[ 36.699908][ T26] audit: type=1800 audit(1563692359.253:22): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 50.183705][ T7433] IPVS: ftp: loaded support on port[0] = 21 [ 50.610787][ T7417] can: request_module (can-proto-0) failed. [ 51.568090][ T7417] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. 2019/07/21 06:59:41 parsed 1 programs 2019/07/21 06:59:42 executed programs: 0 [ 60.120629][ T7507] IPVS: ftp: loaded support on port[0] = 21 [ 60.129167][ T7509] IPVS: ftp: loaded support on port[0] = 21 [ 60.180929][ T7516] IPVS: ftp: loaded support on port[0] = 21 [ 60.182055][ T7514] IPVS: ftp: loaded support on port[0] = 21 [ 60.210763][ T7517] IPVS: ftp: loaded support on port[0] = 21 [ 60.224807][ T7513] IPVS: ftp: loaded support on port[0] = 21 [ 60.415822][ T7509] chnl_net:caif_netlink_parms(): no params data found [ 60.434044][ T7507] chnl_net:caif_netlink_parms(): no params data found [ 60.465958][ T7517] chnl_net:caif_netlink_parms(): no params data found [ 60.539146][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.546994][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.554951][ T7509] device bridge_slave_0 entered promiscuous mode [ 60.564610][ T7513] chnl_net:caif_netlink_parms(): no params data found [ 60.584832][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.591881][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.599901][ T7507] device bridge_slave_0 entered promiscuous mode [ 60.608880][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.616002][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.623781][ T7507] device bridge_slave_1 entered promiscuous mode [ 60.631042][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.638442][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.647512][ T7509] device bridge_slave_1 entered promiscuous mode [ 60.673417][ T7514] chnl_net:caif_netlink_parms(): no params data found [ 60.690710][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.698276][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.705799][ T7517] device bridge_slave_0 entered promiscuous mode [ 60.729791][ T7509] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.745699][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.753333][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.760756][ T7517] device bridge_slave_1 entered promiscuous mode [ 60.783707][ T7509] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.795165][ T7507] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.808146][ T7516] chnl_net:caif_netlink_parms(): no params data found [ 60.818618][ T7517] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.832733][ T7517] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.854112][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.861169][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.868868][ T7513] device bridge_slave_0 entered promiscuous mode [ 60.876927][ T7507] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.902034][ T7517] team0: Port device team_slave_0 added [ 60.908933][ T7517] team0: Port device team_slave_1 added [ 60.915229][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.922288][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.930725][ T7513] device bridge_slave_1 entered promiscuous mode [ 60.944840][ T7509] team0: Port device team_slave_0 added [ 60.957928][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.965193][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.972818][ T7514] device bridge_slave_0 entered promiscuous mode [ 60.980065][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.987211][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.997024][ T7514] device bridge_slave_1 entered promiscuous mode [ 61.015769][ T7509] team0: Port device team_slave_1 added [ 61.022267][ T7507] team0: Port device team_slave_0 added [ 61.034197][ T7507] team0: Port device team_slave_1 added [ 61.104711][ T7517] device hsr_slave_0 entered promiscuous mode [ 61.142764][ T7517] device hsr_slave_1 entered promiscuous mode [ 61.234968][ T7509] device hsr_slave_0 entered promiscuous mode [ 61.282739][ T7509] device hsr_slave_1 entered promiscuous mode [ 61.324449][ T7513] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.333998][ T7514] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.345452][ T7513] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.413871][ T7507] device hsr_slave_0 entered promiscuous mode [ 61.452752][ T7507] device hsr_slave_1 entered promiscuous mode [ 61.494117][ T7514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.507893][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.516186][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.523930][ T7516] device bridge_slave_0 entered promiscuous mode [ 61.547163][ T7513] team0: Port device team_slave_0 added [ 61.556305][ T7513] team0: Port device team_slave_1 added [ 61.562032][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.569316][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.577257][ T7516] device bridge_slave_1 entered promiscuous mode [ 61.600477][ T7514] team0: Port device