[info] Using makefile-style concurrent boot in runlevel 2. [ 53.868918][ T26] audit: type=1800 audit(1564725382.808:21): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 53.888798][ T26] audit: type=1800 audit(1564725382.808:22): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.227' (ECDSA) to the list of known hosts. 2019/08/02 06:20:51 parsed 1 programs 2019/08/02 06:20:53 executed programs: 0 syzkaller login: [ 1524.888150][ T9330] IPVS: ftp: loaded support on port[0] = 21 [ 1524.928842][ T9332] IPVS: ftp: loaded support on port[0] = 21 [ 1524.959840][ T9335] IPVS: ftp: loaded support on port[0] = 21 [ 1524.991216][ T9340] IPVS: ftp: loaded support on port[0] = 21 [ 1525.005989][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 1525.029441][ T9337] IPVS: ftp: loaded support on port[0] = 21 [ 1525.044738][ T9339] IPVS: ftp: loaded support on port[0] = 21 [ 1525.072446][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.079596][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.088193][ T9330] device bridge_slave_0 entered promiscuous mode [ 1525.095484][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.102581][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.110201][ T9330] device bridge_slave_1 entered promiscuous mode [ 1525.137618][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.157963][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.177303][ T9330] team0: Port device team_slave_0 added [ 1525.200766][ T9330] team0: Port device team_slave_1 added [ 1525.321414][ T9330] device hsr_slave_0 entered promiscuous mode [ 1525.370270][ T9330] device hsr_slave_1 entered promiscuous mode [ 1525.417897][ T9340] chnl_net:caif_netlink_parms(): no params data found [ 1525.426410][ T9332] chnl_net:caif_netlink_parms(): no params data found [ 1525.463450][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.470557][ T9330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.477832][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.484895][ T9330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.559731][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.568221][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.575729][ T9340] device bridge_slave_0 entered promiscuous mode [ 1525.583309][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.590416][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.597963][ T9340] device bridge_slave_1 entered promiscuous mode [ 1525.614007][ T9332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.621598][ T9332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.629004][ T9332] device bridge_slave_0 entered promiscuous mode [ 1525.636828][ T9332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.643913][ T9332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.651384][ T9332] device bridge_slave_1 entered promiscuous mode [ 1525.658204][ T9337] chnl_net:caif_netlink_parms(): no params data found [ 1525.681328][ T9339] chnl_net:caif_netlink_parms(): no params data found [ 1525.690889][ T9340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.702178][ T9340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.719587][ T9340] team0: Port device team_slave_0 added [ 1525.733846][ T9332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.746756][ T9340] team0: Port device team_slave_1 added [ 1525.753353][ T9335] chnl_net:caif_netlink_parms(): no params data found [ 1525.765563][ T9332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.842114][ T9340] device hsr_slave_0 entered promiscuous mode [ 1525.890256][ T9340] device hsr_slave_1 entered promiscuous mode [ 1525.940082][ T9340] debugfs: Directory 'hsr0' with parent '/' already present! [ 1525.959213][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.966438][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.974003][ T9339] device bridge_slave_0 entered promiscuous mode [ 1525.988529][ T9332] team0: Port device team_slave_0 added [ 1525.995176][ T9332] team0: Port device team_slave_1 added [ 1526.006206][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.013472][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.021281][ T9339] device bridge_slave_1 entered promiscuous mode [ 1526.048123][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.055975][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.063585][ T9337] device bridge_slave_0 entered promiscuous mode [ 1526.122160][ T9332] device hsr_slave_0 entered promiscuous mode [ 1526.170242][ T9332] device hsr_slave_1 entered promiscuous mode [ 1526.240052][ T9332] debugfs: Directory 'hsr0' with parent '/' already present! [ 1526.252538][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.259597][ T9340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.266906][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.274128][ T9340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.285310][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.292782][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.300497][ T9337] device bridge_slave_1 entered promiscuous mode [ 