[ 66.446346][ T26] audit: type=1800 audit(1568819361.644:25): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 66.485437][ T26] audit: type=1800 audit(1568819361.654:26): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 66.511351][ T26] audit: type=1800 audit(1568819361.654:27): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [ 67.068715][ T8740] sshd (8740) used greatest stack depth: 22936 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. 2019/09/18 15:11:45 parsed 1 programs 2019/09/18 15:11:48 executed programs: 0 syzkaller login: [ 213.283911][ T8849] IPVS: ftp: loaded support on port[0] = 21 [ 213.283917][ T8852] IPVS: ftp: loaded support on port[0] = 21 [ 213.315650][ T8855] IPVS: ftp: loaded support on port[0] = 21 [ 213.324145][ T8857] IPVS: ftp: loaded support on port[0] = 21 [ 213.355956][ T8859] IPVS: ftp: loaded support on port[0] = 21 [ 213.363748][ T8856] IPVS: ftp: loaded support on port[0] = 21 [ 213.586957][ T8852] chnl_net:caif_netlink_parms(): no params data found [ 213.680314][ T8856] chnl_net:caif_netlink_parms(): no params data found [ 213.736093][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 213.770106][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 213.786706][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 213.832941][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.840724][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.849062][ T8856] device bridge_slave_0 entered promiscuous mode [ 213.856872][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 213.865733][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.872943][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.880704][ T8856] device bridge_slave_1 entered promiscuous mode [ 213.888226][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.895293][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.903241][ T8852] device bridge_slave_0 entered promiscuous mode [ 213.938365][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.945541][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.953419][ T8849] device bridge_slave_0 entered promiscuous mode [ 213.964767][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.971956][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.979970][ T8852] device bridge_slave_1 entered promiscuous mode [ 214.005066][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.012804][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.021091][ T8849] device bridge_slave_1 entered promiscuous mode [ 214.047975][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.064955][ T8852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.074270][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.081852][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.089729][ T8857] device bridge_slave_0 entered promiscuous mode [ 214.098819][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.109290][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.130713][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.142526][ T8852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.151838][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.159532][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.167564][ T8857] device bridge_slave_1 entered promiscuous mode [ 214.205536][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.213464][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.221647][ T8855] device bridge_slave_0 entered promiscuous mode [ 214.233864][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.241049][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.249202][ T8855] device bridge_slave_1 entered promiscuous mode [ 214.263280][ T8849] team0: Port device team_slave_0 added [ 214.281126][ T8852] team0: Port device team_slave_0 added [ 214.294027][ T8852] team0: Port device team_slave_1 added [ 214.305002][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.312231][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.320293][ T8859] device bridge_slave_0 entered promiscuous mode [ 214.328733][ T8849] team0: Port device team_slave_1 added [ 214.334468][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.341654][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.349566][ T8859] device bridge_slave_1 entered promiscuous mode [ 214.358273][ T8856] team0: Port device team_slave_0 added [ 214.365232][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.375932][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.395331][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.415761][ T8856] team0: Port device team_slave_1 added [ 214.435085][ T8857] team0: Port device team_slave_0 added [ 214.446525][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.528912][ T8849] device hsr_slave_0 entered promiscuous mode [ 214.580540][ T8849] device hsr_slave_1 entered promiscuous mode [ 214.638293][ T8857] team0: Port device team_slave_1 added [ 214.646061][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.699286][ T8856] device hsr_slave_0 entered promiscuous mode [ 214.737483][ T8856] device hsr_slave_1 entered promiscuous mode [ 214.778062][ T8856] debugfs: Directory 'hsr0' with parent '/' already present! [ 214.811638][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.826576][ T8855] team0: Port device team_slave_0 added [ 214.870025][ T8852] device hsr_slave_0 entered promiscuous mode [ 214.937162][ T8852] device hsr_slave_1 entered promiscuous mode [ 215.007010][ T8852] debugfs: Directory 'hsr0' with parent '/' already present! [ 215.029978][ T8855] team0: Port device team_slave_1 added [ 215.037434][ T8859] team0: Port device team_slave_0 added [ 215.079828][ T8857] device hsr_slave_0 entered promiscuous mode [ 215.117339][ T8857] device hsr_slave_1 entered promiscuous mode [ 215.186981][ T8857] debugfs: Directory 'hsr0' with parent '/' already present! [ 215.215586][ T8859] team0: Port device team_slave_1 added [ 215.261243][ T8855] device hsr_slave_0 entered promiscuous mode [ 215.317328][ T8855] device hsr_slave_1 entered promiscuous mode [ 215.368029][ T8855] debugfs: Directory 'hsr0' with parent '/' already present! [ 215.448754][ T8859] device hsr_slave_0 entered promiscuous mode [ 215.497278][ T8859] device hsr_slave_1 entered promiscuous mode [ 215.536982][ T8859] debugfs: Directory 'hsr0' with parent '/' already present! [ 215.619093][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.635937][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.666833][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.675254][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.687447][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.707243][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.715833][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.728160][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.735320][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.745465][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.755500][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.764067][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.771131][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.780973][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.797837][ T8852] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.813057][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.825163][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.833219][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.841118][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.859912][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.876535][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.884026][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.893979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.904163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.913076][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.921590][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.930180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.939226][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.947663][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.956165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.966291][ T8849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.984449][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.013919][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.035675][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.052094][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.059873][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.073763][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.082317][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.091522][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.100229][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.107341][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.115159][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.123388][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.131588][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.139524][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.155592][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.166617][ T8856] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.184123][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.192880][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.207895][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.216218][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.223344][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.232050][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.240880][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.249639][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.257971][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.265000][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.272722][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.281521][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.290034][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.297139][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.304636][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.313913][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.322387][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.329474][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.337170][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.355948][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.389535][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.407420][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.415441][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.424293][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.432950][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.442572][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.450870][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.458692][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.467438][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.475757][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.484671][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.493293][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.501774][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.508880][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.517870][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.527270][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.535712][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.544543][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.552888][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.559994][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.567714][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.576198][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.584774][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.593351][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.601865][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.610792][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.619518][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.628069][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.636406][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.644808][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.653759][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.662430][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.669502][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.677528][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.685492][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.694183][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.713483][ T8855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.725280][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.741420][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.763675][ T8852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.794336][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.816116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.825950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.835058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.844352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.851687][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.860118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.869456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.880178][ T8878] IPVS: ftp: loaded support on port[0] = 21 [ 216.900990][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.916433][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.925576][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.932705][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.943841][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.952903][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.961581][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.970763][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.979309][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.988678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.002179][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.063167][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.072685][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.082001][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.090698][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.100260][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.109447][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.118327][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.126627][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.135594][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.144389][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.152871][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.161459][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.170323][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.178950][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.187992][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.196356][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.204914][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.234155][ T8856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.250489][ T8878] IPVS: ftp: loaded support on port[0] = 21 [ 217.262805][ T8856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.274564][ T8857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.294214][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.313247][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.322184][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.331568][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.360140][ T8859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.375705][ T8859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.387552][ T8891] IPVS: ftp: loaded support on port[0] = 21 [ 217.400671][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.414677][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.424417][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.434063][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.495619][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.534208][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.588002][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.598650][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.717333][ T8906] IPVS: ftp: loaded support on port[0] = 21 [ 217.754744][ T8891] IPVS: ftp: loaded support on port[0] = 21 [ 217.932794][ T8917] IPVS: ftp: loaded support on port[0] = 21 [ 218.124431][ T8927] IPVS: ftp: loaded support on port[0] = 21 [ 218.129391][ T8926] IPVS: ftp: loaded support on port[0] = 21 [ 218.275085][ T8927] IPVS: ftp: loaded support on port[0] = 21 [ 218.432117][ T8914] IPVS: ftp: loaded support on port[0] = 21 [ 218.517337][ T8926] IPVS: ftp: loaded support on port[0] = 21 [ 218.635399][ T8917] IPVS: ftp: loaded support on port[0] = 21 2019/09/18 15:11:55 executed programs: 6 [ 220.573631][ T8940] IPVS: ftp: loaded support on port[0] = 21 [ 220.863801][ T8940] IPVS: ftp: loaded support on port[0] = 21 [ 221.222799][ T8947] IPVS: ftp: loaded support on port[0] = 21 [ 221.457999][ T8947] IPVS: ftp: loaded support on port[0] = 21 [ 222.943525][ T8960] IPVS: ftp: loaded support on port[0] = 21 [ 222.954401][ T8959] IPVS: ftp: loaded support on port[0] = 21 [ 223.037907][ T8964] IPVS: ftp: loaded support on port[0] = 21 [ 223.259395][ T8960] IPVS: ftp: loaded support on port[0] = 21 [ 223.293086][ T8964] IPVS: ftp: loaded support on port[0] = 21 [ 223.452914][ T8959] IPVS: ftp: loaded support on port[0] = 21 [ 223.845413][ T8984] IPVS: ftp: loaded support on port[0] = 21 [ 223.866421][ T8985] IPVS: ftp: loaded support on port[0] = 21 [ 223.873699][ T8987] IPVS: ftp: loaded support on port[0] = 21 [ 223.880950][ T8986] IPVS: ftp: loaded support on port[0] = 21 [ 223.977780][ T8999] IPVS: ftp: loaded support on port[0] = 21 [ 224.116453][ T8999] IPVS: ftp: loaded support on port[0] = 21 [ 224.240068][ T8987] IPVS: ftp: loaded support on port[0] = 21 [ 224.318299][ T9007] IPVS: ftp: loaded support on port[0] = 21 [ 224.483955][ T9007] IPVS: ftp: loaded support on port[0] = 21 [ 224.610360][ T8995] IPVS: ftp: loaded support on port[0] = 21 [ 224.618005][ T8997] IPVS: ftp: loaded support on port[0] = 21 [ 224.640113][ T8996] IPVS: ftp: loaded support on port[0] = 21 2019/09/18 15:12:01 executed programs: 17 [ 226.427720][ T9027] IPVS: ftp: loaded support on port[0] = 21 [ 226.975849][ T9027] IPVS: ftp: loaded support on port[0] = 21 [ 227.315476][ T9034] IPVS: ftp: loaded support on port[0] = 21 [ 227.856293][ T9034] IPVS: ftp: loaded support on port[0] = 21 [ 228.252809][ T9041] IPVS: ftp: loaded support on port[0] = 21 [ 228.548471][ T9041] IPVS: ftp: loaded support on port[0] = 21 [ 228.777652][ T9049] IPVS: ftp: loaded support on port[0] = 21 [ 228.872596][ T9055] IPVS: ftp: loaded support on port[0] = 21 [ 228.956081][ T9059] IPVS: ftp: loaded support on port[0] = 21 [ 229.214977][ T9059] IPVS: ftp: loaded support on port[0] = 21 [ 229.418549][ T9055] IPVS: ftp: loaded support on port[0] = 21 [ 229.524703][ T9057] IPVS: ftp: loaded support on port[0] = 21 [ 230.172363][ T9096] IPVS: ftp: loaded support on port[0] = 21 [ 230.191473][ T9097] IPVS: ftp: loaded support on port[0] = 21 [ 230.208706][ T9101] IPVS: ftp: loaded support on port[0] = 21 [ 230.215589][ T9100] IPVS: ftp: loaded support on port[0] = 21 [ 230.246571][ T9104] IPVS: ftp: loaded support on port[0] = 21 [ 230.255177][ T9105] IPVS: ftp: loaded support on port[0] = 21 [ 230.548513][ T9105] IPVS: ftp: loaded support on port[0] = 21 [ 230.734298][ T9104] IPVS: ftp: loaded support on port[0] = 21 [ 230.775445][ T9121] IPVS: ftp: loaded support on port[0] = 21 [ 230.924092][ T9121] IPVS: ftp: loaded support on port[0] = 21 [ 230.924112][ T9108] IPVS: ftp: loaded support on port[0] = 21 [ 230.943705][ T9110] IPVS: ftp: loaded support on port[0] = 21 [ 230.962793][ T9113] IPVS: ftp: loaded support on port[0] = 21 [ 230.963500][ T9111] IPVS: ftp: loaded support on port[0] = 21 2019/09/18 15:12:10 executed programs: 30 [ 235.469737][ T9144] IPVS: ftp: loaded support on port[0] = 21 [ 235.503697][ T9146] IPVS: ftp: loaded support on port[0] = 21 [ 235.582490][ T9153] IPVS: ftp: loaded support on port[0] = 21 [ 235.593086][ T9155] IPVS: ftp: loaded support on port[0] = 21 [ 235.774455][ T9146] IPVS: ftp: loaded support on port[0] = 21 [ 235.788328][ T9163] IPVS: ftp: loaded support on port[0] = 21 [ 235.799663][ T9155] IPVS: ftp: loaded support on port[0] = 21 [ 235.910355][ T9173] IPVS: ftp: loaded support on port[0] = 21 [ 236.062892][ T9144] IPVS: ftp: loaded support on port[0] = 21 [ 236.068885][ T9173] IPVS: ftp: loaded support on port[0] = 21 [ 236.303405][ T9157] IPVS: ftp: loaded support on port[0] = 21 [ 236.548030][ T9172] IPVS: ftp: loaded support on port[0] = 21 [ 240.294419][ T9195] IPVS: ftp: loaded support on port[0] = 21 2019/09/18 15:12:15 executed programs: 37 [ 240.643388][ T9195] IPVS: ftp: loaded support on port[0] = 21 [ 240.752350][ T9205] IPVS: ftp: loaded support on port[0] = 21 [ 240.821052][ T9207] IPVS: ftp: loaded support on port[0] = 21 [ 241.032015][ T9213] IPVS: ftp: loaded support on port[0] = 21 [ 241.181182][ T9207] IPVS: ftp: loaded support on port[0] = 21 [ 241.211504][ T9218] IPVS: ftp: loaded support on port[0] = 21 [ 241.343410][ T9213] IPVS: ftp: loaded support on port[0] = 21 [ 241.503580][ T9208] IPVS: ftp: loaded support on port[0] = 21 [ 241.795126][ T9218] IPVS: ftp: loaded support on port[0] = 21 [ 241.844646][ T9232] IPVS: ftp: loaded support on port[0] = 21 [ 241.875251][ T9234] IPVS: ftp: loaded support on port[0] = 21 [ 242.231403][ T9234] IPVS: ftp: loaded support on port[0] = 21 [ 242.358847][ T9232] IPVS: ftp: loaded support on port[0] = 21 [ 242.595070][ T9243] IPVS: ftp: loaded support on port[0] = 21 [ 242.927171][ T9243] IPVS: ftp: loaded support on port[0] = 21 [ 243.262034][ T9250] IPVS: ftp: loaded support on port[0] = 21 [ 243.520507][ T9250] IPVS: ftp: loaded support on port[0] = 21 [ 243.936282][ T9257] IPVS: ftp: loaded support on port[0] = 21 [ 244.214996][ T9257] IPVS: ftp: loaded support on port[0] = 21 [ 244.557201][ T9263] IPVS: ftp: loaded support on port[0] = 21 [ 244.811387][ T9263] IPVS: ftp: loaded support on port[0] = 21 [ 245.113402][ T9275] IPVS: ftp: loaded support on port[0] = 21 [ 245.395521][ T9281] IPVS: ftp: loaded support on port[0] = 21 [ 245.628452][ T9281] IPVS: ftp: loaded support on port[0] = 21 2019/09/18 15:12:21 executed programs: 49 [ 245.865152][ T9277] IPVS: ftp: loaded support on port[0] = 21 [ 245.919891][ T9288] IPVS: ftp: loaded support on port[0] = 21 [ 246.250447][ T9288] IPVS: ftp: loaded support on port[0] = 21 [ 246.310244][ T9301] IPVS: ftp: loaded support on port[0] = 21 [ 246.335907][ T9302] IPVS: ftp: loaded support on port[0] = 21 [ 246.608141][ T9302] IPVS: ftp: loaded support on port[0] = 21 [ 246.935198][ T9311] IPVS: ftp: loaded support on port[0] = 21 [ 247.060424][ T9305] IPVS: ftp: loaded support on port[0] = 21 [ 247.113708][ T9318] IPVS: ftp: loaded support on port[0] = 21 [ 247.171553][ T9321] IPVS: ftp: loaded support on port[0] = 21 [ 247.274350][ T9311] IPVS: ftp: loaded support on port[0] = 21 [ 247.621035][ T9318] IPVS: ftp: loaded support on port[0] = 21 [ 247.629583][ T9321] IPVS: ftp: loaded support on port[0] = 21 2019/09/18 15:12:26 executed programs: 55 [ 251.672153][ T9333] IPVS: ftp: loaded support on port[0] = 21 [ 251.825313][ T9339] IPVS: ftp: loaded support on port[0] = 21 [ 252.055875][ T9345] IPVS: ftp: loaded support on port[0] = 21 [ 252.317772][ T9352] IPVS: ftp: loaded support on port[0] = 21 [ 252.383846][ T9356] IPVS: ftp: loaded support on port[0] = 21 [ 252.414635][ T9337] IPVS: ftp: loaded support on port[0] = 21 [ 252.554800][ T9341] IPVS: ftp: loaded support on port[0] = 21 [ 252.577661][ T9366] IPVS: ftp: loaded support on port[0] = 21 [ 252.705174][ T9366] IPVS: ftp: loaded support on port[0] = 21 [ 252.796561][ T9356] IPVS: ftp: loaded support on port[0] = 21 [ 252.811281][ T9347] IPVS: ftp: loaded support on port[0] = 21 [ 252.906385][ T9352] IPVS: ftp: loaded support on port[0] = 21 [ 252.964185][ T9378] IPVS: ftp: loaded support on port[0] = 21 [ 253.161210][ T9378] IPVS: ftp: loaded support on port[0] = 21 [ 256.329247][ T9386] IPVS: ftp: loaded support on port[0] = 21 [ 256.534454][ T9386] IPVS: ftp: loaded support on port[0] = 21 2019/09/18 15:12:31 executed programs: 63 [ 256.827423][ T9393] IPVS: ftp: loaded support on port[0] = 21 [ 257.040172][ T9393] IPVS: ftp: loaded support on port[0] = 21 [ 257.148812][ T9404] IPVS: ftp: loaded support on port[0] = 21 [ 257.155387][ T9403] IPVS: ftp: loaded support on port[0] = 21 [ 257.296478][ T9412] IPVS: ftp: loaded support on port[0] = 21 [ 257.407318][ T9418] IPVS: ftp: loaded support on port[0] = 21 [ 257.518710][ T9418] IPVS: ftp: loaded support on port[0] = 21 [ 257.635085][ T9412] IPVS: ftp: loaded support on port[0] = 21 [ 257.675797][ T9427] IPVS: ftp: loaded support on port[0] = 21 [ 257.740080][ T9433] IPVS: ftp: loaded support on port[0] = 21 [ 257.767305][ T9435] IPVS: ftp: loaded support on port[0] = 21 [ 257.840950][ T9407] IPVS: ftp: loaded support on port[0] = 21 [ 257.877209][ T9409] IPVS: ftp: loaded support on port[0] = 21 [ 257.896388][ T9433] IPVS: ftp: loaded support on port[0] = 21 [ 257.911261][ T9435] IPVS: ftp: loaded support on port[0] = 21 [ 258.224910][ T9449] IPVS: ftp: loaded support on port[0] = 21 [ 258.434028][ T9434] IPVS: ftp: loaded support on port[0] = 21 [ 258.654248][ T9449] IPVS: ftp: loaded support on port[0] = 21 2019/09/18 15:12:38 executed programs: 72 [ 262.925718][ T9465] IPVS: ftp: loaded support on port[0] = 21 [ 262.994392][ T9469] IPVS: ftp: loaded support on port[0] = 21 [ 263.155407][ T9479] IPVS: ftp: loaded support on port[0] = 21 [ 263.232796][ T9484] IPVS: ftp: loaded support on port[0] = 21 [ 263.364710][ T9491] IPVS: ftp: loaded support on port[0] = 21 [ 263.461162][ T9497] IPVS: ftp: loaded support on port[0] = 21 [ 263.673632][ T9457] ================================================================== [ 263.681943][ T9457] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200 [ 263.681961][ T9457] Read of size 4 at addr ffff8880a83d5080 by task syz-executor.0/9457 [ 263.681965][ T9457] [ 263.681979][ T9457] CPU: 1 PID: 9457 Comm: syz-executor.0 Not tainted 5.3.0-next-20190917 #0 [ 263.681987][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.681999][ T9457] Call Trace: [ 263.696073][ T9469] IPVS: ftp: loaded support on port[0] = 21 [ 263.698565][ T9457] dump_stack+0x172/0x1f0 [ 263.698586][ T9457] ? refcount_inc_not_zero_checked+0x81/0x200 [ 263.698605][ T9457] print_address_description.constprop.0.cold+0xd4/0x30b [ 263.698620][ T9457] ? refcount_inc_not_zero_checked+0x81/0x200 [ 263.698643][ T9457] ? refcount_inc_not_zero_checked+0x81/0x200 [ 263.709545][ T9457] __kasan_report.cold+0x1b/0x41 [ 263.709568][ T9457] ? refcount_inc_not_zero_checked+0x81/0x200 [ 263.709584][ T9457] kasan_report+0x12/0x20 [ 263.709596][ T9457] check_memory_region+0x134/0x1a0 [ 263.709610][ T9457] __kasan_check_read+0x11/0x20 [ 263.709625][ T9457] refcount_inc_not_zero_checked+0x81/0x200 [ 263.709639][ T9457] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 263.709657][ T9457] ? __kasan_check_write+0x14/0x20 [ 263.728893][ T9457] refcount_inc_checked+0x17/0x70 [ 263.728912][ T9457] nr_release+0x62/0x3e0 [ 263.728932][ T9457] __sock_release+0xce/0x280 [ 263.728947][ T9457] sock_close+0x1e/0x30 [ 263.728961][ T9457] __fput+0x2ff/0x890 [ 263.728976][ T9457] ? __sock_release+0x280/0x280 [ 263.728992][ T9457] ____fput+0x16/0x20 [ 263.739370][ T9457] task_work_run+0x145/0x1c0 [ 263.739395][ T9457] exit_to_usermode_loop+0x316/0x380 [ 263.739415][ T9457] do_syscall_64+0x65f/0x760 [ 263.739435][ T9457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.739446][ T9457] RIP: 0033:0x4135d1 [ 263.739462][ T9457] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 263.746813][ T9491] kobject: 'queues' (0000000072387da0): kobject_uevent_env [ 263.752504][ T9457] RSP: 002b:00007ffdaf07ce00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 263.752518][ T9457] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004135d1 [ 263.752527][ T9457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 263.752536][ T9457] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 263.752545][ T9457] R10: 00007ffdaf07cee0 R11: 0000000000000293 R12: 000000000075c9a0 [ 263.752554][ T9457] R13: 000000000075c9a0 R14: 0000000000760c38 R15: 000000000075c124 [ 263.752576][ T9457] [ 263.758925][ T9491] kobject: 'queues' (0000000072387da0): kobject_uevent_env: filter function caused the event to drop! [ 263.763530][ T9457] Allocated by task 9458: [ 263.763548][ T9457] save_stack+0x23/0x90 [ 263.763561][ T9457] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 263.763572][ T9457] kasan_kmalloc+0x9/0x10 [ 263.763584][ T9457] __kmalloc+0x163/0x770 [ 263.763601][ T9457] sk_prot_alloc+0x23a/0x310 [ 263.769978][ T9491] kobject: 'rx-0' (00000000d2dcbd63): kobject_add_internal: parent: 'queues', set: 'queues' [ 263.773970][ T9457] sk_alloc+0x39/0xf70 [ 263.773984][ T9457] nr_create+0xb9/0x5e0 [ 263.773999][ T9457] __sock_create+0x3d8/0x730 [ 263.774012][ T9457] __sys_socket+0x103/0x220 [ 263.774023][ T9457] __x64_sys_socket+0x73/0xb0 [ 263.774040][ T9457] do_syscall_64+0xfa/0x760 [ 263.779477][ T9491] kobject: 'rx-0' (00000000d2dcbd63): kobject_uevent_env [ 263.783979][ T9457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.783984][ T9457] [ 263.783991][ T9457] Freed by task 9457: [ 263.784005][ T9457] save_stack+0x23/0x90 [ 263.784017][ T9457] __kasan_slab_free+0x102/0x150 [ 263.784027][ T9457] kasan_slab_free+0xe/0x10 [ 263.784040][ T9457] kfree+0x10a/0x2c0 [ 263.790267][ T9491] kobject: 'rx-0' (00000000d2dcbd63): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 263.795700][ T9457] __sk_destruct+0x4f7/0x6e0 [ 263.795713][ T9457] sk_destruct+0x86/0xa0 [ 263.795725][ T9457] __sk_free+0xfb/0x360 [ 263.795737][ T9457] sk_free+0x42/0x50 [ 263.795749][ T9457] nr_release+0x356/0x3e0 [ 263.795765][ T9457] __sock_release+0xce/0x280 [ 263.801224][ T9491] kobject: 'tx-0' (00000000eb041acd): kobject_add_internal: parent: 'queues', set: 'queues' [ 263.805915][ T9457] sock_close+0x1e/0x30 [ 263.805928][ T9457] __fput+0x2ff/0x890 [ 263.805939][ T9457] ____fput+0x16/0x20 [ 263.805953][ T9457] task_work_run+0x145/0x1c0 [ 263.805967][ T9457] exit_to_usermode_loop+0x316/0x380 [ 263.805983][ T9457] do_syscall_64+0x65f/0x760 [ 263.810663][ T9491] kobject: 'tx-0' (00000000eb041acd): kobject_uevent_env [ 263.814772][ T9457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.814777][ T9457] [ 263.814789][ T9457] The buggy address belongs to the object at ffff8880a83d5000 [ 263.814789][ T9457] which belongs to the cache kmalloc-2k of size 2048 [ 263.814802][ T9457] The buggy address is located 128 bytes inside of [ 263.814802][ T9457] 2048-byte region [ffff8880a83d5000, ffff8880a83d5800) [ 263.814807][ T9457] The buggy address belongs to the page: [ 263.814819][ T9457] page:ffffea0002a0f540 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 263.819294][ T9491] kobject: 