[ 39.512386][ T26] audit: type=1800 audit(1554242745.389:26): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 39.539056][ T26] audit: type=1800 audit(1554242745.389:27): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 39.568652][ T26] audit: type=1800 audit(1554242745.389:28): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.573142][ T26] audit: type=1800 audit(1554242746.479:29): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.230' (ECDSA) to the list of known hosts. 2019/04/02 22:06:14 parsed 1 programs 2019/04/02 22:06:16 executed programs: 0 syzkaller login: [ 71.026597][ T7750] IPVS: ftp: loaded support on port[0] = 21 [ 71.027345][ T7758] IPVS: ftp: loaded support on port[0] = 21 [ 71.037332][ T7752] IPVS: ftp: loaded support on port[0] = 21 [ 71.042827][ T7756] IPVS: ftp: loaded support on port[0] = 21 [ 71.050440][ T7754] IPVS: ftp: loaded support on port[0] = 21 [ 71.065754][ T7759] IPVS: ftp: loaded support on port[0] = 21 [ 71.311356][ T7750] chnl_net:caif_netlink_parms(): no params data found [ 71.448700][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 71.462307][ T7759] chnl_net:caif_netlink_parms(): no params data found [ 71.481458][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.489283][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.497740][ T7750] device bridge_slave_0 entered promiscuous mode [ 71.530720][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 71.541495][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.548615][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.556636][ T7750] device bridge_slave_1 entered promiscuous mode [ 71.589156][ T7758] chnl_net:caif_netlink_parms(): no params data found [ 71.639267][ T7756] chnl_net:caif_netlink_parms(): no params data found [ 71.660244][ T7750] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.712834][ T7750] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.733772][ T7758] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.740939][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.748761][ T7758] device bridge_slave_0 entered promiscuous mode [ 71.760447][ T7758] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.768084][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.775903][ T7758] device bridge_slave_1 entered promiscuous mode [ 71.801000][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.809507][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.817374][ T7759] device bridge_slave_0 entered promiscuous mode [ 71.830646][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.837828][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.847059][ T7759] device bridge_slave_1 entered promiscuous mode [ 71.873733][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.880861][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.888695][ T7752] device bridge_slave_0 entered promiscuous mode [ 71.902535][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.909611][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.917383][ T7754] device bridge_slave_0 entered promiscuous mode [ 71.930809][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.938063][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.946040][ T7754] device bridge_slave_1 entered promiscuous mode [ 71.965648][ T7758] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.974483][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.981547][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.989359][ T7752] device bridge_slave_1 entered promiscuous mode [ 71.998926][ T7750] team0: Port device team_slave_0 added [ 72.013053][ T7759] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.034177][ T7758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.048259][ T7750] team0: Port device team_slave_1 added [ 72.056872][ T7759] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.066711][ T7754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.075219][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.082946][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.090582][ T7756] device bridge_slave_0 entered promiscuous mode [ 72.129978][ T7754] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.145140][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.153038][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.160685][ T7756] device bridge_slave_1 entered promiscuous mode [ 72.169796][ T7752] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.179150][ T7758] team0: Port device team_slave_0 added [ 72.191943][ T7758] team0: Port device team_slave_1 added [ 72.212165][ T7759] team0: Port device team_slave_0 added [ 72.227412][ T7752] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.294119][ T7750] device hsr_slave_0 entered promiscuous mode [ 72.332765][ T7750] device hsr_slave_1 entered promiscuous mode [ 72.384222][ T7754] team0: Port device team_slave_0 added [ 72.391108][ T7759] team0: Port device team_slave_1 added [ 72.412133][ T7756] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.447261][ T7754] team0: Port device team_slave_1 added [ 72.459806][ T7756] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.493981][ T7758] device hsr_slave_0 entered promiscuous mode [ 72.542752][ T7758] device hsr_slave_1 entered promiscuous mode [ 72.620887][ T7752] team0: Port device team_slave_0 added [ 72.661898][ T7752] team0: Port device team_slave_1 added [ 72.669425][ T7756] team0: Port device team_slave_0 added [ 72.682615][ T7756] team0: Port device team_slave_1 added [ 72.736935][ T7759] device hsr_slave_0 entered promiscuous mode [ 72.802629][ T7759] device hsr_slave_1 entered promiscuous mode [ 72.895315][ T7754] device hsr_slave_0 entered promiscuous mode [ 72.952873][ T7754] device hsr_slave_1 entered promiscuous mode [ 73.083963][ T7756] device hsr_slave_0 