[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 50.168756][ T7718] IPVS: ftp: loaded support on port[0] = 21 [ 50.466453][ T28] tipc: TX() has been purged, node left! [ 50.665378][ T7704] can: request_module (can-proto-0) failed. [ 53.638952][ T7704] can: request_module (can-proto-0) failed. [ 53.650404][ T7704] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.10.25' (ECDSA) to the list of known hosts. 2020/01/14 02:39:52 parsed 1 programs 2020/01/14 02:39:53 executed programs: 0 [ 61.195668][ T7797] IPVS: ftp: loaded support on port[0] = 21 [ 61.200976][ T7801] IPVS: ftp: loaded support on port[0] = 21 [ 61.203295][ T7793] IPVS: ftp: loaded support on port[0] = 21 [ 61.219276][ T7794] IPVS: ftp: loaded support on port[0] = 21 [ 61.219813][ T7802] IPVS: ftp: loaded support on port[0] = 21 [ 61.235593][ T7800] IPVS: ftp: loaded support on port[0] = 21 [ 61.467591][ T7800] chnl_net:caif_netlink_parms(): no params data found [ 61.495613][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 61.506846][ T7802] chnl_net:caif_netlink_parms(): no params data found [ 61.519031][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 61.555426][ T7801] chnl_net:caif_netlink_parms(): no params data found [ 61.624636][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.632333][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.640511][ T7793] device bridge_slave_0 entered promiscuous mode [ 61.652939][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.660102][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.667908][ T7793] device bridge_slave_1 entered promiscuous mode [ 61.675238][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.682525][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.690729][ T7800] device bridge_slave_0 entered promiscuous mode [ 61.701815][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.709255][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.717632][ T7800] device bridge_slave_1 entered promiscuous mode [ 61.730388][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.737598][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.745112][ T7802] device bridge_slave_0 entered promiscuous mode [ 61.753160][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.760767][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.768403][ T7797] device bridge_slave_0 entered promiscuous mode [ 61.792764][ T7794] chnl_net:caif_netlink_parms(): no params data found [ 61.801734][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.808824][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.816486][ T7802] device bridge_slave_1 entered promiscuous mode [ 61.827664][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.834716][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.843056][ T7797] device bridge_slave_1 entered promiscuous mode [ 61.863794][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.871305][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.881506][ T7801] device bridge_slave_0 entered promiscuous mode [ 61.890031][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.902867][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.929535][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.938847][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.945884][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.953989][ T7801] device bridge_slave_1 entered promiscuous mode [ 61.968991][ T7802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.979630][ T7797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.992181][ T7800] team0: Port device team_slave_0 added [ 61.999147][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.018695][ T7802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.030376][ T7797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.040574][ T7800] team0: Port device team_slave_1 added [ 62.064397][ T7797] team0: Port device team_slave_0 added [ 62.071702][ T7801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.138090][ T7800] device hsr_slave_0 entered promiscuous mode [ 62.196844][ T7800] device hsr_slave_1 entered promiscuous mode [ 62.251726][ T7793] team0: Port device team_slave_0 added [ 62.260221][ T7793] team0: Port device team_slave_1 added [ 62.267083][ T7797] team0: Port device team_slave_1 added [ 62.279239][ T7801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.308643][ T7802] team0: Port device team_slave_0 added [ 62.320421][ T7802] team0: Port device team_slave_1 added [ 62.334308][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.342861][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.351508][ T7794] device bridge_slave_0 entered promiscuous mode [ 62.398013][ T7793] device hsr_slave_0 entered promiscuous mode [ 62.446618][ T7793] device hsr_slave_1 entered promiscuous mode [ 62.536609][ T7793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.544367][ T7793] Cannot create hsr debugfs directory [ 62.619003][ T7802] device hsr_slave_0 entered promiscuous mode [ 62.666736][ T7802] device hsr_slave_1 entered promiscuous mode [ 62.716519][ T7802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.724114][ T7802] Cannot create hsr debugfs directory [ 62.729797][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.736921][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.744465][ T7794] device bridge_slave_1 entered promiscuous mode [ 62.808859][ T7797] device hsr_slave_0 entered promiscuous mode [ 62.847571][ T7797] device hsr_slave_1 entered promiscuous mode [ 62.896662][ T7797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.904248][ T7797] Cannot create hsr debugfs directory [ 62.911620][ T7801] team0: Port device team_slave_0 added [ 62.919321][ T7801] team0: Port device team_slave_1 added [ 62.957864][ T7800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.050367][ T7794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.061468][ T7794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.071482][ T7800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.121897][ T7800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.238977][ T7801] device hsr_slave_0 entered promiscuous mode [ 63.266778][ T7801] device hsr_slave_1 entered promiscuous mode [ 63.326505][ T7801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.334103][ T7801] Cannot create hsr