[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 49.859940][ T27] audit: type=1800 audit(1566320350.849:25): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 49.910225][ T27] audit: type=1800 audit(1566320350.849:26): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 49.932879][ T27] audit: type=1800 audit(1566320350.859:27): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2019/08/20 17:15:44 parsed 1 programs 2019/08/20 17:15:47 executed programs: 0 syzkaller login: [ 1046.350013][ T8424] IPVS: ftp: loaded support on port[0] = 21 [ 1046.361061][ T8427] IPVS: ftp: loaded support on port[0] = 21 [ 1046.362261][ T8433] IPVS: ftp: loaded support on port[0] = 21 [ 1046.381150][ T8431] IPVS: ftp: loaded support on port[0] = 21 [ 1046.390419][ T8429] IPVS: ftp: loaded support on port[0] = 21 [ 1046.422095][ T8434] IPVS: ftp: loaded support on port[0] = 21 [ 1046.600427][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 1046.699306][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.706619][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.715740][ T8427] device bridge_slave_0 entered promiscuous mode [ 1046.725754][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.732793][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.740565][ T8427] device bridge_slave_1 entered promiscuous mode [ 1046.774930][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 1046.818719][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.831173][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.868258][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 1046.919874][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 1046.942737][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 1046.958477][ T8427] team0: Port device team_slave_0 added [ 1046.965219][ T8424] chnl_net:caif_netlink_parms(): no params data found [ 1046.975818][ T8427] team0: Port device team_slave_1 added [ 1046.992062][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.999480][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.007108][ T8431] device bridge_slave_0 entered promiscuous mode [ 1047.018807][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.026869][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.035806][ T8431] device bridge_slave_1 entered promiscuous mode [ 1047.047943][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.056048][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.063614][ T8433] device bridge_slave_0 entered promiscuous mode [ 1047.105779][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.113159][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.121677][ T8433] device bridge_slave_1 entered promiscuous mode [ 1047.150251][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.171977][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.179267][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.187569][ T8434] device bridge_slave_0 entered promiscuous mode [ 1047.196296][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.216139][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.229803][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.238053][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.245927][ T8429] device bridge_slave_0 entered promiscuous mode [ 1047.253008][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.263462][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.271352][ T8434] device bridge_slave_1 entered promiscuous mode [ 1047.280067][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.357205][ T8427] device hsr_slave_0 entered promiscuous mode [ 1047.394418][ T8427] device hsr_slave_1 entered promiscuous mode [ 1047.434309][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.441380][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.449566][ T8429] device bridge_slave_1 entered promiscuous mode [ 1047.476486][ T8424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.483585][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.491754][ T8424] device bridge_slave_0 entered promiscuous mode [ 1047.501657][ T8431] team0: Port device team_slave_0 added [ 1047.509258][ T8431] team0: Port device team_slave_1 added [ 1047.522475][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.538360][ T8424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.545585][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.553104][ T8424] device bridge_slave_1 entered promiscuous mode [ 1047.566881][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.580689][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.590712][ T8433] team0: Port device team_slave_0 added [ 1047.599785][ T8433] team0: Port device team_slave_1 added [ 1047.623480][ T8424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.635048][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.654688][ T8434] team0: Port device team_slave_0 added [ 1047.678500][ T8424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.704661][ T8429] team0: Port device team_slave_0 added [ 1047.712155][ T8429] team0: Port device team_slave_1 added [ 1047.720543][ T8434] team0: Port device team_slave_1 added [ 1047.776735][ T8431] device hsr_slave_0 entered promiscuous mode [ 1047.824281][ T8431] device hsr_slave_1 entered promiscuous mode [ 1047.864153][ T8431] debugfs: Directory 'hsr0' with parent '/' already present! [ 1047.925615][ T8433] device hsr_slave_0 entered promiscuous mode [ 1047.974366][ T8433] device hsr_slave_1 entered promiscuous mode [ 1048.044167][ T8433] debugfs: Directory 'hsr0' with parent '/' already present! [ 1048.076522][ T8424] team0: Port device team_slave_0 added [ 1048.098210][ T8424] team0: Port device team_slave_1 added [ 1048.145922][ T8429] device hsr_slave_0 entered promiscuous mode [ 1048.184486][ T8429] device