entered promiscuous mode [ 73.152609][ T7756] device hsr_slave_1 entered promiscuous mode [ 73.265312][ T7752] device hsr_slave_0 entered promiscuous mode [ 73.332590][ T7752] device hsr_slave_1 entered promiscuous mode [ 73.441601][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.501196][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.534582][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.544352][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.557173][ T7758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.576234][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.586911][ T7756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.593976][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.607186][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.615738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.622958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.631579][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.671267][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.678411][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.686327][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.694287][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.702108][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.712065][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.733155][ T7752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.746249][ T7758] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.760774][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.769634][ T7756] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.777174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.785902][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.794422][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.801462][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.809297][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.817831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.826353][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.833426][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.840979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.848930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.856568][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.864357][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.873330][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.881204][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.890048][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.899029][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.906120][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.928264][ T7752] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.935678][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.944132][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.952981][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.961868][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.970778][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.980014][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.987128][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.997820][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.006916][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.045284][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.054548][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.068164][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.075299][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.083564][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.092087][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.100797][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.107948][ T7769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.116233][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.124834][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.133716][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.142185][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.150920][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.159520][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.168190][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.176756][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.185262][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.194268][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.203379][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.210419][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.218092][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.226622][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.235180][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.242295][ T7769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.249883][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.258724][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.267157][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.274242][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.284048][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.292044][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.300123][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.308501][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.317200][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.325971][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.368081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.377241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.385893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.393022][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.400610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.409523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.417939][