[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.449638][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 61.449648][ T27] audit: type=1800 audit(1565144397.813:29): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 61.475514][ T27] audit: type=1800 audit(1565144397.813:30): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.121' (ECDSA) to the list of known hosts. 2019/08/07 02:20:08 parsed 1 programs 2019/08/07 02:20:09 executed programs: 0 syzkaller login: [ 73.620232][ T9551] IPVS: ftp: loaded support on port[0] = 21 [ 73.620861][ T9553] IPVS: ftp: loaded support on port[0] = 21 [ 73.831721][ T9558] IPVS: ftp: loaded support on port[0] = 21 [ 73.831727][ T9556] IPVS: ftp: loaded support on port[0] = 21 [ 73.848038][ T9553] chnl_net:caif_netlink_parms(): no params data found [ 73.857022][ T9551] chnl_net:caif_netlink_parms(): no params data found [ 73.867123][ T9560] IPVS: ftp: loaded support on port[0] = 21 [ 73.896771][ T9561] IPVS: ftp: loaded support on port[0] = 21 [ 73.954303][ T9553] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.962303][ T9553] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.969836][ T9553] device bridge_slave_0 entered promiscuous mode [ 73.979078][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.986217][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.993875][ T9553] device bridge_slave_1 entered promiscuous mode [ 74.024850][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.033092][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.040698][ T9551] device bridge_slave_0 entered promiscuous mode [ 74.050306][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.057399][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.064766][ T9551] device bridge_slave_1 entered promiscuous mode [ 74.090628][ T9551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.101069][ T9551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.124292][ T9553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.140819][ T9551] team0: Port device team_slave_0 added [ 74.147617][ T9551] team0: Port device team_slave_1 added [ 74.182396][ T9553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.205993][ T9556] chnl_net:caif_netlink_parms(): no params data found [ 74.215839][ T9553] team0: Port device team_slave_0 added [ 74.224246][ T9553] team0: Port device team_slave_1 added [ 74.336652][ T9551] device hsr_slave_0 entered promiscuous mode [ 74.385620][ T9551] device hsr_slave_1 entered promiscuous mode [ 74.431493][ T9558] chnl_net:caif_netlink_parms(): no params data found [ 74.506576][ T9553] device hsr_slave_0 entered promiscuous mode [ 74.575548][ T9553] device hsr_slave_1 entered promiscuous mode [ 74.635400][ T9553] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.646536][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.653721][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.661336][ T9556] device bridge_slave_0 entered promiscuous mode [ 74.668530][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.675615][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.683026][ T9556] device bridge_slave_1 entered promiscuous mode [ 74.689889][ T9560] chnl_net:caif_netlink_parms(): no params data found [ 74.721258][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.733231][ T9561] chnl_net:caif_netlink_parms(): no params data found [ 74.746599][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.756136][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.763179][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.770883][ T9558] device bridge_slave_0 entered promiscuous mode [ 74.780310][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.787522][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.794981][ T9558] device bridge_slave_1 entered promiscuous mode [ 74.830627][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.840888][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.852152][ T9556] team0: Port device team_slave_0 added [ 74.858106][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.865145][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.872818][ T9560] device bridge_slave_0 entered promiscuous mode [ 74.879851][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.886921][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.894368][ T9561] device bridge_slave_0 entered promiscuous mode [ 74.903637][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.910698][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.918158][ T9561] device bridge_slave_1 entered promiscuous mode [ 74.926892][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.934051][ T9553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.941376][ T9553] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.948473][ T9553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.956936][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.963970][ T9551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.971262][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.978311][ T9551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.986949][ T3194] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.994395][ T3194] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.002203][ T3194] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.009699][ T3194] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.020111][ T9556] team0: Port device team_slave_1 added [ 75.028881][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.035989][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.043420][ T9560] device bridge_slave_1 entered promiscuous mode [ 75.055412][ T9558] team0: Port device team_slave_0 added [ 75.061696][ T9558] team0: Port device team_slave_1 added [ 75.106687][ T9558] device hsr_slave_0 entered promiscuous mode [ 75.175627][ T9558] device hsr_slave_1 entered promiscuous mode [ 75.235340][ T9558] debugfs: Directory 'hsr0' with parent '/' already present! [ 75.286633][ T9556] device hsr_slave_0 entered promiscuous mode [ 75.335559][ T9556] device hsr_slave_1 entered promiscuous