1526.308025][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.318074][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.325675][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.333812][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.341495][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.355327][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.368203][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.376777][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.384466][ T9335] device bridge_slave_0 entered promiscuous mode [ 1526.395963][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.413226][ T9339] team0: Port device team_slave_0 added [ 1526.423290][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.430208][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.437271][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.444751][ T9335] device bridge_slave_1 entered promiscuous mode [ 1526.465892][ T9339] team0: Port device team_slave_1 added [ 1526.472724][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1526.480365][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1526.489143][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.499404][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.510200][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.543397][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.563815][ T9337] team0: Port device team_slave_0 added [ 1526.571438][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1526.579868][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1526.589503][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.596706][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.605132][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1526.613633][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1526.622017][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.629039][ T9343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.636549][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1526.645047][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1526.653418][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1526.661875][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1526.732259][ T9339] device hsr_slave_0 entered promiscuous mode [ 1526.770324][ T9339] device hsr_slave_1 entered promiscuous mode [ 1526.810068][ T9339] debugfs: Directory 'hsr0' with parent '/' already present! [ 1526.821635][ T9337] team0: Port device team_slave_1 added [ 1526.828222][ T9335] team0: Port device team_slave_0 added [ 1526.837160][ T9335] team0: Port device team_slave_1 added [ 1526.844438][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1526.852860][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1526.861576][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1526.869727][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1526.878335][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1526.942050][ T9337] device hsr_slave_0 entered promiscuous mode [ 1526.970254][ T9337] device hsr_slave_1 entered promiscuous mode [ 1527.010073][ T9337] debugfs: Directory 'hsr0' with parent '/' already present! [ 1527.022639][ T9330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.034745][ T9330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1527.047210][ T9340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.055021][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1527.063413][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1527.121879][ T9335] device hsr_slave_0 entered promiscuous mode [ 1527.180254][ T9335] device hsr_slave_1 entered promiscuous mode [ 1527.230023][ T9335] debugfs: Directory 'hsr0' with parent '/' already present! [ 1527.247526][ T9332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.273728][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1527.281669][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.289152][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1527.297488][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.307148][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.316312][ T9340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.337422][ T9332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.355607][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.364728][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.373316][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.380379][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.388553][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1527.397790][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1527.406262][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.413322][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.421306][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1527.438412][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.447385][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.464627][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.473194][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.481661][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.488738][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.496287][