[ 27.008161] audit: type=1800 audit(1556754195.970:22): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.121610] IPVS: ftp: loaded support on port[0] = 21 [ 39.564405] can: request_module (can-proto-0) failed. [ 40.532193] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.8' (ECDSA) to the list of known hosts. 2019/05/01 23:43:37 parsed 1 programs 2019/05/01 23:43:37 executed programs: 0 [ 48.821224] IPVS: ftp: loaded support on port[0] = 21 [ 48.828687] IPVS: ftp: loaded support on port[0] = 21 [ 48.841827] IPVS: ftp: loaded support on port[0] = 21 [ 48.843042] IPVS: ftp: loaded support on port[0] = 21 [ 48.850709] IPVS: ftp: loaded support on port[0] = 21 [ 48.890736] IPVS: ftp: loaded support on port[0] = 21 [ 49.009778] chnl_net:caif_netlink_parms(): no params data found [ 49.017635] chnl_net:caif_netlink_parms(): no params data found [ 49.092003] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.099286] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.106452] device bridge_slave_0 entered promiscuous mode [ 49.117494] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.123842] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.131666] device bridge_slave_0 entered promiscuous mode [ 49.138447] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.144772] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.151606] device bridge_slave_1 entered promiscuous mode [ 49.175177] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.181627] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.188656] device bridge_slave_1 entered promiscuous mode [ 49.194908] chnl_net:caif_netlink_parms(): no params data found [ 49.208016] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.225844] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.239505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.247704] chnl_net:caif_netlink_parms(): no params data found [ 49.267136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.301599] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.309214] team0: Port device team_slave_0 added [ 49.329821] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.337869] team0: Port device team_slave_0 added [ 49.352468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.359809] team0: Port device team_slave_1 added [ 49.364911] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.371475] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.378425] device bridge_slave_0 entered promiscuous mode [ 49.384687] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.391463] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.398421] device bridge_slave_0 entered promiscuous mode [ 49.404997] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.412145] team0: Port device team_slave_1 added [ 49.418666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.442404] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.449757] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.456130] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.463750] device bridge_slave_1 entered promiscuous mode [ 49.469985] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.476678] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.483618] device bridge_slave_1 entered promiscuous mode [ 49.490109] chnl_net:caif_netlink_parms(): no params data found [ 49.498025] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.513575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.538114] chnl_net:caif_netlink_parms(): no params data found [ 49.555775] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.565164] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.617804] device hsr_slave_0 entered promiscuous mode [ 49.658276] device hsr_slave_1 entered promiscuous mode [ 49.720363] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.778232] device hsr_slave_0 entered promiscuous mode [ 49.846532] device hsr_slave_1 entered promiscuous mode [ 49.887270] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.895239] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.905575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.921128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.930800] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.945092] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.952367] team0: Port device team_slave_0 added [ 49.957864] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.964934] team0: Port device team_slave_1 added [ 49.973259] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.980934] team0: Port device team_slave_0 added [ 49.986059] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.992529] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.001730] device bridge_slave_0 entered promiscuous mode [ 50.012959] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.019505] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.026402] device bridge_slave_1 entered promiscuous mode [ 50.032577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.047136] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.054174] team0: Port device team_slave_1 added [ 50.077971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.086059] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.100923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.108185] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.114570] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.122089] device bridge_slave_0 entered promiscuous mode [ 50.129197] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.135525] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.142557] device bridge_slave_1 entered promiscuous mode [ 50.149768] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.171014] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.178043] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.200024] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.208131] team0: Port device team_slave_0 added [ 50.213661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.221070] team0: Port device team_slave_1 added [ 50.298925] device hsr_slave_0 entered promiscuous mode [ 50.356434] device hsr_slave_1 entered promiscuous mode [ 50.448731] device hsr_slave_0 entered promiscuous mode [ 50.486561] device hsr_slave_1 entered promiscuous mode [ 50.557696] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.564291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.572923] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.581650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.591663] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.598647] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.605457] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.617570] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.658533] device hsr_slave_0 entered promiscuous mode [ 50.726402] device hsr_slave_1 entered promiscuous mode [ 