debugfs directory [ 63.354461][ T7802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.408622][ T7802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.448365][ T7793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.488745][ T7793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.548544][ T7800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.602999][ T7794] team0: Port device team_slave_0 added [ 63.609826][ T7802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.648592][ T7793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.703819][ T7793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.763322][ T7797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.799510][ T7794] team0: Port device team_slave_1 added [ 63.811965][ T7802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.872357][ T7797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.990617][ T7794] device hsr_slave_0 entered promiscuous mode [ 64.046755][ T7794] device hsr_slave_1 entered promiscuous mode [ 64.096593][ T7794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.104256][ T7794] Cannot create hsr debugfs directory [ 64.113148][ T7797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.170499][ T7797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.228091][ T7801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.301464][ T7801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.383663][ T7801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.455948][ T7794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.497783][ T7801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.549475][ T7794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.593680][ T7794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.652082][ T7794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.751013][ T7800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.787946][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.803531][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.813922][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.822492][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.831235][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.841350][ T7800] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.854228][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.882925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.892036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.901801][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.909099][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.918439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.944852][ T7802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.961147][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.970780][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.979472][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.986554][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.993976][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.002638][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.011182][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.018270][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.025830][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.034641][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.042968][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.050033][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.057525][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.066206][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.087228][ T7794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.099597][ T7801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.122235][ T7802] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.142483][ T7794] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.150959][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.160225][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.170836][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.179137][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.188024][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.196157][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.204137][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.211809][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.220578][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.229281][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.237198][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.244726][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.253312][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.262105][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.270149][ T2565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.280519][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.302720][ T7797] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.312720][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.322276][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.331434][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.339967][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.348900][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.357819][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.365903][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.374358][ T2564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.384288][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.401266][ T7801] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.414462][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.422640][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.433462][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.442335][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.453562][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.460653][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.468494][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.477012][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.485204][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.492291][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.499730][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.509026][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.517382][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.524404][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.555567][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.563641][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.575400][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.584063][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.592725][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.599803][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.608240][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.616483][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.624610][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.633350][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.641971][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.649065][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.656586][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.664946][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.673634][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.681973][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.689045][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.697047][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.705575][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.714007][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.722906][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.731746][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.740126][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.748481][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.755517][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.763208][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.771864][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.780070][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.788229][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.819220][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.832319][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.840899][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.852197][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.864007][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.873309][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.881351][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.889950][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.898158][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.906238][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.914504][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.923052][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.931443][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.940136][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.948929][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.957722][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.965876][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.974350][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.982580][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.991215][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.999517][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.006587][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.014551][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.022384][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.030509][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.044109][ T7797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.056674][ T7797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.076132][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.088591][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.097268][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.105385][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.114045][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.122961][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.151078][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.160285][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.169014][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.177896][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.185916][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.194344][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.202757][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.210641][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.218073][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.225432][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.236805][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.245204][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.253417][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.261716][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.275238][ T7797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.295631][ T7801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.307100][ T7801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.321585][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.330887][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.343570][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.352419][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.361913][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.370638][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.381069][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.389514][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.397676][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.405019][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.416473][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.439287][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.447368][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.454749][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.466894][ T7802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.475161][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.497365][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.534934][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.559791][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 2020/01/14 02:39:59 executed programs: 6 2020/01/14 02:40:04 executed programs: 147 2020/01/14 02:40:09 executed