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1527.504748][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1527.513033][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.520095][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.527754][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1527.536192][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1527.544668][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1527.553075][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1527.561625][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1527.569872][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1527.578274][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1527.586578][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1527.594709][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1527.602634][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1527.619696][ T9332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1527.630346][ T9332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.653477][ T9332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.660744][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1527.669263][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1527.685061][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1527.693851][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1527.702318][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1527.711457][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1527.719560][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1527.727884][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1527.736227][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1527.744751][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1527.752465][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.760242][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1527.767848][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1527.777014][ T9339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.786786][ T9337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.799073][ T9340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.810544][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1527.836924][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1527.850769][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.860925][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1527.869438][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1527.877889][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.886784][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.895281][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.902348][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.910467][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1527.921678][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.936850][ T9340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.952868][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.967266][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.976850][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.983952][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.996114][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.007687][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.019719][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.026819][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.037282][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1528.045698][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1528.064523][ T9335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.081925][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1528.089749][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.112074][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.128531][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.135689][ T9341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.144832][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1528.153408][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1528.162104][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1528.170617][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1528.179063][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1528.197388][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1528.210434][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1528.218999][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1528.230706][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1528.239095][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1528.248398][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1528.256992][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1528.265921][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1528.274286][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1528.282580][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1528.290875][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1528.299697][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1528.307582][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1528.315257][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1528.324035][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1528.350229][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1528.358630][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1528.374893][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.381999][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.389455][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.398086][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.407142][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.414235][ T9343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.432892][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1528.441527][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1528.454202][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1528.463406][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1528.471836][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1528.480959][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1528.489304][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1528.497631][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1528.505830][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1528.514562][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1528.522881][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1528.530818][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1528.547607][ T9337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1528.573342][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1528.582259][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1528.598007][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.609765][ T9335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1528.637274][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.649169][ T9337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.240827][ T3624] Bluetooth: hci0: command 0x1003 tx timeout [ 1530.247015][ T9450] Bluetooth: hci0: sending frame failed (-49) [ 1530.640861][ T3624] Bluetooth: hci1: command 0x1003 tx timeout [ 1530.646932][ T9450] Bluetooth: hci1: sending frame failed (-49) [ 1530.810332][ T9352] Bluetooth: hci2: command 0x1003 tx timeout [ 1530.816412][ T9450] Bluetooth: hci2: sending frame failed (-49) [ 1530.880320][ T9352] Bluetooth: hci4: command 0x1003 tx timeout [ 1530.886440][ T9352] Bluetooth: hci3: command 0x1003 tx timeout [ 1530.886464][ T9450] Bluetooth: hci4: sending frame failed (-49) [ 1530.898588][ T9450] Bluetooth: hci3: sending frame failed (-49) [ 1530.960102][ T3624] Bluetooth: hci5: command 0x1003 tx timeout [ 1530.966280][ T9450] Bluetooth: hci5: sending frame failed (-49) [ 1532.320375][ T9352] Bluetooth: hci0: command 0x1001 tx timeout [ 1532.326447][ T9450] Bluetooth: hci0: sending frame failed (-49) [ 1532.720162][ T9352] Bluetooth: hci1: command 0x1001 tx timeout [ 1532.726294][ T9450] Bluetooth: hci1: sending frame failed (-49) [ 1532.880147][ T9352] Bluetooth: hci2: command 0x1001 tx timeout [ 1532.886270][ T9450] Bluetooth: hci2: sending frame failed (-49) [ 1532.960542][ T3624] Bluetooth: hci3: command 0x1001 tx timeout [ 1532.966604][ T3624] Bluetooth: hci4: command 0x1001 tx timeout [ 1532.966644][ T9450] Bluetooth: hci3: sending frame failed (-49) [ 1532.975526][ T9462] Bluetooth: hci4: sending frame failed (-49) [ 1533.040432][ T9352] Bluetooth: hci5: command 0x1001 tx timeout [ 1533.046515][ T9462] Bluetooth: hci5: sending frame failed (-49) [ 1534.400093][ T3624] Bluetooth: hci0: command 0x1009 tx timeout [ 1534.800002][ T3624] Bluetooth: hci1: command 0x1009 tx timeout [ 1534.959985][ T3624] Bluetooth: hci2: command 0x1009 tx timeout [ 1535.040030][ T9352] Bluetooth: hci3: command 0x1009 tx timeout [ 1535.040248][ T3624] Bluetooth: hci4: command 0x1009 tx timeout [ 1535.120030][ T3624] Bluetooth: hci5: command 0x1009 tx timeout 2019/08/02 06:21:07 executed programs: 12 [ 1539.534082][ T7] Bluetooth: Error in BCSP hdr checksum [ 1541.280120][ T3032] Bluetooth: hci1: command 0x1003 tx timeout [ 1541.286378][ T3032] Bluetooth: hci0: command 0x1003 tx timeout [ 1541.286412][ T9462] Bluetooth: hci1: sending frame failed (-49) [ 1541.293208][ T9450] Bluetooth: hci0: sending frame failed (-49) [ 1541.359962][ T9354] Bluetooth: hci2: command 0x1003 tx timeout [ 1541.366699][ T9450] Bluetooth: hci2: sending frame failed (-49) [ 1541.440008][ T3032] Bluetooth: hci3: command 0x1003 tx timeout [ 1541.446147][ T9450] Bluetooth: hci3: sending frame failed (-49) [ 1541.600004][ T9354] Bluetooth: hci5: command 0x1003 tx timeout [ 1541.606127][ T9354] Bluetooth: hci4: command 0x1003 tx timeout [ 1541.606147][ T9450] Bluetooth: hci5: sending frame failed (-49) [ 1541.612735][ T9462] Bluetooth: hci4: sending frame failed (-49) [ 1543.360027][ T3032] Bluetooth: hci0: command 0x1001 tx timeout [ 1543.360053][ T9354] Bluetooth: hci1: command 0x1001 tx timeout [ 1543.367019][ T9462] Bluetooth: hci0: sending frame failed (-49) [ 1543.374048][ T9450] Bluetooth: hci1: sending frame failed (-49) [ 1543.440045][ T3032] Bluetooth: hci2: command 0x1001 tx timeout [ 1543.446370][ T9450] Bluetooth: hci2: sending frame failed (-49) [ 1543.520037][ T3032] Bluetooth: hci3: command 0x1001 tx timeout [ 1543.526157][ T9450] Bluetooth: hci3: sending frame failed (-49) [ 1543.680325][ T3032] Bluetooth: hci5: command 0x1001 tx timeout [ 1543.680356][ T9354] Bluetooth: hci4: command 0x1001 tx timeout [ 1543.686622][ T9450] Bluetooth: hci5: sending frame failed (-49) [ 1543.694497][ T9462] Bluetooth: hci4: sending frame failed (-49) [ 1545.440043][ T9354] Bluetooth: hci1: command 0x1009 tx timeout [ 1545.440062][ T3032] Bluetooth: hci0: command 0x1009 tx timeout [ 1545.520175][ T9354] Bluetooth: hci2: command 0x1009 tx timeout [ 1545.610076][ T9354] Bluetooth: hci3: command 0x1009 tx timeout [ 1545.760017][ T9354] Bluetooth: hci4: command 0x1009 tx timeout [ 1545.760072][ T3032] Bluetooth: hci5: command 0x1009 tx timeout [ 1549.443587][ T9480] ================================================================== [ 1549.452134][ T9480] BUG: KASAN: use-after-free in kfree_skb+0x2a/0xb0 [ 1549.452166][ T9480] Read of size 4 at addr ffff8880936a5694 by task syz-executor.2/9480 [ 1549.467443][ T9480] [ 1549.467458][ T9480] CPU: 1 PID: 9480 Comm: syz-executor.2 Not tainted 5.3.0-rc2+ #59 [ 1549.467462][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.467519][ T9480] Call Trace: [ 1549.467585][ T9480] dump_stack+0x1d8/0x2f8 [ 1549.478074][ T9480] print_address_description+0x75/0x5b0 [ 1549.491466][ T9480] ? log_buf_vmcoreinfo_setup+0x153/0x153 [ 1549.491478][ T9480] ? __kasan_report+0xbf/0x1c0 [ 1549.501446][ T9480] __kasan_report+0x14b/0x1c0 [ 1549.501458][ T9480] ? kfree_skb+0x2a/0xb0 [ 1549.501463][ T9480] kasan_report+0x26/0x50 [ 1549.501469][ T9480] check_memory_region+0x2cf/0x2e0 [ 1549.501536][ T9480] __kasan_check_read+0x11/0x20 [ 1549.512381][ T9480] kfree_skb+0x2a/0xb0 [ 1549.512444][ T9480] bcsp_close+0xb1/0xf0 2019/08/02 06:21:18 executed programs: 20 [ 1549.512458][ T9480] hci_uart_tty_close+0x201/0x240 [ 1549.521407][ T9480] ? hci_uart_tty_open+0x340/0x340 [ 1549.521483][ T9480] tty_ldisc_close+0x128/0x1a0 [ 1549.521500][ T9480] tty_ldisc_release+0x248/0x5c0 [ 1549.530926][ T9480] tty_release_struct+0x2a/0xe0 [ 1549.530933][ T9480] tty_release+0xce9/0xfa0 [ 1549.530942][ T9480] ? tty_release_struct+0xe0/0xe0 [ 1549.531004][ T9480] __fput+0x2e4/0x740 [ 1549.539872][ T9480] ____fput+0x15/0x20 [ 1549.549225][ T9480] task_work_run+0x17e/0x1b0 [ 1549.591666][ T9480] do_exit+0x64c/0x2300 [ 1549.595820][ T9480] ? trace_lock_release+0x135/0x1a0 [ 1549.601217][ T9480] ? mm_update_next_owner+0x580/0x580 [ 1549.606640][ T9480] ? get_signal+0x426/0x1dd0 [ 1549.611497][ T9480] ? __lock_acquire+0x4750/0x4750 [ 1549.616736][ T9480] do_group_exit+0x15c/0x2b0 [ 1549.621311][ T9480] get_signal+0x51c/0x1dd0 [ 1549.625889][ T9480] ? _raw_spin_unlock_irqrestore+0x77/0xe0 [ 1549.631690][ T9480] ? ptrace_notify+0x370/0x370 [ 1549.636678][ T9480] do_signal+0x7b/0x720 [ 1549.640917][ T9480] ? signal_fault+0x1f0/0x1f0 [ 1549.645768][ T9480] ? nanosleep_copyout+0x120/0x120 [ 1549.650870][ T9480] ? hrtimer_init_sleeper+0x70/0x70 [ 1549.656135][ T9480] ? prepare_exit_to_usermode+0x258/0x580 [ 1549.661845][ T9480] prepare_exit_to_usermode+0x303/0x580 [ 1549.667602][ T9480] syscall_return_slowpath+0x113/0x4a0 [ 1549.673129][ T9480] do_syscall_64+0x126/0x140 [ 1549.677769][ T9480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1549.683660][ T9480] RIP: 0033:0x457cf1 [ 1549.687544][ T9480] Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 24 d3 fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1549.707331][ T9480] RSP: 002b:00007ffe4ed27860 EFLAGS: 00000293 ORIG_RAX: 0000000000000023 [ 1549.715909][ T9480] RAX: 0000000000000000 RBX: 0000000000177fa7 RCX: 0000000000457cf1 [ 1549.724439][ T9480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe4ed27870 [ 1549.732595][ T9480] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 1549.740557][ T9480] R10: 00007ffe4ed27960 R11: 0000000000000293 R12: 000000000075bf20 [ 1549.748511][ T9480] R13: 000000000075c9a0 R14: 0000000000760288 R15: ffffffffffffffff [ 1549.756472][ T9480] [ 1549.758847][ T9480] Allocated by task 7: [ 1549.762915][ T9480] __kasan_kmalloc+0x11c/0x1b0 [ 1549.767666][ T9480] kasan_slab_alloc+0xf/0x20 [ 1549.772243][ T9480] kmem_cache_alloc_node+0x235/0x280 [ 1549.777697][ T9480] __alloc_skb+0x9f/0x500 [ 1549.782023][ T9480] bcsp_recv+0x12e7/0x1720 [ 1549.786416][ T9480] hci_uart_tty_receive+0x16b/0x4f0 [ 1549.791609][ T9480] tty_ldisc_receive_buf+0x12e/0x170 [ 1549.796992][ T9480] tty_port_default_receive_buf+0x82/0xb0 [ 1549.802833][ T9480] flush_to_ldisc+0x328/0x560 [ 1549.807491][ T9480] process_one_work+0x83b/0x1150 [ 1549.812402][ T9480] worker_thread+0xc01/0x1630 [ 1549.817068][ T9480] kthread+0x332/0x350 [ 1549.821254][ T9480] ret_from_fork+0x24/0x30 [ 1549.825649][ T9480] [ 1549.827970][ T9480] Freed by task 7: [ 1549.831675][ T9480] __kasan_slab_free+0x12a/0x1e0 [ 1549.836601][ T9480] kasan_slab_free+0xe/0x10 [ 1549.841227][ T9480] kmem_cache_free+0x81/0xf0 [ 1549.845855][ T9480] __kfree_skb+0x118/0x170 [ 1549.850350][ T9480] kfree_skb+0x6f/0xb0 [ 1549.854410][ T9480] bcsp_recv+0x99c/0x1720 [ 