[ 37.463299][ T26] audit: type=1800 audit(1555563539.307:26): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 37.490283][ T26] audit: type=1800 audit(1555563539.307:27): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.515776][ T26] audit: type=1800 audit(1555563539.307:28): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.293739][ T26] audit: type=1800 audit(1555563540.177:29): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. 2019/04/18 04:59:19 parsed 1 programs 2019/04/18 04:59:22 executed programs: 0 syzkaller login: [ 60.457210][ T7791] IPVS: ftp: loaded support on port[0] = 21 [ 60.458994][ T7789] IPVS: ftp: loaded support on port[0] = 21 [ 60.475418][ T7793] IPVS: ftp: loaded support on port[0] = 21 [ 60.475919][ T7796] IPVS: ftp: loaded support on port[0] = 21 [ 60.493876][ T7797] IPVS: ftp: loaded support on port[0] = 21 [ 60.495735][ T7798] IPVS: ftp: loaded support on port[0] = 21 [ 60.754869][ T7791] chnl_net:caif_netlink_parms(): no params data found [ 60.828231][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 60.874297][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 60.936645][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 60.946032][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.953433][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.961088][ T7791] device bridge_slave_0 entered promiscuous mode [ 60.998419][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.007217][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.015189][ T7791] device bridge_slave_1 entered promiscuous mode [ 61.034448][ T7798] chnl_net:caif_netlink_parms(): no params data found [ 61.047871][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.054975][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.062790][ T7789] device bridge_slave_0 entered promiscuous mode [ 61.073565][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.080761][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.088911][ T7789] device bridge_slave_1 entered promiscuous mode [ 61.100680][ T7796] chnl_net:caif_netlink_parms(): no params data found [ 61.113023][ T7791] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.147629][ T7791] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.166304][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.173552][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.181156][ T7793] device bridge_slave_0 entered promiscuous mode [ 61.190291][ T7789] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.213671][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.220752][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.228458][ T7793] device bridge_slave_1 entered promiscuous mode [ 61.236270][ T7789] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.248364][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.255611][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.266313][ T7798] device bridge_slave_0 entered promiscuous mode [ 61.275246][ T7791] team0: Port device team_slave_0 added [ 61.281117][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.288237][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.295855][ T7798] device bridge_slave_1 entered promiscuous mode [ 61.325021][ T7791] team0: Port device team_slave_1 added [ 61.334583][ T7789] team0: Port device team_slave_0 added [ 61.340263][ T7796] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.347452][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.355080][ T7796] device bridge_slave_0 entered promiscuous mode [ 61.364651][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.373026][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.381066][ T7797] device bridge_slave_0 entered promiscuous mode [ 61.389671][ T7798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.407121][ T7793] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.416631][ T7789] team0: Port device team_slave_1 added [ 61.422860][ T7796] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.429922][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.437777][ T7796] device bridge_slave_1 entered promiscuous mode [ 61.445192][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.452329][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.459942][ T7797] device bridge_slave_1 entered promiscuous mode [ 61.468361][ T7798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.484387][ T7793] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.541030][ T7797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.556276][ T7793] team0: Port device team_slave_0 added [ 61.575531][ T7798] team0: Port device team_slave_0 added [ 61.615043][ T7791] device hsr_slave_0 entered promiscuous mode [ 61.681959][ T7791] device hsr_slave_1 entered promiscuous mode [ 61.774622][ T7789] device hsr_slave_0 entered promiscuous mode [ 61.811959][ T7789] device hsr_slave_1 entered promiscuous mode [ 61.883377][ T7797] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.895936][ T7793] team0: Port device team_slave_1 added [ 61.903278][ T7796] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.917598][ T7798] team0: Port device team_slave_1 added [ 62.004558][ T7793] device hsr_slave_0 entered promiscuous mode [ 62.041959][ T7793] device hsr_slave_1 entered promiscuous mode [ 62.093615][ T7796] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.174787][ T7798] device hsr_slave_0 entered promiscuous mode [ 62.241961][ T7798] device hsr_slave_1 entered promiscuous mode [ 62.319949][ T7797] team0: Port device team_slave_0 added [ 62.340291][ T7796] team0: Port device team_slave_0 added [ 62.347955][ T7796] team0: Port device team_slave_1 added [ 