50.806659] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.813531] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.825443] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.846058] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.853610] team0: Port device team_slave_0 added [ 50.864573] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.878767] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.886127] team0: Port device team_slave_1 added [ 50.893924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.904960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.921864] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.939968] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.955110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.965067] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.018737] device hsr_slave_0 entered promiscuous mode [ 51.076495] device hsr_slave_1 entered promiscuous mode [ 51.147418] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.164491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.174341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.182424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.190357] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.208588] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.214686] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.233973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.253556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.259985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.268115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.275702] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.282220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.291100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.302030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.310390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.325588] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.332285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.340473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.348779] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.355137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.364603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.379079] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.387798] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.393882] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.400898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.409097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.415939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.439582] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.450878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.461897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.471629] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.480909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.492044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.499594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.505570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.514048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.521647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.529610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.537229] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.543570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.550455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.557402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.569744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.577295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.584364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.594566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.604144] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.613096] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.623503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.633629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.643073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.650927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.658912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.666730] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.673052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.682034] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.691737] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.699431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.706734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.714361] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.720639] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.728737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.736560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.744042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.752096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.759104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.766039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.773693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.781324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.789483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.797263] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.803595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.818108] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.825675] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.831887] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.839849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.847970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.857106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.864248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.871513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.878570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.886371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.893867] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.900266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.907662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.917660] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.923705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.932719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.942412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.951611] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.957855] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.964994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.975308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.986721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.996855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.004892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.014353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.021560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