[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 46.477135][ T7320] IPVS: ftp: loaded support on port[0] = 21 [ 46.889009][ T7308] can: request_module (can-proto-0) failed. [ 47.918145][ T7308] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.54' (ECDSA) to the list of known hosts. 2019/07/08 11:52:17 parsed 1 programs 2019/07/08 11:52:18 executed programs: 0 [ 56.230627][ T7395] IPVS: ftp: loaded support on port[0] = 21 [ 56.263846][ T7399] IPVS: ftp: loaded support on port[0] = 21 [ 56.267499][ T7398] IPVS: ftp: loaded support on port[0] = 21 [ 56.337309][ T7403] IPVS: ftp: loaded support on port[0] = 21 [ 56.378230][ T7404] IPVS: ftp: loaded support on port[0] = 21 [ 56.379221][ T7405] IPVS: ftp: loaded support on port[0] = 21 [ 56.402919][ T7395] chnl_net:caif_netlink_parms(): no params data found [ 56.473610][ T7398] chnl_net:caif_netlink_parms(): no params data found [ 56.500762][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.509344][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.517301][ T7395] device bridge_slave_0 entered promiscuous mode [ 56.526641][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.533926][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.541280][ T7395] device bridge_slave_1 entered promiscuous mode [ 56.603106][ T7395] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.614353][ T7395] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.623088][ T7403] chnl_net:caif_netlink_parms(): no params data found [ 56.638897][ T7395] team0: Port device team_slave_0 added [ 56.646923][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.654053][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.661443][ T7398] device bridge_slave_0 entered promiscuous mode [ 56.669760][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.676856][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.684419][ T7398] device bridge_slave_1 entered promiscuous mode [ 56.694331][ T7395] team0: Port device team_slave_1 added [ 56.705481][ T7399] chnl_net:caif_netlink_parms(): no params data found [ 56.762961][ T7395] device hsr_slave_0 entered promiscuous mode [ 56.821842][ T7395] device hsr_slave_1 entered promiscuous mode [ 56.893695][ T7398] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.936344][ T7399] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.945716][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.953242][ T7399] device bridge_slave_0 entered promiscuous mode [ 56.961022][ T7398] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.974447][ T7405] chnl_net:caif_netlink_parms(): no params data found [ 56.996436][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.003658][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.011065][ T7399] device bridge_slave_1 entered promiscuous mode [ 57.020351][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.027517][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.035065][ T7403] device bridge_slave_0 entered promiscuous mode [ 57.042502][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.049526][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.057066][ T7403] device bridge_slave_1 entered promiscuous mode [ 57.076918][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.084469][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.093910][ T7405] device bridge_slave_0 entered promiscuous mode [ 57.103743][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.110771][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.118479][ T7405] device bridge_slave_1 entered promiscuous mode [ 57.136345][ T7403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.148906][ T7403] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.159931][ T7399] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.169981][ T7398] team0: Port device team_slave_0 added [ 57.179091][ T7398] team0: Port device team_slave_1 added [ 57.194182][ T7399] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.210166][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.217262][ T7395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.224918][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.231962][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.243298][ T7405] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.256619][ T7405] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.272470][ T7403] team0: Port device team_slave_0 added [ 57.333664][ T7398] device hsr_slave_0 entered promiscuous mode [ 57.381826][ T7398] device hsr_slave_1 entered promiscuous mode [ 57.446272][ T7403] team0: Port device team_slave_1 added [ 57.457001][ T7404] chnl_net:caif_netlink_parms(): no params data found [ 57.466642][ T7399] team0: Port device team_slave_0 added [ 57.473708][ T7399] team0: Port device team_slave_1 added [ 57.480036][ T7405] team0: Port device team_slave_0 added [ 57.486938][ T7405] team0: Port device team_slave_1 added [ 57.494790][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.502784][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.582974][ T7403] device hsr_slave_0 entered promiscuous mode [ 57.622113][ T7403] device hsr_slave_1 entered promiscuous mode [ 57.732861][ T7405] device hsr_slave_0 entered promiscuous mode [ 57.781967][ T7405] device hsr_slave_1 entered promiscuous mode [ 57.904152][ T7399] device hsr_slave_0 entered promiscuous mode [ 57.971915][ T7399] device hsr_slave_1 entered promiscuous mode [ 58.050062][ T7404] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.057847][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.065920][ T7404] device bridge_slave_0 entered promiscuous mode [ 58.073734][ T7404] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.080758][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.088246][ T7404] device bridge_slave_1 entered promiscuous mode [ 58.115584][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.128323][ T7404] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.144266][ T7404] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.161195][ T7404] team0: Port device team_slave_0 added [ 58.168845][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.181647][ T7403] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.195046][ T7404] team0: Port device team_slave_1 added [ 58.203268][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.211274][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.219862][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.228430][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.236828][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.243880][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.251920][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.267036][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.278383][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.285976][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.304407][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.313854][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.323468][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.330490][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.338200][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.346820][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.355335][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.363624][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.370633][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.378159][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.453227][ T7404] device hsr_slave_0 entered promiscuous mode [ 58.492103][ T7404] device hsr_slave_1 entered promiscuous mode [ 58.546349][ T7395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.557008][ T7395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.573262][ T7405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.584113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.592544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.600693][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.607758][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.615365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.623988][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.632326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.640630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.648824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.657256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.665854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.674122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.682904][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.690962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.699225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.707928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.716325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.724669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.733519][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.741018][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.748636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.762396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.770449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.778980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.787526][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.804720][ T7405] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.813265][ T7403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.825502][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.833261][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.845890][ T7399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.859726][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.876475][ T7399] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.907459][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.916111][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.924384][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.932160][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.940461][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.948960][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.956020][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.963862][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.972775][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.980934][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.988077][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.995539][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.004004][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.012736][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.030184][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.041210][ T7398] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.061195][ T7405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.073255][ T7405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.090571][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.099594][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.109276][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.116354][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.123908][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.132860][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.141027][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.148653][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.156161][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.164576][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.172813][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.180979][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.189226][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.196776][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.204218][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.214160][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.222521][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.230740][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.239056][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.247300][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.255413][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.263755][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.272088][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.279746][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.287339][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.295073][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.329352][ T7405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.343841][ T7404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.359065][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.368080][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.376771][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.383836][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.397735][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.406504][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.414928][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.421992][ T7411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.429325][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.437965][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.446413][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.455302][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.463595][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.472194][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.480647][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.491047][ T7399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.503354][ T7399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.623692][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.643228][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.651426][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.671175][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.688703][ T7399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.727133][ T7398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.766469][ T7398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.795168][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.807382][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.832478][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.840754][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.850205][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.859498][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.868222][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.876700][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.884570][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.892942][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.906250][ T7404] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.047102][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.067943][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.077480][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.090887][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.097973][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.117424][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.131859][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.140785][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.147866][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.160633][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.179923][ T7404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.195527][ T7404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.216890][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.249451][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.269650][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.278889][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.295502][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.305083][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.318203][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.327102][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.335984][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.344522][ T7413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.452733][ T7476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.466175][ T7476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.480894][ T7404] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/08 11:52:23 executed programs: 9 2019/07/08 11:52:28 executed programs: 21 2019/07/08 11:52:34 executed programs: 41 2019/07/08 11:52:39 executed programs: 56 2019/07/08 11:52:44 executed programs: 69 2019/07/08 11:52:49 executed programs: 81 2019/07/08 11:52:54 executed programs: 93 2019/07/08 11:52:59 executed programs: 108 2019/07/08 11:53:04 executed programs: 121 2019/07/08 11:53:10 executed programs: 134 2019/07/08 11:53:15 executed programs: 148 2019/07/08 11:53:20 executed programs: 160 2019/07/08 11:53:25 executed programs: 175 2019/07/08 11:53:30 executed programs: 191 2019/07/08 11:53:35 executed programs: 206 2019/07/08 11:53:41 executed programs: 220 2019/07/08 11:53:46 executed programs: 234 2019/07/08 11:53:51 executed programs: 251 2019/07/08 11:53:56 executed programs: 264 2019/07/08 11:54:02 executed programs: 280 2019/07/08 11:54:07 executed programs: 295 2019/07/08 11:54:12 executed programs: 309 2019/07/08 11:54:17 executed programs: 322 2019/07/08 11:54:23 executed programs: 336 2019/07/08 11:54:28 executed programs: 349 2019/07/08 11:54:33 executed programs: 363 2019/07/08 11:54:38 executed programs: 376 2019/07/08 11:54:43 executed programs: 391 2019/07/08 11:54:48 executed programs: 405 2019/07/08 11:54:54 executed programs: 418 2019/07/08 11:54:59 executed programs: 432 2019/07/08 11:55:04 executed programs: 446 2019/07/08 11:55:09 executed programs: 460 2019/07/08 11:55:14 executed programs: 475 2019/07/08 11:55:20 executed programs: 489 2019/07/08 11:55:25 executed programs: 503 2019/07/08 11:55:30 executed programs: 517 2019/07/08 11:55:36 executed programs: 530 2019/07/08 11:55:41 executed programs: 544 2019/07/08 11:55:46 executed programs: 558 2019/07/08 11:55:51 executed programs: 573 2019/07/08 11:55:57 executed programs: 586 2019/07/08 11:56:02 executed programs: 600 2019/07/08 11:56:07 executed programs: 614 2019/07/08 11:56:12 executed programs: 629 2019/07/08 11:56:18 executed programs: 643 2019/07/08 11:56:23 executed programs: 655 2019/07/08 11:56:28 executed programs: 670 2019/07/08 11:56:33 executed programs: 684 2019/07/08 11:56:38 executed programs: 698 2019/07/08 11:56:44 executed programs: 711 2019/07/08 11:56:49 executed programs: 724 2019/07/08 11:56:54 executed programs: 741 2019/07/08 11:56:59 executed programs: 756 2019/07/08 11:57:04 executed programs: 771 2019/07/08 11:57:10 executed programs: 785 2019/07/08 11:57:15 executed programs: 798 2019/07/08 11:57:20 executed programs: 810 2019/07/08 11:57:25 executed programs: 825 2019/07/08 11:57:31 executed programs: 840 2019/07/08 11:57:36 executed programs: 855 2019/07/08 11:57:42 executed programs: 871 2019/07/08 11:57:47 executed programs: 884 2019/07/08 11:57:52 executed programs: 898 2019/07/08 11:57:57 executed programs: 910 2019/07/08 11:58:03 executed programs: 923 2019/07/08 11:58:08 executed programs: 935 2019/07/08 11:58:14 executed programs: 948 2019/07/08 11:58:19 executed programs: 961 2019/07/08 11:58:25 executed programs: 973 [ 426.961892][ C1] ------------[ cut here ]------------ [ 426.967847][ C1] refcount_t: increment on 0; use-after-free. [ 426.974051][ C1] WARNING: CPU: 1 PID: 7289 at lib/refcount.c:156 refcount_inc_checked+0x2b/0x30 [ 426.983151][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 426.989736][ C1] CPU: 1 PID: 7289 Comm: udevd Not tainted 5.2.0-rc6+ #1 [ 426.996739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.006779][ C1] Call Trace: [ 427.010051][ C1] [ 427.012897][ C1] dump_stack+0x113/0x167 [ 427.017218][ C1] ? refcount_inc_checked+0x2b/0x30 [ 427.022407][ C1] panic+0x212/0x4cb [ 427.026290][ C1] ? __warn_printk+0xd6/0xd6 [ 427.030876][ C1] __warn.cold.8+0x1b/0x38 [ 427.035282][ C1] ? refcount_inc_checked+0x2b/0x30 [ 427.040465][ C1] report_bug+0x1a4/0x200 [ 427.044783][ C1] do_error_trap+0x11b/0x200 [ 427.049364][ C1] do_invalid_op+0x36/0x40 [ 427.053767][ C1] ? refcount_inc_checked+0x2b/0x30 [ 427.058951][ C1] invalid_op+0x14/0x20 [ 427.063092][ C1] RIP: 0010:refcount_inc_checked+0x2b/0x30 [ 427.068885][ C1] Code: 48 89 e5 e8 97 fe ff ff 84 c0 74 02 5d c3 80 3d c3 b1 f2 05 00 75 f5 48 c7 c7 40 51 41 87 c6 05 b3 b1 f2 05 01 e8 b8 a9 3d fe <0f> 0b 5d c3 90 55 48 89 e5 41 56 41 55 49 89 fd 48 c7 c7 a0 51 41 [ 427.088474][ C1] RSP: 0018:ffff8880aeb09c10 EFLAGS: 00010286 [ 427.094651][ C1] RAX: 0000000000000000 RBX: ffff8880988bb500 RCX: 0000000000000000 [ 427.102608][ C1] RDX: 0000000000000004 RSI: ffff888098e7c968 RDI: ffffffff89d55d40 [ 427.110568][ C1] RBP: ffff8880aeb09c10 R08: 0000000000000002 R09: 0000000000000000 [ 427.119051][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a764ac00 [ 427.127011][ C1] R13: ffff8880988bb568 R14: 000000000000000d R15: ffff8880988bb99e [ 427.134991][ C1] nr_insert_socket+0x28/0xd0 [ 427.139672][ C1] nr_rx_frame+0x160f/0x1f00 [ 427.144253][ C1] ? lock_downgrade+0x860/0x860 [ 427.149100][ C1] nr_loopback_timer+0x64/0x120 [ 427.153941][ C1] call_timer_fn+0x14d/0x510 [ 427.158519][ C1] ? nr_process_rx_frame+0x1280/0x1280 [ 427.163971][ C1] ? process_timeout+0x40/0x40 [ 427.168734][ C1] ? _raw_spin_unlock_irq+0x27/0x80 [ 427.173917][ C1] ? trace_hardirqs_on+0x28/0x190 [ 427.178926][ C1] ? kasan_check_read+0x11/0x20 [ 427.183766][ C1] ? nr_process_rx_frame+0x1280/0x1280 [ 427.189210][ C1] run_timer_softirq+0xc6f/0x1330 [ 427.194223][ C1] ? add_timer+0x730/0x730 [ 427.198626][ C1] ? kvm_clock_read+0x18/0x30 [ 427.203288][ C1] ? kvm_sched_clock_read+0x9/0x20 [ 427.208387][ C1] ? sched_clock+0x31/0x40 [ 427.212790][ C1] ? __do_softirq+0x1f9/0x958 [ 427.217462][ C1] __do_softirq+0x260/0x958 [ 427.221954][ C1] ? sched_clock_cpu+0x1b/0x1b0 [ 427.226806][ C1] irq_exit+0x17f/0x1c0 [ 427.230948][ C1] smp_apic_timer_interrupt+0x13e/0x540 [ 427.236487][ C1] apic_timer_interrupt+0xf/0x20 [ 427.241408][ C1] [ 427.244337][ C1] RIP: 0010:sockfd_lookup_light+0x1/0x150 [ 427.250044][ C1] Code: 8b 55 e8 8b 75 ec e9 64 ff ff ff 89 55 ec e8 a6 ad 7a fc 8b 55 ec eb be 83 c8 ff c3 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 <48> 89 e5 41 57 41 56 41 55 49 89 d5 41 54 53 48 89 f3 48 83 ec 08 [ 427.269635][ C1] RSP: 0018:ffff88808f587d90 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 427.278034][ C1] RAX: 0000000000000000 RBX: 1ffff11011eb0fb4 RCX: 0000000000000001 [ 427.285993][ C1] RDX: ffff88808f587dc0 RSI: ffff88808f587e00 RDI: 000000000000000b [ 427.293956][ C1] RBP: ffff88808f587ee8 R08: 0000000000000006 R09: 0000000000000000 [ 427.301912][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808f587ec0 [ 427.309868][ C1] R13: 00007ffebf9d0240 R14: ffff888098e7c0c0 R15: 0000000000000000 [ 427.317849][ C1] ? __sys_sendmsg+0xb4/0x180 [ 427.322515][ C1] ? __ia32_sys_shutdown+0x70/0x70 [ 427.327611][ C1] ? __do_page_fault+0x40d/0xa20 [ 427.332533][ C1] ? lock_downgrade+0x860/0x860 [ 427.337371][ C1] ? kasan_check_read+0x11/0x20 [ 427.342214][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.347660][ C1] ? do_syscall_64+0x21/0x530 [ 427.352335][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.358396][ C1] __x64_sys_sendmsg+0x73/0xb0 [ 427.363147][ C1] do_syscall_64+0xd0/0x530 [ 427.367637][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.373520][ C1] RIP: 0033:0x7f386ac46320 [ 427.377919][ C1] Code: 02 48 83 c8 ff eb 8d 48 8b 05 14 7b 2a 00 f7 da 64 89 10 48 83 c8 ff eb c9 90 83 3d d5 d2 2a 00 00 75 10 b8 2e 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e ba 00 00 48 89 04 24 [ 427.397514][ C1] RSP: 002b:00007ffebf9d01f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.405914][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f386ac46320 [ 427.411597][ T3130] ================================================================== [ 427.413867][ C1] RDX: 0000000000000000 RSI: 00007ffebf9d0240 RDI: 000000000000000b [ 427.413874][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffebf9d4080 [ 427.421962][ T3130] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x72/0x160 [ 427.430064][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000011729f0 [ 427.430068][ C1] R13: 000000000000009b R14: 0000000000000000 R15: 000000000000000b [ 427.438010][ T3130] Read of size 4 at addr ffff8880988bb580 by task syz-executor.1/3130 [ 427.470391][ T3130] [ 427.472694][ T3130] CPU: 0 PID: 3130 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #1 [ 427.480462][ T3130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.490488][ T3130] Call Trace: [ 427.493759][ T3130] dump_stack+0x113/0x167 [ 427.498089][ T3130] print_address_description.cold.5+0x9/0x1ff [ 427.504130][ T3130] ? refcount_inc_not_zero_checked+0x72/0x160 [ 427.510162][ T3130] __kasan_report.cold.6+0x1b/0x39 [ 427.515241][ T3130] ? refcount_inc_not_zero_checked+0x72/0x160 [ 427.521276][ T3130] ? refcount_inc_not_zero_checked+0x72/0x160 [ 427.527391][ T3130] kasan_report+0x12/0x20 [ 427.531704][ T3130] check_memory_region+0x13e/0x1b0 [ 427.536785][ T3130] kasan_check_read+0x11/0x20 [ 427.541434][ T3130] refcount_inc_not_zero_checked+0x72/0x160 [ 427.547384][ T3130] ? refcount_dec_and_mutex_lock+0x50/0x50 [ 427.553160][ T3130] ? lock_acquire+0x173/0x3d0 [ 427.557808][ T3130] ? __sock_release+0x7d/0x290 [ 427.562545][ T3130] refcount_inc_checked+0x9/0x30 [ 427.567455][ T3130] nr_release+0x53/0x360 [ 427.571680][ T3130] __sock_release+0xc2/0x290 [ 427.576242][ T3130] sock_close+0x10/0x20 [ 427.580369][ T3130] __fput+0x25a/0x770 [ 427.584326][ T3130] ? _raw_spin_unlock_irq+0x27/0x80 [ 427.589496][ T3130] ____fput+0x9/0x10 [ 427.593360][ T3130] task_work_run+0x108/0x180 [ 427.598011][ T3130] exit_to_usermode_loop+0x1a9/0x200 [ 427.603265][ T3130] do_syscall_64+0x447/0x530 [ 427.607825][ T3130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.613685][ T3130] RIP: 0033:0x4134b1 [ 427.617553][ T3130] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 427.637127][ T3130] RSP: 002b:00007ffef1ef9680 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 427.645507][ T3130] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004134b1 [ 427.653450][ T3130] RDX: 0000001b32120000 RSI: 0000000000000000 RDI: 0000000000000003 [ 427.661394][ T3130] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 427.669336][ T3130] R10: 00007ffef1ef9760 R11: 0000000000000293 R12: 000000000075c9a0 [ 427.677277][ T3130] R13: 000000000075c9a0 R14: 0000000000760d88 R15: ffffffffffffffff [ 427.685225][ T3130] [ 427.687539][ T3130] Allocated by task 7289: [ 427.691841][ T3130] save_stack+0x21/0x90 [ 427.695966][ T3130] __kasan_kmalloc.constprop.8+0xc7/0xd0 [ 427.701566][ T3130] kasan_kmalloc+0x9/0x10 [ 427.705866][ T3130] __kmalloc+0x15d/0x760 [ 427.710077][ T3130] sk_prot_alloc+0x148/0x240 [ 427.714635][ T3130] sk_alloc+0x30/0xc70 [ 427.718671][ T3130] nr_rx_frame+0x645/0x1f00 [ 427.723140][ T3130] nr_loopback_timer+0x64/0x120 [ 427.727963][ T3130] call_timer_fn+0x14d/0x510 [ 427.732518][ T3130] run_timer_softirq+0xc6f/0x1330 [ 427.737511][ T3130] __do_softirq+0x260/0x958 [ 427.741978][ T3130] [ 427.744276][ T3130] Freed by task 3137: [ 427.748226][ T3130] save_stack+0x21/0x90 [ 427.752358][ T3130] __kasan_slab_free+0x102/0x150 [ 427.757263][ T3130] kasan_slab_free+0xe/0x10 [ 427.761745][ T3130] kfree+0xcf/0x220 [ 427.765519][ T3130] __sk_destruct+0x3f1/0x580 [ 427.770076][ T3130] sk_destruct+0x49/0x60 [ 427.774297][ T3130] __sk_free+0x9e/0x230 [ 427.778424][ T3130] sk_free+0x23/0x30 [ 427.782287][ T3130] sock_efree+0x42/0x50 [ 427.786416][ T3130] skb_release_head_state+0x9f/0x1a0 [ 427.791668][ T3130] skb_release_all+0xd/0x50 [ 427.796138][ T3130] kfree_skb+0x97/0x270 [ 427.800261][ T3130] nr_accept+0x487/0x690 [ 427.804474][ T3130] __sys_accept4+0x32b/0x6b0 [ 427.809031][ T3130] __x64_sys_accept+0x70/0xb0 [ 427.813677][ T3130] do_syscall_64+0xd0/0x530 [ 427.818157][ T3130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.824021][ T3130] [ 427.826324][ T3130] The buggy address belongs to the object at ffff8880988bb500 [ 427.826324][ T3130] which belongs to the cache kmalloc-2k of size 2048 [ 427.840344][ T3130] The buggy address is located 128 bytes inside of [ 427.840344][ T3130] 2048-byte region [ffff8880988bb500, ffff8880988bbd00) [ 427.853664][ T3130] The buggy address belongs to the page: [ 427.859272][ T3130] page:ffffea0002622e80 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0 compound_mapcount: 0 [ 427.870183][ T3130] flags: 0x1fffc0000010200(slab|head) [ 427.875536][ T3130] raw: 01fffc0000010200 ffffea000297f688 ffffea0001daa688 ffff8880aa400c40 [ 427.884086][ T3130] raw: 0000000000000000 ffff8880988ba400 0000000100000003 0000000000000000 [ 427.892636][ T3130] page dumped because: kasan: bad access detected [ 427.899025][ T3130] [ 427.901323][ T3130] Memory state around the buggy address: [ 427.906922][ T3130] ffff8880988bb480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 427.914950][ T3130] ffff8880988bb500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 427.922977][ T3130] >ffff8880988bb580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 427.931091][ T3130] ^ [ 427.935128][ T3130] ffff8880988bb600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 427.943158][ T3130] ffff8880988bb680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 427.951185][ T3130] ================================================================== [ 427.959211][ T3130] Disabling lock debugging due to kernel taint [ 427.966474][ C1] Kernel Offset: disabled [ 427.970783][ C1] Rebooting in 86400 seconds..