programs: 309 2020/01/14 02:40:14 executed programs: 453 [ 83.453778][T11370] ================================================================== [ 83.461994][T11370] BUG: KASAN: stack-out-of-bounds in ax25_getname+0x4d/0x7b0 [ 83.469339][T11370] Write of size 72 at addr ffff88808efffc78 by task syz-executor.5/11370 [ 83.477724][T11370] [ 83.480034][T11370] CPU: 0 PID: 11370 Comm: syz-executor.5 Not tainted 5.5.0-rc6-syzkaller #0 [ 83.488679][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.498728][T11370] Call Trace: [ 83.502000][T11370] dump_stack+0x12d/0x187 [ 83.506316][T11370] print_address_description.constprop.8.cold.10+0x9/0x31d [ 83.513504][T11370] ? ax25_getname+0x4d/0x7b0 [ 83.518072][T11370] __kasan_report.cold.11+0x1b/0x3a [ 83.523246][T11370] ? ax25_getname+0x4d/0x7b0 [ 83.527831][T11370] ? ax25_getname+0x4d/0x7b0 [ 83.532399][T11370] kasan_report+0x12/0x20 [ 83.536717][T11370] check_memory_region+0x153/0x1d0 [ 83.541816][T11370] memset+0x23/0x40 [ 83.545612][T11370] ax25_getname+0x4d/0x7b0 [ 83.550026][T11370] vhost_net_ioctl+0xe74/0x1530 [ 83.554865][T11370] ? handle_tx_kick+0x40/0x40 [ 83.559513][T11370] ? tomoyo_execute_permission+0x460/0x460 [ 83.565293][T11370] ? find_held_lock+0x36/0x1d0 [ 83.570049][T11370] ? __fget+0x294/0x410 [ 83.574178][T11370] do_vfs_ioctl+0x196/0x1190 [ 83.578753][T11370] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 83.584458][T11370] ? smack_file_ioctl+0x24c/0x2c0 [ 83.589458][T11370] ? nsecs_to_jiffies+0x20/0x20 [ 83.594297][T11370] ? tomoyo_file_ioctl+0x14/0x20 [ 83.599211][T11370] ksys_ioctl+0x62/0x90 [ 83.603336][T11370] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 83.608593][T11370] __x64_sys_ioctl+0x6e/0xb0 [ 83.613156][T11370] do_syscall_64+0xca/0x5f0 [ 83.617633][T11370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.623511][T11370] RIP: 0033:0x45a639 [ 83.627385][T11370] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 83.646981][T11370] RSP: 002b:00007fbdd8fdec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.655374][T11370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 83.663353][T11370] RDX: 0000000020d7c000 RSI: 000000004008af30 RDI: 0000000000000003 [ 83.671305][T11370] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 83.679258][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbdd8fdf6d4 [ 83.687293][T11370] R13: 00000000004c5b18 R14: 00000000004dab78 R15: 00000000ffffffff [ 83.695245][T11370] [ 83.697593][T11370] The buggy address belongs to the page: [ 83.703194][T11370] page:ffffea00023bffc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 83.712272][T11370] raw: 01fffc0000000000 0000000000000000 ffffffff023b0101 0000000000000000 [ 83.720939][T11370] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.729498][T11370] page dumped because: kasan: bad access detected [ 83.735934][T11370] [ 83.738241][T11370] addr ffff88808efffc78 is located in stack of task syz-executor.5/11370 at offset 160 in frame: [ 83.748719][T11370] vhost_net_ioctl+0x0/0x1530 [ 83.753386][T11370] [ 83.755687][T11370] this frame has 3 objects: [ 83.760160][T11370] [32, 36) 'r' [ 83.760162][T11370] [96, 104) 'backend' [ 83.763591][T11370] [160, 212) 'uaddr' [ 83.767627][T11370] [ 83.773900][T11370] Memory state around the buggy address: [ 83.779528][T11370] ffff88808efffb80: 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 04 [ 83.787569][T11370] ffff88808efffc00: f2 f2 f2 f2 f2 f2 f2 00 f2 f2 f2 f2 f2 f2 f2 00 [ 83.795604][T11370] >ffff88808efffc80: 00 00 00 00 00 04 f2 00 00 00 00 00 00 00 00 00 [ 83.803666][T11370] ^ [ 83.809008][T11370] ffff88808efffd00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 [ 83.817073][T11370] ffff88808efffd80: f2 f2 f2 f2 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 [ 83.825128][T11370] ================================================================== [ 83.833188][T11370] Disabling lock debugging due to kernel taint [ 83.840776][T11370] Kernel panic - not syncing: panic_on_warn set ... [ 83.847450][T11370] CPU: 0 PID: 11370 Comm: syz-executor.5 Tainted: G B 5.5.0-rc6-syzkaller #0 [ 83.857486][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.867526][T11370] Call Trace: [ 83.870840][T11370] dump_stack+0x12d/0x187 [ 83.875263][T11370] ? ax25_getname+0x10/0x7b0 [ 83.879832][T11370] panic+0x22a/0x4e3 [ 83.883700][T11370] ? add_taint.cold.7+0x11/0x11 [ 83.888528][T11370] ? ___preempt_schedule+0x16/0x18 [ 83.893627][T11370] ? ax25_getname+0x4d/0x7b0 [ 83.898188][T11370] end_report+0x47/0x4f [ 83.902344][T11370] __kasan_report.cold.11+0xe/0x3a [ 83.907426][T11370] ? ax25_getname+0x4d/0x7b0 [ 83.911985][T11370] ? ax25_getname+0x4d/0x7b0 [ 83.916640][T11370] kasan_report+0x12/0x20 [ 83.920940][T11370] check_memory_region+0x153/0x1d0 [ 83.926030][T11370] memset+0x23/0x40 [ 83.929816][T11370] ax25_getname+0x4d/0x7b0 [ 83.934203][T11370] vhost_net_ioctl+0xe74/0x1530 [ 83.939035][T11370] ? handle_tx_kick+0x40/0x40 [ 83.943688][T11370] ? tomoyo_execute_permission+0x460/0x460 [ 83.949474][T11370] ? find_held_lock+0x36/0x1d0 [ 83.954208][T11370] ? __fget+0x294/0x410 [ 83.958332][T11370] do_vfs_ioctl+0x196/0x1190 [ 83.962904][T11370] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 83.968630][T11370] ? smack_file_ioctl+0x24c/0x2c0 [ 83.973626][T11370] ? nsecs_to_jiffies+0x20/0x20 [ 83.978449][T11370] ? tomoyo_file_ioctl+0x14/0x20 [ 83.983375][T11370] ksys_ioctl+0x62/0x90 [ 83.987520][T11370] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 83.992774][T11370] __x64_sys_ioctl+0x6e/0xb0 [ 83.997331][T11370] do_syscall_64+0xca/0x5f0 [ 84.001805][T11370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.007675][T11370] RIP: 0033:0x45a639 [ 84.011539][T11370] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 84.031117][T11370] RSP: 002b:00007fbdd8fdec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.039543][T11370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 84.047488][T11370] RDX: 0000000020d7c000 RSI: 000000004008af30 RDI: 0000000000000003 [ 84.055431][T11370] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 84.063378][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbdd8fdf6d4 [ 84.071340][T11370] R13: 00000000004c5b18 R14: 00000000004dab78 R15: 00000000ffffffff [ 84.080485][T11370] Kernel Offset: disabled [ 84.084804][T11370] Rebooting in 86400 seconds..