62.355613][ T7797] team0: Port device team_slave_1 added [ 62.434996][ T7796] device hsr_slave_0 entered promiscuous mode [ 62.491931][ T7796] device hsr_slave_1 entered promiscuous mode [ 62.574665][ T7797] device hsr_slave_0 entered promiscuous mode [ 62.622099][ T7797] device hsr_slave_1 entered promiscuous mode [ 62.764976][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.789535][ T7791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.804794][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.845534][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.854818][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.872346][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.887409][ T7791] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.895142][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.902991][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.910779][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.918783][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.928642][ T7789] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.953230][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.973605][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.982466][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.990752][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.997983][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.006319][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.015245][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.023743][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.030766][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.038367][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.047256][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.056032][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.064436][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.071476][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.079085][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.088554][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.097212][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.104305][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.112028][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.120575][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.128985][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.136079][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.144005][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.152569][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.161537][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.169544][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.177857][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.214936][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.222858][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.234369][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.243291][ T7806] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.250328][ T7806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.258097][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.266952][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.275540][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.284593][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.293472][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.302120][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.312066][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.320401][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.329105][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.337470][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.345642][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.353891][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.362724][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.378237][ T7797] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.389954][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.403720][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.411489][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.421429][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.430184][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.438322][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.446346][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.458347][ T7791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.471402][ T7791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.486012][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.498572][ T7793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.510610][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.519711][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.529927][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.538423][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.547043][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.555630][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.562747][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.570311][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.578893][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.587136][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.594909][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.602759][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.610959][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.619252][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.627489][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.667217][ T7796] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.678739][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.689372][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.698111][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.705254][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.713579][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.722300][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.730517][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.739071][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.747842][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.756136][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.764529][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.773103][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.781411][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.788530][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.796244][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.804984][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.813839][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.820886][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.828599][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.837058][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.845045][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.854568][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.864598][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.873757][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.906823][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.915680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.925159][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.934243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.943267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.951955][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.960218][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.968586][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.977333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.985844][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.992927][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.000505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.009352][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.017757][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.024819][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.032567][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.042156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.050049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.067907][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.099373][ T7791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.109077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.120156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.129078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.137809][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.146342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.154946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.163863][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.172384][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.180537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.188796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.197329][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.205952][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.214427][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.222311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.230776][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.243781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.253024][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.273646][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.284373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.304970][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.343084][ T7796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.366948][ T7796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.389860][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.402257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.410622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.423253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.431499][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.442259][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.461923][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 64.467900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 64.478137][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.491786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 64.497558][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 64.530478][ T7797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.537400][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 64.537466][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 64.551265][ T7810] Started in network mode [ 64.556364][ T7810] Own node identity ac1414aa, cluster identity 4711 [ 64.583603][ T7810] New replicast peer: 172.20.20.187 [ 64.590536][ T7810] Enabled bearer , priority 10 [ 64.591697][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 64.604116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 64.610472][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.617384][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 64.617436][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 64.630507][ T7820] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.673024][ T7814] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.705180][ T7818] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.779125][ T7825] Started in network mode [ 64.796973][ T7825] Own node identity ac1414aa, cluster identity 4711 [ 64.829430][ T7825] New replicast peer: 172.20.20.187 [ 64.852430][ T7825] Enabled bearer , priority 10 [ 64.865573][ T7830] Started in network mode [ 64.869973][ T7830] Own node identity ac1414aa, cluster identity 4711 [ 64.883082][ T7830] New replicast peer: 172.20.20.187 [ 64.889742][ T7830] Enabled bearer , priority 10 [ 64.902316][ T7825] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.914017][ T7832] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.956456][ T7830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.702620][ T7806] 32-bit node address hash set to aa1414ac [ 65.731366][ T7832] Started in network mode [ 65.746416][ T7832] Own node identity ac1414aa, cluster identity 4711 [ 65.777307][ T7832] New replicast peer: 172.20.20.187 [ 65.797326][ T7832] Enabled bearer , priority 10 [ 65.825372][ T7810] Enabling of bearer rejected, already enabled [ 65.882888][ T7814] Started in network mode [ 65.901545][ T7814] Own node identity ac1414aa, cluster identity 4711 [ 65.909040][ T7825] syz-executor.5 (7825) used greatest stack depth: 22632 bytes left 2019/04/18 04:59:27 executed programs: 6 [ 65.928248][ T7814] New replicast peer: 172.20.20.187 [ 65.958320][ T7814] Enabled bearer , priority 10 [ 65.976687][ T17] 32-bit node address hash set to aa1414ac [ 66.003762][ T17] 32-bit node address hash set to aa1414ac [ 66.031213][ T7830] Enabling of bearer rejected, already enabled [ 66.050455][ T7851] Enabling of bearer rejected, already enabled [ 66.568825][ T7820] syz-executor.0 (7820) used greatest stack depth: 22024 bytes left [ 66.913182][ T7806] 32-bit node address hash set to aa1414ac [ 67.071698][ T7806] 32-bit node address hash set to aa1414ac [ 67.096412][ T7818] Started in network mode [ 67.102213][ T7818] Own node identity ac1414aa, cluster identity 4711 [ 67.109284][ T7818] New replicast peer: 172.20.20.187 [ 67.115612][ T7818] Enabled bearer , priority 10 [ 67.226856][ T7870] Enabling of bearer rejected, already enabled [ 67.418355][ T7898] Enabling of bearer rejected, already enabled [ 67.516791][ T7901] Enabling of bearer rejected, already enabled [ 67.562783][ T7905] Enabling of bearer rejected, already enabled [ 67.908325][ T7884] Enabling of bearer rejected, already enabled [ 67.983258][ T7913] Enabling of bearer rejected, already enabled [ 68.010142][ T7916] Enabling of bearer rejected, already enabled [ 68.218289][ T7906] Enabling of bearer rejected, already enabled [ 68.242609][ T7806] 32-bit node address hash set to aa1414ac [ 68.278666][ T7898] Enabling of bearer rejected, already enabled [ 68.619249][ T7935] Enabling of bearer rejected, already enabled [ 68.690841][ T7938] Enabling of bearer rejected, already enabled [ 68.780474][ T7913] Enabling of bearer rejected, already enabled [ 68.841359][ T7943] Enabling of bearer rejected, already enabled [ 68.852185][ T7946] Enabling of bearer rejected, already enabled [ 68.907367][ T7923] Enabling of bearer rejected, already enabled [ 69.375553][ T7957] Enabling of bearer rejected, already enabled [ 69.448580][ T7806] BUG: unable to handle kernel paging request at 0000000100000000 [ 69.456431][ T7806] #PF error: [WRITE] [ 69.460327][ T7806] PGD 94a7e067 P4D 94a7e067 PUD 0 [ 69.465443][ T7806] Oops: 0002 [#1] PREEMPT SMP KASAN [ 69.470643][ T7806] CPU: 1 PID: 7806 Comm: kworker/1:3 Not tainted 5.1.0-rc4+ #171 [ 69.471862][ T7957] ================================================================== [ 69.478360][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.486434][ T7957] BUG: KASAN: use-after-free in __ext4_new_inode+0x4b39/0x5450 [ 69.496477][ T7806] Workqueue: events cache_reap [ 69.503998][ T7957] Read of size 8 at addr ffff8880a0d4dcf8 by task syz-executor.5/7957 [ 69.508743][ T7806] RIP: 0010:free_block+0x149/0x250 [ 69.516860][ T7957] [ 69.521964][ T7806] Code: b6 4c 24 1c 48 c1 ee 20 29 f0 d3 e8 41 0f b6 4c 24 1d 01 f0 49 8b 75 20 d3 e8 8d 4f ff 48 85 f6 41 89 4d 30 0f 84 f0 00 00 00 <88> 04 0e 41 8b 45 30 85 c0 0f 84 fa fe ff ff 49 8b 76 40 4c 89 ff [ 69.524282][ T7957] CPU: 0 PID: 7957 Comm: syz-executor.5 Not tainted 5.1.0-rc4+ #171 [ 69.543873][ T7806] RSP: 0018:ffff888098c17c00 EFLAGS: 00010002 [ 69.551835][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.557884][ T7806] RAX: 0000000000000004 RBX: ffffe8ffffd62810 RCX: 00000000fffffffe [ 69.567920][ T7957] Call Trace: [ 69.575879][ T7806] RDX: ffff8880a0d4d4e0 RSI: 0000000000000002 RDI: 00000000ffffffff [ 69.579158][ T7957] dump_stack+0x172/0x1f0 [ 69.587117][ T7806] RBP: ffff888098c17c50 R08: ffff8880a830e300 R09: ffffed1013182f80 [ 69.591437][ T7957] ? __ext4_new_inode+0x4b39/0x5450 [ 69.599387][ T7806] R10: ffffed1013182f7f R11: 0000000000000003 R12: ffff88821670d680 [ 69.604575][ T7957] print_address_description.cold+0x7c/0x20d [ 69.612525][ T7806] R13: ffffea0002835340 R14: ffff88809af7b000 R15: ffffea0002835348 [ 69.618491][ T7957] ? __ext4_new_inode+0x4b39/0x5450 [ 69.626442][ T7806] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 69.631624][ T7957] ? __ext4_new_inode+0x4b39/0x5450 [ 69.640538][ T7806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.645743][ T7957] kasan_report.cold+0x1b/0x40 [ 69.652305][ T7806] CR2: 0000000100000000 CR3: 0000000094a56000 CR4: 00000000001406e0 [ 69.657075][ T7957] ? __ext4_new_inode+0x4b39/0x5450 [ 69.665040][ T7806] Call Trace: [ 69.670228][ T7957] __asan_report_load8_noabort+0x14/0x20 [ 69.673496][ T7806] drain_array_locked+0x36/0x90 [ 69.679127][ T7957] __ext4_new_inode+0x4b39/0x5450 [ 69.683959][ T7806] drain_array+0x8c/0xb0 [ 69.688962][ T7957] ? ext4_free_inode+0x1450/0x1450 [ 69.693191][ T7806] cache_reap+0xf4/0x280 [ 69.698280][ T7957] ? save_stack+0xa9/0xd0 [ 69.702521][ T7806] process_one_work+0x98e/0x1790 [ 69.706831][ T7957] ? dqget+0x10d0/0x10d0 [ 69.711749][ T7806] ? pwq_dec_nr_in_flight+0x320/0x320 [ 69.715975][ T7957] ? do_raw_spin_lock+0x12a/0x2e0 [ 69.721324][ T7806] ? lock_acquire+0x16f/0x3f0 [ 69.726328][ T7957] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 69.730982][ T7806] worker_thread+0x98/0xe40 [ 69.736699][ T7957] ? map_id_up+0x19c/0x320 [ 69.741187][ T7806] ? trace_hardirqs_on+0x67/0x230 [ 69.745599][ T7957] ext4_create+0x236/0x5e0 [ 69.750606][ T7806] kthread+0x357/0x430 [ 69.755019][ T7957] ? ext4_mknod+0x5f0/0x5f0 [ 69.759075][ T7806] ? process_one_work+0x1790/0x1790 [ 69.763559][ T7957] ? security_inode_permission+0xd5/0x110 [ 69.768732][ T7806] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 69.774493][ T7957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.780718][ T7806] ret_from_fork+0x3a/0x50 [ 69.786938][ T7957] ? security_inode_create+0xee/0x120 [ 69.791330][ T7806] Modules linked in: [ 69.796691][ T7957] ? ext4_mknod+0x5f0/0x5f0 [ 69.800557][ T7806] CR2: 0000000100000000 [ 69.805049][ T7957] lookup_open+0x12e0/0x1b10 [ 69.809179][ T7806] ---[ end trace b44d468fe865ba2d ]--- [ 69.813749][ T7957] ? vfs_link+0xbc0/0xbc0 [ 69.819193][ T7806] RIP: 0010:free_block+0x149/0x250 [ 69.823504][ T7957] ? lock_acquire+0x16f/0x3f0 [ 69.828589][ T7806] Code: b6 4c 24 1c 48 c1 ee 20 29 f0 d3 e8 41 0f b6 4c 24 1d 01 f0 49 8b 75 20 d3 e8 8d 4f ff 48 85 f6 41 89 4d 30 0f 84 f0 00 00 00 <88> 04 0e 41 8b 45 30 85 c0 0f 84 fa fe ff ff 49 8b 76 40 4c 89 ff [ 69.833247][ T7957] path_openat+0x14ac/0x46e0 [ 69.852840][ T7806] RSP: 0018:ffff888098c17c00 EFLAGS: 00010002 [ 69.857431][ T7957] ? save_stack+0x45/0xd0 [ 69.863469][ T7806] RAX: 0000000000000004 RBX: ffffe8ffffd62810 RCX: 00000000fffffffe [ 69.867792][ T7957] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 69.875739][ T7806] RDX: ffff8880a0d4d4e0 RSI: 0000000000000002 RDI: 00000000ffffffff [ 69.881534][ T7957] ? kasan_slab_alloc+0xf/0x20 [ 69.889490][ T7806] RBP: ffff888098c17c50 R08: ffff8880a830e300 R09: ffffed1013182f80 [ 69.894247][ T7957] ? kmem_cache_alloc+0x11a/0x6f0 [ 69.903316][ T7806] R10: ffffed1013182f7f R11: 0000000000000003 R12: ffff88821670d680 [ 69.908379][ T7957] ? getname_flags+0xd6/0x5b0 [ 69.916329][ T7806] R13: ffffea0002835340 R14: ffff88809af7b000 R15: ffffea0002835348 [ 69.920987][ T7957] ? getname+0x1a/0x20 [ 69.928944][ T7806] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 69.932999][ T7957] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 69.941901][ T7806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.947260][ T7957] ? tomoyo_init_request_info+0x105/0x1d0 [ 69.953828][ T7806] CR2: 0000000100000000 CR3: 0000000094a56000 CR4: 00000000001406e0 [ 69.959538][ T7957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.967482][ T7806] Kernel panic - not syncing: Fatal exception [ 69.973716][ T7957] ? mark_held_locks+0xf0/0xf0 [ 69.984512][ T7957] ? do_futex+0x178/0x1df0 [ 69.988922][ T7957] do_filp_open+0x1a1/0x280 [ 69.993425][ T7957] ? may_open_dev+0x100/0x100 [ 69.998101][ T7957] ? kasan_check_read+0x11/0x20 [ 70.002946][ T7957] ? do_raw_spin_unlock+0x57/0x270 [ 70.008797][ T7957] do_sys_open+0x3fe/0x5d0 [ 70.013197][ T7957] ? filp_open+0x80/0x80 [ 70.017433][ T7957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.023668][ T7957] ? __x64_sys_clock_gettime+0x172/0x250 [ 70.029298][ T7957] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 70.035356][ T7957] __x64_sys_openat+0x9d/0x100 [ 70.040116][ T7957] do_syscall_64+0x103/0x610 [ 70.044714][ T7957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.050597][ T7957] RIP: 0033:0x458c29 [ 70.054485][ T7957] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.074088][ T7957] RSP: 002b:00007f61a44b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.082499][ T7957] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29 [ 70.090462][ T7957] RDX: 00000000000026e1 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 70.098422][ T7957] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 70.106381][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61a44b86d4 [ 70.114351][ T7957] R13: 00000000004c4eac R14: 00000000004d8d80 R15: 00000000ffffffff [ 70.122321][ T7957] [ 70.124636][ T7957] The buggy address belongs to the page: [ 70.130259][ T7957] page:ffffea0002835340 count:0 mapcount:-1 mapping:0000000000000000 index:0x2 [ 70.139175][ T7957] flags: 0x1fffc0000000000() [ 70.143763][ T7957] raw: 01fffc0000000000 dead000000000100 dead000000000200 0000000000000000 [ 70.152338][ T7957] raw: 0000000000000002 ffff8880a0d4d040 00000000fffffffe 0000000000000000 [ 70.160903][ T7957] page dumped because: kasan: bad access detected [ 70.167298][ T7957] [ 70.169612][ T7957] Memory state around the buggy address: [ 70.175235][ T7957] ffff8880a0d4db80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 70.183288][ T7957] ffff8880a0d4dc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 70.191339][ T7957] >ffff8880a0d4dc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 70.199393][ T7957] ^ [ 70.207368][ T7957] ffff8880a0d4dd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 70.215423][ T7957] ffff8880a0d4dd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 70.223473][ T7957] ================================================================== [ 70.232298][ T7806] Kernel Offset: disabled [ 70.236624][ T7806] Rebooting in 86400 seconds..