'tx-0' (00000000eb041acd): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 263.822945][ T9457] flags: 0x1fffc0000000200(slab) [ 263.822966][ T9457] raw: 01fffc0000000200 ffffea0002670b88 ffffea000272d908 ffff8880aa400e00 [ 263.822981][ T9457] raw: 0000000000000000 ffff8880a83d5000 0000000100000001 0000000000000000 [ 263.822988][ T9457] page dumped because: kasan: bad access detected [ 263.822993][ T9457] [ 263.822997][ T9457] Memory state around the buggy address: [ 263.823009][ T9457] ffff8880a83d4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.829210][ T9497] kobject: 'tunl0' (000000002c903815): kobject_add_internal: parent: 'net', set: 'devices' [ 263.831807][ T9457] ffff8880a83d5000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.837706][ T9497] kobject: 'tunl0' (000000002c903815): kobject_uevent_env [ 263.841659][ T9457] >ffff8880a83d5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.841665][ T9457] ^ [ 263.841676][ T9457] ffff8880a83d5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.841687][ T9457] ffff8880a83d5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.841693][ T9457] ================================================================== [ 263.841698][ T9457] Disabling lock debugging due to kernel taint [ 263.845940][ T9457] Kernel panic - not syncing: panic_on_warn set ... [ 263.846582][ T9497] kobject: 'tunl0' (000000002c903815): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 263.852194][ T9457] CPU: 1 PID: 9457 Comm: syz-executor.0 Tainted: G B 5.3.0-next-20190917 #0 [ 263.852201][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.852205][ T9457] Call Trace: [ 263.852224][ T9457] dump_stack+0x172/0x1f0 [ 263.852239][ T9457] panic+0x2dc/0x755 [ 263.852249][ T9457] ? add_taint.cold+0x16/0x16 [ 263.852266][ T9457] ? refcount_inc_not_zero_checked+0x81/0x200 [ 263.852280][ T9457] ? preempt_schedule+0x4b/0x60 [ 263.852294][ T9457] ? ___preempt_schedule+0x16/0x20 [ 263.852306][ T9457] ? trace_hardirqs_on+0x5e/0x240 [ 263.852321][ T9457] ? refcount_inc_not_zero_checked+0x81/0x200 [ 263.852333][ T9457] end_report+0x47/0x4f [ 263.852343][ T9457] ? refcount_inc_not_zero_checked+0x81/0x200 [ 263.852352][ T9457] __kasan_report.cold+0xe/0x41 [ 263.852369][ T9457] ? refcount_inc_not_zero_checked+0x81/0x200 [ 263.858374][ T9497] kobject: 'queues' (00000000501a0413): kobject_add_internal: parent: 'tunl0', set: '<NULL>' [ 263.875837][ T9457] kasan_report+0x12/0x20 [ 263.875850][ T9457] check_memory_region+0x134/0x1a0 [ 263.875862][ T9457] __kasan_check_read+0x11/0x20 [ 263.875878][ T9457] refcount_inc_not_zero_checked+0x81/0x200 [ 263.875896][ T9457] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 263.883410][ T9497] kobject: 'queues' (00000000501a0413): kobject_uevent_env [ 263.892239][ T9457] ? __kasan_check_write+0x14/0x20 [ 263.892255][ T9457] refcount_inc_checked+0x17/0x70 [ 263.892270][ T9457] nr_release+0x62/0x3e0 [ 263.892291][ T9457] __sock_release+0xce/0x280 [ 263.901435][ T9497] kobject: 'queues' (00000000501a0413): kobject_uevent_env: filter function caused the event to drop! [ 263.908319][ T9457] sock_close+0x1e/0x30 [ 263.908332][ T9457] __fput+0x2ff/0x890 [ 263.908347][ T9457] ? __sock_release+0x280/0x280 [ 263.908364][ T9457] ____fput+0x16/0x20 [ 263.916509][ T9497] kobject: 'rx-0' (00000000a8c9d147): kobject_add_internal: parent: 'queues', set: 'queues' [ 263.924285][ T9457] task_work_run+0x145/0x1c0 [ 263.924304][ T9457] exit_to_usermode_loop+0x316/0x380 [ 263.924319][ T9457] do_syscall_64+0x65f/0x760 [ 263.924334][ T9457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.924348][ T9457] RIP: 0033:0x4135d1 [ 263.932526][ T9497] kobject: 'rx-0' (00000000a8c9d147): kobject_uevent_env [ 263.934624][ T9457] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 263.934631][ T9457] RSP: 002b:00007ffdaf07ce00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 263.934649][ T9457] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004135d1 [ 263.945936][ T9497] kobject: 'rx-0' (00000000a8c9d147): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 263.950039][ T9457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 263.950046][ T9457] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 263.950054][ T9457] R10: 00007ffdaf07cee0 R11: 0000000000000293 R12: 000000000075c9a0 [ 263.950061][ T9457] R13: 000000000075c9a0 R14: 0000000000760c38 R15: 000000000075c124 [ 263.955127][ T9457] Kernel Offset: disabled [ 264.615778][ T9457] Rebooting in 86400 seconds..