team_slave_0 added [ 61.620074][ T7516] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.629758][ T7516] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.644666][ T7514] team0: Port device team_slave_1 added [ 61.683817][ T7513] device hsr_slave_0 entered promiscuous mode [ 61.753570][ T7513] device hsr_slave_1 entered promiscuous mode [ 61.840498][ T7516] team0: Port device team_slave_0 added [ 61.864134][ T7516] team0: Port device team_slave_1 added [ 61.924922][ T7514] device hsr_slave_0 entered promiscuous mode [ 61.972667][ T7514] device hsr_slave_1 entered promiscuous mode [ 62.134104][ T7516] device hsr_slave_0 entered promiscuous mode [ 62.172726][ T7516] device hsr_slave_1 entered promiscuous mode [ 62.259943][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.297141][ T7509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.329816][ T7517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.340959][ T7513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.352039][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.361055][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.371032][ T7507] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.383264][ T7509] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.397234][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.405535][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.413918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.422774][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.431153][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.438378][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.447304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.467715][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.481032][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 62.491109][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.500321][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.510475][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.517609][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.525817][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.534438][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.543029][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.550076][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.557801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.566412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.574142][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.582760][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.591057][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.598182][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.613032][ T7517] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.619899][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.628010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.636897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.645418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.654820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.664036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.676802][ T7513] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.721587][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.735151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.745710][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.757022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.767896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.779243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.789576][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.796809][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.804606][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.829999][ T7516] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.840714][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.848887][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.859536][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.868136][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.875209][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.883818][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.892253][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.900712][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.907811][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.915584][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.924134][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.932664][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.941001][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.949334][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.957897][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.966348][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.973962][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.981507][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.990532][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.998992][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.006033][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.014