hsr_slave_1 entered promiscuous mode [ 1048.244074][ T8429] debugfs: Directory 'hsr0' with parent '/' already present! [ 1048.305827][ T8434] device hsr_slave_0 entered promiscuous mode [ 1048.354378][ T8434] device hsr_slave_1 entered promiscuous mode [ 1048.423985][ T8434] debugfs: Directory 'hsr0' with parent '/' already present! [ 1048.497764][ T8424] device hsr_slave_0 entered promiscuous mode [ 1048.544309][ T8424] device hsr_slave_1 entered promiscuous mode [ 1048.593971][ T8424] debugfs: Directory 'hsr0' with parent '/' already present! [ 1048.696551][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.731302][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.759198][ T8424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.773239][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.788268][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1048.797317][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.805261][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1048.812944][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.823438][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.840276][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.859627][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1048.867435][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.877196][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1048.885667][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1048.895002][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.902126][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.911839][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.923754][ T8424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.933701][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.946057][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1048.954800][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1048.962404][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.970757][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1048.980392][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1048.988936][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.996020][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.003565][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.012897][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.021396][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.028463][ T8435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.036478][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.049240][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.060086][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.073425][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1049.081283][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.089044][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.097863][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.106552][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.113585][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.121647][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1049.129617][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.137786][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.162668][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.181319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.190957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.200036][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.207163][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.215495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.225813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.234475][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.242861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.251319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.259980][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.268597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.275681][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.283128][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.292098][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.300512][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.307571][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.315207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.323670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.332068][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.339112][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.347023][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.355748][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.364570][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.371607][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.379193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.387727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.430396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.439314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.452459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.460587][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1049.469212][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.478282][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.487898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1049.496449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1049.505159][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.513564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1049.521981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1049.530343][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.539033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.547917][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.556913][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