[ 52.636250][ T26] audit: type=1800 audit(1570197250.263:26): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.672685][ T26] audit: type=1800 audit(1570197250.263:27): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 65.512846][ T8657] IPVS: ftp: loaded support on port[0] = 21 [ 66.681131][ T8644] can: request_module (can-proto-0) failed. [ 67.274239][ T8644] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.165' (ECDSA) to the list of known hosts. 2019/10/04 13:54:31 parsed 1 programs 2019/10/04 13:54:32 executed programs: 0 [ 75.177287][ T8737] IPVS: ftp: loaded support on port[0] = 21 [ 75.190187][ T8735] IPVS: ftp: loaded support on port[0] = 21 [ 75.198875][ T8738] IPVS: ftp: loaded support on port[0] = 21 [ 75.205906][ T8741] IPVS: ftp: loaded support on port[0] = 21 [ 75.213105][ T8732] IPVS: ftp: loaded support on port[0] = 21 [ 75.241524][ T8742] IPVS: ftp: loaded support on port[0] = 21 [ 75.487593][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 75.512863][ T8732] chnl_net:caif_netlink_parms(): no params data found [ 75.564603][ T8737] chnl_net:caif_netlink_parms(): no params data found [ 75.619501][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 75.655476][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.662632][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.670691][ T8732] device bridge_slave_0 entered promiscuous mode [ 75.730788][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.739000][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.746894][ T8732] device bridge_slave_1 entered promiscuous mode [ 75.754070][ T8741] chnl_net:caif_netlink_parms(): no params data found [ 75.763610][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.770920][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.778773][ T8738] device bridge_slave_0 entered promiscuous mode [ 75.786767][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.793867][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.801638][ T8738] device bridge_slave_1 entered promiscuous mode [ 75.810721][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.817890][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.825632][ T8737] device bridge_slave_0 entered promiscuous mode [ 75.851596][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.858787][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.866821][ T8735] device bridge_slave_0 entered promiscuous mode [ 75.878498][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.885761][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.893447][ T8735] device bridge_slave_1 entered promiscuous mode [ 75.903521][ T8742] chnl_net:caif_netlink_parms(): no params data found [ 75.914610][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.922101][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.929911][ T8737] device bridge_slave_1 entered promiscuous mode [ 75.975622][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.987215][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.009755][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.020130][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.031790][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.058190][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.071074][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.081227][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.099387][ T8732] team0: Port device team_slave_0 added [ 76.138830][ T8732] team0: Port device team_slave_1 added [ 76.151534][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.159765][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.168618][ T8741] device bridge_slave_0 entered promiscuous mode [ 76.177846][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.184953][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.192659][ T8741] device bridge_slave_1 entered promiscuous mode [ 76.208597][ T8738] team0: Port device team_slave_0 added [ 76.215795][ T8737] team0: Port device team_slave_0 added [ 76.221958][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.229291][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.237432][ T8742] device bridge_slave_0 entered promiscuous mode [ 76.249012][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.256988][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.264517][ T8742] device bridge_slave_1 entered promiscuous mode [ 76.272552][ T8735] team0: Port device team_slave_0 added [ 76.282768][ T8738] team0: Port device team_slave_1 added [ 76.299921][ T8737] team0: Port device team_slave_1 added [ 76.314555][ T8735] team0: Port device team_slave_1 added [ 76.376757][ T8732] device hsr_slave_0 entered promiscuous mode [ 76.415241][ T8732] device hsr_slave_1 entered promiscuous mode [ 76.466520][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.556668][ T8735] device hsr_slave_0 entered promiscuous mode [ 76.595397][ T8735] device hsr_slave_1 entered promiscuous mode [ 76.634984][ T8735] debugfs: Directory 'hsr0' with parent '/' already present! [ 76.646210][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.667998][ T8742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.748176][ T8738] device hsr_slave_0 entered promiscuous mode [ 76.805143][ T8738] device hsr_slave_1 entered promiscuous mode [ 76.864875][ T8738] debugfs: Directory 'hsr0' with parent '/' already present! [ 76.879451][ T8742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.937752][ T8737] device hsr_slave_0 entered promiscuous mode [ 77.005109][ T8737] device hsr_slave_1 entered promiscuous mode [ 77.075485][ T8737] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.096305][ T8741] team0: Port device team_slave_0 added [ 77.118006][ T8741] team0: Port device team_slave_1 added [ 77.139644][ T8742] team0: Port device team_slave_0 added [ 77.147301][ T8742] team0: Port device team_slave_1 added [ 77.207782][ T8742] device hsr_slave_0 entered promiscuous mode [ 77.255404][ T8742] device hsr_slave_1 entered promiscuous mode [ 77.295105][ T8742] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.367995][ T8741] device hsr_slave_0 entered promiscuous mode [ 77.405094][ T8741] device hsr_slave_1 entered promiscuous mode [ 77.444876][ T8741] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.530663][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.545660][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.558572][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.573551][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.581729][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.607880][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.618734][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.627813][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.636544][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.643716][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.652033][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.660902][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.669452][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.676559][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.685087][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.695173][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.712773][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.731309][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.743116][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.762180][ T8732] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.781096][ T8735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.792045][ T8735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.810215][ T8742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.819870][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.829269][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.838479][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.846720][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.855239][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.863470][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.871758][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.880352][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.888716][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.896824][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.904348][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.912082][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.919831][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.932425][ T8737] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.960933][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.970833][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.978708][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.986958][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.996203][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.004442][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.011520][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.019175][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.027842][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.036387][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.043415][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.050989][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.059705][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.068259][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.076976][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.085915][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.093678][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.120815][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.135229][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.143757][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.152892][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.160035][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.171770][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.180655][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.189494][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.198176][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.207475][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.214510][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.222370][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.230756][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.239078][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.247781][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.256434][