mode [ 75.375390][ T9556] debugfs: Directory 'hsr0' with parent '/' already present! [ 75.389221][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.401247][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.417874][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.444101][ T9561] team0: Port device team_slave_0 added [ 75.452169][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.477090][ T9561] team0: Port device team_slave_1 added [ 75.490965][ T9560] team0: Port device team_slave_0 added [ 75.503345][ T9560] team0: Port device team_slave_1 added [ 75.577601][ T9560] device hsr_slave_0 entered promiscuous mode [ 75.615619][ T9560] device hsr_slave_1 entered promiscuous mode [ 75.655363][ T9560] debugfs: Directory 'hsr0' with parent '/' already present! [ 75.697627][ T9561] device hsr_slave_0 entered promiscuous mode [ 75.735671][ T9561] device hsr_slave_1 entered promiscuous mode [ 75.775382][ T9561] debugfs: Directory 'hsr0' with parent '/' already present! [ 75.796633][ T9553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.821059][ T9551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.857413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.864906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.874631][ T9553] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.900775][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.909909][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.918569][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.925664][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.933189][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.942087][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.950436][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.957502][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.977059][ T9551] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.984183][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.992063][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.010984][ T9553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.021546][ T9553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.035477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.043906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.052369][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.061560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.069849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.078143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.086428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.094467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.102634][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.110705][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.118784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.127366][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.135724][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.142740][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.151228][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.158977][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.168446][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.194372][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.202563][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.211370][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.220603][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.227675][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.236158][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.243633][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.251204][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.261404][ T9553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.281509][ T9556] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.290693][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.301665][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.310193][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.318549][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.327032][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.337172][ T9558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.344505][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.365530][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.373994][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.383114][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.390328][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.398427][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.406690][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.414753][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.423480][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.431845][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.438929][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.446534][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.458073][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.467819][ T9551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.479603][ T9551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.491035][ T9561] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.501780][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.510280][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.518835][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.526412][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.538412][ T9560] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.545329][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.552844][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.573421][ T9558] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.596503][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.605115][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.615938][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.624413][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.633102][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.641527][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.649829][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.658032][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.666139][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.673596][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.681233][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.689828][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.698219][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.705236][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.712835][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.721289][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.729744][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.736820][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.744260][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.752693][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.760905][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.767966][ T9568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.775489][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.783970][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.792645][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.799715][ T9568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.807401][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.815930][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.824198][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.832535][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.840904][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.849344][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.858168][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.866029][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.873757][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.881719][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.893362][ T9556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.904578][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.928502][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.945140][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.953762][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.967002][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.975178][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.984761][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.993319][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.001910][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.010077][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.018412][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.027333][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.043367][ T9560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.062307][ T9560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.080606][ T9551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.088613][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.104716][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.120290][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.135986][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.144282][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.151378][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.159149][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.167457][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.182720][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.191234][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.199596][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.206721][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.214149][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.222407][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.230558][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.240408][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.248415][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.256264][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.286388][ T9556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.311429][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.331744][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.344534][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.353223][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.361704][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.374368][ T9558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.385894][ T9558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.400772][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.408137][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.416731][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.424997][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.433730][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.450186][ T9558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.460873][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.471350][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2019/08/07 02:20:14 executed programs: 66 2019/08/07 02:20:19 executed programs: 356 [ 85.646118][T11441] ================================================================== [ 85.654254][T11441] BUG: KASAN: use-after-free in sk_psock_unlink+0x4fa/0x580 [ 85.661904][T11441] Read of size 4 at addr ffff8880a9241318 by task syz-executor.2/11441 [ 85.670142][T11441] [ 85.672642][T11441] CPU: 1 PID: 11441 Comm: syz-executor.2 Not tainted 5.3.0-rc3+ #66 [ 85.681008][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.691290][T11441] Call Trace: [ 85.694599][T11441] dump_stack+0x1d8/0x2f8 [ 85.699123][T11441] print_address_description+0x75/0x5b0 [ 85.704689][T11441] ? vprintk_func+0x158/0x170 [ 85.709384][T11441] ? printk+0x62/0x8d [ 85.713383][T11441] ? vprintk_emit+0x2d4/0x3a0 [ 85.718263][T11441] __kasan_report+0x14b/0x1c0 [ 85.722959][T11441] ? sk_psock_unlink+0x4fa/0x580 [ 85.727915][T11441] kasan_report+0x26/0x50 [ 85.732281][T11441] ? __local_bh_enable_ip+0x17d/0x240 [ 85.737840][T11441] __asan_report_load4_noabort+0x14/0x20 [ 85.737851][T11441] sk_psock_unlink+0x4fa/0x580 [ 85.737862][T11441] ? sk_psock_link_pop+0x135/0x150 [ 85.737870][T11441] ? tcp_check_oom+0x370/0x370 [ 85.737887][T11441] tcp_bpf_close+0x183/0x2f0 [ 85.748375][T11441] inet_release+0x165/0x1c0 [ 85.748389][T11441] inet6_release+0x57/0x70 [ 85.748403][T11441] sock_close+0xe1/0x260 [ 85.758457][T11441] ? sock_mmap+0xa0/0xa0 [ 85.758468][T11441] __fput+0x2e4/0x740 [ 85.758483][T11441] ____fput+0x15/0x20 [ 85.758494][T11441] task_work_run+0x17e/0x1b0 [ 85.758510][T11441] prepare_exit_to_usermode+0x459/0x580 [ 85.767695][T11441] syscall_return_slowpath+0x113/0x4a0 [ 85.776620][T11441] do_syscall_64+0x126/0x140 [ 85.776639][T11441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.776660][T11441] RIP: 0033:0x413511 [ 85.784914][T11441] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 85.784920][T11441] RSP: 002b:00007ffda45bdee0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 85.784929][T11441] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 85.784940][T11441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 85.793718][T11441] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 85.793724][T11441] R10: 00007ffda45bdfc0 R11: 0000000000000293 R12: 000000000075bf20 [ 85.793730][T11441] R13: 0000000000014e73 R14: 00000000007610a8 R15: ffffffffffffffff [ 85.793742][T11441] [ 85.793748][T11441] Allocated by task 11451: [ 85.793760][T11441] __kasan_kmalloc+0x11c/0x1b0 [ 85.793777][T11441] kasan_kmalloc+0x9/0x10 [ 85.804930][T11441] kmem_cache_alloc_trace+0x221/0x2f0 [ 85.804942][T11441] sock_map_alloc+0x152/0x350 [ 85.804957][T11441] __do_sys_bpf+0x34d3/0xbf20 [ 85.815443][T11441] __x64_sys_bpf+0x7a/0x90 [ 85.815454][T11441] do_syscall_64+0xfe/0x140 [ 85.815465][T11441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.815468][T11441] [ 85.815473][T11441] Freed by task 9646: [ 85.815482][T11441] __kasan_slab_free+0x12a/0x1e0 [ 85.815494][T11441] kasan_slab_free+0xe/0x10 [ 85.948433][T11441] kfree+0x115/0x200 [ 85.952306][T11441] sock_map_free+0x276/0x2b0 [ 85.956870][T11441] bpf_map_free_deferred+0xb4/0x120 [ 85.962040][T11441] process_one_work+0x7ef/0x10e0 [ 85.966956][T11441] worker_thread+0xc01/0x1630 [ 85.971607][T11441] kthread+0x332/0x350 [ 85.975678][T11441] ret_from_fork+0x24/0x30 [ 85.980082][T11441] [ 85.982416][T11441] The buggy address belongs to the object at ffff8880a9241300 [ 85.982416][T11441] which belongs to the cache kmalloc-512 of size 512 [ 85.996441][T11441] The buggy address is located 24 bytes inside of [ 85.996441][T11441] 512-byte region [ffff8880a9241300, ffff8880a9241500) [ 86.009593][T11441] The buggy address belongs to the page: [ 86.015217][T11441] page:ffffea0002a49040 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0x0 [ 86.024309][T11441] flags: 0x1fffc0000000200(slab) [ 86.029224][T11441] raw: 01fffc0000000200 ffffea00027e0248 ffffea00023fd648 ffff8880aa400a80 [ 86.037785][T11441] raw: 0000000000000000 ffff8880a9241080 0000000100000006 0000000000000000 [ 86.046345][T11441] page dumped because: kasan: bad access detected [ 86.052835][T11441] [ 86.055143][T11441] Memory state around the buggy address: [ 86.060753][T11441] ffff8880a9241200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.068786][T11441] ffff8880a9241280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.076822][T11441] >ffff8880a9241300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.084857][T11441] ^ [ 86.089677][T11441] ffff8880a9241380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.097732][T11441] ffff8880a9241400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.105776][T11441] ================================================================== [ 86.174936][T11441] Kernel panic - not syncing: panic_on_warn set ... [ 86.181569][T11441] CPU: 1 PID: 11441 Comm: syz-executor.2 Tainted: G B 5.3.0-rc3+ #66 [ 86.190928][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.200984][T11441] Call Trace: [ 86.204271][T11441] dump_stack+0x1d8/0x2f8 [ 86.208604][T11441] panic+0x25c/0x799 [ 86.212502][T11441] ? __kasan_report+0x195/0x1c0 [ 86.216176][ T3909] kobject: 'loop3' (00000000425263d1): kobject_uevent_env [ 86.217375][T11441] ? trace_hardirqs_on+0x34/0x80 [ 86.224497][ T3909] kobject: 'loop3' (00000000425263d1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 86.229393][T11441] ? __kasan_report+0x195/0x1c0 [ 86.229403][T11441] __kasan_report+0x1bb/0x1c0 [ 86.229416][T11441] ? sk_psock_unlink+0x4fa/0x580 [ 86.229426][T11441] kasan_report+0x26/0x50 [ 86.229443][T11441] ? __local_bh_enable_ip+0x17d/0x240 [ 86.263673][T11441] __asan_report_load4_noabort+0x14/0x20 [ 86.269305][T11441] sk_psock_unlink+0x4fa/0x580 [ 86.274072][T11441] ? sk_psock_link_pop+0x135/0x150 [ 86.279180][T11441] ? tcp_check_oom+0x370/0x370 [ 86.283919][T11441] tcp_bpf_close+0x183/0x2f0 [ 86.288490][T11441] inet_release+0x165/0x1c0 [ 86.292971][T11441] inet6_release+0x57/0x70 [ 86.297382][T11441] sock_close+0xe1/0x260 [ 86.301601][T11441] ? sock_mmap+0xa0/0xa0 [ 86.305821][T11441] __fput+0x2e4/0x740 [ 86.309795][T11441] ____fput+0x15/0x20 [ 86.313754][T11441] task_work_run+0x17e/0x1b0 [ 86.318320][T11441] prepare_exit_to_usermode+0x459/0x580 [ 86.323845][T11441] syscall_return_slowpath+0x113/0x4a0 [ 86.329278][T11441] do_syscall_64+0x126/0x140 [ 86.333846][T11441] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.339711][T11441] RIP: 0033:0x413511 [ 86.343611][T11441] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 86.366917][T11441] RSP: 002b:00007ffda45bdee0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 86.375318][T11441] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 86.383678][T11441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 86.391641][T11441] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 86.399617][T11441] R10: 00007ffda45bdfc0 R11: 0000000000000293 R12: 000000000075bf20 [ 86.407572][T11441] R13: 0000000000014e73 R14: 00000000007610a8 R15: ffffffffffffffff [ 86.416399][T11441] Kernel Offset: disabled [ 86.420734][T11441] Rebooting in 86400 seconds..