[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.835446][ T26] audit: type=1800 audit(1563648592.348:25): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.880761][ T26] audit: type=1800 audit(1563648592.348:26): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.903856][ T26] audit: type=1800 audit(1563648592.358:27): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.115' (ECDSA) to the list of known hosts. 2019/07/20 18:50:04 parsed 1 programs 2019/07/20 18:50:06 executed programs: 0 syzkaller login: [ 75.268321][ T8946] IPVS: ftp: loaded support on port[0] = 21 [ 75.269683][ T8948] IPVS: ftp: loaded support on port[0] = 21 [ 75.286484][ T8949] IPVS: ftp: loaded support on port[0] = 21 [ 75.287503][ T8942] IPVS: ftp: loaded support on port[0] = 21 [ 75.302368][ T8944] IPVS: ftp: loaded support on port[0] = 21 [ 75.328373][ T8951] IPVS: ftp: loaded support on port[0] = 21 [ 75.608963][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 75.647826][ T8951] chnl_net:caif_netlink_parms(): no params data found [ 75.663484][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 75.723474][ T8948] chnl_net:caif_netlink_parms(): no params data found [ 75.760600][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.769155][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.777518][ T8946] device bridge_slave_0 entered promiscuous mode [ 75.826057][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.833445][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.841485][ T8946] device bridge_slave_1 entered promiscuous mode [ 75.909576][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.919724][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.928218][ T8944] device bridge_slave_0 entered promiscuous mode [ 75.938572][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.974931][ T8942] chnl_net:caif_netlink_parms(): no params data found [ 75.984302][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.992216][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.999814][ T8951] device bridge_slave_0 entered promiscuous mode [ 76.007961][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.015399][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.023689][ T8944] device bridge_slave_1 entered promiscuous mode [ 76.033179][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.073135][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.080225][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.091178][ T8951] device bridge_slave_1 entered promiscuous mode [ 76.117132][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.125483][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.133395][ T8948] device bridge_slave_0 entered promiscuous mode [ 76.173319][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.183912][ T8946] team0: Port device team_slave_0 added [ 76.189779][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.197420][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.205263][ T8948] device bridge_slave_1 entered promiscuous mode [ 76.224911][ T8949] chnl_net:caif_netlink_parms(): no params data found [ 76.235379][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.247759][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.258455][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.269329][ T8946] team0: Port device team_slave_1 added [ 76.299436][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.307517][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.315854][ T8942] device bridge_slave_0 entered promiscuous mode [ 76.324977][ T8948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.337017][ T8948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.364419][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.372181][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.379755][ T8942] device bridge_slave_1 entered promiscuous mode [ 76.393804][ T8944] team0: Port device team_slave_0 added [ 76.408612][ T8951] team0: Port device team_slave_0 added [ 76.416914][ T8951] team0: Port device team_slave_1 added [ 76.449887][ T8944] team0: Port device team_slave_1 added [ 76.463675][ T8948] team0: Port device team_slave_0 added [ 76.544022][ T8946] device hsr_slave_0 entered promiscuous mode [ 76.601237][ T8946] device hsr_slave_1 entered promiscuous mode [ 76.652887][ T8942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.670967][ T8948] team0: Port device team_slave_1 added [ 76.677407][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.685359][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.693347][ T8949] device bridge_slave_0 entered promiscuous mode [ 76.712406][ T8942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.743201][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.750302][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.759391][ T8949] device bridge_slave_1 entered promiscuous mode [ 76.824240][ T8944] device hsr_slave_0 entered promiscuous mode [ 76.861289][ T8944] device hsr_slave_1 entered promiscuous mode [ 76.890810][ T8944] debugfs: Directory 'hsr0' with parent '/' already present! [ 76.973913][ T8951] device hsr_slave_0 entered promiscuous mode [ 77.041007][ T8951] device hsr_slave_1 entered promiscuous mode [ 77.110879][ T8951] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.138191][ T8942] team0: Port device team_slave_0 added [ 77.146132][ T8942] team0: Port device team_slave_1 added [ 77.154286][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.213259][ T8948] device