[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.553706][ T27] audit: type=1800 audit(1561426395.885:25): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 64.610722][ T27] audit: type=1800 audit(1561426395.885:26): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 64.638543][ T27] audit: type=1800 audit(1561426395.885:27): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. 2019/06/25 01:33:49 parsed 1 programs 2019/06/25 01:33:51 executed programs: 0 syzkaller login: [ 100.459167][ T9022] IPVS: ftp: loaded support on port[0] = 21 [ 100.485518][ T9025] IPVS: ftp: loaded support on port[0] = 21 [ 100.493688][ T9024] IPVS: ftp: loaded support on port[0] = 21 [ 100.528903][ T9026] IPVS: ftp: loaded support on port[0] = 21 [ 100.590114][ T9028] IPVS: ftp: loaded support on port[0] = 21 [ 100.629218][ T9030] IPVS: ftp: loaded support on port[0] = 21 [ 100.933777][ T9025] chnl_net:caif_netlink_parms(): no params data found [ 100.997490][ T9024] chnl_net:caif_netlink_parms(): no params data found [ 101.007990][ T9022] chnl_net:caif_netlink_parms(): no params data found [ 101.018959][ T9026] chnl_net:caif_netlink_parms(): no params data found [ 101.125995][ T9025] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.134114][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.142502][ T9025] device bridge_slave_0 entered promiscuous mode [ 101.179878][ T9028] chnl_net:caif_netlink_parms(): no params data found [ 101.189293][ T9030] chnl_net:caif_netlink_parms(): no params data found [ 101.200956][ T9025] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.209134][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.217503][ T9025] device bridge_slave_1 entered promiscuous mode [ 101.280170][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.288570][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.296582][ T9024] device bridge_slave_0 entered promiscuous mode [ 101.335300][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.342928][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.351308][ T9026] device bridge_slave_0 entered promiscuous mode [ 101.358937][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.366059][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.374519][ T9024] device bridge_slave_1 entered promiscuous mode [ 101.381754][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.389404][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.397215][ T9022] device bridge_slave_0 entered promiscuous mode [ 101.406423][ T9025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.425076][ T9025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.434996][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.445461][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.453726][ T9026] device bridge_slave_1 entered promiscuous mode [ 101.482538][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.490291][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.499242][ T9022] device bridge_slave_1 entered promiscuous mode [ 101.527354][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.534471][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.542915][ T9028] device bridge_slave_0 entered promiscuous mode [ 101.574429][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.592675][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.603016][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.610166][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.621351][ T9030] device bridge_slave_0 entered promiscuous mode [ 101.629093][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.636197][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.644263][ T9028] device bridge_slave_1 entered promiscuous mode [ 101.653839][ T9025] team0: Port device team_slave_0 added [ 101.662292][ T9024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.681621][ T9022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.691580][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.698924][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.706789][ T9030] device bridge_slave_1 entered promiscuous mode [ 101.720955][ T9025] team0: Port device team_slave_1 added [ 101.737923][ T9024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.762131][ T9022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.795335][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.806041][ T9026] team0: Port device team_slave_0 added [ 101.819721][ T9024] team0: Port device team_slave_0 added [ 101.833348][ T9024] team0: Port device team_slave_1 added [ 101.899105][ T9025] device hsr_slave_0 entered promiscuous mode [ 101.947180][ T9025] device hsr_slave_1 entered promiscuous mode [ 101.988849][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.006297][ T9026] team0: Port device team_slave_1 added [ 102.021679][ T9030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.059421][ T9022] team0: Port device team_slave_0 added [ 102.067526][ T9022] team0: Port device team_slave_1 added [ 102.074883][ T9030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.087316][ T9028] team0: Port device team_slave_0 added [ 102.104060][ T9028] team0: Port device team_slave_1 added [ 102.190593][ T9024] device hsr_slave_0 entered promiscuous mode [ 102.257150][ T9024] device hsr_slave_1 entered promiscuous mode [ 102.369274][ T9026] device hsr_slave_0 entered promiscuous mode [ 102.427480][ T9026] device hsr_slave_1 entered promiscuous mode [ 102.504038][ T9030] team0: Port device team_slave_0 added [ 102.579296][ T9022] device hsr_slave_0 entered promiscuous mode [ 102.637163][ T9022] device hsr_slave_1 entered promiscuous mode [ 102.681629][ T9030] team0: Port device team_slave_1 added [ 102.740367][ T9028] device hsr_slave_0 entered promiscuous mode [ 102.807508][ T9028] device hsr_slave_1 entered promiscuous mode [ 103.020256][ T9030] device hsr_slave_0 entered promiscuous mode [ 103.057235][ T9030] device hsr_slave_1 entered promiscuous mode [ 103.243042][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.265151][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.290172][ T9022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.313947][ T9025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.329038][ T9024] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.350509][ T9030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.358343][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.370754][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.379528][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.389079][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.398251][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.407075][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.416005][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.430320][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.453226][ T9022] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.461918][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.470807][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.478888][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.488072][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.496467][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.506731][ T3261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.514794][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.523482][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.532271][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.541016][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.549305][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.562142][ T9028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.576352][ T9030] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.587998][ T9025] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.602032][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.611284][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.619447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.631386][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.640712][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.647859][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.655798][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.670479][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.679350][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.689561][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.730840][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.740606][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.749719][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.757952][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.766751][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.775411][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.784162][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.791735][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.800330][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.809243][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.818229][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.825399][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.833121][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.841948][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.851141][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.860056][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.868911][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.877840][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.884900][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.892913][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.901826][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.911036][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.919460][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.926818][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.934427][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.943266][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.953620][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.962431][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.970936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.979894][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.989563][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.998761][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.005926][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.043808][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.053980][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.063053][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.073656][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.082342][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.091144][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.100031][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.109602][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.119247][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.128615][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.138212][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.153089][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.162287][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.171491][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.180645][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.192026][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.200837][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.213457][ T9026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.232447][ T9028] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.240978][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.250176][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.258389][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.266329][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.282131][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.291142][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.299616][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.316547][ T9025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.327966][ T9025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.354760][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.368367][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.379842][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.388740][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.398111][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.408474][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.417122][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.425821][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.435023][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.443844][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.452814][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.462335][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.469476][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.477423][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.485774][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.496146][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.505793][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.514071][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.522396][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.533330][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.578143][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.606161][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.621590][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.630690][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.639909][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.647040][ T3264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.654626][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.663468][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.672150][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.682097][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.690578][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.699063][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.708365][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.718554][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.728056][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.736541][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.745466][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.754931][ T9022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.795325][ T9025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.808254][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.816373][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.832784][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.844810][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.855081][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.864769][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.875679][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.885058][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.900709][ T3264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.928881][ T9030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.957836][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.986210][ T9037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.012093][ T9028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.030974][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.081892][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.095139][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.111880][ T9024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.128838][ T9022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.197839][ T9030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.240781][ T9028] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/25 01:33:56 executed programs: 11 2019/06/25 01:34:01 executed programs: 183 2019/06/25 01:34:06 executed programs: 345 2019/06/25 01:34:11 executed programs: 508 2019/06/25 01:34:16 executed programs: 681 2019/06/25 01:34:21 executed programs: 850 2019/06/25 01:34:26 executed programs: 1009 2019/06/25 01:34:32 executed programs: 1178 