[ 55.627578][ T26] audit: type=1800 audit(1558528391.017:25): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.656522][ T26] audit: type=1800 audit(1558528391.017:26): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.714385][ T26] audit: type=1800 audit(1558528391.017:27): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.15' (ECDSA) to the list of known hosts. 2019/05/22 12:33:43 parsed 1 programs 2019/05/22 12:33:45 executed programs: 0 syzkaller login: [ 90.125401][ T8727] IPVS: ftp: loaded support on port[0] = 21 [ 90.125431][ T8733] IPVS: ftp: loaded support on port[0] = 21 [ 90.141483][ T8729] IPVS: ftp: loaded support on port[0] = 21 [ 90.161201][ T8732] IPVS: ftp: loaded support on port[0] = 21 [ 90.162429][ T8736] IPVS: ftp: loaded support on port[0] = 21 [ 90.191421][ T8735] IPVS: ftp: loaded support on port[0] = 21 [ 90.369695][ T8729] chnl_net:caif_netlink_parms(): no params data found [ 90.448925][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 90.483235][ T8729] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.491191][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.499422][ T8729] device bridge_slave_0 entered promiscuous mode [ 90.512089][ T8729] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.519302][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.527505][ T8729] device bridge_slave_1 entered promiscuous mode [ 90.630375][ T8729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.684967][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.692784][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.700644][ T8733] device bridge_slave_0 entered promiscuous mode [ 90.708707][ T8732] chnl_net:caif_netlink_parms(): no params data found [ 90.719629][ T8729] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.733827][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 90.750327][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 90.759289][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.766652][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.774506][ T8733] device bridge_slave_1 entered promiscuous mode [ 90.818136][ T8729] team0: Port device team_slave_0 added [ 90.825351][ T8733] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.834770][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 90.861236][ T8729] team0: Port device team_slave_1 added [ 90.868806][ T8733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.897878][ T8733] team0: Port device team_slave_0 added [ 90.919425][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.926803][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.934666][ T8727] device bridge_slave_0 entered promiscuous mode [ 90.945510][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.954116][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.962130][ T8727] device bridge_slave_1 entered promiscuous mode [ 90.980188][ T8733] team0: Port device team_slave_1 added [ 90.995449][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.003733][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.011937][ T8732] device bridge_slave_0 entered promiscuous mode [ 91.020225][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.027419][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.035124][ T8732] device bridge_slave_1 entered promiscuous mode [ 91.047515][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.054611][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.064234][ T8736] device bridge_slave_0 entered promiscuous mode [ 91.073164][ T8727] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.113602][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.121022][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.129024][ T8736] device bridge_slave_1 entered promiscuous mode [ 91.137044][ T8727] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.152921][ T8732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.210933][ T8729] device hsr_slave_0 entered promiscuous mode [ 91.267014][ T8729] device hsr_slave_1 entered promiscuous mode [ 91.368423][ T8733] device hsr_slave_0 entered promiscuous mode [ 91.406788][ T8733] device hsr_slave_1 entered promiscuous mode [ 91.478677][ T8732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.492163][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.500829][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.508890][ T8735] device bridge_slave_0 entered promiscuous mode [ 91.517663][ T8736] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.526014][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.533132][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.541851][ T8735] device bridge_slave_1 entered promiscuous mode [ 91.574975][ T8736] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.596935][ T8727] team0: Port device team_slave_0 added [ 91.617932][ T8732] team0: Port device team_slave_0 added [ 91.633247][ T8735] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.645293][ T8735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.655560][ T8727] team0: Port device team_slave_1 added [ 91.663309][ T8736] team0: Port device team_slave_0 added [ 91.671185][ T8732] team0: Port device team_slave_1 added [ 91.698647][ T8736] team0: Port device team_slave_1 added [ 91.723596][ T8735] team0: Port device team_slave_0 added [ 91.735153][ T8735] team0: Port device team_slave_1 added [ 91.790004][ T8732] device hsr_slave_0 entered promiscuous mode [ 91.856946][ T8732] device hsr_slave_1 entered promiscuous mode [ 91.969562][ T8727] device hsr_slave_0 entered promiscuous mode [ 92.006987][ T8727] device hsr_slave_1 entered promiscuous mode [ 92.089445][ T8736] device hsr_slave_0 entered promiscuous mode [ 92.146883][ T8736] device hsr_slave_1 entered promiscuous mode [ 92.260647][ T8735] device hsr_slave_0 entered promiscuous mode [ 92.317113][ T8735] device hsr_slave_1 entered promiscuous mode [ 92.408597][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.443339][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.464553][ T8733] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.492292][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.501598][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.529825][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.537870][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.549142][ T8729] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.576580][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.585371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.594383][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.601645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.610660][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.620185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.628746][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.635961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.643681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.654053][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.664733][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.679106][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.693449][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.704559][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.713849][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.725227][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.734429][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.751791][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.758914][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.772753][ T8733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.783316][ T8733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.801207][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.811409][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.826374][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.836167][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.844195][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.853020][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.861742][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.871417][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.880624][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.889409][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.898378][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.907083][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.915438][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.922882][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.930675][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.939201][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.950025][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.972485][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.981079][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.993496][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.001887][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.010169][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.019199][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.028218][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.035614][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.043717][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.052270][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.061425][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.069187][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.077705][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.092799][ T8732] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.115150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.124092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.135499][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.142625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.151118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.160007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.170110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.177205][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.185105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.194023][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.202482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.209593][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.217698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.226205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.234936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.243470][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.253160][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.261349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.269404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.277511][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.286003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.294972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.302092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.330937][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.339632][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.348946][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.358740][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.367584][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.378111][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.386655][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.394923][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.403672][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.417957][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.434434][ T8727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.448593][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.474787][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.483742][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.493077][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.500191][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.510189][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.519238][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.528434][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.536135][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.545362][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.554315][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.563140][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.572215][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.581193][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.590047][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.598715][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.608039][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.616379][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.625041][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.640681][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.648787][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.657791][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.665952][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.675684][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.684734][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.704838][ T8736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.725728][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.735116][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.744215][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.751516][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.759737][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.768337][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.777308][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.785584][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.794137][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.802909][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.811901][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.819088][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.827221][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.835727][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.845145][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.863959][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.873162][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.930630][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.940806][ T8732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.986502][ T8732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.010452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.023542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.033842][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.042673][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.051391][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.059902][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.068314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.077218][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.106301][ T8735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.119356][ T8735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.146173][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.160651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.171020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.180988][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.190101][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.198661][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.207517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.215880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.224749][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.235614][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.256153][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.381454][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/05/22 12:33:50 executed programs: 26 2019/05/22 12:33:55 executed programs: 210 2019/05/22 12:34:00 executed programs: 380 2019/05/22 12:34:05 executed programs: 554 2019/05/22 12:34:10 executed programs: 744 2019/05/22 12:34:15 executed programs: 930 2019/05/22 12:34:20 executed programs: 1117 2019/05/22 12:34:25 executed programs: 1297 2019/05/22 12:34:30 executed programs: 1471 2019/05/22 12:34:35 executed programs: 1647 2019/05/22 12:34:40 executed programs: 1825 2019/05/22 12:34:45 executed programs: 2002 2019/05/22 12:34:50 executed programs: 2173 2019/05/22 12:34:55 executed programs: 2340 2019/05/22 12:35:00 executed programs: 2510 2019/05/22 12:35:05 executed programs: 2682 2019/05/22 12:35:10 executed programs: 2859 2019/05/22 12:35:15 executed programs: 3023 2019/05/22 12:35:20 executed programs: 3186 2019/05/22 12:35:25 executed programs: 3355 2019/05/22 12:35:30 executed programs: 3524 2019/05/22 12:35:35 executed programs: 3688 2019/05/22 12:35:40 executed programs: 3855 2019/05/22 12:35:45 executed programs: 4014 2019/05/22 12:35:50 executed programs: 4175 2019/05/22 12:35:55 executed programs: 4353 [ 223.166789][T26193] ================================================================== [ 223.175074][T26193] BUG: KASAN: use-after-free in sk_psock_unlink+0x443/0x4b0 [ 223.182351][T26193] Read of size 8 at addr ffff88808b760600 by task syz-executor.5/26193 [ 223.182360][T26193] [ 223.182374][T26193] CPU: 1 PID: 26193 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #1 [ 223.182381][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.182385][T26193] Call Trace: [ 223.182402][T26193] dump_stack+0x172/0x1f0 [ 223.182414][T26193] ? sk_psock_unlink+0x443/0x4b0 [ 223.182429][T26193] ? tcp_check_oom+0x560/0x560 [ 223.182443][T26193] print_address_description.cold+0x7c/0x20d [ 223.182454][T26193] ? sk_psock_unlink+0x443/0x4b0 [ 223.182466][T26193] ? sk_psock_unlink+0x443/0x4b0 [ 223.182479][T26193] ? tcp_check_oom+0x560/0x560 [ 223.182491][T26193] __kasan_report.cold+0x1b/0x40 [ 223.182504][T26193] ? sk_psock_unlink+0x443/0x4b0 [ 223.182524][T26193] kasan_report+0x12/0x20 [ 223.182536][T26193] __asan_report_load8_noabort+0x14/0x20 [ 223.182545][T26193] sk_psock_unlink+0x443/0x4b0 [ 223.182554][T26193] ? sk_psock_link_pop+0x186/0x1f0 [ 223.182565][T26193] ? tcp_check_oom+0x560/0x560 [ 223.182578][T26193] tcp_bpf_remove+0x21/0x50 [ 223.289791][T26193] tcp_bpf_close+0x130/0x390 [ 223.294401][T26193] inet_release+0xff/0x1e0 [ 223.298841][T26193] inet6_release+0x53/0x80 [ 223.303276][T26193] __sock_release+0xce/0x2a0 [ 223.308154][T26193] sock_close+0x1b/0x30 [ 223.312326][T26193] __fput+0x2ff/0x890 [ 223.316319][T26193] ? __sock_release+0x2a0/0x2a0 [ 223.321360][T26193] ____fput+0x16/0x20 [ 223.325356][T26193] task_work_run+0x145/0x1c0 [ 223.329968][T26193] exit_to_usermode_loop+0x273/0x2c0 [ 223.335286][T26193] do_syscall_64+0x58e/0x680 [ 223.339918][T26193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.339929][T26193] RIP: 0033:0x412f61 [ 223.339942][T26193] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 