1549.858716][ T9480] hci_uart_tty_receive+0x16b/0x4f0 [ 1549.863904][ T9480] tty_ldisc_receive_buf+0x12e/0x170 [ 1549.869184][ T9480] tty_port_default_receive_buf+0x82/0xb0 [ 1549.875024][ T9480] flush_to_ldisc+0x328/0x560 [ 1549.879801][ T9480] process_one_work+0x83b/0x1150 [ 1549.884735][ T9480] worker_thread+0xc01/0x1630 [ 1549.889512][ T9480] kthread+0x332/0x350 [ 1549.893739][ T9480] ret_from_fork+0x24/0x30 [ 1549.898140][ T9480] [ 1549.900761][ T9480] The buggy address belongs to the object at ffff8880936a55c0 [ 1549.900761][ T9480] which belongs to the cache skbuff_head_cache of size 224 [ 1549.915444][ T9480] The buggy address is located 212 bytes inside of [ 1549.915444][ T9480] 224-byte region [ffff8880936a55c0, ffff8880936a56a0) [ 1549.929009][ T9480] The buggy address belongs to the page: [ 1549.934782][ T9480] page:ffffea00024da940 refcount:1 mapcount:0 mapping:ffff88821b6ad700 index:0x0 [ 1549.944585][ T9480] flags: 0x1fffc0000000200(slab) [ 1549.949839][ T9480] raw: 01fffc0000000200 ffffea000297ca88 ffffea00029ef988 ffff88821b6ad700 [ 1549.959103][ T9480] raw: 0000000000000000 ffff8880936a50c0 000000010000000c 0000000000000000 [ 1549.967797][ T9480] page dumped because: kasan: bad access detected [ 1549.974616][ T9480] [ 1549.976935][ T9480] Memory state around the buggy address: [ 1549.982750][ T9480] ffff8880936a5580: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1549.990850][ T9480] ffff8880936a5600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1549.999199][ T9480] >ffff8880936a5680: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1550.007365][ T9480] ^ [ 1550.012052][ T9480] ffff8880936a5700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1550.020357][ T9480] ffff8880936a5780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1550.028516][ T9480] ================================================================== [ 1550.037920][ T9480] Kernel panic - not syncing: panic_on_warn set ... [ 1550.045116][ T9480] CPU: 1 PID: 9480 Comm: syz-executor.2 Tainted: G B 5.3.0-rc2+ #59 [ 1550.054924][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.080113][ T9480] Call Trace: [ 1550.083511][ T9480] dump_stack+0x1d8/0x2f8 [ 1550.088054][ T9480] panic+0x29b/0x7d9 [ 1550.092016][ T9480] ? __kasan_report+0x195/0x1c0 [ 1550.096909][ T9480] ? trace_hardirqs_on+0x34/0x80 [ 1550.101841][ T9480] ? nmi_panic+0x97/0x97 [ 1550.106276][ T9480] ? ___preempt_schedule+0x16/0x20 [ 1550.111481][ T9480] ? trace_hardirqs_on+0x34/0x80 [ 1550.116492][ T9480] ? __kasan_report+0x195/0x1c0 [ 1550.121574][ T9480] __kasan_report+0x1bb/0x1c0 [ 1550.126323][ T9480] ? kfree_skb+0x2a/0xb0 [ 1550.130809][ T9480] kasan_report+0x26/0x50 [ 1550.135202][ T9480] check_memory_region+0x2cf/0x2e0 [ 1550.140454][ T9480] __kasan_check_read+0x11/0x20 [ 1550.145286][ T9480] kfree_skb+0x2a/0xb0 [ 1550.149520][ T9480] bcsp_close+0xb1/0xf0 [ 1550.153857][ T9480] hci_uart_tty_close+0x201/0x240 [ 1550.158864][ T9480] ? hci_uart_tty_open+0x340/0x340 [ 1550.164075][ T9480] tty_ldisc_close+0x128/0x1a0 [ 1550.169068][ T9480] tty_ldisc_release+0x248/0x5c0 [ 1550.174435][ T9480] tty_release_struct+0x2a/0xe0 [ 1550.179485][ T9480] tty_release+0xce9/0xfa0 [ 1550.184009][ T9480] ? tty_release_struct+0xe0/0xe0 [ 1550.189309][ T9480] __fput+0x2e4/0x740 [ 1550.193285][ T9480] ____fput+0x15/0x20 [ 1550.197258][ T9480] task_work_run+0x17e/0x1b0 [ 1550.202019][ T9480] do_exit+0x64c/0x2300 [ 1550.206219][ T9480] ? trace_lock_release+0x135/0x1a0 [ 1550.211466][ T9480] ? mm_update_next_owner+0x580/0x580 [ 1550.216966][ T9480] ? get_signal+0x426/0x1dd0 [ 1550.221720][ T9480] ? __lock_acquire+0x4750/0x4750 [ 1550.226745][ T9480] do_group_exit+0x15c/0x2b0 [ 1550.231328][ T9480] get_signal+0x51c/0x1dd0 [ 1550.236020][ T9480] ? _raw_spin_unlock_irqrestore+0x77/0xe0 [ 1550.241814][ T9480] ? ptrace_notify+0x370/0x370 [ 1550.246619][ T9480] do_signal+0x7b/0x720 [ 1550.250810][ T9480] ? signal_fault+0x1f0/0x1f0 [ 1550.255713][ T9480] ? nanosleep_copyout+0x120/0x120 [ 1550.260802][ T9480] ? hrtimer_init_sleeper+0x70/0x70 [ 1550.265995][ T9480] ? prepare_exit_to_usermode+0x258/0x580 [ 1550.271822][ T9480] prepare_exit_to_usermode+0x303/0x580 [ 1550.277477][ T9480] syscall_return_slowpath+0x113/0x4a0 [ 1550.283125][ T9480] do_syscall_64+0x126/0x140 [ 1550.287841][ T9480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1550.293907][ T9480] RIP: 0033:0x457cf1 [ 1550.297974][ T9480] Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 24 d3 fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1550.318166][ T9480] RSP: 002b:00007ffe4ed27860 EFLAGS: 00000293 ORIG_RAX: 0000000000000023 [ 1550.326637][ T9480] RAX: 0000000000000000 RBX: 0000000000177fa7 RCX: 0000000000457cf1 [ 1550.334806][ T9480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe4ed27870 [ 1550.342834][ T9480] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 1550.350979][ T9480] R10: 00007ffe4ed27960 R11: 0000000000000293 R12: 000000000075bf20 [ 1550.359001][ T9480] R13: 000000000075c9a0 R14: 0000000000760288 R15: ffffffffffffffff [ 1550.368597][ T9480] Kernel Offset: disabled [ 1550.372952][ T9480] Rebooting in 86400 seconds..