.029580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.037984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.045577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.053759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.061653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.069573] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.075918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.082712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.090417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.098221] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.104567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.113142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.123581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.132106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.141943] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.149645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.158844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.165784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.174180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.181791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.189924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.197531] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.203868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.211857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.225598] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.234423] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.241124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.248448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.256143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.267498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.278225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.286004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.294390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.302389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.313058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.320697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.328186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.335865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.343880] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.350283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.357174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.364728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.372600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.380472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.391359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.401044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.410814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.419672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.428518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.436278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.443721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.451605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.462391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.471916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.480216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.490454] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.497346] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.504133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.512238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.520797] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.527644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.536006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.544952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.554161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.562420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.569720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.578126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.585571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.593494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.601221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.608736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.616071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.623857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.631397] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.637784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.644821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.652216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.659316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.669203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.676524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.686065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.701112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.710534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.728494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.736343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.744147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.754410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.771141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.779594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.787248] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 52.787281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.818505] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.830517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.837505] ================================================================== [ 52.845028] BUG: KASAN: slab-out-of-bounds in skb_gro_receive+0x1092/0x14f0 [ 52.851290] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.852134] Read of size 16 at addr ffff8800946efff0 by task syz-executor.3/7171 [ 52.862744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.865814] [ 52.865823] CPU: 1 PID: 7171 Comm: syz-executor.3 Not tainted 4.20.0-rc1+ #1 [ 52.873524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.890063] Call Trace: [ 52.892693] dump_stack+0x16b/0x224 [ 52.896337] print_address_description.cold.7+0x9/0x1ff [ 52.901704] kasan_report.cold.8+0x242/0x309 [ 52.906119] ? skb_gro_receive+0x1092/0x14f0 [ 52.910549] __asan_report_load16_noabort+0x14/0x20 [ 52.915562] skb_gro_receive+0x1092/0x14f0 [ 52.921284] udp_gro_receive+0x8e0/0xf60 [ 52.925358] ? __skb_gro_checksum_complete+0x86/0x250 [ 52.930572] udp4_gro_receive+0x505/0xf00 [ 52.934724] inet_gro_receive+0xb68/0x10d0 [ 52.938956] ? lock_acquire+0x173/0x3d0 [ 52.942930] dev_gro_receive+0xbe9/0x22a0 [ 52.947101] ? __lock_is_held+0xb5/0x140 [ 52.951177] napi_gro_frags+0x305/0x950 [ 52.955143] tun_get_user+0x21b0/0x32c0 [ 52.959113] ? pci_mmcfg_check_reserved+0x120/0x120 [ 