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.264498][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.273148][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.281867][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.290336][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.297398][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.304964][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.313424][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.322193][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.329276][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.337192][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.346409][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.354180][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.363810][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.373936][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.393301][ T8742] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.414114][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.424390][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.433152][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.443893][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.451950][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.460594][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.469042][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.478058][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.487160][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.495231][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.507375][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.526331][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.536685][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.545478][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.552525][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.560546][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.575815][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.584072][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.591194][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.599039][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.607640][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.616058][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.625027][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.639560][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.657665][ T8741] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.672510][ T8737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.686892][ T8737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.709486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.718860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.727241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.734957][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.742545][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.751402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.760141][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.768806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.777461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.785717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.794076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.802833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.810460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.828210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.845923][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.863824][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.882112][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.891347][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.900273][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.908849][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.915961][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.927042][ T8738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.953504][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.969794][ T8742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.987600][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.018482][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.032768][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.043489][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.051966][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.061740][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.070449][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.077549][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.078161][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.093445][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.105834][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.144615][ T8742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.181774][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.206276][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.253953][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.277916][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.301463][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.322143][ T8737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.353124][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.394105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.412929][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.439856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.456107][ T8741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.468670][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.490623][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.518343][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.607582][ T8741] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/10/04 13:54:37 executed programs: 27 2019/10/04 13:54:42 executed programs: 236 2019/10/04 13:54:47 executed programs: 433 2019/10/04 13:54:52 executed programs: 637 2019/10/04 13:54:57 executed programs: 838 2019/10/04 13:55:02 executed programs: 1029 2019/10/04 13:55:07 executed programs: 1225 2019/10/04 13:55:12 executed programs: 1419 2019/10/04 13:55:17 executed programs: 1606 2019/10/04 13:55:22 executed programs: 1798 2019/10/04 13:55:27 executed programs: 1983 2019/10/04 13:55:32 executed programs: 2163 2019/10/04 13:55:37 executed programs: 2356 2019/10/04 13:55:42 executed programs: 2537 2019/10/04 13:55:48 executed programs: 2719 2019/10/04 13:55:53 executed programs: 2897 2019/10/04 13:55:58 executed programs: 3076 2019/10/04 13:56:03 executed programs: 3254 2019/10/04 13:56:08 executed programs: 3442 2019/10/04 13:56:13 executed programs: 3626 2019/10/04 13:56:18 executed programs: 3809 2019/10/04 13:56:23 executed programs: 3985 2019/10/04 13:56:28 executed programs: 4161 2019/10/04 13:56:33 executed programs: 4331 2019/10/04 13:56:38 executed programs: 4521 2019/10/04 13:56:43 executed programs: 4708 2019/10/04 13:56:48 executed programs: 4881 2019/10/04 13:56:53 executed programs: 5045 2019/10/04 13:56:58 executed programs: 5214 2019/10/04 13:57:03 executed programs: 5399 2019/10/04 13:57:08 executed programs: 5587 2019/10/04 13:57:13 executed programs: 5768 2019/10/04 13:57:18 executed programs: 5940 2019/10/04 13:57:23 executed programs: 6107 2019/10/04 13:57:28 executed programs: 6269 2019/10/04 13:57:33 executed programs: 6447 2019/10/04 13:57:38 executed programs: 6631 2019/10/04 13:57:43 executed programs: 6800 2019/10/04 13:57:48 executed programs: 6962 2019/10/04 13:57:53 executed programs: 7119 2019/10/04 13:57:58 executed programs: 7273 2019/10/04 13:58:03 executed programs: 7454 2019/10/04 13:58:08 executed programs: 7640 2019/10/04 13:58:13 executed programs: 7808 2019/10/04 13:58:18 executed programs: 7973 2019/10/04 13:58:24 executed programs: 8129 2019/10/04 13:58:29 executed programs: 8284 [ 313.806241][ T9000] ================================================================== [ 313.814681][ T9000] BUG: KASAN: use-after-free in rxrpc_release_call+0x973/0xaa0 [ 313.822251][ T9000] Read of size 8 at addr ffff88808888b910 by task syz-executor.5/9000 [ 313.830393][ T9000] [ 313.832730][ T9000] CPU: 1 PID: 9000 Comm: syz-executor.5 Not tainted 5.3.0+ #0 [ 313.840179][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.850230][ T9000] Call Trace: [ 313.853581][ T9000] dump_stack+0x172/0x1f0 [ 313.857938][ T9000] ? rxrpc_release_call+0x973/0xaa0 [ 313.863147][ T9000] print_address_description.constprop.0.cold+0xd4/0x30b [ 313.870187][ T9000] ? rxrpc_release_call+0x973/0xaa0 [ 313.875390][ T9000] ? rxrpc_release_call+0x973/0xaa0 [ 313.880621][ T9000] __kasan_report.cold+0x1b/0x41 [ 313.885553][ T9000] ? rxrpc_release_call+0x973/0xaa0 [ 313.890756][ T9000] kasan_report+0x12/0x20 [ 313.895072][ T9000] __asan_report_load8_noabort+0x14/0x20 [ 313.900733][ T9000] rxrpc_release_call+0x973/0xaa0 [ 313.906706][ T9000] ? rxrpc_release_calls_on_socket+0x6e7/0x1320 [ 313.912943][ T9000] rxrpc_release_calls_on_socket+0x6e7/0x1320 [ 313.918998][ T9000] ? rxrpc_discard_prealloc+0x664/0xf20 [ 313.924536][ T9000] ? rxrpc_release+0x238/0x550 [ 313.929294][ T9000] rxrpc_release+0x2a6/0x550 [ 313.933955][ T9000] __sock_release+0xce/0x280 [ 313.938543][ T9000] sock_close+0x1e/0x30 [ 313.942806][ T9000] __fput+0x2ff/0x890 [ 313.946794][ T9000] ? __sock_release+0x280/0x280 [ 313.951631][ T9000] ____fput+0x16/0x20 [ 313.955605][ T9000] task_work_run+0x145/0x1c0 [ 313.960182][ T9000] exit_to_usermode_loop+0x316/0x380 [ 313.965448][ T9000] do_syscall_64+0x65f/0x760 [ 313.970159][ T9000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.976040][ T9000] RIP: 0033:0x459a29 [ 313.979925][ T9000] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.999508][ T9000] RSP: 002b:00007f6e3d494c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 314.007896][ T9000] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000459a29 [ 314.015875][ T9000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 314.023828][ T9000] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.031780][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e3d4956d4 [ 314.039739][ T9000] R13: 00000000004f93d2 R14: 00000000004d1e00 R15: 00000000ffffffff [ 314.047711][ T9000] [ 314.050030][ T9000] Allocated by task 9000: [ 314.054354][ T9000] save_stack+0x23/0x90 [ 314.058508][ T9000] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 314.064133][ T9000] kasan_kmalloc+0x9/0x10 [ 314.068452][ T9000] kmem_cache_alloc_trace+0x158/0x790 [ 314.073861][ T9000] rxrpc_alloc_connection+0x86/0x5f0 [ 