hsr_slave_0 entered promiscuous mode [ 77.251206][ T8948] device hsr_slave_1 entered promiscuous mode [ 77.310769][ T8948] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.324205][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.357280][ T8949] team0: Port device team_slave_0 added [ 77.422796][ T8942] device hsr_slave_0 entered promiscuous mode [ 77.460967][ T8942] device hsr_slave_1 entered promiscuous mode [ 77.510967][ T8942] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.521792][ T8949] team0: Port device team_slave_1 added [ 77.592600][ T8949] device hsr_slave_0 entered promiscuous mode [ 77.631034][ T8949] device hsr_slave_1 entered promiscuous mode [ 77.680920][ T8949] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.757050][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.764299][ T8949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.771997][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.779072][ T8949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.815803][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.824099][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.873566][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.897816][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.912812][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.922955][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.935748][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.947083][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.985225][ T8951] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.019428][ T8942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.028269][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.036614][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.046948][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.057166][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.065761][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.072886][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.080781][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.089272][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.097726][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.104779][ T8952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.112526][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.121178][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.129419][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.136560][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.144358][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.152996][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.161472][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.168539][ T8952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.186292][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.212282][ T8942] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.221352][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.229594][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.237599][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.246758][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.255228][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.264318][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.273415][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.282539][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.293127][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.301101][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.312317][ T8948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.353362][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.362332][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.370974][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.378049][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.386893][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.396291][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.405059][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.412156][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.419813][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.429015][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.437683][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.446293][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.455135][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.464057][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.472744][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.481435][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.489861][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.498353][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.506814][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.515131][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.524064][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.532524][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.539554][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.547487][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.555581][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.563840][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.572296][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.587026][ T8948] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.609446][ T8944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.623504][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.635758][ T8949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.650182][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.658350][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.666903][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.675330][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.684424][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.693193][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.702204][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.710503][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.719067][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.727627][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.736134][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.745499][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.754116][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.762564][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.769599][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.777994][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.807520][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.816343][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.824737][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.833578][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.842267][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.850985][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.859298][ T8960] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.866390][ T8960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.874506][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.883154][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.891843][ T8960] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.898892][ T8960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.906585][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.915189][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.923990][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.932459][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.941483][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.967403][ T8946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.993903][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.003856][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.038064][ T8949] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.048481][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.058607][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.067647][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.076687][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.085389][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.093980][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.102914][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.110500][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.118836][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.126832][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.139436][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.157084][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.180189][ T8942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.193070][ T8942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.209651][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.218913][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.234511][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.244963][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.253966][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.261072][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.268840][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.278504][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.287174][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.295881][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.304412][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.313215][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.322595][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.349436][ T8948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.362086][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.380431][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.396369][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.416807][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.426682][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.436326][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.443436][ T8952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.452344][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.461042][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.478482][ T8949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.489870][ T8949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.505979][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.538092][ T8948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.546809][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.575984][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.588860][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.597953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.607745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.616449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.625214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.633825][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.642947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.650947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.768571][ T8942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.791802][ T8949] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/20 18:50:11 executed programs: 8 [ 82.281147][ C0] ================================================================== [ 82.289356][ C0] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200 [ 82.297758][ C0] Read of size 4 at addr ffff888097e90680 by task swapper/0/0 [ 82.305198][ C0] [ 82.307535][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.2.0+ #67 [ 82.314396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.324540][ C0] Call Trace: [ 82.327826][ C0] [ 82.330676][ C0] dump_stack+0x172/0x1f0 [ 82.335033][ C0] ? refcount_inc_not_zero_checked+0x81/0x200 [ 82.341097][ C0] print_address_description.cold+0xd4/0x306 [ 82.347093][ C0] ? refcount_inc_not_zero_checked+0x81/0x200 [ 82.353145][ C0] ? refcount_inc_not_zero_checked+0x81/0x200 [ 82.359204][ C0] __kasan_report.cold+0x1b/0x36 [ 82.364142][ C0] ? refcount_inc_not_zero_checked+0x81/0x200 [ 82.370192][ C0] kasan_report+0x12/0x17 [ 82.374513][ C0] check_memory_region+0x134/0x1a0 [ 82.379630][ C0] __kasan_check_read+0x11/0x20 [ 82.384496][ C0] refcount_inc_not_zero_checked+0x81/0x200 [ 82.390377][ C0] ? retint_kernel+0x2b/0x2b [ 82.394971][ C0] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 82.400804][ C0] ? nr_insert_socket+0x21/0xe0 [ 82.405676][ C0] refcount_inc_checked+0x17/0x70 [ 82.410700][ C0] nr_insert_socket+0x2d/0xe0 [ 82.415375][ C0] nr_rx_frame+0x1605/0x1e73 [ 82.420222][ C0] nr_loopback_timer+0x7b/0x170 [ 82.425069][ C0] call_timer_fn+0x1ac/0x780 [ 82.429667][ C0] ? nr_process_rx_frame+0x1540/0x1540 [ 82.435129][ C0] ? msleep_interruptible+0x150/0x150 [ 82.440490][ C0] ? run_timer_softirq+0x685/0x17a0 [ 82.445676][ C0] ? trace_hardirqs_on+0x67/0x240 [ 82.450690][ C0] ? __kasan_check_read+0x11/0x20 [ 82.455708][ C0] ? nr_process_rx_frame+0x1540/0x1540 [ 82.461170][ C0] ? nr_process_rx_frame+0x1540/0x1540 [ 82.466640][ C0] run_timer_softirq+0x697/0x17a0 [ 82.471661][ C0] ? add_timer+0x930/0x930 [ 82.476059][ C0] ? kvm_clock_read+0x18/0x30 [ 82.480723][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 82.485828][ C0] ? sched_clock+0x2e/0x50 [ 82.490234][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.496560][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.502796][ C0] __do_softirq+0x262/0x98c [ 82.507301][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 82.512153][ C0] irq_exit+0x19b/0x1e0 [ 82.516333][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 82.521881][ C0] apic_timer_interrupt+0xf/0x20 [ 82.526796][ C0] [ 82.529729][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 82.535081][ C0] Code: 68 96 73 fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d e4 26 4f 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d d4 26 4f 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 be 57 27 fa e8 79 [ 82.554751][ C0] RSP: 0018:ffffffff88c07ce8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 82.563156][ C0] RAX: 1ffffffff11a5e05 RBX: ffffffff88c7a1c0 RCX: 0000000000000000 [ 82.571117][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff88c7aa4c [ 82.579092][ C0] RBP: ffffffff88c07d18 R08: ffffffff88c7a1c0 R09: 0000000000000000 [ 82.587061][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 82.595025][ C0] R13: ffffffff89a4f7b8 R14: 0000000000000000 R15: 0000000000000000 [ 82.603023][ C0] ? default_idle+0x4e/0x360 [ 82.607603][ C0] arch_cpu_idle+0xa/0x10 [ 82.611914][ C0] default_idle_call+0x84/0xb0 [ 82.616913][ C0] do_idle+0x413/0x760 [ 82.620966][ C0] ? arch_cpu_idle_exit+0x80/0x80 [ 82.626010][ C0] cpu_startup_entry+0x1b/0x20 [ 82.630774][ C0] rest_init+0x245/0x37b [ 82.635027][ C0] arch_call_rest_init+0xe/0x1b [ 82.639889][ C0] start_kernel+0x912/0x951 [ 82.644386][ C0] ? mem_encrypt_init+0xb/0xb [ 82.649063][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.655283][ C0] ? x86_family+0x41/0x50 [ 82.659626][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 82.665848][ C0] x86_64_start_reservations+0x29/0x2b [ 82.671298][ C0] x86_64_start_kernel+0x77/0x7b [ 82.676235][ C0] secondary_startup_64+0xa4/0xb0 [ 82.681258][ C0] [ 82.683579][ C0] Allocated by task 0: [ 82.687638][ C0] save_stack+0x23/0x90 [ 82.691792][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 82.697424][ C0] kasan_kmalloc+0x9/0x10 [ 82.701748][ C0] __kmalloc+0x163/0x770 [ 82.705980][ C0] sk_prot_alloc+0x23a/0x310 [ 82.710565][ C0] sk_alloc+0x39/0xf70 [ 82.714626][ C0] nr_rx_frame+0x733/0x1e73 [ 82.719128][ C0] nr_loopback_timer+0x7b/0x170 [ 82.723975][ C0] call_timer_fn+0x1ac/0x780 [ 82.728560][ C0] run_timer_softirq+0x697/0x17a0 [ 82.733576][ C0] __do_softirq+0x262/0x98c [ 82.738062][ C0] [ 82.740378][ C0] Freed by task 9125: [ 82.744358][ C0] save_stack+0x23/0x90 [ 82.748591][ C0] __kasan_slab_free+0x102/0x150 [ 82.753522][ C0] kasan_slab_free+0xe/0x10 [ 82.758018][ C0] kfree+0x10a/0x2c0 [ 82.761906][ C0] __sk_destruct+0x4f7/0x6e0 [ 82.766483][ C0] sk_destruct+0x86/0xa0 [ 82.770715][ C0] __sk_free+0xfb/0x360 [ 82.774864][ C0] sk_free+0x42/0x50 [ 82.778748][ C0] sock_efree+0x61/0x80 [ 82.782928][ C0] skb_release_head_state+0xeb/0x250 [ 82.788207][ C0] skb_release_all+0x16/0x60 [ 82.792794][ C0] kfree_skb+0x101/0x3c0 [ 82.797036][ C0] nr_accept+0x56e/0x700 [ 82.801275][ C0] __sys_accept4+0x34e/0x6a0 [ 82.805950][ C0] __x64_sys_accept+0x75/0xb0 [ 82.810622][ C0] do_syscall_64+0xfd/0x6a0 [ 