[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.205144][ T26] audit: type=1800 audit(1569548122.675:25): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.245543][ T26] audit: type=1800 audit(1569548122.675:26): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 59.290507][ T26] audit: type=1800 audit(1569548122.675:27): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. 2019/09/27 01:35:33 parsed 1 programs 2019/09/27 01:35:35 executed programs: 0 syzkaller login: [ 72.605165][ T8760] IPVS: ftp: loaded support on port[0] = 21 [ 72.618870][ T8764] IPVS: ftp: loaded support on port[0] = 21 [ 72.620183][ T8757] IPVS: ftp: loaded support on port[0] = 21 [ 72.638314][ T8761] IPVS: ftp: loaded support on port[0] = 21 [ 72.654117][ T8765] IPVS: ftp: loaded support on port[0] = 21 [ 72.728948][ T8767] IPVS: ftp: loaded support on port[0] = 21 [ 72.921491][ T8760] chnl_net:caif_netlink_parms(): no params data found [ 72.936975][ T8761] chnl_net:caif_netlink_parms(): no params data found [ 72.954985][ T8757] chnl_net:caif_netlink_parms(): no params data found [ 73.000562][ T8760] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.008763][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.017218][ T8760] device bridge_slave_0 entered promiscuous mode [ 73.027698][ T8760] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.035170][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.042984][ T8760] device bridge_slave_1 entered promiscuous mode [ 73.079365][ T8760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.118408][ T8760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.138678][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.146057][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.154252][ T8761] device bridge_slave_0 entered promiscuous mode [ 73.165020][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.172246][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.180040][ T8761] device bridge_slave_1 entered promiscuous mode [ 73.246920][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.254019][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.262585][ T8757] device bridge_slave_0 entered promiscuous mode [ 73.274969][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.282644][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.290668][ T8757] device bridge_slave_1 entered promiscuous mode [ 73.326303][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.340142][ T8760] team0: Port device team_slave_0 added [ 73.348098][ T8765] chnl_net:caif_netlink_parms(): no params data found [ 73.364518][ T8757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.381010][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.396398][ T8760] team0: Port device team_slave_1 added [ 73.405712][ T8767] chnl_net:caif_netlink_parms(): no params data found [ 73.416095][ T8757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.428722][ T8764] chnl_net:caif_netlink_parms(): no params data found [ 73.445128][ T8761] team0: Port device team_slave_0 added [ 73.460083][ T8761] team0: Port device team_slave_1 added [ 73.578790][ T8761] device hsr_slave_0 entered promiscuous mode [ 73.616841][ T8761] device hsr_slave_1 entered promiscuous mode [ 73.670394][ T8757] team0: Port device team_slave_0 added [ 73.718399][ T8760] device hsr_slave_0 entered promiscuous mode [ 73.765703][ T8760] device hsr_slave_1 entered promiscuous mode [ 73.825510][ T8760] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.843344][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.851031][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.859053][ T8765] device bridge_slave_0 entered promiscuous mode [ 73.868211][ T8757] team0: Port device team_slave_1 added [ 73.873973][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.881297][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.889308][ T8765] device bridge_slave_1 entered promiscuous mode [ 73.901194][ T8764] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.908576][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.916448][ T8764] device bridge_slave_0 entered promiscuous mode [ 73.948790][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.958391][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.967028][ T8764] device bridge_slave_1 entered promiscuous mode [ 73.974336][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.982055][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.989986][ T8767] device bridge_slave_0 entered promiscuous mode [ 74.002525][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.009702][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.019296][ T8767] device bridge_slave_1 entered promiscuous mode [ 74.044773][ T8765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.065185][ T8767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.089238][ T8765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.104645][ T8767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.117112][ T8764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.178408][ T8757] device hsr_slave_0 entered promiscuous mode [ 74.215787][ T8757] device hsr_slave_1 entered promiscuous mode [ 74.255487][ T8757] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.289174][ T8764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.308116][ T8765] team0: Port device team_slave_0 added [ 74.328315][ T8765] team0: Port device team_slave_1 added [ 74.345690][ T8767] team0: Port device team_slave_0 added [ 74.353476][ T8767] team0: Port device team_slave_1 added [ 74.368412][ T8764] team0: Port device team_slave_0 added [ 74.384367][ T8764] team0: Port device team_slave_1 added [ 74.447687][ T8765] device hsr_slave_0 entered promiscuous mode [ 74.495809][ T8765] device hsr_slave_1 entered promiscuous mode [ 74.555672][ T8765] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.618482][ T8760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.678688][ T8767] device hsr_slave_0 entered promiscuous mode [ 74.745754][ T8767] device hsr_slave_1 entered promiscuous mode [ 74.795545][ T8767] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.868490][ T8764] device hsr_slave_0 entered promiscuous mode [ 74.935784][ T8764] device hsr_slave_1 entered promiscuous mode [ 74.985557][ T8764] debugfs: Directory 'hsr0' with parent '/' already present! [ 75.010596][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.023261][ T8760] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.038287][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.048616][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.058482][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.067889][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.077677][ T2817] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.084856][ T2817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.093622][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.111229][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.134489][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.142586][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.151780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.160623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.169138][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.176254][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.196850][ T8757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.247912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.257603][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.266090][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.273324][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.281001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.290409][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.299041][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.306503][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.314221][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.323928][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.332681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.342545][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.351137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.359899][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.368476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.377285][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.386419][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.394837][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.403655][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.411597][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.432195][ T8757] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.442024][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.454402][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.462258][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.471345][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.486219][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.494339][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.503774][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.512689][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.521960][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.555118][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.563445][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.572731][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.582478][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.589978][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.598540][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.607510][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.615940][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.624337][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.633096][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.650357][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.669983][ T8765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.677148][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.690615][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.699671][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.707004][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.734543][ T8757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.745361][ T8757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.774957][ T8760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.784269][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.799750][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.809594][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.819104][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.829018][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.837900][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.846600][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.854943][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.863633][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.872254][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.881453][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.889521][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.913402][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.923807][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.942768][ T8757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.959928][ T8765] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.984446][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.002043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.015055][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.058732][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.070392][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.086145][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.093896][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.103165][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.112024][ T2817] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.119218][ T2817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.127927][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.137155][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.145656][ T2817] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.153512][ T2817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.161335][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.170530][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.207109][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.216930][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.264035][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.271307][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.289181][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.302690][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.312341][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.316250][ T8793] IPVS: ftp: loaded support on port[0] = 21 [ 76.321466][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.333399][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.345007][ T8794] IPVS: ftp: loaded support on port[0] = 21 [ 76.351575][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.360692][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.369392][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.377423][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.387049][ T8764] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.413135][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.422461][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.430835][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.439927][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.449354][ T3177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.490120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.499771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.511646][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.519039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.530340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.539863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.548608][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.555720][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.563298][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.572503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.581695][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.591048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.599914][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.622805][ T8765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.634421][ T8765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.647755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.656833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.664867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.675251][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.684631][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.693955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.713870][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.722447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.731207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.740204][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.751773][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.761502][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.774101][ T8767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.787730][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.804985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.814247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.820137][ T8801] IPVS: ftp: loaded support on port[0] = 21 [ 76.823153][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.845219][ T8764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.856534][ T8764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.885858][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.896165][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.904786][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.914937][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.923500][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.932214][ T2817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.970221][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.992686][ T8788] ================================================================== [ 76.993697][ T8794] IPVS: ftp: loaded support on port[0] = 21 [ 77.000947][ T8788] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200 [ 77.000961][ T8788] Read of size 4 at addr ffff88808d529440 by task syz-executor.0/8788 [ 77.000965][ T8788] [ 77.000978][ T8788] CPU: 0 PID: 8788 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 77.000985][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.000990][ T8788] Call Trace: [ 77.001008][ T8788] dump_stack+0x172/0x1f0 [ 77.001021][ T8788] ? refcount_inc_not_zero_checked+0x81/0x200 [ 77.001040][ T8788] print_address_description.constprop.0.cold+0xd4/0x30b [ 77.001053][ T8788] ? refcount_inc_not_zero_checked+0x81/0x200 [ 77.001067][ T8788] ? refcount_inc_not_zero_checked+0x81/0x200 [ 77.001081][ T8788] __kasan_report.cold+0x1b/0x41 [ 77.001097][ T8788] ? refcount_inc_not_zero_checked+0x81/0x200 [ 77.001112][ T8788] kasan_report+0x12/0x20 [ 77.001126][ T8788] check_memory_region+0x134/0x1a0 [ 77.001141][ T8788] __kasan_check_read+0x11/0x20 [ 77.001156][ T8788] refcount_inc_not_zero_checked+0x81/0x200 [ 77.001170][ T8788] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 77.001190][ T8788] ? __kasan_check_write+0x14/0x20 [ 77.026318][ T8788] refcount_inc_checked+0x17/0x70 [ 77.026338][ T8788] nr_release+0x62/0x3e0 [ 77.026355][ T8788] __sock_release+0xce/0x280 [ 77.044093][ T8788] sock_close+0x1e/0x30 [ 77.044109][ T8788] __fput+0x2ff/0x890 [ 77.044125][ T8788] ? __sock_release+0x280/0x280 [ 77.044142][ T8788] ____fput+0x16/0x20 [ 77.051838][ T8788] task_work_run+0x145/0x1c0 [ 77.051862][ T8788] exit_to_usermode_loop+0x316/0x380 [ 77.051880][ T8788] do_syscall_64+0x65f/0x760 [ 77.060409][ T8801] kobject: 'queues' (00000000446f68ab): kobject_add_internal: parent: 'erspan0', set: '' [ 77.065030][ T8788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.065042][ T8788] RIP: 0033:0x413711 [ 77.065057][ T8788] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 77.065073][ T8788] RSP: 002b:00007ffd5cfa2f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 77.073974][ T8801] kobject: 'queues' (00000000446f68ab): kobject_uevent_env [ 77.077184][ T8788] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413711 [ 77.077192][ T8788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 77.077200][ T8788] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 77.077209][ T8788] R10: 00007ffd5cfa3050 R11: 0000000000000293 R12: 000000000075c9a0 [ 77.077218][ T8788] R13: 000000000075c9a0 R14: 0000000000760c38 R15: 000000000075c124 [ 77.077236][ T8788] [ 77.077244][ T8788] Allocated by task 8790: [ 77.077260][ T8788] save_stack+0x23/0x90 [ 77.077271][ T8788] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 77.077281][ T8788] kasan_kmalloc+0x9/0x10 [ 77.077293][ T8788] __kmalloc+0x163/0x770 [ 77.077304][ T8788] sk_prot_alloc+0x23a/0x310 [ 77.077314][ T8788] sk_alloc+0x39/0xf70 [ 77.077323][ T8788] nr_create+0xb9/0x5e0 [ 77.077339][ T8788] __sock_create+0x3d8/0x730 [ 77.087227][ T8801] kobject: 'queues' (00000000446f68ab): kobject_uevent_env: filter function caused the event to drop! [ 77.088322][ T8788] __sys_socket+0x103/0x220 [ 77.088336][ T8788] __x64_sys_socket+0x73/0xb0 [ 77.088350][ T8788] do_syscall_64+0xfa/0x760 [ 77.088368][ T8788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.092792][ T8801] kobject: 'rx-0' (0000000090a8ed89): kobject_add_internal: parent: 'queues', set: 'queues' [ 77.097813][ T8788] [ 77.097821][ T8788] Freed by task 8788: [ 77.097836][ T8788] save_stack+0x23/0x90 [ 77.097848][ T8788] __kasan_slab_free+0x102/0x150 [ 77.097857][ T8788] kasan_slab_free+0xe/0x10 [ 77.097869][ T8788] kfree+0x10a/0x2c0 [ 77.097880][ T8788] __sk_destruct+0x4f7/0x6e0 [ 77.097891][ T8788] sk_destruct+0x86/0xa0 [ 77.097901][ T8788] __sk_free+0xfb/0x360 [ 77.097909][ T8788] sk_free+0x42/0x50 [ 77.097920][ T8788] nr_release+0x356/0x3e0 [ 77.097931][ T8788] __sock_release+0xce/0x280 [ 77.097940][ T8788] sock_close+0x1e/0x30 [ 77.097951][ T8788] __fput+0x2ff/0x890 [ 77.097965][ T8788] ____fput+0x16/0x20 [ 77.097974][ T8788] task_work_run+0x145/0x1c0 [ 77.097987][ T8788] exit_to_usermode_loop+0x316/0x380 [ 77.097998][ T8788] do_syscall_64+0x65f/0x760 [ 77.098012][ T8788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.098016][ T8788] [ 77.098030][ T8788] The buggy address belongs to the object at ffff88808d5293c0 [ 77.098030][ T8788] which belongs to the cache kmalloc-2k of size 2048 [ 77.110659][ T8801] kobject: 'rx-0' (0000000090a8ed89): kobject_uevent_env [ 77.114558][ T8788] The buggy address is located 128 bytes inside of [ 77.114558][ T8788] 2048-byte region [ffff88808d5293c0, ffff88808d529bc0) [ 77.114563][ T8788] The buggy address belongs to the page: [ 77.114576][ T8788] page:ffffea0002354a00 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 compound_mapcount: 0 [ 77.114592][ T8788] flags: 0x1fffc0000010200(slab|head) [ 77.114611][ T8788] raw: 01fffc0000010200 ffffea0002759608 ffffea000275f408 ffff8880aa400e00 [ 77.114625][ T8788] raw: 0000000000000000 ffff88808d5282c0 0000000100000003 0000000000000000 [ 77.121261][ T8801] kobject: 'rx-0' (0000000090a8ed89): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 77.124725][ T8788] page dumped because: kasan: bad access detected [ 77.124730][ T8788] [ 77.124734][ T8788] Memory state around the buggy address: [ 77.124747][ T8788] ffff88808d529300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.124757][ T8788] ffff88808d529380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 77.124768][ T8788] >ffff88808d529400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.124774][ T8788] ^ [ 77.124783][ T8788] ffff88808d529480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.124795][ T8788] ffff88808d529500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.131999][ T8801] kobject: 'tx-0' (000000000d1fd6ec): kobject_add_internal: parent: 'queues', set: 'queues' [ 77.133584][ T8788] ================================================================== [ 77.133589][ T8788] Disabling lock debugging due to kernel taint [ 77.155380][ T8788] Kernel panic - not syncing: panic_on_warn set ... [ 77.165548][ T8801] kobject: 'tx-0' (000000000d1fd6ec): kobject_uevent_env [ 77.175538][ T8788] CPU: 0 PID: 8788 Comm: syz-executor.0 Tainted: G B 5.3.0+ #0 [ 77.175546][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.175550][ T8788] Call Trace: [ 77.175572][ T8788] dump_stack+0x172/0x1f0 [ 77.175586][ T8788] panic+0x2dc/0x755 [ 77.175597][ T8788] ? add_taint.cold+0x16/0x16 [ 77.175612][ T8788] ? refcount_inc_not_zero_checked+0x81/0x200 [ 77.175625][ T8788] ? preempt_schedule+0x4b/0x60 [ 77.175643][ T8788] ? ___preempt_schedule+0x16/0x20 [ 77.183803][ T8801] kobject: 'tx-0' (000000000d1fd6ec): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 77.185601][ T8788] ? trace_hardirqs_on+0x5e/0x240 [ 77.185617][ T8788] ? refcount_inc_not_zero_checked+0x81/0x200 [ 77.185630][ T8788] end_report+0x47/0x4f [ 77.185640][ T8788] ? refcount_inc_not_zero_checked+0x81/0x200 [ 77.185655][ T8788] __kasan_report.cold+0xe/0x41 [ 77.210109][ T8801] kobject: 'batman_adv' (00000000a8c2c717): kobject_add_internal: parent: 'erspan0', set: '' [ 77.214073][ T8788] ? refcount_inc_not_zero_checked+0x81/0x200 [ 77.214088][ T8788] kasan_report+0x12/0x20 [ 77.214106][ T8788] check_memory_region+0x134/0x1a0 [ 77.228124][ T8767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.229334][ T8788] __kasan_check_read+0x11/0x20 [ 77.229353][ T8788] refcount_inc_not_zero_checked+0x81/0x200 [ 77.237508][ T8767] kobject: 'vlan0' (00000000dcff40bd): kobject_add_internal: parent: 'mesh', set: '' [ 77.245280][ T8788] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 77.245295][ T8788] ? __kasan_check_write+0x14/0x20 [ 77.245308][ T8788] refcount_inc_checked+0x17/0x70 [ 77.245320][ T8788] nr_release+0x62/0x3e0 [ 77.245335][ T8788] __sock_release+0xce/0x280 [ 77.245347][ T8788] sock_close+0x1e/0x30 [ 77.245359][ T8788] __fput+0x2ff/0x890 [ 77.245377][ T8788] ? __sock_release+0x280/0x280 [ 77.348170][ T8764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.350711][ T8788] ____fput+0x16/0x20 [ 77.354930][ T8764] kobject: 'vlan0' (00000000f56efa3b): kobject_add_internal: parent: 'mesh', set: '' [ 77.359795][ T8788] task_work_run+0x145/0x1c0 [ 77.359813][ T8788] exit_to_usermode_loop+0x316/0x380 [ 77.359826][ T8788] do_syscall_64+0x65f/0x760 [ 77.359841][ T8788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.359850][ T8788] RIP: 0033:0x413711 [ 77.359868][ T8788] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 77.374628][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.377052][ T8788] RSP: 002b:00007ffd5cfa2f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 77.377063][ T8788] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413711 [ 77.377069][ T8788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 77.377076][ T8788] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 77.377082][ T8788] R10: 00007ffd5cfa3050 R11: 0000000000000293 R12: 000000000075c9a0 [ 77.377090][ T8788] R13: 000000000075c9a0 R14: 0000000000760c38 R15: 000000000075c124 [ 77.378910][ T8788] Kernel Offset: disabled [ 77.922374][ T8788] Rebooting in 86400 seconds..