[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.690699] audit: type=1800 audit(1547497885.848:25): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 40.725211] audit: type=1800 audit(1547497885.848:26): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.746014] audit: type=1800 audit(1547497885.848:27): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.184' (ECDSA) to the list of known hosts. syzkaller login: [ 51.704484] IPVS: ftp: loaded support on port[0] = 21 [ 51.705600] IPVS: ftp: loaded support on port[0] = 21 [ 51.720562] IPVS: ftp: loaded support on port[0] = 21 [ 51.720886] IPVS: ftp: loaded support on port[0] = 21 [ 51.738128] IPVS: ftp: loaded support on port[0] = 21 [ 51.751685] IPVS: ftp: loaded support on port[0] = 21 [ 52.046082] chnl_net:caif_netlink_parms(): no params data found [ 52.113935] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.121128] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.128719] device bridge_slave_0 entered promiscuous mode [ 52.138388] chnl_net:caif_netlink_parms(): no params data found [ 52.191437] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.197999] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.204991] device bridge_slave_1 entered promiscuous mode [ 52.230851] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.274250] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.343705] chnl_net:caif_netlink_parms(): no params data found [ 52.363134] chnl_net:caif_netlink_parms(): no params data found [ 52.427511] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.433919] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.441566] device bridge_slave_0 entered promiscuous mode [ 52.449386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.459703] team0: Port device team_slave_0 added [ 52.472806] chnl_net:caif_netlink_parms(): no params data found [ 52.493086] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.500194] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.507766] device bridge_slave_1 entered promiscuous mode [ 52.514364] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.524237] team0: Port device team_slave_1 added [ 52.532858] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.564588] chnl_net:caif_netlink_parms(): no params data found [ 52.574115] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.645060] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.665638] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.673848] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.683790] device bridge_slave_0 entered promiscuous mode [ 52.690980] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.698010] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.705039] device bridge_slave_0 entered promiscuous mode [ 52.721144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.799224] device hsr_slave_0 entered promiscuous mode [ 52.837461] device hsr_slave_1 entered promiscuous mode [ 52.877519] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.884015] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.891889] device bridge_slave_1 entered promiscuous mode [ 52.898429] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.904795] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.913003] device bridge_slave_1 entered promiscuous mode [ 52.946540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.969433] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.976098] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.984017] device bridge_slave_0 entered promiscuous mode [ 52.990767] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.997760] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.004798] device bridge_slave_0 entered promiscuous mode [ 53.017433] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.027618] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.035053] team0: Port device team_slave_0 added [ 53.049265] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.056833] team0: Port device team_slave_1 added [ 53.062397] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.069320] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.076446] device bridge_slave_1 entered promiscuous mode [ 53.083051] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.090022] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.097654] device bridge_slave_1 entered promiscuous mode [ 53.113300] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.126263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.135767] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.167151] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.176478] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.184419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.196998] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.207231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.226051] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.268256] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.275798] team0: Port device team_slave_0 added [ 53.286795] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.302500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.310248] team0: Port device team_slave_0 added [ 53.321434] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.332185] team0: Port device team_slave_1 added [ 53.337735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.345506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.361271] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.369022] team0: Port device team_slave_0 added [ 53.374355] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.381996] team0: Port device team_slave_1 added [ 53.439280] device hsr_slave_0 entered promiscuous mode [ 53.497355] device hsr_slave_1 entered promiscuous mode [ 53.584235] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.597989] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.604647] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.613273] team0: Port device team_slave_0 added [ 53.618937] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.626218] team0: Port device team_slave_1 added [ 53.631915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.639675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.651384] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.659526] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.666971] team0: Port device team_slave_1 added [ 53.675760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.739111] device hsr_slave_0 entered promiscuous mode [ 53.787679] device hsr_slave_1 entered promiscuous mode [ 53.858627] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.867386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.876090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.890366] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.902133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.958988] device hsr_slave_0 entered promiscuous mode [ 53.997626] device hsr_slave_1 entered promiscuous mode [ 54.075969] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.099133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.170835] device