376][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.022274][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.037726][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.058829][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.067548][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.076688][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.087232][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.096018][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.105332][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.112459][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.120120][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.129025][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.137525][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.144609][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.152004][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.160441][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.168696][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.177148][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.185474][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.194007][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.211145][ T7513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.225200][ T7513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.239583][ T7509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.250859][ T7509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.267110][ T7514] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.276734][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.285373][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.293065][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.301377][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.309835][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.318690][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.327269][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.335805][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.344021][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.352143][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.360433][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.368878][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.377090][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.385715][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.394235][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.402520][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.410986][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.419212][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.427359][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.436103][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.444585][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.452040][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.459602][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.467961][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.476264][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.483339][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.491141][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.498908][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.506746][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.514712][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.525318][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.547632][ T7517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.558316][ T7517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.593287][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.601883][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.610842][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.621451][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.629626][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.637759][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.646490][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.654769][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.663119][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.671158][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.679368][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.687802][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.696147][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.703237][ T7525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.710661][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.719227][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.727877][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.736707][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.744894][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.753796][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.764238][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.771796][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.793825][ T7514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.804627][ T7514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.819361][ T7513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.829671][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.838635][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.847451][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.855904][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.864391][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.873921][ T7509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.893651][ T7516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.907885][ T7507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.935399][ T7517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.949552][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.083214][ T7555] ================================================================== [ 64.091378][ T7555] BUG: KASAN: slab-out-of-bounds in do_jit.isra.2+0x44c6/0x5770 [ 64.098994][ T7555] Read of size 4 at addr ffff8880a42813fc by task syz-executor.3/7555 [ 64.099000][ T7555] [ 64.099008][ T7555] CPU: 1 PID: 7555 Comm: syz-executor.3 Not tainted 5.2.0-rc2+ #1 [ 64.099012][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.099029][ T7555] Call Trace: [ 64.099044][ T7555] dump_stack+0x113/0x167 [ 64.099055][ T7555] print_address_description.cold.5+0x9/0x1ff [ 64.099061][ T7555] ? do_jit.isra.2+0x44c6/0x5770 [ 64.099067][ T7555] __kasan_report.cold.6+0x1b/0x39 [ 64.099071][ T7555] ? do_jit.isra.2+0x44c6/0x5770 [ 64.099080][ T7555] ? do_syscall_64+0x30/0x530 [ 64.099084][ T7555] ? do_jit.isra.2+0x44c6/0x5770 [ 64.099090][ T7555] kasan_report+0x12/0x20 [ 64.099096][ T7555] __asan_report_load4_noabort+0x14/0x20 [ 64.099101][ T7555] do_jit.isra.2+0x44c6/0x5770 [ 64.099107][ T7555] ? mark_held_locks+0x130/0x130 [ 64.099115][ T7555] ? debug_check_no_obj_freed+0x1ff/0x472 [ 64.099120][ T7555] ? lock_downgrade+0x860/0x860 [ 64.099130][ T7555] ? jit_fill_hole+0x20/0x20 [ 64.099135][ T7555] ? find_held_lock+0x36/0x1d0 [ 64.099157][ T7555] ? rcu_read_lock_sched_held+0x108/0x120 [ 64.099162][ T7555] ? __kmalloc+0x5ee/0x760 [ 64.099166][ T7555] ? kmem_cache_alloc_trace+0x353/0x740 [ 64.099172][ T7555] ? bpf_int_jit_compile+0x71e/0xb1c [ 64.099180][ T7555] bpf_int_jit_compile+0x2fd/0xb1c [ 64.099188][ T7555] ? do_jit.isra.2+0x5770/0x5770 [ 64.099206][ T7555] ? bpf_prog_load+0xa41/0x1210 [ 64.099210][ T7555] ? lockdep_hardirqs_on+0x424/0x5c0 [ 64.099215][ T7555] ? ktime_get_with_offset+0x1f4/0x2a0 [ 64.099222][ T7555] ? __bpf_prog_run64+0xd0/0xd0 [ 64.099226][ T7555] bpf_prog_select_runtime+0x43e/0x850 [ 64.099230][ T7555] ? bpf_obj_name_cpy+0x2b/0x220 [ 64.136083][ T7555] bpf_prog_load+0xaeb/0x1210 [ 64.136092][ T7555] ? bpf_prog_new_fd+0x30/0x30 [ 64.136099][ T7555] ? find_held_lock+0x36/0x1d0 [ 64.136120][ T7555] ? kasan_check_write+0x14/0x20 [ 64.147145][ T7555] __do_sys_bpf+0x9d4/0x33a0 [ 64.147154][ T7555] ? bpf_prog_load+0x1210/0x1210 [ 64.147164][ T7555] ? mark_held_locks+0x130/0x130 [ 64.147171][ T7555] ? find_held_lock+0x36/0x1d0 [ 64.147182][ T7555] ? __might_fault+0xf1/0x1b0 [ 64.147187][ T7555] ? lock_downgrade+0x860/0x860 [ 64.147207][ T7555] ? kasan_check_read+0x11/0x20 [ 64.147217][ T7555] ? _copy_to_user+0x91/0xb0 [ 64.166840][ T7555] ? put_timespec64+0xa9/0x100 [ 64.176751][ T7555] ? nsecs_to_jiffies+0x20/0x20 [ 64.176766][ T7555] ? do_syscall_64+0x21/0x530 [ 64.176774][ T7555] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.176784][ T7555] __x64_sys_bpf+0x6e/0xb0 [ 64.176790][ T7555] do_syscall_64+0xd0/0x530 [ 64.176798][ T7555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.268523][ T7555] RIP: 0033:0x459819 [ 64.277920][ T7555] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.277924][ T7555] RSP: 002b:00007fba57a6cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.277930][ T7555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 64.277934][ T7555] RDX: 0000000000000046 RSI: 0000000020000180 RDI: 0000000000000005 [ 64.277937][ T7555] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 64.277940][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fba57a6d6d4 [ 64.277946][ T7555] R13: 00000000004bfc7c R14: 00000000004d16d8 R15: 00000000ffffffff [ 64.354841][ T7555] [ 64.384177][ T7555] Allocated by task 1: [ 64.384196][ T7555] save_stack+0x21/0x90 [ 64.384202][ T7555] __kasan_kmalloc.constprop.8+0xc7/0xd0 [ 64.384206][ T7555] kasan_kmalloc+0x9/0x10 [ 64.384210][ T7555] __kmalloc_track_caller+0x159/0x750 [ 64.384216][ T7555] kstrdup+0x2c/0x60 [ 64.384221][ T7555] kstrdup_const+0x1f/0x30 [ 64.384227][ T7555] kvasprintf_const+0xce/0x140 [ 64.384233][ T7555] kobject_set_name_vargs+0x46/0x120 [ 64.384237][ T7555] kobject_init_and_add+0xa9/0x120 [ 64.384243][ T7555] bus_add_driver+0x1ca/0x4f0 [ 64.384247][ T7555] driver_register+0x18e/0x320 [ 64.384253][ T7555] acpi_bus_register_driver+0xf3/0x130 [ 64.384259][ T7555] crb_acpi_driver_init+0x10/0x12 [ 64.384266][ T7555] do_one_initcall+0xbc/0x545 [ 64.384272][ T7555] kernel_init_freeable+0x461/0x500 [ 64.384277][ T7555] kernel_init+0xc/0x107 [ 64.384282][ T7555] ret_from_fork+0x24/0x30 [ 64.384284][ T7555] [ 64.384287][ T7555] Freed by task 0: [ 64.384289][ T7555] (stack is not available) [ 64.384291][ T7555] [ 64.384296][ T7555] The buggy address belongs to the object at ffff8880a42813c0 [ 64.384296][ T7555] which belongs to the cache kmalloc-32 of size 32 [ 64.384300][ T7555] The buggy address is located 28 bytes to the right of [ 64.384300][ T7555] 32-byte region [ffff8880a42813c0, ffff8880a42813e0) [ 64.384302][ T7555] The buggy address belongs to the page: [ 64.384307][ T7555] page:ffffea000290a040 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff8880a4281fc1 [ 64.576862][ T7555] flags: 0x1fffc0000000200(slab) [ 64.581776][ T7555] raw: 01fffc0000000200 ffffea0002a90308 ffffea00028fba08 ffff8880aa4001c0 [ 64.590340][ T7555] raw: ffff8880a4281fc1 ffff8880a4281000 000000010000003f 0000000000000000 [ 64.598905][ T7555] page dumped because: kasan: bad access detected [ 64.605298][ T7555] [ 64.607605][ T7555] Memory state around the buggy address: [ 64.613223][ T7555] ffff8880a4281280: 00 00 fc fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 64.621267][ T7555] ffff8880a4281300: 00 00 fc fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 64.629314][ T7555] >ffff8880a4281380: fb fb fb fb fc fc fc fc 00 fc fc fc fc fc fc fc [ 64.637358][ T7555] ^ [ 64.645337][ T7555] ffff8880a4281400: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 64.653384][ T7555] ffff8880a4281480: fb fb fb fb fc fc fc fc 07 fc fc fc fc fc fc fc [ 64.661477][ T7555] ================================================================== [ 64.669512][ T7555] Disabling lock debugging due to kernel taint [ 64.688267][ T7555] Kernel panic - not syncing: panic_on_warn set ... [ 64.694878][ T7555] CPU: 0 PID: 7555 Comm: syz-executor.3 Tainted: G B 5.2.0-rc2+ #1 [ 64.704062][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.714102][ T7555] Call Trace: [ 64.717378][ T7555] dump_stack+0x113/0x167 [ 64.721688][ T7555] ? do_jit.isra.2+0x44c0/0x5770 [ 64.726623][ T7555] panic+0x212/0x4cb [ 64.730500][ T7555] ? __warn_printk+0xd6/0xd6 [ 64.735162][ T7555] ? ___preempt_schedule+0x16/0x18 [ 64.740260][ T7555] ? do_jit.isra.2+0x44c6/0x5770 [ 64.745208][ T7555] end_report+0x47/0x4f [ 64.749344][ T7555] __kasan_report.cold.6+0xe/0x39 [ 64.754342][ T7555] ? do_jit.isra.2+0x44c6/0x5770 [ 64.759260][ T7555] ? do_syscall_64+0x30/0x530 [ 64.763922][ T7555] ? do_jit.isra.2+0x44c6/0x5770 [ 64.768842][ T7555] kasan_report+0x12/0x20 [ 64.773159][ T7555] __asan_report_load4_noabort+0x14/0x20 [ 64.778768][ T7555] do_jit.isra.2+0x44c6/0x5770 [ 64.783505][ T7555] ? mark_held_locks+0x130/0x130 [ 64.788415][ T7555] ? debug_check_no_obj_freed+0x1ff/0x472 [ 64.794222][ T7555] ? lock_downgrade+0x860/0x860 [ 64.799154][ T7555] ? jit_fill_hole+0x20/0x20 [ 64.803725][ T7555] ? find_held_lock+0x36/0x1d0 [ 64.808485][ T7555] ? rcu_read_lock_sched_held+0x108/0x120 [ 64.814186][ T7555] ? __kmalloc+0x5ee/0x760 [ 64.818575][ T7555] ? kmem_cache_alloc_trace+0x353/0x740 [ 64.824100][ T7555] ? bpf_int_jit_compile+0x71e/0xb1c [ 64.829368][ T7555] bpf_int_jit_compile+0x2fd/0xb1c [ 64.834463][ T7555] ? do_jit.isra.2+0x5770/0x5770 [ 64.839388][ T7555] ? bpf_prog_load+0xa41/0x1210 [ 64.844219][ T7555] ? lockdep_hardirqs_on+0x424/0x5c0 [ 64.849490][ T7555] ? ktime_get_with_offset+0x1f4/0x2a0 [ 64.854931][ T7555] ? __bpf_prog_run64+0xd0/0xd0 [ 64.859754][ T7555] bpf_prog_select_runtime+0x43e/0x850 [ 64.865193][ T7555] ? bpf_obj_name_cpy+0x2b/0x220 [ 64.870121][ T7555] bpf_prog_load+0xaeb/0x1210 [ 64.874769][ T7555] ? bpf_prog_new_fd+0x30/0x30 [ 64.879506][ T7555] ? find_held_lock+0x36/0x1d0 [ 64.884267][ T7555] ? kasan_check_write+0x14/0x20 [ 64.889177][ T7555] __do_sys_bpf+0x9d4/0x33a0 [ 64.893746][ T7555] ? bpf_prog_load+0x1210/0x1210 [ 64.898680][ T7555] ? mark_held_locks+0x130/0x130 [ 64.903613][ T7555] ? find_held_lock+0x36/0x1d0 [ 64.908357][ T7555] ? __might_fault+0xf1/0x1b0 [ 64.913017][ T7555] ? lock_downgrade+0x860/0x860 [ 64.917853][ T7555] ? kasan_check_read+0x11/0x20 [ 64.922703][ T7555] ? _copy_to_user+0x91/0xb0 [ 64.927275][ T7555] ? put_timespec64+0xa9/0x100 [ 64.932023][ T7555] ? nsecs_to_jiffies+0x20/0x20 [ 64.936865][ T7555] ? do_syscall_64+0x21/0x530 [ 64.941527][ T7555] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.947587][ T7555] __x64_sys_bpf+0x6e/0xb0 [ 64.951989][ T7555] do_syscall_64+0xd0/0x530 [ 64.956491][ T7555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.966529][ T7555] RIP: 0033:0x459819 [ 64.970401][ T7555] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.989984][ T7555] RSP: 002b:00007fba57a6cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.998378][ T7555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 65.006770][ T7555] RDX: 0000000000000046 RSI: 0000000020000180 RDI: 0000000000000005 [ 65.014725][ T7555] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 65.022697][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fba57a6d6d4 [ 65.030665][ T7555] R13: 00000000004bfc7c R14: 00000000004d16d8 R15: 00000000ffffffff [ 65.039598][ T7555] Kernel Offset: disabled [ 65.043918][ T7555] Rebooting in 86400 seconds..