52.964130] ? tun_device_event+0xc70/0xc70 [ 52.968455] ? lock_downgrade+0x7f0/0x7f0 [ 52.972604] ? kasan_check_read+0x11/0x20 [ 52.976743] ? aa_file_perm+0x325/0xb60 [ 52.980708] ? find_held_lock+0x36/0x1d0 [ 52.984762] ? tun_get+0xf3/0x1d0 [ 52.988216] ? lock_downgrade+0x7f0/0x7f0 [ 52.992356] ? kasan_check_read+0x11/0x20 [ 52.996497] tun_chr_write_iter+0xaf/0x150 [ 53.000729] do_iter_readv_writev+0x4b8/0x960 [ 53.005214] ? vfs_dedupe_file_range+0x580/0x580 [ 53.010048] ? rw_verify_area+0xb8/0x2b0 [ 53.014099] do_iter_write+0x128/0x540 [ 53.018076] ? dup_iter+0x220/0x220 [ 53.021729] vfs_writev+0x16f/0x2d0 [ 53.025341] ? __fget+0x278/0x400 [ 53.028788] ? vfs_iter_write+0xb0/0xb0 [ 53.032764] ? kasan_check_read+0x11/0x20 [ 53.036912] ? __fget+0x295/0x400 [ 53.040353] ? ksys_dup3+0x2e0/0x2e0 [ 53.044057] ? __fget_light+0x174/0x1e0 [ 53.048028] do_writev+0xda/0x260 [ 53.051483] ? vfs_writev+0x2d0/0x2d0 [ 53.055294] ? do_syscall_64+0x21/0x4e0 [ 53.059263] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.064621] __x64_sys_writev+0x70/0xb0 [ 53.068585] do_syscall_64+0xd6/0x4e0 [ 53.072390] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.077570] RIP: 0033:0x458c61 [ 53.080753] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 53.099827] RSP: 002b:00007f2879c08ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 53.107535] RAX: ffffffffffffffda RBX: 000000000000002a RCX: 0000000000458c61 [ 53.114819] RDX: 0000000000000001 RSI: 00007f2879c08c00 RDI: 00000000000000f0 [ 53.122089] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 53.129367] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f2879c096d4 [ 53.136633] R13: 00000000004c76b6 R14: 00000000004dd610 R15: 00000000ffffffff [ 53.143914] [ 53.145559] Allocated by task 7124: [ 53.149183] save_stack+0x43/0xd0 [ 53.152627] kasan_kmalloc+0xc7/0xe0 [ 53.156332] kasan_slab_alloc+0x12/0x20 [ 53.160297] kmem_cache_alloc+0x12e/0x730 [ 53.164443] getname_flags+0xb8/0x510 [ 53.168233] getname+0xd/0x10 [ 53.171328] do_sys_open+0x14c/0x350 [ 53.175028] __x64_sys_open+0x79/0xb0 [ 53.178818] do_syscall_64+0xd6/0x4e0 [ 53.182609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.187793] [ 53.189404] Freed by task 7124: [ 53.192671] save_stack+0x43/0xd0 [ 53.196124] __kasan_slab_free+0x102/0x150 [ 53.200356] kasan_slab_free+0xe/0x10 [ 53.204157] kmem_cache_free+0x83/0x290 [ 53.208118] putname+0xa8/0xe0 [ 53.211308] do_sys_open+0x16e/0x350 [ 53.215006] __x64_sys_open+0x79/0xb0 [ 53.218811] do_syscall_64+0xd6/0x4e0 [ 53.222610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.227781] [ 53.229396] The buggy address belongs to the object at ffff8800946ee000 [ 53.229396] which belongs to the cache names_cache of size 4096 [ 53.242133] The buggy address is located 4080 bytes to the right of [ 53.242133] 4096-byte region [ffff8800946ee000, ffff8800946ef000) [ 53.254710] The buggy address belongs to the page: [ 53.259631] page:ffffea000251bb80 count:1 mapcount:0 mapping:ffff8800aa42ac40 index:0x0 compound_mapcount: 0 [ 53.269593] flags: 0x1fffc0000010200(slab|head) [ 53.274253] raw: 01fffc0000010200 ffffea00026f9488 ffffea00021c0888 ffff8800aa42ac40 [ 53.282137] raw: 0000000000000000 ffff8800946ee000 0000000100000001 0000000000000000 [ 53.290177] page dumped because: kasan: bad access detected [ 53.295890] [ 53.297507] Memory state around the buggy address: [ 53.302422] ffff8800946efe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.309771] ffff8800946eff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.317122] >ffff8800946eff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.324473] ^ [ 53.331580] ffff8800946f0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.339019] ffff8800946f0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.346890] ================================================================== [ 53.354337] Disabling lock debugging due to kernel taint [ 53.359859] Kernel panic - not syncing: panic_on_warn set ... [ 53.363354] kobject: 'loop5' (000000009995aee7): kobject_uevent_env [ 53.365756] CPU: 1 PID: 7171 Comm: syz-executor.3 Tainted: G B 4.20.0-rc1+ #1 [ 53.365760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.365762] Call Trace: [ 53.365776] dump_stack+0x16b/0x224 [ 53.365784] panic+0x212/0x3c9 [ 53.372954] kobject: 'loop5' (000000009995aee7): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 53.380761] ? __warn_printk+0xd6/0xd6 [ 53.380769] ? do_raw_spin_unlock+0x54/0x260 [ 53.380779] kasan_end_report+0x47/0x4f [ 53.380784] kasan_report.cold.8+0x76/0x309 [ 53.380790] ? skb_gro_receive+0x1092/0x14f0 [ 53.380796] __asan_report_load16_noabort+0x14/0x20 [ 53.380800] skb_gro_receive+0x1092/0x14f0 [ 53.380811] udp_gro_receive+0x8e0/0xf60 [ 53.380818] ? __skb_gro_checksum_complete+0x86/0x250 [ 53.380824] udp4_gro_receive+0x505/0xf00 [ 53.380833] inet_gro_receive+0xb68/0x10d0 [ 53.380840] ? lock_acquire+0x173/0x3d0 [ 53.380849] dev_gro_receive+0xbe9/0x22a0 [ 53.380853] ? __lock_is_held+0xb5/0x140 [ 53.380861] napi_gro_frags+0x305/0x950 [ 53.380869] tun_get_user+0x21b0/0x32c0 [ 53.380875] ? pci_mmcfg_check_reserved+0x120/0x120 [ 53.380882] ? tun_device_event+0xc70/0xc70 [ 53.380886] ? lock_downgrade+0x7f0/0x7f0 [ 53.380891] ? kasan_check_read+0x11/0x20 [ 53.380898] ? aa_file_perm+0x325/0xb60 [ 53.380903] ? find_held_lock+0x36/0x1d0 [ 53.380910] ? tun_get+0xf3/0x1d0 [ 53.380914] ? lock_downgrade+0x7f0/0x7f0 [ 53.380920] ? kasan_check_read+0x11/0x20 [ 53.380927] tun_chr_write_iter+0xaf/0x150 [ 53.380934] do_iter_readv_writev+0x4b8/0x960 [ 53.380939] ? vfs_dedupe_file_range+0x580/0x580 [ 53.380946] ? rw_verify_area+0xb8/0x2b0 [ 53.380952] do_iter_write+0x128/0x540 [ 53.380957] ? dup_iter+0x220/0x220 [ 53.380964] vfs_writev+0x16f/0x2d0 [ 53.380969] ? __fget+0x278/0x400 [ 53.380973] ? vfs_iter_write+0xb0/0xb0 [ 53.380979] ? kasan_check_read+0x11/0x20 [ 53.380984] ? __fget+0x295/0x400 [ 53.380991] ? ksys_dup3+0x2e0/0x2e0 [ 53.380999] ? __fget_light+0x174/0x1e0 [ 53.381005] do_writev+0xda/0x260 [ 53.381011] ? vfs_writev+0x2d0/0x2d0 [ 53.381017] ? do_syscall_64+0x21/0x4e0 [ 53.381023] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.381029] __x64_sys_writev+0x70/0xb0 [ 53.381034] do_syscall_64+0xd6/0x4e0 [ 53.381039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.381045] RIP: 0033:0x458c61 [ 53.381052] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 53.381057] RSP: 002b:00007f2879c08ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 53.625128] RAX: ffffffffffffffda RBX: 000000000000002a RCX: 0000000000458c61 [ 53.632386] RDX: 0000000000000001 RSI: 00007f2879c08c00 RDI: 00000000000000f0 [ 53.639914] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 53.647170] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f2879c096d4 [ 53.654524] R13: 00000000004c76b6 R14: 00000000004dd610 R15: 00000000ffffffff [ 53.662803] Kernel Offset: disabled [ 53.666429] Rebooting in 86400 seconds..