hsr_slave_0 entered promiscuous mode [ 54.207645] device hsr_slave_1 entered promiscuous mode [ 54.251188] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.310850] device hsr_slave_0 entered promiscuous mode [ 54.347381] device hsr_slave_1 entered promiscuous mode [ 54.408115] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.416072] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.430050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.444266] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.451077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.462455] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.512244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.544181] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.575846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.591850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.601685] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.618275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.627525] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.638578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.648776] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.654856] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.663776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.672929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.683261] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.692659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.702856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.713335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.720684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.728195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.735948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.743790] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.750282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.757979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.768552] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.774628] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.783063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.798798] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.812064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.821490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.829945] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.836286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.843389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.850605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.862031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.876092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.886699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.894978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.903434] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.909853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.916693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.925095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.935799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.946615] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.956528] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.965927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.978190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.987117] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.995717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.003867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.012278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.020223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.030782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.052873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.061983] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.072395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.080611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.090800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.098952] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.105311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.112363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.120652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.128517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.135385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.142409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.150461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.158160] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.164509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.172222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.188517] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.194617] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.205636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.219736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.235036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.242525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.250857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.260828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.268737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.276494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.284208] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.290570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.300934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.316595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.325970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.333786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.342550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.350395] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.356735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.364616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.374197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.383338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.393662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.402832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.410389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.418935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.426558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.434492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.442556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.450432] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.456769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.467723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.476973] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.483607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.492695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.502648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.510356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.518397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.525272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.532606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.542522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