223.339948][T26193] RSP: 002b:00007ffdbbd18870 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 223.339958][T26193] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f61 [ 223.339965][T26193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 223.339972][T26193] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 223.339979][T26193] R10: 00007ffdbbd18950 R11: 0000000000000293 R12: 00000000007610a8 [ 223.339986][T26193] R13: 0000000000036769 R14: 0000000000036796 R15: 000000000075bfcc [ 223.340002][T26193] [ 223.340009][T26193] Allocated by task 26195: [ 223.340022][T26193] save_stack+0x23/0x90 [ 223.340032][T26193] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 223.340041][T26193] kasan_kmalloc+0x9/0x10 [ 223.340052][T26193] kmem_cache_alloc_trace+0x151/0x750 [ 223.340061][T26193] sock_hash_alloc+0x1e3/0x5b0 [ 223.340077][T26193] __do_sys_bpf+0x730/0x43d0 [ 223.455370][T26193] __x64_sys_bpf+0x73/0xb0 [ 223.459821][T26193] do_syscall_64+0xfd/0x680 [ 223.464334][T26193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.464343][T26193] [ 223.472576][T26193] Freed by task 8823: [ 223.476573][T26193] save_stack+0x23/0x90 [ 223.480854][T26193] __kasan_slab_free+0x102/0x150 [ 223.485802][T26193] kasan_slab_free+0xe/0x10 [ 223.485814][T26193] kfree+0xcf/0x220 [ 223.485826][T26193] sock_hash_free+0x327/0x4a0 [ 223.485842][T26193] bpf_map_free_deferred+0xb4/0xe0 [ 223.485861][T26193] process_one_work+0x989/0x1790 [ 223.509379][T26193] worker_thread+0x98/0xe40 [ 223.514010][T26193] kthread+0x354/0x420 [ 223.518109][T26193] ret_from_fork+0x24/0x30 [ 223.522525][T26193] [ 223.524873][T26193] The buggy address belongs to the object at ffff88808b760500 [ 223.524873][T26193] which belongs to the cache kmalloc-512 of size 512 [ 223.538939][T26193] The buggy address is located 256 bytes inside of [ 223.538939][T26193] 512-byte region [ffff88808b760500, ffff88808b760700) [ 223.552472][T26193] The buggy address belongs to the page: [ 223.552494][T26193] page:ffffea00022dd800 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0xffff88808b760a00 [ 223.552507][T26193] flags: 0x1fffc0000000200(slab) [ 223.552525][T26193] raw: 01fffc0000000200 ffffea00029e2508 ffffea00023ff008 ffff8880aa400940 [ 223.552542][T26193] raw: ffff88808b760a00 ffff88808b760000 0000000100000002 0000000000000000 [ 223.591275][T26193] page dumped because: kasan: bad access detected [ 223.591281][T26193] [ 223.591285][T26193] Memory state around the buggy address: [ 223.591298][T26193] ffff88808b760500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.591309][T26193] ffff88808b760580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.591319][T26193] >ffff88808b760600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.591325][T26193] ^ [ 223.591334][T26193] ffff88808b760680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.591347][T26193] ffff88808b760700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.650731][T26193] ================================================================== [ 223.658899][T26193] Disabling lock debugging due to kernel taint [ 223.683896][T26193] Kernel panic - not syncing: panic_on_warn set ... [ 223.690544][T26193] CPU: 1 PID: 26193 Comm: syz-executor.5 Tainted: G B 5.2.0-rc1+ #1 [ 223.699829][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.707350][ T3878] kobject: 'loop1' (00000000492ae9e5): kobject_uevent_env [ 223.713567][T26193] Call Trace: [ 223.724762][T26193] dump_stack+0x172/0x1f0 [ 223.729226][T26193] ? tcp_check_oom+0x560/0x560 [ 223.732003][ T3878] kobject: 'loop1' (00000000492ae9e5): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 223.734006][T26193] panic+0x2cb/0x744 [ 223.734021][T26193] ? __warn_printk+0xf3/0xf3 [ 223.734038][T26193] ? sk_psock_unlink+0x443/0x4b0 [ 223.757638][T26193] ? tcp_check_oom+0x560/0x560 [ 223.764508][T26193] ? preempt_schedule+0x4b/0x60 [ 223.769375][T26193] ? ___preempt_schedule+0x16/0x18 [ 223.775049][T26193] ? trace_hardirqs_on+0x5e/0x220 [ 223.780176][T26193] ? sk_psock_unlink+0x443/0x4b0 [ 223.785224][T26193] ? tcp_check_oom+0x560/0x560 [ 223.790001][T26193] end_report+0x47/0x4f [ 223.794161][T26193] ? sk_psock_unlink+0x443/0x4b0 [ 223.797233][ T3878] kobject: 'loop3' (00000000ec3d877b): kobject_uevent_env [ 223.799108][T26193] __kasan_report.cold+0xe/0x40 [ 223.806230][ T3878] kobject: 'loop3' (00000000ec3d877b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 223.811056][T26193] ? sk_psock_unlink+0x443/0x4b0 [ 223.811068][T26193] kasan_report+0x12/0x20 [ 223.811081][T26193] __asan_report_load8_noabort+0x14/0x20 [ 223.811090][T26193] sk_psock_unlink+0x443/0x4b0 [ 223.811101][T26193] ? sk_psock_link_pop+0x186/0x1f0 [ 223.811120][T26193] ? tcp_check_oom+0x560/0x560 [ 223.850580][ T3878] kobject: 'loop1' (00000000492ae9e5): kobject_uevent_env [ 223.851373][T26193] tcp_bpf_remove+0x21/0x50 [ 223.851389][T26193] tcp_bpf_close+0x130/0x390 [ 223.865274][ T3878] kobject: 'loop1' (00000000492ae9e5): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 223.867741][T26193] inet_release+0xff/0x1e0 [ 223.867754][T26193] inet6_release+0x53/0x80 [ 223.867767][T26193] __sock_release+0xce/0x2a0 [ 223.867777][T26193] sock_close+0x1b/0x30 [ 223.867790][T26193] __fput+0x2ff/0x890 [ 223.867800][T26193] ? __sock_release+0x2a0/0x2a0 [ 223.867817][T26193] ____fput+0x16/0x20 [ 223.908405][T26193] task_work_run+0x145/0x1c0 [ 223.913012][T26193] exit_to_usermode_loop+0x273/0x2c0 [ 223.918339][T26193] do_syscall_64+0x58e/0x680 [ 223.923434][T26193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.929712][T26193] RIP: 0033:0x412f61 [ 223.933619][T26193] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 223.944389][ T3878] kobject: 'loop4' (000000003f8aadfd): kobject_uevent_env [ 223.953918][T26193] RSP: 002b:00007ffdbbd18870 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 223.953930][T26193] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f61 [ 223.953935][T26193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 223.953941][T26193] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 223.953947][T26193] R10: 00007ffdbbd18950 R11: 0000000000000293 R12: 00000000007610a8 [ 223.953953][T26193] R13: 0000000000036769 R14: 0000000000036796 R15: 000000000075bfcc [ 223.963778][T26193] Kernel Offset: disabled [ 224.019519][T26193] Rebooting in 86400 seconds..