.565886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.574771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.583016][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.590079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.598009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.607133][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.615598][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.622629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.630197][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.639172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.648313][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.656789][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.665677][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.674266][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.682529][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1049.691490][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.702980][ T8424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1049.729588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.737711][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.747647][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.756213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.763833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1049.772635][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.781639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1049.790365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.798997][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.807585][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.817160][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.824251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.831990][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1049.840793][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1049.849046][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.858076][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1049.866399][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1049.874709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.883093][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.892606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.920328][ T8429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1049.934850][ T8429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1049.951426][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1049.968899][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.978214][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1049.987094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1049.995448][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1050.003782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1050.012126][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.020316][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.028546][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1050.037236][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1050.045752][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1050.054395][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1050.062755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1050.071090][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.079340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.087729][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.096246][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.103781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1050.122052][ T8424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.136298][ T8427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.150597][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1050.160947][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.179885][ T8434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1050.191707][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.200111][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1050.215218][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.223546][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.233196][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.241803][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.250291][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.269107][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.283691][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.332466][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.365892][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.388141][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.454544][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/08/20 17:15:52 executed programs: 32 2019/08/20 17:15:57 executed programs: 279 2019/08/20 17:16:02 executed programs: 492 2019/08/20 17:16:07 executed programs: 736 2019/08/20 17:16:12 executed programs: 978 2019/08/20 17:16:17 executed programs: 1204 2019/08/20 17:16:22 executed programs: 1431 2019/08/20 17:16:27 executed programs: 1653 2019/08/20 17:16:32 executed programs: 1877 2019/08/20 17:16:37 executed programs: 2089 2019/08/20 17:16:42 executed programs: 2315 2019/08/20 17:16:47 executed programs: 2532 2019/08/20 17:16:52 executed programs: 2743 2019/08/20 17:16:57 executed programs: 2940 2019/08/20 17:17:02 executed programs: 3137 2019/08/20 17:17:07 executed programs: 3343 2019/08/20 17:17:12 executed programs: 3562 2019/08/20 17:17:17 executed programs: 3776 2019/08/20 17:17:22 executed programs: 3978 2019/08/20 17:17:27 executed programs: 4169 2019/08/20 17:17:32 executed programs: 4357 2019/08/20 17:17:37 executed programs: 4548 2019/08/20 17:17:42 executed programs: 4775 2019/08/20 