.552078] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.561915] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.571001] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.577526] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.586928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.597880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.605939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.615781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.622939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.630098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.638359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.647555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.661656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.672107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.680745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.690404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.698396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.705969] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.712389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.719475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.727411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.735469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.742847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.754050] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.762016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.772540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.784216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.796644] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.802913] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.810110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.818291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.825856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.833852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.841908] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.848327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.855644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.863541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.872133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.881499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.892282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.902160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.913184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.923610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.931644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.939672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.947605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.955360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.963677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.971381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.979072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.988945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.998861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.009129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.019969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.029157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.039070] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program executing program [ 56.057555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.065739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.082791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.091400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.101044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program executing program executing program executing program [ 56.108779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.116960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.127598] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.133957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.141257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.149263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.151358] ================================================================== [ 56.159407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.163809] BUG: KASAN: use-after-free in __xfrm_policy_unlink+0x9ec/0xa00 [ 56.177550] Write of size 8 at addr ffff88808dbb5b50 by task syz-executor152/8025 [ 56.185347] [ 56.186989] CPU: 1 PID: 8025 Comm: syz-executor152 Not tainted 4.20.0+ #19 [ 56.194002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.203363] Call Trace: [ 56.205968] dump_stack+0x1db/0x2d0 [ 56.209604] ? dump_stack_print_info.cold+0x20/0x20 [ 56.214626] ? find_held_lock+0x35/0x120 [ 56.218692] ? __xfrm_policy_unlink+0x9ec/0xa00 [ 56.223378] print_address_description.cold+0x7c/0x20d [ 56.228684] ? __xfrm_policy_unlink+0x9ec/0xa00 [ 56.233364] ? __xfrm_policy_unlink+0x9ec/0xa00 [ 56.238043] kasan_report.cold+0x1b/0x40 [ 56.242110] ? __xfrm_policy_unlink+0x9ec/0xa00 [ 56.246787] __asan_report_store8_noabort+0x17/0x20 [ 56.251808] __xfrm_policy_unlink+0x9ec/0xa00 [ 56.256316] ? xfrm_policy_walk_done+0x360/0x360 [ 56.261080] ? __fib6_clean_all+0x300/0x430 [ 56.265430] ? xfrm_policy_byid+0x4a0/0x4a0 [ 56.269766] ? fib6_clean_tree+0x340/0x340 [ 56.274006] ? ipv6_route_yield+0x220/0x220 [ 56.278333] ? xfrm_pol_inexact_addr_use_any_list+0x1f0/0x1f0 [ 56.284240] xfrm_policy_insert+0x223/0x910 [ 56.288569] ? __fib6_clean_all+0x430/0x430 [ 56.292899] ? xfrm_policy_inexact_insert+0xda0/0xda0 [ 56.298098] ? copy_from_user_policy+0x110/0x2b0 [ 56.302866] ? xfrm_policy_construct+0x471/0x660 [ 56.307635] xfrm_add_policy+0x2a1/0x6c0 [ 56.311713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.317261] ? xfrm_policy_construct+0x660/0x660 [ 56.322037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.327595] ? __nla_parse+0x12a/0x340 [ 56.331491] ? nla_parse+0x45/0x60 [ 56.335036] ? xfrm_policy_construct+0x660/0x660 [ 56.339795] xfrm_user_rcv_msg+0x458/0x8d0 [ 56.344043] ? xfrm_dump_sa_done+0xf0/0xf0 [ 56.348278] ? xfrm_netlink_rcv+0x61/0x90 [ 56.352433] ? __mutex_lock+0x622/0x1670 [ 56.356547] netlink_rcv_skb+0x17d/0x410 [ 56.360617] ? xfrm_dump_sa_done+0xf0/0xf0 [ 56.364863] ? netlink_ack+0xba0/0xba0 [ 56.368754] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 56.374142] xfrm_netlink_rcv+0x70/0x90 [ 56.378128] netlink_unicast+0x574/0x770 [ 56.382205] ? netlink_attachskb+0x980/0x980 [ 56.386622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.392169] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 56.397202] netlink_sendmsg+0xa05/0xf90 [ 56.401267] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 56.406820] ? netlink_unicast+0x770/0x770 [ 56.411056] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 56.415907] ? apparmor_socket_sendmsg+0x2a/0x30 [ 56.420667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.426228] ? security_socket_sendmsg+0x93/0xc0 [ 56.430997] ? netlink_unicast+0x770/0x770 [ 56.435261] sock_sendmsg+0xdd/0x130 [ 56.439017] ___sys_sendmsg+0x7ec/0x910 [ 56.443002] ? copy_msghdr_from_user+0x570/0x570 [ 