82.815125][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.821008][ C0] [ 82.823331][ C0] The buggy address belongs to the object at ffff888097e90600 [ 82.823331][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 82.837384][ C0] The buggy address is located 128 bytes inside of [ 82.837384][ C0] 2048-byte region [ffff888097e90600, ffff888097e90e00) [ 82.850730][ C0] The buggy address belongs to the page: [ 82.856363][ C0] page:ffffea00025fa400 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 compound_mapcount: 0 [ 82.867288][ C0] flags: 0x1fffc0000010200(slab|head) [ 82.872657][ C0] raw: 01fffc0000010200 ffffea0002510e08 ffffea0002155b88 ffff8880aa400e00 [ 82.881236][ C0] raw: 0000000000000000 ffff888097e90600 0000000100000003 0000000000000000 [ 82.889802][ C0] page dumped because: kasan: bad access detected [ 82.896373][ C0] [ 82.898692][ C0] Memory state around the buggy address: [ 82.904315][ C0] ffff888097e90580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.912369][ C0] ffff888097e90600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.920427][ C0] >ffff888097e90680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.928491][ C0] ^ [ 82.932558][ C0] ffff888097e90700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.940626][ C0] ffff888097e90780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.948773][ C0] ================================================================== [ 82.956826][ C0] Disabling lock debugging due to kernel taint [ 82.963087][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 82.969678][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.2.0+ #67 [ 82.977901][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.987944][ C0] Call Trace: [ 82.991216][ C0] [ 82.994069][ C0] dump_stack+0x172/0x1f0 [ 82.998393][ C0] panic+0x2dc/0x755 [ 83.002282][ C0] ? add_taint.cold+0x16/0x16 [ 83.006956][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 83.011969][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 83.016993][ C0] ? refcount_inc_not_zero_checked+0x81/0x200 [ 83.023055][ C0] end_report+0x47/0x4f [ 83.027219][ C0] ? refcount_inc_not_zero_checked+0x81/0x200 [ 83.033275][ C0] __kasan_report.cold+0xe/0x36 [ 83.038117][ C0] ? refcount_inc_not_zero_checked+0x81/0x200 [ 83.044175][ C0] kasan_report+0x12/0x17 [ 83.048493][ C0] check_memory_region+0x134/0x1a0 [ 83.053602][ C0] __kasan_check_read+0x11/0x20 [ 83.058444][ C0] refcount_inc_not_zero_checked+0x81/0x200 [ 83.064339][ C0] ? retint_kernel+0x2b/0x2b [ 83.068920][ C0] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 83.074720][ C0] ? nr_insert_socket+0x21/0xe0 [ 83.079562][ C0] refcount_inc_checked+0x17/0x70 [ 83.084578][ C0] nr_insert_socket+0x2d/0xe0 [ 83.089245][ C0] nr_rx_frame+0x1605/0x1e73 [ 83.093833][ C0] nr_loopback_timer+0x7b/0x170 [ 83.098678][ C0] call_timer_fn+0x1ac/0x780 [ 83.103262][ C0] ? nr_process_rx_frame+0x1540/0x1540 [ 83.108715][ C0] ? msleep_interruptible+0x150/0x150 [ 83.114094][ C0] ? run_timer_softirq+0x685/0x17a0 [ 83.119289][ C0] ? trace_hardirqs_on+0x67/0x240 [ 83.124305][ C0] ? __kasan_check_read+0x11/0x20 [ 83.129338][ C0] ? nr_process_rx_frame+0x1540/0x1540 [ 83.134807][ C0] ? nr_process_rx_frame+0x1540/0x1540 [ 83.140289][ C0] run_timer_softirq+0x697/0x17a0 [ 83.145315][ C0] ? add_timer+0x930/0x930 [ 83.149732][ C0] ? kvm_clock_read+0x18/0x30 [ 83.154408][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 83.159513][ C0] ? sched_clock+0x2e/0x50 [ 83.163923][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.170151][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.176400][ C0] __do_softirq+0x262/0x98c [ 83.180896][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 83.185747][ C0] irq_exit+0x19b/0x1e0 [ 83.189896][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 83.195436][ C0] apic_timer_interrupt+0xf/0x20 [ 83.200356][ C0] [ 83.203294][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 83.208681][ C0] Code: 68 96 73 fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d e4 26 4f 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d d4 26 4f 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 be 57 27 fa e8 79 [ 83.228284][ C0] RSP: 0018:ffffffff88c07ce8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 83.236690][ C0] RAX: 1ffffffff11a5e05 RBX: ffffffff88c7a1c0 RCX: 0000000000000000 [ 83.244670][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff88c7aa4c [ 83.252631][ C0] RBP: ffffffff88c07d18 R08: ffffffff88c7a1c0 R09: 0000000000000000 [ 83.260602][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 83.268565][ C0] R13: ffffffff89a4f7b8 R14: 0000000000000000 R15: 0000000000000000 [ 83.276560][ C0] ? default_idle+0x4e/0x360 [ 83.281420][ C0] arch_cpu_idle+0xa/0x10 [ 83.285742][ C0] default_idle_call+0x84/0xb0 [ 83.290498][ C0] do_idle+0x413/0x760 [ 83.294566][ C0] ? arch_cpu_idle_exit+0x80/0x80 [ 83.299592][ C0] cpu_startup_entry+0x1b/0x20 [ 83.304347][ C0] rest_init+0x245/0x37b [ 83.308579][ C0] arch_call_rest_init+0xe/0x1b [ 83.313422][ C0] start_kernel+0x912/0x951 [ 83.317915][ C0] ? mem_encrypt_init+0xb/0xb [ 83.322596][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.329259][ C0] ? x86_family+0x41/0x50 [ 83.333585][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 83.339817][ C0] x86_64_start_reservations+0x29/0x2b [ 83.345269][ C0] x86_64_start_kernel+0x77/0x7b [ 83.350198][ C0] secondary_startup_64+0xa4/0xb0 [ 83.356333][ C0] Kernel Offset: disabled [ 83.360669][ C0] Rebooting in 86400 seconds..