[ 65.296521][ T26] audit: type=1800 audit(1559755415.510:25): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.340988][ T26] audit: type=1800 audit(1559755415.520:26): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.376281][ T26] audit: type=1800 audit(1559755415.520:27): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts. 2019/06/05 17:39:03 parsed 1 programs 2019/06/05 17:39:06 executed programs: 0 syzkaller login: [ 996.518091][ T9043] IPVS: ftp: loaded support on port[0] = 21 [ 996.535009][ T9040] IPVS: ftp: loaded support on port[0] = 21 [ 996.545313][ T9041] IPVS: ftp: loaded support on port[0] = 21 [ 996.562832][ T9046] IPVS: ftp: loaded support on port[0] = 21 [ 996.594394][ T9047] IPVS: ftp: loaded support on port[0] = 21 [ 996.651799][ T9049] IPVS: ftp: loaded support on port[0] = 21 [ 996.861239][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 996.872339][ T9040] chnl_net:caif_netlink_parms(): no params data found [ 996.933114][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 996.963329][ T9046] chnl_net:caif_netlink_parms(): no params data found [ 997.060322][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.067457][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.077371][ T9041] device bridge_slave_0 entered promiscuous mode [ 997.094460][ T9049] chnl_net:caif_netlink_parms(): no params data found [ 997.104101][ T9047] chnl_net:caif_netlink_parms(): no params data found [ 997.121487][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.128819][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.138910][ T9046] device bridge_slave_0 entered promiscuous mode [ 997.155149][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.162453][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.171069][ T9041] device bridge_slave_1 entered promiscuous mode [ 997.201348][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.208786][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.216959][ T9046] device bridge_slave_1 entered promiscuous mode [ 997.225103][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.232599][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.241280][ T9043] device bridge_slave_0 entered promiscuous mode [ 997.256152][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.264201][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.273202][ T9040] device bridge_slave_0 entered promiscuous mode [ 997.285411][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.294141][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.303366][ T9040] device bridge_slave_1 entered promiscuous mode [ 997.323761][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.332091][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.341915][ T9043] device bridge_slave_1 entered promiscuous mode [ 997.379280][ T9043] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 997.405179][ T9041] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 997.432788][ T9043] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 997.444993][ T9046] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 997.464419][ T9041] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 997.476080][ T9040] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 997.499728][ T9046] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 997.508335][ T9049] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.516908][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.526075][ T9049] device bridge_slave_0 entered promiscuous mode [ 997.542495][ T9040] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 997.552756][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.561490][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.570455][ T9047] device bridge_slave_0 entered promiscuous mode [ 997.596591][ T9049] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.605652][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.614269][ T9049] device bridge_slave_1 entered promiscuous mode [ 997.635322][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.643353][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.652402][ T9047] device bridge_slave_1 entered promiscuous mode [ 997.662257][ T9043] team0: Port device team_slave_0 added [ 997.676782][ T9046] team0: Port device team_slave_0 added [ 997.694188][ T9046] team0: Port device team_slave_1 added [ 997.703478][ T9041] team0: Port device team_slave_0 added [ 997.724368][ T9043] team0: Port device team_slave_1 added [ 997.738177][ T9041] team0: Port device team_slave_1 added [ 997.753968][ T9040] team0: Port device team_slave_0 added [ 997.768435][ T9047] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 997.779663][ T9047] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 997.792065][ T9049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 997.804337][ T9049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 997.815383][ T9040] team0: Port device team_slave_1 added [ 997.883998][ T9046] device hsr_slave_0 entered promiscuous mode [ 997.951790][ T9046] device hsr_slave_1 entered promiscuous mode [ 998.103687][ T9043] device hsr_slave_0 entered promiscuous mode [ 998.170705][ T9043] device hsr_slave_1 entered promiscuous mode [ 998.242177][ T9047] team0: Port device team_slave_0 added [ 998.303080][ T9040] device hsr_slave_0 entered promiscuous mode [ 998.350914][ T9040] device hsr_slave_1 entered promiscuous mode [ 998.443457][ T9041] device hsr_slave_0 entered promiscuous mode [ 998.500793][ T9041] device hsr_slave_1 entered promiscuous mode [ 998.542364][ T9047] team0: Port device team_slave_1 added [ 998.564256][ T9049] team0: Port device team_slave_0 added [ 998.582119][ T9049] team0: Port device team_slave_1 added [ 998.674120][ T9047] device hsr_slave_0 entered promiscuous mode [ 998.740891][ T9047] device hsr_slave_1 entered promiscuous mode [ 998.873631][ T9049] device hsr_slave_0 entered promiscuous mode [ 998.921095][ T9049] device hsr_slave_1 entered promiscuous mode [ 999.097176][ T9046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.125096][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.154921][ T9046] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.163747][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.174143][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.202089][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.211274][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.221180][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.228878][ T9050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.237403][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.247418][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.256577][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.265551][ T9050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.302107][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.318161][ T9043] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.326348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.336163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.345430][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.354559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.367813][ T9040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.396478][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.406236][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.416798][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.427214][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.438551][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.446256][ T9051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.456511][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.468174][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.481995][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.492928][ T9047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.506942][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.521120][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.533392][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.541689][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.558738][ T9049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.589267][ T9047] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.601460][ T9040] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.613524][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.623095][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.635000][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.645940][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.655705][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.663436][ T9062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.672565][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.682584][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.691667][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.699446][ T9062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.707876][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.716912][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.726316][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.736042][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.744691][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.753702][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.763365][ T9062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.772998][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.782287][ T9062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.799555][ T9046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 999.812269][ T9046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.839302][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.849617][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.863296][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.873907][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.883366][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.893476][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 999.903611][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 999.912714][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 999.922407][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 999.932028][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 