [ 118.175182][T11975] end_report+0x47/0x4f [ 118.179322][T11975] ? sk_psock_unlink+0x3dd/0x4b0 [ 118.184236][T11975] __kasan_report.cold+0xe/0x36 [ 118.189090][T11975] ? swapgs_restore_regs_and_return_to_usermode+0x3b/0x40 [ 118.196206][T11975] ? sk_psock_unlink+0x3dd/0x4b0 [ 118.201214][T11975] kasan_report+0x12/0x17 [ 118.205524][T11975] __asan_report_load4_noabort+0x14/0x20 [ 118.212535][T11975] sk_psock_unlink+0x3dd/0x4b0 [ 118.217293][T11975] ? tcp_check_oom+0x560/0x560 [ 118.222033][T11975] tcp_bpf_remove+0x21/0x50 [ 118.226514][T11975] tcp_bpf_close+0x130/0x390 [ 118.231090][T11975] inet_release+0xed/0x200 [ 118.235488][T11975] inet6_release+0x53/0x80 [ 118.239883][T11975] __sock_release+0xce/0x280 [ 118.244453][T11975] sock_close+0x1e/0x30 [ 118.248588][T11975] __fput+0x2ff/0x890 [ 118.252548][T11975] ? __sock_release+0x280/0x280 [ 118.257378][T11975] ____fput+0x16/0x20 [ 118.261344][T11975] task_work_run+0x145/0x1c0 [ 118.265920][T11975] exit_to_usermode_loop+0x316/0x380 [ 118.271203][T11975] do_syscall_64+0x5a9/0x6a0 [ 118.276019][T11975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 118.281900][T11975] RIP: 0033:0x413511 [ 118.285777][T11975] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 118.305380][T11975] RSP: 002b:00007fffc0389c30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 118.313796][T11975] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 118.321850][T11975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 118.329919][T11975] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 118.338354][T11975] R10: 00007fffc0389d10 R11: 0000000000000293 R12: 000000000075bf20 [ 118.346321][T11975] R13: 000000000001cafd R14: 00000000007610a8 R15: ffffffffffffffff [ 118.355864][T11975] Kernel Offset: disabled [ 118.360207][T11975] Rebooting in 86400 seconds..