2019/06/25 01:34:37 executed programs: 1344 2019/06/25 01:34:42 executed programs: 1507 2019/06/25 01:34:47 executed programs: 1676 2019/06/25 01:34:52 executed programs: 1836 2019/06/25 01:34:57 executed programs: 1987 2019/06/25 01:35:02 executed programs: 2143 2019/06/25 01:35:07 executed programs: 2296 2019/06/25 01:35:12 executed programs: 2453 2019/06/25 01:35:17 executed programs: 2603 2019/06/25 01:35:22 executed programs: 2751 2019/06/25 01:35:27 executed programs: 2901 2019/06/25 01:35:32 executed programs: 3047 2019/06/25 01:35:37 executed programs: 3208 2019/06/25 01:35:42 executed programs: 3360 2019/06/25 01:35:47 executed programs: 3504 2019/06/25 01:35:52 executed programs: 3648 2019/06/25 01:35:57 executed programs: 3793 2019/06/25 01:36:02 executed programs: 3935 2019/06/25 01:36:07 executed programs: 4089 2019/06/25 01:36:12 executed programs: 4234 2019/06/25 01:36:17 executed programs: 4381 2019/06/25 01:36:22 executed programs: 4521 2019/06/25 01:36:27 executed programs: 4655 2019/06/25 01:36:32 executed programs: 4796 2019/06/25 01:36:37 executed programs: 4955 2019/06/25 01:36:42 executed programs: 5096 2019/06/25 01:36:47 executed programs: 5240 2019/06/25 01:36:52 executed programs: 5371 2019/06/25 01:36:57 executed programs: 5507 2019/06/25 01:37:02 executed programs: 5639 2019/06/25 01:37:07 executed programs: 5801 2019/06/25 01:37:12 executed programs: 5943 2019/06/25 01:37:17 executed programs: 6084 2019/06/25 01:37:22 executed programs: 6218 2019/06/25 01:37:27 executed programs: 6348 2019/06/25 01:37:32 executed programs: 6484 2019/06/25 01:37:37 executed programs: 6646 2019/06/25 01:37:43 executed programs: 6795 2019/06/25 01:37:48 executed programs: 6923 2019/06/25 01:37:53 executed programs: 7051 2019/06/25 01:37:58 executed programs: 7175 2019/06/25 01:38:03 executed programs: 7302 2019/06/25 01:38:08 executed programs: 7462 2019/06/25 01:38:13 executed programs: 7603 2019/06/25 01:38:18 executed programs: 7732 2019/06/25 01:38:23 executed programs: 7856 2019/06/25 01:38:28 executed programs: 7980 2019/06/25 01:38:33 executed programs: 8107 2019/06/25 01:38:38 executed programs: 8262 2019/06/25 01:38:43 executed programs: 8404 2019/06/25 01:38:48 executed programs: 8537 2019/06/25 01:38:53 executed programs: 8660 2019/06/25 01:38:58 executed programs: 8784 2019/06/25 01:39:03 executed programs: 8914 2019/06/25 01:39:08 executed programs: 9086 2019/06/25 01:39:13 executed programs: 9255 2019/06/25 01:39:18 executed programs: 9429 2019/06/25 01:39:23 executed programs: 9602 2019/06/25 01:39:28 executed programs: 9777 2019/06/25 01:39:33 executed programs: 9943 2019/06/25 01:39:38 executed programs: 10110 2019/06/25 01:39:43 executed programs: 10274 2019/06/25 01:39:48 executed programs: 10438 2019/06/25 01:39:54 executed programs: 10593 2019/06/25 01:39:59 executed programs: 10748 2019/06/25 01:40:04 executed programs: 10907 2019/06/25 01:40:09 executed programs: 11060 2019/06/25 01:40:14 executed programs: 11223 2019/06/25 01:40:19 executed programs: 11379 2019/06/25 01:40:24 executed programs: 11534 2019/06/25 01:40:29 executed programs: 11688 2019/06/25 01:40:34 executed programs: 11842 [ 506.217077][T23870] ================================================================== [ 506.226494][T23870] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 506.235275][T23870] Read of size 4 at addr ffff888099466a98 by task syz-executor.2/23870 [ 506.243511][T23870] [ 506.245867][T23870] CPU: 1 PID: 23870 Comm: syz-executor.2 Not tainted 5.2.0-rc6-next-20190624 #21 [ 506.254983][T23870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.265986][T23870] Call Trace: [ 506.269419][T23870] dump_stack+0x172/0x1f0 [ 506.273784][T23870] ? sk_psock_unlink+0x3dd/0x4b0 [ 506.278834][T23870] ? tcp_check_oom+0x560/0x560 [ 506.283702][T23870] print_address_description.cold+0xd4/0x306 [ 506.290582][T23870] ? sk_psock_unlink+0x3dd/0x4b0 [ 506.295544][T23870] ? sk_psock_unlink+0x3dd/0x4b0 [ 506.300500][T23870] ? tcp_check_oom+0x560/0x560 [ 506.305492][T23870] __kasan_report.cold+0x1b/0x36 [ 506.310451][T23870] ? sk_psock_unlink+0x3dd/0x4b0 [ 506.315397][T23870] kasan_report+0x12/0x20 [ 506.319746][T23870] __asan_report_load4_noabort+0x14/0x20 [ 506.325392][T23870] sk_psock_unlink+0x3dd/0x4b0 [ 506.330257][T23870] ? sk_psock_link_pop+0x186/0x1f0 [ 506.335395][T23870] ? tcp_check_oom+0x560/0x560 [ 506.340220][T23870] tcp_bpf_remove+0x21/0x50 [ 506.344740][T23870] tcp_bpf_close+0x130/0x390 [ 506.349571][T23870] inet_release+0xed/0x200 [ 506.354061][T23870] inet6_release+0x53/0x80 [ 506.358579][T23870] __sock_release+0xce/0x2a0 [ 506.363193][T23870] sock_close+0x1b/0x30 [ 506.367430][T23870] __fput+0x2ff/0x890 [ 506.371433][T23870] ? __sock_release+0x2a0/0x2a0 [ 506.376306][T23870] ____fput+0x16/0x20 [ 506.380398][T23870] task_work_run+0x145/0x1c0 [ 506.385068][T23870] exit_to_usermode_loop+0x280/0x2d0 [ 506.390391][T23870] do_syscall_64+0x5a9/0x6a0 [ 506.395094][T23870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 506.401184][T23870] RIP: 0033:0x413201 [ 506.405598][T23870] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 506.425224][T23870] RSP: 002b:00007fffddcda890 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 506.425303][T23870] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413201 [ 506.425310][T23870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 506.425329][T23870] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 