999.941424][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 999.951035][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.961032][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 999.970568][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.980627][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.989517][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.998949][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.009894][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.018667][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.028171][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.071573][ T9043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1000.083606][ T9043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1000.099335][ T9049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.111645][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.121609][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.130974][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.140907][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.150009][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.159428][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.167847][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.177375][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.186565][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1000.195954][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1000.205237][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.212772][ T9051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.221830][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.231009][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.240515][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1000.249893][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1000.261177][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.268864][ T9051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.278035][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.286715][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.296214][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1000.306352][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1000.316563][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.324741][ T9051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.333631][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.343455][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.352139][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.361780][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1000.371105][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1000.380119][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.387801][ T9051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.395693][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.404620][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1000.413633][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.422055][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1000.433430][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.484711][ T9040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1000.496897][ T9040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1000.514111][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.524383][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.534722][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.543817][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1000.553177][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1000.562520][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.570020][ T9050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.578524][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.588243][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.598366][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.616366][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.626592][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.636250][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.646770][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.656603][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.666142][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.675873][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.685845][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.695661][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.704556][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.713281][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.722110][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.731191][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.752017][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.783787][ T9046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.796541][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.807384][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.827424][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.837189][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.846419][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.855186][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.864536][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.874124][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.884273][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.893211][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.903271][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.913021][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.929633][ T9049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.941404][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1000.964245][ T9040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.996113][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.018620][ T9049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.036162][ T9047] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/05 17:39:11 executed programs: 9 2019/06/05 17:39:16 executed programs: 223 2019/06/05 17:39:21 executed programs: 427 2019/06/05 17:39:26 executed programs: 639 2019/06/05 17:39:31 executed programs: 864 2019/06/05 17:39:36 executed programs: 1080 2019/06/05 17:39:41 executed programs: 1296 2019/06/05 17:39:46 executed programs: 1508 2019/06/05 17:39:51 executed programs: 1717 2019/06/05 17:39:56 executed programs: 1929 2019/06/05 17:40:01 executed programs: 2134 2019/06/05 17:40:06 executed programs: 2332 2019/06/05 17:40:11 executed programs: 2522 2019/06/05 17:40:17 executed programs: 2723 2019/06/05 17:40:22 executed programs: 2918 2019/06/05 17:40:27 executed programs: 3102 2019/06/05 17:40:32 executed programs: 3297 2019/06/05 17:40:37 executed programs: 3489 2019/06/05 17:40:42 executed programs: 3673 2019/06/05 17:40:47 executed programs: 3856 2019/06/05 17:40:52 executed programs: 4047 2019/06/05 17:40:57 executed programs: 4231 2019/06/05 17:41:02 executed programs: 4439 2019/06/05 17:41:07 executed programs: 4639 2019/06/05 17:41:12 executed programs: 4821 2019/06/05 17:41:17 executed programs: 4991 2019/06/05 17:41:22 executed programs: 5154 2019/06/05 17:41:27 executed programs: 5324 2019/06/05 17:41:32 executed programs: 5523 2019/06/05 17:41:37 executed programs: 5721 2019/06/05 17:41:42 executed programs: 5896 2019/06/05 17:41:47 executed programs: 6062 2019/06/05 17:41:52 executed programs: 6231 2019/06/05 17:41:57 executed programs: 6393 2019/06/05 17:42:02 executed programs: 6580 2019/06/05 17:42:07 executed programs: 6764 2019/06/05 17:42:12 executed programs: 6937 2019/06/05 17:42:17 executed programs: 7096 2019/06/05 17:42:22 executed programs: 7253 2019/06/05 17:42:27 executed programs: 7411 2019/06/05 17:42:32 executed programs: 7608 2019/06/05 17:42:37 executed programs: 7793 2019/06/05 17:42:42 executed programs: 7948 2019/06/05 17:42:47 executed programs: 8104 2019/06/05 17:42:52 executed programs: 8262 2019/06/05 17:42:57 executed programs: 8419 2019/06/05 17:43:03 executed programs: 8628 2019/06/05 17:43:08 executed programs: 8836 2019/06/05 17:43:13 executed programs: 9031 2019/06/05 17:43:18 executed programs: 9213 2019/06/05 17:43:23 executed programs: 9392 2019/06/05 17:43:28 executed programs: 9561 2019/06/05 17:43:33 executed programs: 9770 2019/06/05 17:43:38 executed programs: 9976 2019/06/05 17:43:43 executed programs: 10142 2019/06/05 17:43:48 executed programs: 10294 2019/06/05 17:43:53 executed programs: 10449 2019/06/05 17:43:58 executed programs: 10599 2019/06/05 17:44:03 executed programs: 10792 2019/06/05 17:44:08 executed programs: 10984 2019/06/05 17:44:13 executed programs: 11151 2019/06/05 17:44:18 executed programs: 11338 2019/06/05 17:44:23 executed programs: 11583 2019/06/05 17:44:28 executed programs: 11821 [ 1322.552350][T29635] ================================================================== [ 1322.560510][T29635] BUG: KASAN: use-after-free in __lock_acquire+0x3ba2/0x5490 [ 1322.567881][T29635] Read of size 8 at addr ffff888097e24638 by task syz-executor.5/29635 [ 1322.576318][T29635] [ 1322.578655][T29635] CPU: 0 PID: 29635 Comm: syz-executor.5 Not tainted 5.2.0-rc2+ #40 [ 1322.586636][T29635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1322.596705][T29635] Call Trace: [ 1322.600011][T29635] dump_stack+0x172/0x1f0 [ 1322.604348][T29635] ? __lock_acquire+0x3ba2/0x5490 [ 1322.609381][T29635] print_address_description.cold+0x7c/0x20d [ 1322.615380][T29635] ? __lock_acquire+0x3ba2/0x5490 [ 1322.620434][T29635] ? __lock_acquire+0x3ba2/0x5490 [ 1322.625471][T29635] __kasan_report.cold+0x1b/0x40 [ 1322.630425][T29635] ? __lock_acquire+0x3ba2/0x5490 [ 1322.635462][T29635] kasan_report+0x12/0x20 [ 1322.641171][T29635] __asan_report_load8_noabort+0x14/0x20 [ 1322.646833][T29635] __lock_acquire+0x3ba2/0x5490 [ 1322.651693][T29635] ? kasan_check_read+0x11/0x20 [ 1322.656547][T29635] ? kasan_check_write+0x14/0x20 [ 1322.661498][T29635] ? finish_task_switch+0x1f0/0x730 [ 1322.666714][T29635] ? mark_held_locks+0xf0/0xf0 [ 1322.671491][T29635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.676968][T29635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.682460][T29635] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1322.687800][T29635] ? retint_kernel+0x2b/0x2b [ 1322.692846][T29635] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1322.698506][T29635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.703996][T29635] lock_acquire+0x16f/0x3f0 [ 1322.708515][T29635] ? sk_psock_unlink+0x250/0x4b0 [ 1322.713468][T29635] _raw_spin_lock_bh+0x33/0x50 [ 1322.718240][T29635] ? sk_psock_unlink+0x250/0x4b0 [ 1322.723189][T29635] sk_psock_unlink+0x250/0x4b0 [ 1322.727969][T29635] ? sk_psock_link_pop+0x186/0x1f0 [ 1322.733095][T29635] ? tcp_check_oom+0x560/0x560 [ 1322.737877][T29635] tcp_bpf_remove+0x21/0x50 [ 1322.742398][T29635] tcp_bpf_close+0x130/0x390 [ 1322.747009][T29635] tls_sk_proto_close+0x18a/0x770 [ 1322.752075][T29635] ? tcp_bpf_stream_read+0x270/0x270 [ 1322.757465][T29635] ? tls_push_sg+0x680/0x680 [ 1322.762085][T29635] ? inet_release+0x85/0x1f0 [ 1322.766688][T29635] ? inet_release+0x96/0x1f0 [ 1322.771287][T29635] inet_release+0xe0/0x1f0 [ 1322.775712][T29635] inet6_release+0x53/0x80 [ 1322.780136][T29635] __sock_release+0xce/0x2a0 [ 1322.784724][T29635] sock_close+0x1b/0x30 [ 1322.788886][T29635] __fput+0x2ff/0x890 [ 1322.792871][T29635] ? __sock_release+0x2a0/0x2a0 [ 1322.797731][T29635] ____fput+0x16/0x20 [ 1322.801719][T29635] task_work_run+0x145/0x1c0 [ 1322.806318][T29635] exit_to_usermode_loop+0x273/0x2c0 [ 1322.811611][T29635] do_syscall_64+0x58e/0x680 [ 1322.811627][T29635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1322.811639][T29635] RIP: 0033:0x412f40 [ 1322.811661][T29635] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 4d 33 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1322.811668][T29635] RSP: 002b:00007ffcec9b04c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1322.822274][T29635] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f40 [ 1322.822289][T29635] RDX: 0000001b31120000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1322.845783][T29635] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1322.845791][T29635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000761178 [ 1322.845797][T29635] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1322.845810][T29635] [ 1322.845818][T29635] Allocated by task 29635: [ 1322.845837][T29635] save_stack+0x23/0x90 [ 1322.845850][T29635] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1322.845860][T29635] kasan_kmalloc+0x9/0x10 [ 1322.845869][T29635] kmem_cache_alloc_trace+0x151/0x750 [ 1322.845879][T29635] sock_map_alloc+0x1b9/0x3f0 [ 1322.845891][T29635] __do_sys_bpf+0x730/0x43d0 [ 1322.845901][T29635] __x64_sys_bpf+0x73/0xb0 [ 1322.845924][T29635] do_syscall_64+0xfd/0x680 [ 1322.854577][ T3879] kobject: 'loop3' (000000007bba3f4a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1322.862316][T29635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1322.862320][T29635] [ 1322.862325][T29635] Freed by task 10612: [ 1322.862338][T29635] save_stack+0x23/0x90 [ 1322.862349][T29635] __kasan_slab_free+0x102/0x150 [ 1322.862360][T29635] kasan_slab_free+0xe/0x10 [ 1322.862369][T29635] kfree+0xcf/0x220 [ 1322.862379][T29635] sock_map_free+0x22a/0x310 [ 1322.862398][T29635] bpf_map_free_deferred+0xb4/0xe0 [ 1322.872219][ T3879] kobject: 'loop4' (00000000739b273f): kobject_uevent_env [ 1322.878337][T29635] process_one_work+0x989/0x1790 [ 1322.878350][T29635] worker_thread+0x98/0xe40 [ 1322.878361][T29635] kthread+0x354/0x420 [ 1322.878374][T29635] ret_from_fork+0x24/0x30 [ 1322.878385][T29635] [ 1322.886868][ T3879] kobject: 'loop4' (00000000739b273f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1322.894593][T29635] The buggy address belongs to the object at ffff888097e24500 [ 1322.894593][T29635] which belongs to the cache kmalloc-512 of size 512 [ 1322.894604][T29635] The buggy address is located 312 bytes inside of [ 1322.894604][T29635] 512-byte region [ffff888097e24500, ffff888097e24700) [ 1322.894608][T29635] The buggy address belongs to the page: [ 1322.894621][T29635] page:ffffea00025f8900 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0x0 [ 1322.894632][T29635] flags: 0x1fffc0000000200(slab) [ 1322.894650][T29635] raw: 01fffc0000000200 ffffea000264a708 ffffea0002668c08 ffff8880aa400940 [ 1322.894663][T29635] raw: 0000000000000000 ffff888097e24000 0000000100000006 0000000000000000 [ 1322.894676][T29635] page dumped because: kasan: bad access detected [ 1322.898979][ T3879] kobject: 'loop3' (000000007bba3f4a): kobject_uevent_env [ 1322.901395][T29635] [ 1322.901399][T29635] Memory state around the buggy address: [ 1322.901411][T29635] ffff888097e24500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1322.901427][T29635] ffff888097e24580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1322.901438][T29635] >ffff888097e24600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1322.901442][T29635] ^ [ 1322.901452][T29635] ffff888097e24680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1322.901461][T29635] ffff888097e24700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1322.901473][T29635] ================================================================== [ 1322.905745][ T3879] kobject: 'loop3' (000000007bba3f4a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1322.911236][T29635] Disabling