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.426715][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.435278][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.443671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.451764][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.460131][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.468270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.477085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.486586][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.493682][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.501213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.509572][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.518027][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.526790][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.535403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.544132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.552825][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.561332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.569936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.578419][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.586919][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.595530][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.607695][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.617783][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.633838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.641586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.649728][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.658477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.667957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.676368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.684638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.709647][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.717939][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.728009][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.737699][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.746509][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.755222][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.763772][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.773084][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.796089][ T7754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.807174][ T7754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.828830][ T7750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.841728][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.851934][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.860905][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.874419][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.884323][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.893501][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.902818][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.911132][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.919455][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.927777][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.936093][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.946858][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.955701][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.964204][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.973927][ T7752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.992087][ T7758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.003099][ T7758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.029898][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.038186][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.053858][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.073130][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.081836][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.090175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.098568][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.120709][ T7752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.139008][ T7756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.160341][ T7758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.171205][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.177152][ C0] hrtimer: interrupt took 36533 ns [ 75.184744][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2019/04/02 22:06:21 executed programs: 14 2019/04/02 22:06:26 executed programs: 99 2019/04/02 22:06:31 executed programs: 188 [ 87.582790][ C1] ================================================================== [ 87.591092][ C1] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 87.598471][ C1] Read of size 8 at addr ffff8880940aee00 by task ksoftirqd/1/16 [ 87.606179][ C1] [ 87.608523][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.1.0-rc3+ #47 [ 87.615975][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.626038][ C1] Call Trace: [ 87.629365][ C1] dump_stack+0x172/0x1f0 [ 87.633704][ C1] ? ccid_hc_tx_delete+0xde/0x100 [ 87.638738][ C1] print_address_description.cold+0x7c/0x20d [ 87.644730][ C1] ? ccid_hc_tx_delete+0xde/0x100 [ 87.649771][ C1] ? ccid_hc_tx_delete+0xde/0x100 [ 87.654805][ C1] kasan_report.cold+0x1b/0x40 [ 87.659583][ C1] ? ccid_hc_tx_delete+0xde/0x100 [ 87.664621][ C1] __asan_report_load8_noabort+0x14/0x20 [ 87.670264][ C1] ccid_hc_tx_delete+0xde/0x100 [ 87.675124][ C1] dccp_sk_destruct+0x3f/0x90 [ 87.679806][ C1] ? dccp_init_sock+0x3f0/0x3f0 [ 87.684663][ C1] __sk_destruct+0x55/0x6d0 [ 87.689176][ C1] ? proto_unregister+0x4e0/0x4e0 [ 87.694214][ C1] rcu_core+0x928/0x1390 [ 87.698478][ C1] ? rcu_check_gp_start_stall+0x250/0x250 [ 87.704208][ C1] ? sched_clock+0x2e/0x50 [ 87.708647][ C1] __do_softirq+0x266/0x95a [ 87.713165][ C1] ? __sched_text_start+0x8/0x8 [ 87.718033][ C1] ? takeover_tasklets+0x7b0/0x7b0 [ 87.723152][ C1] run_ksoftirqd+0x8e/0x110 [ 87.727672][ C1] smpboot_thread_fn+0x6ab/0xa10 [ 87.732620][ C1] ? sort_range+0x30/0x30 [ 87.736955][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 87.743199][ C1] ? __kthread_parkme+0xfb/0x1b0 [ 87.748145][ C1] kthread+0x357/0x430 [ 87.752219][ C1] ? sort_range+0x30/0x30 [ 87.756552][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 87.762802][ C1] ret_from_fork+0x3a/0x50 [ 87.767224][ C1] [ 87.769553][ C1] Allocated by task 8833: [ 87.773900][ C1] save_stack+0x45/0xd0 [ 87.778059][ C1] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 87.783697][ C1] kasan_slab_alloc+0xf/0x20 [ 87.788290][ C1] kmem_cache_alloc+0x11a/0x6f0 [ 87.793147][ C1] ccid_new+0x256/0x3f0 [ 87.797306][ C1] dccp_hdlr_ccid+0x27/0x150 [ 87.801905][ C1] __dccp_feat_activate+0x17a/0x270 [ 87.807312][ C1] dccp_feat_activate_values+0x33a/0x766 [ 87.812957][ C1] dccp_rcv_state_process+0x116f/0x1935 [ 87.820011][ C1] dccp_v6_do_rcv+0x269/0xbf0 [ 87.824696][ C1] __release_sock+0x12e/0x3a0 [ 87.829380][ C1] release_sock+0x59/0x1c0 [ 87.833800][ C1] __inet_stream_connect+0x59f/0xea0 [ 87.839092][ C1] inet_stream_connect+0x58/0xa0 [ 87.844035][ C1] __sys_connect+0x266/0x330 [ 87.848628][ C1] __x64_sys_connect+0x73/0xb0 [ 87.853395][ C1] do_syscall_64+0x103/0x610 [ 87.857990][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.863880][ C1] [ 87.866208][ C1] Freed by task 8842: [ 87.870196][ C1] save_stack+0x45/0xd0 [ 87.874360][ C1] __kasan_slab_free+0x102/0x150 [ 87.879302][ C1] kasan_slab_free+0xe/0x10 [ 87.883808][ C1] kmem_cache_free+0x86/0x260 [ 87.888499][ C1] ccid_hc_tx_delete+0xc1/0x100 [ 87.893360][ C1] dccp_hdlr_ccid+0x7d/0x150 [ 87.897968][ C1] __dccp_feat_activate+0x17a/0x270 [ 87.903212][ C1] dccp_feat_activate_values+0x33a/0x766 [ 87.908872][ C1] dccp_create_openreq_child+0x40c/0x570 [ 87.914520][ C1] dccp_v6_request_recv_sock+0x214/0x1e80 [ 87.920251][ C1] dccp_check_req+0x35c/0x6f0 [ 87.924944][ C1] dccp_v6_rcv+0x6d7/0x191e [ 87.929471][ C1] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 87.935209][ C1] ip6_input_finish+0x84/0x170 [ 87.939984][ C1] ip6_input+0xe4/0x3f0 [ 87.944410][ C1] ip6_rcv_finish+0x1e7/0x320 [ 87.949096][ C1] ipv6_rcv+0x10e/0x420 [ 87.953257][ C1] __netif_receive_skb_one_core+0x115/0x1a0 [ 87.959158][ C1] __netif_receive_skb+0x2c/0x1c0 [ 87.964188][ C1] process_backlog+0x206/0x750 [ 87.968957][ C1] net_rx_action+0x4fa/0x1070 [ 87.973645][ C1] __do_softirq+0x266/0x95a [ 87.978141][ C1] [ 87.980481][ C1] The buggy address belongs to the object at ffff8880940aee00 [ 87.980481][ C1] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 87.995066][ C1] The buggy address is located 0 bytes inside of [ 87.995066][ C1] 1240-byte region [ffff8880940aee00, ffff8880940af2d8) [ 88.008250][ C1] The buggy address belongs to the page: [ 88.013898][ C1] page:ffffea0002502b80 count:1 mapcount:0 mapping:ffff88809b3de900 index:0x0 compound_mapcount: 0 [ 88.024578][ C1] flags: 0x1fffc0000010200(slab|head) [ 88.029963][ C1] raw: 01fffc0000010200 ffffea000244d088 ffffea0002575b88 ffff88809b3de900 [ 88.038557][ C1] raw: 0000000000000000 ffff8880940ae300 0000000100000005 0000000000000000 [ 88.047140][ C1] page dumped because: kasan: bad access detected [ 88.053551][ C1] [ 88.055882][ C1] Memory state around the buggy address: [ 88.061519][ C1] ffff8880940aed00: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 88.069592][ C1] ffff8880940aed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.077663][ C1] >ffff8880940aee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.085748][ C1] ^ [ 88.089821][ C1] ffff8880940aee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.097952][ C1] ffff8880940aef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.106024][ C1] ================================================================== [ 88.114086][ C1] Disabling lock debugging due to kernel taint [ 88.120306][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 88.126909][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.1.0-rc3+ #47 [ 88.135751][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.145810][ C1] Call Trace: [ 88.149105][ C1] dump_stack+0x172/0x1f0 [ 88.153443][ C1] panic+0x2cb/0x65c [ 88.157349][ C1] ? __warn_printk+0xf3/0xf3 [ 88.162023][ C1] ? retint_kernel+0x2d/0x2d [ 88.166620][ C1] ? trace_hardirqs_on+0x5e/0x230 [ 88.171652][ C1] ? ccid_hc_tx_delete+0xde/0x100 [ 88.176677][ C1] end_report+0x47/0x4f [ 88.180836][ C1] ? ccid_hc_tx_delete+0xde/0x100 [ 88.185884][ C1] kasan_report.cold+0xe/0x40 [ 88.190568][ C1] ? ccid_hc_tx_delete+0xde/0x100 [ 88.195594][ C1] __asan_report_load8_noabort+0x14/0x20 [ 88.201231][ C1] ccid_hc_tx_delete+0xde/0x100 [ 88.206083][ C1] dccp_sk_destruct+0x3f/0x90 [ 88.210761][ C1] ? dccp_init_sock+0x3f0/0x3f0 [ 88.215642][ C1] __sk_destruct+0x55/0x6d0 [ 88.220165][ C1] ? proto_unregister+0x4e0/0x4e0 [ 88.225203][ C1] rcu_core+0x928/0x1390 [ 88.229465][ C1] ? rcu_check_gp_start_stall+0x250/0x250 [ 88.235192][ C1] ? sched_clock+0x2e/0x50 [ 88.239626][ C1] __do_softirq+0x266/0x95a [ 88.244147][ C1] ? __sched_text_start+0x8/0x8 [ 88.249049][ C1] ? takeover_tasklets+0x7b0/0x7b0 [ 88.254179][ C1] run_ksoftirqd+0x8e/0x110 [ 88.258693][ C1] smpboot_thread_fn+0x6ab/0xa10 [ 88.263661][ C1] ? sort_range+0x30/0x30 [ 88.267992][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 88.274235][ C1] ? __kthread_parkme+0xfb/0x1b0 [ 88.279185][ C1] kthread+0x357/0x430 [ 88.283256][ C1] ? sort_range+0x30/0x30 [ 88.287593][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 88.293844][ C1] ret_from_fork+0x3a/0x50 [ 88.299027][ C1] Kernel Offset: disabled [ 88.303349][ C1] Rebooting in 86400 seconds..