506.425336][T23870] R10: 00007fffddcda970 R11: 0000000000000293 R12: 00000000007610a8 [ 506.425343][T23870] R13: 000000000007b92a R14: 000000000007b957 R15: ffffffffffffffff [ 506.425365][T23870] [ 506.476556][T23870] Allocated by task 23871: [ 506.481383][T23870] save_stack+0x23/0x90 [ 506.485766][T23870] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 506.491417][T23870] kasan_kmalloc+0x9/0x10 [ 506.495874][T23870] kmem_cache_alloc_trace+0x158/0x790 [ 506.501262][T23870] sock_map_alloc+0x1bb/0x3a0 [ 506.506045][T23870] __do_sys_bpf+0x475/0x42f0 [ 506.510920][T23870] __x64_sys_bpf+0x73/0xb0 [ 506.515354][T23870] do_syscall_64+0xfd/0x6a0 [ 506.519868][T23870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 506.525770][T23870] [ 506.528123][T23870] Freed by task 9190: [ 506.532129][T23870] save_stack+0x23/0x90 [ 506.536300][T23870] __kasan_slab_free+0x102/0x150 [ 506.541629][T23870] kasan_slab_free+0xe/0x10 [ 506.546154][T23870] kfree+0x10a/0x2c0 [ 506.550062][T23870] sock_map_free+0x22a/0x310 [ 506.554672][T23870] bpf_map_free_deferred+0xb3/0x100 [ 506.559899][T23870] process_one_work+0x9af/0x1740 [ 506.564848][T23870] worker_thread+0x98/0xe40 [ 506.569373][T23870] kthread+0x361/0x430 [ 506.573553][T23870] ret_from_fork+0x24/0x30 [ 506.578239][T23870] [ 506.580582][T23870] The buggy address belongs to the object at ffff888099466a80 [ 506.580582][T23870] which belongs to the cache kmalloc-512 of size 512 [ 506.580600][T23870] The buggy address is located 24 bytes inside of [ 506.580600][T23870] 512-byte region [ffff888099466a80, ffff888099466c80) [ 506.608305][T23870] The buggy address belongs to the page: [ 506.613942][T23870] page:ffffea0002651980 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0xffff888099466800 [ 506.613956][T23870] flags: 0x1fffc0000000200(slab) [ 506.613985][T23870] raw: 01fffc0000000200 ffffea000266cb88 ffffea00025e83c8 ffff8880aa400a80 [ 506.614001][T23870] raw: ffff888099466800 ffff888099466080 0000000100000003 0000000000000000 [ 506.646637][T23870] page dumped because: kasan: bad access detected [ 506.653054][T23870] [ 506.655384][T23870] Memory state around the buggy address: [ 506.661023][T23870] ffff888099466980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 506.669094][T23870] ffff888099466a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 506.677177][T23870] >ffff888099466a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 506.685239][T23870] ^ [ 506.690086][T23870] ffff888099466b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 506.698151][T23870] ffff888099466b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 506.706193][T23870] ================================================================== [ 506.714349][T23870] Disabling lock debugging due to kernel taint [ 506.721547][T23870] Kernel panic - not syncing: panic_on_warn set ... [ 506.728173][T23870] CPU: 0 PID: 23870 Comm: syz-executor.2 Tainted: G B 5.2.0-rc6-next-20190624 #21 [ 506.738654][T23870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.748699][T23870] Call Trace: [ 506.752012][T23870] dump_stack+0x172/0x1f0 [ 506.756347][T23870] ? tcp_check_oom+0x560/0x560 [ 506.761159][T23870] panic+0x2dc/0x755 [ 506.765045][T23870] ? add_taint.cold+0x16/0x16 [ 506.769708][T23870] ? sk_psock_unlink+0x3dd/0x4b0 [ 506.774634][T23870] ? tcp_check_oom+0x560/0x560 [ 506.779380][T23870] ? preempt_schedule+0x4b/0x60 [ 506.784212][T23870] ? ___preempt_schedule+0x16/0x18 [ 506.789368][T23870] ? trace_hardirqs_on+0x5e/0x240 [ 506.794385][T23870] ? sk_psock_unlink+0x3dd/0x4b0 [ 506.799325][T23870] ? tcp_check_oom+0x560/0x560 [ 506.804086][T23870] end_report+0x47/0x4f [ 506.808319][T23870] ? sk_psock_unlink+0x3dd/0x4b0 [ 506.813248][T23870] __kasan_report.cold+0xe/0x36 [ 506.818087][T23870] ? sk_psock_unlink+0x3dd/0x4b0 [ 506.823012][T23870] kasan_report+0x12/0x20 [ 506.827327][T23870] __asan_report_load4_noabort+0x14/0x20 [ 506.832972][T23870] sk_psock_unlink+0x3dd/0x4b0 [ 506.837965][T23870] ? sk_psock_link_pop+0x186/0x1f0 [ 506.843068][T23870] ? tcp_check_oom+0x560/0x560 [ 506.847852][T23870] tcp_bpf_remove+0x21/0x50 [ 506.852347][T23870] tcp_bpf_close+0x130/0x390 [ 506.856958][T23870] inet_release+0xed/0x200 [ 506.861365][T23870] inet6_release+0x53/0x80 [ 506.865800][T23870] __sock_release+0xce/0x2a0 [ 506.870376][T23870] sock_close+0x1b/0x30 [ 506.874523][T23870] __fput+0x2ff/0x890 [ 506.878495][T23870] ? __sock_release+0x2a0/0x2a0 [ 506.883333][T23870] ____fput+0x16/0x20 [ 506.887387][T23870] task_work_run+0x145/0x1c0 [ 506.891961][T23870] exit_to_usermode_loop+0x280/0x2d0 [ 506.897237][T23870] do_syscall_64+0x5a9/0x6a0 [ 506.901819][T23870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 506.907782][T23870] RIP: 0033:0x413201 [ 506.911683][T23870] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 506.931282][T23870] RSP: 002b:00007fffddcda890 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 506.939689][T23870] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413201 [ 506.947909][T23870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 506.955868][T23870] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 506.963835][T23870] R10: 00007fffddcda970 R11: 0000000000000293 R12: 00000000007610a8 [ 506.971800][T23870] R13: 000000000007b92a R14: 000000000007b957 R15: ffffffffffffffff [ 506.980915][T23870] Kernel Offset: disabled [ 506.985332][T23870] Rebooting in 86400 seconds..