lock debugging due to kernel taint [ 1322.911244][T29635] Kernel panic - not syncing: panic_on_warn set ... [ 1322.911260][T29635] CPU: 0 PID: 29635 Comm: syz-executor.5 Tainted: G B 5.2.0-rc2+ #40 [ 1322.911268][T29635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1322.911272][T29635] Call Trace: [ 1322.911297][T29635] dump_stack+0x172/0x1f0 [ 1322.911318][T29635] panic+0x2cb/0x744 [ 1322.917241][ T3879] kobject: 'loop4' (00000000739b273f): kobject_uevent_env [ 1322.921005][T29635] ? __warn_printk+0xf3/0xf3 [ 1322.921020][T29635] ? lock_downgrade+0x880/0x880 [ 1322.921039][T29635] ? __lock_acquire+0x3ba2/0x5490 [ 1322.925856][ T3879] kobject: 'loop4' (00000000739b273f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1322.930292][T29635] ? trace_hardirqs_off+0x62/0x220 [ 1322.930304][T29635] ? trace_hardirqs_off+0x59/0x220 [ 1322.930319][T29635] ? __lock_acquire+0x3ba2/0x5490 [ 1322.930339][T29635] end_report+0x47/0x4f [ 1322.936308][ T3879] kobject: 'loop3' (000000007bba3f4a): kobject_uevent_env [ 1322.939237][T29635] ? __lock_acquire+0x3ba2/0x5490 [ 1322.939262][T29635] __kasan_report.cold+0xe/0x40 [ 1322.949642][ T3879] kobject: 'loop3' (000000007bba3f4a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1322.955325][T29635] ? __lock_acquire+0x3ba2/0x5490 2019/06/05 17:44:33 executed programs: 12046 [ 1322.955340][T29635] kasan_report+0x12/0x20 [ 1322.955354][T29635] __asan_report_load8_noabort+0x14/0x20 [ 1322.955373][T29635] __lock_acquire+0x3ba2/0x5490 [ 1322.959302][ T3879] kobject: 'loop4' (00000000739b273f): kobject_uevent_env [ 1322.961753][T29635] ? kasan_check_read+0x11/0x20 [ 1322.961768][T29635] ? kasan_check_write+0x14/0x20 [ 1322.961781][T29635] ? finish_task_switch+0x1f0/0x730 [ 1322.961804][T29635] ? mark_held_locks+0xf0/0xf0 [ 1322.966093][ T3879] kobject: 'loop4' (00000000739b273f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1322.970884][T29635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.970897][T29635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.970910][T29635] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1322.970923][T29635] ? retint_kernel+0x2b/0x2b [ 1322.970939][T29635] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1322.970958][T29635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1322.977071][ T3879] kobject: 'loop3' (000000007bba3f4a): kobject_uevent_env [ 1322.979257][T29635] lock_acquire+0x16f/0x3f0 [ 1322.979276][T29635] ? sk_psock_unlink+0x250/0x4b0 [ 1322.983976][ T3879] kobject: 'loop3' (000000007bba3f4a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1322.988956][T29635] _raw_spin_lock_bh+0x33/0x50 [ 1322.988970][T29635] ? sk_psock_unlink+0x250/0x4b0 [ 1322.988982][T29635] sk_psock_unlink+0x250/0x4b0 [ 1322.989001][T29635] ? sk_psock_link_pop+0x186/0x1f0 [ 1322.997759][ T3879] kobject: 'loop2' (00000000bb2ad863): kobject_uevent_env [ 1323.001072][T29635] ? tcp_check_oom+0x560/0x560 [ 1323.001086][T29635] tcp_bpf_remove+0x21/0x50 [ 1323.001107][T29635] tcp_bpf_close+0x130/0x390 [ 1323.005699][ T3879] kobject: 'loop2' (00000000bb2ad863): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1323.009679][T29635] tls_sk_proto_close+0x18a/0x770 [ 1323.009693][T29635] ? tcp_bpf_stream_read+0x270/0x270 [ 1323.009706][T29635] ? tls_push_sg+0x680/0x680 [ 1323.009726][T29635] ? inet_release+0x85/0x1f0 [ 1323.023019][ T3879] kobject: 'loop2' (00000000bb2ad863): kobject_uevent_env [ 1323.026585][T29635] ? inet_release+0x96/0x1f0 [ 1323.026600][T29635] inet_release+0xe0/0x1f0 [ 1323.026622][T29635] inet6_release+0x53/0x80 [ 1323.056596][ T3879] kobject: 'loop2' (00000000bb2ad863): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1323.059602][T29635] __sock_release+0xce/0x2a0 [ 1323.059615][T29635] sock_close+0x1b/0x30 [ 1323.059630][T29635] __fput+0x2ff/0x890 [ 1323.059648][T29635] ? __sock_release+0x2a0/0x2a0 [ 1323.316348][ T3879] kobject: 'loop0' (0000000047b0dbf2): kobject_uevent_env [ 1323.318467][T29635] ____fput+0x16/0x20 [ 1323.327545][ T3879] kobject: 'loop0' (0000000047b0dbf2): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1323.330452][T29635] task_work_run+0x145/0x1c0 [ 1323.330471][T29635] exit_to_usermode_loop+0x273/0x2c0 [ 1323.330487][T29635] do_syscall_64+0x58e/0x680 [ 1323.330509][T29635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1323.581866][T29635] RIP: 0033:0x412f40 [ 1323.585746][T29635] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 4d 33 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1323.605337][T29635] RSP: 002b:00007ffcec9b04c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1323.613744][T29635] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f40 [ 1323.621787][T29635] RDX: 0000001b31120000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1323.629945][T29635] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1323.637905][T29635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000761178 [ 1323.645877][T29635] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1323.654935][T29635] Kernel Offset: disabled [ 1323.659273][T29635] Rebooting in 86400 seconds..