314.079124][ T9000] rxrpc_connect_call+0x648/0x4c30 [ 314.084230][ T9000] rxrpc_new_client_call+0x9c0/0x1ad0 [ 314.089587][ T9000] rxrpc_do_sendmsg+0xffa/0x1d5f [ 314.094525][ T9000] rxrpc_sendmsg+0x4d6/0x5f0 [ 314.099106][ T9000] sock_sendmsg+0xd7/0x130 [ 314.103521][ T9000] ___sys_sendmsg+0x3e2/0x920 [ 314.108183][ T9000] __sys_sendmmsg+0x1bf/0x4d0 [ 314.112842][ T9000] __x64_sys_sendmmsg+0x9d/0x100 [ 314.117759][ T9000] do_syscall_64+0xfa/0x760 [ 314.122243][ T9000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.128112][ T9000] [ 314.130436][ T9000] Freed by task 16: [ 314.134224][ T9000] save_stack+0x23/0x90 [ 314.138380][ T9000] __kasan_slab_free+0x102/0x150 [ 314.143305][ T9000] kasan_slab_free+0xe/0x10 [ 314.147786][ T9000] kfree+0x10a/0x2c0 [ 314.151659][ T9000] rxrpc_destroy_connection+0x1f2/0x2d0 [ 314.157181][ T9000] rcu_core+0x581/0x1560 [ 314.161407][ T9000] rcu_core_si+0x9/0x10 [ 314.165554][ T9000] __do_softirq+0x262/0x98c [ 314.170032][ T9000] [ 314.172362][ T9000] The buggy address belongs to the object at ffff88808888b6c0 [ 314.172362][ T9000] which belongs to the cache kmalloc-1k of size 1024 [ 314.186400][ T9000] The buggy address is located 592 bytes inside of [ 314.186400][ T9000] 1024-byte region [ffff88808888b6c0, ffff88808888bac0) [ 314.199745][ T9000] The buggy address belongs to the page: [ 314.205405][ T9000] page:ffffea0002222280 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0xffff88808888bb40 compound_mapcount: 0 [ 314.217634][ T9000] flags: 0x1fffc0000010200(slab|head) [ 314.222988][ T9000] raw: 01fffc0000010200 ffffea000220ae88 ffffea0002809108 ffff8880aa400c40 [ 314.231550][ T9000] raw: ffff88808888bb40 ffff88808888a040 0000000100000002 0000000000000000 [ 314.240111][ T9000] page dumped because: kasan: bad access detected [ 314.246507][ T9000] [ 314.248811][ T9000] Memory state around the buggy address: [ 314.254435][ T9000] ffff88808888b800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.262482][ T9000] ffff88808888b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.270536][ T9000] >ffff88808888b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.278578][ T9000] ^ [ 314.283145][ T9000] ffff88808888b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.291182][ T9000] ffff88808888ba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.299221][ T9000] ================================================================== [ 314.307271][ T9000] Disabling lock debugging due to kernel taint [ 314.316465][ T9000] Kernel panic - not syncing: panic_on_warn set ... [ 314.323078][ T9000] CPU: 0 PID: 9000 Comm: syz-executor.5 Tainted: G B 5.3.0+ #0 [ 314.331914][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.341965][ T9000] Call Trace: [ 314.345253][ T9000] dump_stack+0x172/0x1f0 [ 314.349582][ T9000] panic+0x2dc/0x755 [ 314.353473][ T9000] ? add_taint.cold+0x16/0x16 [ 314.358149][ T9000] ? rxrpc_release_call+0x973/0xaa0 [ 314.363342][ T9000] ? preempt_schedule+0x4b/0x60 [ 314.368193][ T9000] ? ___preempt_schedule+0x16/0x20 [ 314.373299][ T9000] ? trace_hardirqs_on+0x5e/0x240 [ 314.378034][ T3892] kobject: 'loop4' (000000007eef7f48): kobject_uevent_env [ 314.378320][ T9000] ? rxrpc_release_call+0x973/0xaa0 [ 314.390600][ T9000] end_report+0x47/0x4f [ 314.394752][ T9000] ? rxrpc_release_call+0x973/0xaa0 [ 314.399947][ T9000] __kasan_report.cold+0xe/0x41 [ 314.404800][ T9000] ? rxrpc_release_call+0x973/0xaa0 [ 314.409996][ T9000] kasan_report+0x12/0x20 [ 314.412924][ T3892] kobject: 'loop4' (000000007eef7f48): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 314.414319][ T9000] __asan_report_load8_noabort+0x14/0x20 [ 314.414337][ T9000] rxrpc_release_call+0x973/0xaa0 [ 314.435095][ T9000] ? rxrpc_release_calls_on_socket+0x6e7/0x1320 [ 314.441336][ T9000] rxrpc_release_calls_on_socket+0x6e7/0x1320 [ 314.447421][ T9000] ? rxrpc_discard_prealloc+0x664/0xf20 [ 314.452970][ T9000] ? rxrpc_release+0x238/0x550 [ 314.457732][ T9000] rxrpc_release+0x2a6/0x550 [ 314.462327][ T9000] __sock_release+0xce/0x280 [ 314.466919][ T9000] sock_close+0x1e/0x30 [ 314.471080][ T9000] __fput+0x2ff/0x890 [ 314.475063][ T9000] ? __sock_release+0x280/0x280 [ 314.479910][ T9000] ____fput+0x16/0x20 [ 314.481416][ T3892] kobject: 'loop3' (000000005c6f6ffe): kobject_uevent_env [ 314.483889][ T9000] task_work_run+0x145/0x1c0 [ 314.483912][ T9000] exit_to_usermode_loop+0x316/0x380 [ 314.500851][ T9000] do_syscall_64+0x65f/0x760 [ 314.502560][ T3892] kobject: 'loop3' (000000005c6f6ffe): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 314.505463][ T9000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.505472][ T9000] RIP: 0033:0x459a29 [ 314.505484][ T9000] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.505491][ T9000] RSP: 002b:00007f6e3d494c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 314.505502][ T9000] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000459a29 [ 314.505509][ T9000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 314.505516][ T9000] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.505522][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e3d4956d4 [ 314.505528][ T9000] R13: 00000000004f93d2 R14: 00000000004d1e00 R15: 00000000ffffffff [ 314.517131][ T9000] Kernel Offset: disabled [ 314.598929][ T9000] Rebooting in 86400 seconds..