17:17:47 executed programs: 4995 2019/08/20 17:17:52 executed programs: 5179 2019/08/20 17:17:57 executed programs: 5361 2019/08/20 17:18:02 executed programs: 5545 2019/08/20 17:18:07 executed programs: 5728 2019/08/20 17:18:12 executed programs: 5939 2019/08/20 17:18:17 executed programs: 6136 2019/08/20 17:18:22 executed programs: 6315 2019/08/20 17:18:27 executed programs: 6487 2019/08/20 17:18:33 executed programs: 6671 2019/08/20 17:18:38 executed programs: 6850 2019/08/20 17:18:43 executed programs: 7058 2019/08/20 17:18:48 executed programs: 7277 2019/08/20 17:18:53 executed programs: 7463 2019/08/20 17:18:58 executed programs: 7638 2019/08/20 17:19:03 executed programs: 7814 2019/08/20 17:19:08 executed programs: 7986 2019/08/20 17:19:13 executed programs: 8192 2019/08/20 17:19:18 executed programs: 8389 2019/08/20 17:19:23 executed programs: 8564 2019/08/20 17:19:28 executed programs: 8728 2019/08/20 17:19:33 executed programs: 8902 2019/08/20 17:19:38 executed programs: 9071 2019/08/20 17:19:43 executed programs: 9273 2019/08/20 17:19:48 executed programs: 9480 2019/08/20 17:19:53 executed programs: 9667 2019/08/20 17:19:58 executed programs: 9836 2019/08/20 17:20:03 executed programs: 9995 2019/08/20 17:20:08 executed programs: 10155 2019/08/20 17:20:13 executed programs: 10349 2019/08/20 17:20:18 executed programs: 10554 2019/08/20 17:20:23 executed programs: 10734 2019/08/20 17:20:28 executed programs: 10892 2019/08/20 17:20:33 executed programs: 11049 2019/08/20 17:20:38 executed programs: 11197 2019/08/20 17:20:43 executed programs: 11383 2019/08/20 17:20:48 executed programs: 11604 2019/08/20 17:20:53 executed programs: 11787 2019/08/20 17:20:58 executed programs: 11997 2019/08/20 17:21:03 executed programs: 12243 2019/08/20 17:21:08 executed programs: 12498 2019/08/20 17:21:13 executed programs: 12741 2019/08/20 17:21:18 executed programs: 12987 2019/08/20 17:21:23 executed programs: 13213 2019/08/20 17:21:28 executed programs: 13451 2019/08/20 17:21:33 executed programs: 13694 2019/08/20 17:21:38 executed programs: 13921 2019/08/20 17:21:43 executed programs: 14157 2019/08/20 17:21:48 executed programs: 14392 2019/08/20 17:21:54 executed programs: 14616 2019/08/20 17:21:59 executed programs: 14838 2019/08/20 17:22:04 executed programs: 15055 2019/08/20 17:22:09 executed programs: 15268 [ 1431.835722][ T3333] ================================================================== [ 1431.844192][ T3333] BUG: KASAN: use-after-free in sk_psock_unlink+0x370/0x440 [ 1431.851460][ T3333] Read of size 4 at addr ffff888088f01d18 by task syz-executor.5/3333 [ 1431.860069][ T3333] [ 1431.862390][ T3333] CPU: 0 PID: 3333 Comm: syz-executor.5 Not tainted 5.3.0-rc5-next-20190820 #69 [ 1431.871483][ T3333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.881524][ T3333] Call Trace: [ 1431.884872][ T3333] dump_stack+0x172/0x1f0 [ 1431.889204][ T3333] ? sk_psock_unlink+0x370/0x440 [ 1431.894206][ T3333] ? tcp_check_oom+0x560/0x560 [ 1431.894227][ T3333] print_address_description.cold+0xd4/0x306 [ 1431.894243][ T3333] ? sk_psock_unlink+0x370/0x440 [ 1431.905115][ T3333] ? sk_psock_unlink+0x370/0x440 [ 1431.905131][ T3333] ? tcp_check_oom+0x560/0x560 [ 1431.905146][ T3333] __kasan_report.cold+0x1b/0x36 [ 1431.905161][ T3333] ? sk_psock_unlink+0x370/0x440 [ 1431.929573][ T3333] kasan_report+0x12/0x17 [ 1431.933903][ T3333] __asan_report_load4_noabort+0x14/0x20 [ 1431.939529][ T3333] sk_psock_unlink+0x370/0x440 [ 1431.944349][ T3333] ? sk_psock_link_pop+0x186/0x1f0 [ 1431.949572][ T3333] ? tcp_check_oom+0x560/0x560 [ 1431.954380][ T3333] tcp_bpf_remove+0x21/0x50 [ 1431.958927][ T3333] tcp_bpf_close+0x130/0x390 [ 1431.963514][ T3333] tls_sk_proto_close+0x35b/0x990 [ 1431.968532][ T3333] ? wait_on_pending_writer+0x420/0x420 [ 1431.974111][ T3333] ? ip_mc_drop_socket+0x211/0x270 [ 1431.979269][ T3333] ? down_write+0xdf/0x150 [ 1431.983681][ T3333] inet_release+0xed/0x200 [ 1431.988140][ T3333] inet6_release+0x53/0x80 [ 1431.988176][ T3333] __sock_release+0xce/0x280 [ 1431.988192][ T3333] sock_close+0x1e/0x30 [ 1431.988207][ T3333] __fput+0x2ff/0x890 [ 1431.988223][ T3333] ? __sock_release+0x280/0x280 [ 1432.010144][ T3333] ____fput+0x16/0x20 [ 1432.014233][ T3333] task_work_run+0x145/0x1c0 [ 1432.018825][ T3333] exit_to_usermode_loop+0x316/0x380 [ 1432.024122][ T3333] do_syscall_64+0x65f/0x760 [ 1432.028701][ T3333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1432.034579][ T3333] RIP: 0033:0x4134f0 [ 1432.038468][ T3333] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 9d 2d 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1432.058058][ T3333] RSP: 002b:00007ffe7579f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1432.058071][ T3333] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004134f0 [ 1432.058078][ T3333] RDX: 0000001b32620000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1432.058085][ T3333] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1432.058092][ T3333] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 1432.058099][ T3333] R13: 0000000000000005 R14: 0000000000761178 R15: ffffffffffffffff [ 1432.058119][ T3333] [ 1432.058126][ T3333] Allocated by task 3333: [ 1432.058140][ T3333] save_stack+0x23/0x90 [ 1432.058155][ T3333] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1432.112929][ T3333] kasan_kmalloc+0x9/0x10 [ 1432.126967][ T3333] kmem_cache_alloc_trace+0x158/0x790 [ 1432.132323][ T3333] sock_hash_alloc+0x1e3/0x5b0 [ 1432.137072][ T3333] __do_sys_bpf+0x475/0x3340 [ 1432.137083][ T3333] __x64_sys_bpf+0x73/0xb0 [ 1432.137097][ T3333] do_syscall_64+0xfa/0x760 [ 1432.137110][ T3333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1432.137114][ T3333] [ 1432.137120][ T3333] Freed by task 2990: [ 1432.137132][ T3333] save_stack+0x23/0x90 [ 1432.137143][ T3333] __kasan_slab_free+0x102/0x150 [ 1432.137153][ T3333] kasan_slab_free+0xe/0x10 [ 1432.137166][ T3333] kfree+0x10a/0x2c0 [ 1432.180135][ T3333] sock_hash_free+0x327/0x4a0 [ 1432.184812][ T3333] bpf_map_free_deferred+0xb3/0x100 [ 1432.190005][ T3333] process_one_work+0x9af/0x1740 [ 1432.194930][ T3333] worker_thread+0x98/0xe40 [ 1432.194941][ T3333] kthread+0x361/0x430 [ 1432.194951][ T3333] ret_from_fork+0x24/0x30 [ 1432.194956][ T3333] [ 1432.194978][ T3333] The buggy address belongs to the object at ffff888088f01d00 [ 1432.194978][ T3333] which belongs to the cache kmalloc-512 of size 512 [ 1432.194988][ T3333] The buggy address is located 24 bytes inside of [ 1432.194988][ T3333] 512-byte region [ffff888088f01d00, ffff888088f01f00) [ 1432.194992][ T3333] The buggy address belongs to the page: [ 1432.195005][ T3333] page:ffffea000223c040 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0x0 [ 1432.203524][ T3333] flags: 0x1fffc0000000200(slab) [ 1432.257060][ T3333] raw: 01fffc0000000200 ffffea0002296d88 ffffea000229ed88 ffff8880aa400a80 [ 1432.265645][ T3333] raw: 0000000000000000 ffff888088f01080 0000000100000006 0000000000000000 [ 1432.274224][ T3333] page dumped because: kasan: bad access detected [ 1432.280620][ T3333] [ 1432.282936][ T3333] Memory state around the buggy address: [ 1432.288557][ T3333] ffff888088f01c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1432.296621][ T3333] ffff888088f01c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1432.304843][ T3333] >ffff888088f01d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1432.304848][ T3333] ^ [ 1432.304857][ T3333] ffff888088f01d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1432.304866][ T3333] ffff888088f01e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1432.304871][ T3333] ================================================================== [ 1432.304875][ T3333] Disabling lock debugging due to kernel taint [ 1432.328219][ T3333] Kernel panic - not syncing: panic_on_warn set ... [ 1432.354719][ T3333] CPU: 0 PID: 3333 Comm: syz-executor.5 Tainted: G B 5.3.0-rc5-next-20190820 #69 [ 1432.365111][ T3333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.367601][ T3883] kobject: 'loop3' (00000000ca08fe25): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1432.375150][ T3333] Call Trace: [ 1432.375170][ T3333] dump_stack+0x172/0x1f0 [ 1432.375185][ T3333] ? tcp_check_oom+0x560/0x560 [ 1432.375195][ T3333] panic+0x2dc/0x755 [ 1432.375210][ T3333] ? add_taint.cold+0x16/0x16 [ 1432.395438][ T3883] kobject: 'loop0' (00000000f0e58a55): kobject_uevent_env [ 1432.397636][ T3333] ? sk_psock_unlink+0x370/0x440 [ 1432.397653][ T3333] ? tcp_check_oom+0x560/0x560 [ 1432.401555][ T3883] kobject: 'loop0' (00000000f0e58a55): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1432.406163][ T3333] ? preempt_schedule+0x4b/0x60 [ 1432.406176][ T3333] ? ___preempt_schedule+0x16/0x20 [ 1432.406189][ T3333] ? trace_hardirqs_on+0x5e/0x240 [ 1432.406201][ T3333] ? sk_psock_unlink+0x370/0x440 [ 1432.406212][ T3333] ? tcp_check_oom+0x560/0x560 [ 1432.406224][ T3333] end_report+0x47/0x4f [ 1432.406232][ T3333] ? sk_psock_unlink+0x370/0x440 [ 1432.406247][ T3333] __kasan_report.cold+0xe/0x36 [ 1432.418176][ T3883] kobject: 'loop2' (000000008cd204c5): kobject_uevent_env [ 1432.418231][ T3333] ? sk_psock_unlink+0x370/0x440 [ 1432.423035][ T3883] kobject: 'loop2' (000000008cd204c5): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1432.433179][ T3333] kasan_report+0x12/0x17 [ 1432.433194][ T3333] __asan_report_load4_noabort+0x14/0x20 [ 1432.433206][ T3333] sk_psock_unlink+0x370/0x440 [ 1432.433218][ T3333] ? sk_psock_link_pop+0x186/0x1f0 [ 1432.433231][ T3333] ? tcp_check_oom+0x560/0x560 [ 1432.433244][ T3333] tcp_bpf_remove+0x21/0x50 [ 1432.433261][ T3333] tcp_bpf_close+0x130/0x390 [ 1432.441904][ T3883] kobject: 'loop4' (0000000029b1474d): kobject_uevent_env [ 1432.443183][ T3333] tls_sk_proto_close+0x35b/0x990 [ 1432.443199][ T3333] ? wait_on_pending_writer+0x420/0x420 [ 1432.448555][ T3883] kobject: 'loop4' (0000000029b1474d): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1432.453109][ T3333] ? ip_mc_drop_socket+0x211/0x270 [ 1432.453127][ T3333] ? down_write+0xdf/0x150 [ 1432.461393][ T3883] kobject: 'loop1' (00000000def55a84): kobject_uevent_env [ 1432.462006][ T3333] inet_release+0xed/0x200 [ 1432.467199][ T3883] kobject: 'loop1' (00000000def55a84): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1432.471736][ T3333] inet6_release+0x53/0x80 [ 1432.471755][ T3333] __sock_release+0xce/0x280 [ 1432.595207][ T3333] sock_close+0x1e/0x30 [ 1432.599370][ T3333] __fput+0x2ff/0x890 [ 1432.603360][ T3333] ? __sock_release+0x280/0x280 [ 1432.608206][ T3333] ____fput+0x16/0x20 [ 1432.612178][ T3333] task_work_run+0x145/0x1c0 [ 1432.616765][ T3333] exit_to_usermode_loop+0x316/0x380 [ 1432.622020][ T3333] do_syscall_64+0x65f/0x760 [ 1432.626584][ T3333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1432.632443][ T3333] RIP: 0033:0x4134f0 [ 1432.636309][ T3333] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 9d 2d 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1432.655879][ T3333] RSP: 002b:00007ffe7579f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1432.664260][ T3333] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004134f0 [ 1432.672207][ T3333] RDX: 0000001b32620000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1432.680171][ T3333] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1432.688113][ T3333] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 1432.696051][ T3333] R13: 0000000000000005 R14: 0000000000761178 R15: ffffffffffffffff [ 1432.705303][ T3333] Kernel Offset: disabled [ 1432.709632][ T3333] Rebooting in 86400 seconds..