56.447756] ? __handle_mm_fault+0x955/0x5690 [ 56.452266] ? add_lock_to_list.isra.0+0x450/0x450 [ 56.457203] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 56.462049] ? check_preemption_disabled+0x48/0x290 [ 56.467072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.472633] ? __fget_light+0x2db/0x420 [ 56.476611] ? fget_raw+0x20/0x20 [ 56.480072] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 56.485358] ? rcu_read_unlock_special+0x380/0x380 [ 56.490294] ? __fdget+0x1b/0x20 [ 56.493667] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 56.499211] ? sockfd_lookup_light+0xc2/0x160 [ 56.503729] __sys_sendmsg+0x112/0x270 [ 56.507632] ? __ia32_sys_shutdown+0x80/0x80 [ 56.512045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.517587] ? vmacache_update+0x114/0x140 [ 56.521835] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.527200] ? trace_hardirqs_off_caller+0x300/0x300 [ 56.532307] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.537067] __x64_sys_sendmsg+0x78/0xb0 [ 56.541140] do_syscall_64+0x1a3/0x800 [ 56.545048] ? syscall_return_slowpath+0x5f0/0x5f0 [ 56.549987] ? prepare_exit_to_usermode+0x232/0x3b0 [ 56.555015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.559873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.565063] RIP: 0033:0x448a89 [ 56.568257] Code: e8 7c e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.587162] RSP: 002b:00007ffd739340a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.594877] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000448a89 [ 56.602148] RDX: 0000000000000000 RSI: 000000002014f000 RDI: 0000000000000003 [ 56.609417] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000007 [ 56.616686] R10: 000000000131c940 R11: 0000000000000246 R12: 0000000000000006 [ 56.623962] R13: 000000000000db34 R14: 0000000000000000 R15: 0000000000000000 [ 56.631252] [ 56.632936] Allocated by task 8022: [ 56.636577] save_stack+0x45/0xd0 [ 56.640035] kasan_kmalloc+0xcf/0xe0 [ 56.643757] kmem_cache_alloc_trace+0x151/0x760 [ 56.648775] xfrm_policy_alloc+0xfb/0x530 [ 56.652926] xfrm_policy_construct+0x30/0x660 [ 56.657429] xfrm_add_policy+0x20a/0x6c0 [ 56.661492] xfrm_user_rcv_msg+0x458/0x8d0 [ 56.665736] netlink_rcv_skb+0x17d/0x410 [ 56.669833] xfrm_netlink_rcv+0x70/0x90 [ 56.673814] netlink_unicast+0x574/0x770 [ 56.677874] netlink_sendmsg+0xa05/0xf90 [ 56.681936] sock_sendmsg+0xdd/0x130 [ 56.685654] ___sys_sendmsg+0x7ec/0x910 [ 56.689628] __sys_sendmsg+0x112/0x270 [ 56.693516] __x64_sys_sendmsg+0x78/0xb0 [ 56.697579] do_syscall_64+0x1a3/0x800 [ 56.701468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.706662] [ 56.708286] Freed by task 12: [ 56.711404] save_stack+0x45/0xd0 [ 56.714856] __kasan_slab_free+0x102/0x150 [ 56.719094] kasan_slab_free+0xe/0x10 [ 56.722890] kfree+0xcf/0x230 [ 56.725995] xfrm_policy_destroy_rcu+0x48/0x60 [ 56.730580] rcu_process_callbacks+0xc4a/0x1680 [ 56.735254] __do_softirq+0x30b/0xb11 [ 56.739042] [ 56.740670] The buggy address belongs to the object at ffff88808dbb5b40 [ 56.740670] which belongs to the cache kmalloc-1k of size 1024 [ 56.753335] The buggy address is located 16 bytes inside of [ 56.753335] 1024-byte region [ffff88808dbb5b40, ffff88808dbb5f40) [ 56.765217] The buggy address belongs to the page: [ 56.770163] page:ffffea000236ed00 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0x0 compound_mapcount: 0 [ 56.780135] flags: 0x1fffc0000010200(slab|head) [ 56.784812] raw: 01fffc0000010200 ffffea0002164d08 ffffea00029e8188 ffff88812c3f0ac0 [ 56.792704] raw: 0000000000000000 ffff88808dbb4040 0000000100000007 0000000000000000 [ 56.800581] page dumped because: kasan: bad access detected [ 56.806286] [ 56.807905] Memory state around the buggy address: [ 56.812831] ffff88808dbb5a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.820210] ffff88808dbb5a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 56.827572] >ffff88808dbb5b00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 56.834927] ^ [ 56.840902] ffff88808dbb5b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.848259] ffff88808dbb5c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.855612] ================================================================== [ 56.862979] Disabling lock debugging due to kernel taint [ 56.868493] Kernel panic - not syncing: panic_on_warn set ... [ 56.874383] CPU: 1 PID: 8025 Comm: syz-executor152 Tainted: G B 4.20.0+ #19 [ 56.882872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.892221] Call Trace: [ 56.894816] dump_stack+0x1db/0x2d0 [ 56.898448] ? dump_stack_print_info.cold+0x20/0x20 [ 56.903473] panic+0x2cb/0x589 [ 56.906666] ? add_taint.cold+0x16/0x16 [ 56.910647] ? trace_hardirqs_on+0xb4/0x310 [ 56.914973] ? trace_hardirqs_on+0xb4/0x310 [ 56.919295] ? __xfrm_policy_unlink+0x9ec/0xa00 [ 56.923981] end_report+0x47/0x4f [ 56.927438] ? __xfrm_policy_unlink+0x9ec/0xa00 [ 56.932133] kasan_report.cold+0xe/0x40 [ 56.936110] ? __xfrm_policy_unlink+0x9ec/0xa00 [ 56.940779] __asan_report_store8_noabort+0x17/0x20 [ 56.945794] __xfrm_policy_unlink+0x9ec/0xa00 [ 56.950290] ? xfrm_policy_walk_done+0x360/0x360 [ 56.955045] ? __fib6_clean_all+0x300/0x430 [ 56.959375] ? xfrm_policy_byid+0x4a0/0x4a0 [ 56.963698] ? fib6_clean_tree+0x340/0x340 [ 56.967932] ? ipv6_route_yield+0x220/0x220 [ 56.972259] ? xfrm_pol_inexact_addr_use_any_list+0x1f0/0x1f0 [ 56.978149] xfrm_policy_insert+0x223/0x910 [ 56.982484] ? __fib6_clean_all+0x430/0x430 [ 56.986805] ? xfrm_policy_inexact_insert+0xda0/0xda0 [ 56.992001] ? copy_from_user_policy+0x110/0x2b0 [ 56.996758] ? xfrm_policy_construct+0x471/0x660 [ 57.001532] xfrm_add_policy+0x2a1/0x6c0 [ 57.005603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.011162] ? xfrm_policy_construct+0x660/0x660 [ 57.015935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.021478] ? __nla_parse+0x12a/0x340 [ 57.025378] ? nla_parse+0x45/0x60 [ 57.028921] ? xfrm_policy_construct+0x660/0x660 [ 57.033684] xfrm_user_rcv_msg+0x458/0x8d0 [ 57.037930] ? xfrm_dump_sa_done+0xf0/0xf0 [ 57.042184] ? xfrm_netlink_rcv+0x61/0x90 [ 57.046338] ? __mutex_lock+0x622/0x1670 [ 57.050435] netlink_rcv_skb+0x17d/0x410 [ 57.054509] ? xfrm_dump_sa_done+0xf0/0xf0 [ 57.058745] ? netlink_ack+0xba0/0xba0 [ 57.062639] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 57.067926] xfrm_netlink_rcv+0x70/0x90 [ 57.071907] netlink_unicast+0x574/0x770 [ 57.075978] ? netlink_attachskb+0x980/0x980 [ 57.080391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.085929] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 57.090964] netlink_sendmsg+0xa05/0xf90 [ 57.095025] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 57.100567] ? netlink_unicast+0x770/0x770 [ 57.104805] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 57.109650] ? apparmor_socket_sendmsg+0x2a/0x30 [ 57.114408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.119961] ? security_socket_sendmsg+0x93/0xc0 [ 57.124721] ? netlink_unicast+0x770/0x770 [ 57.128960] sock_sendmsg+0xdd/0x130 [ 57.132677] ___sys_sendmsg+0x7ec/0x910 [ 57.136656] ? copy_msghdr_from_user+0x570/0x570 [ 57.141413] ? __handle_mm_fault+0x955/0x5690 [ 57.145909] ? add_lock_to_list.isra.0+0x450/0x450 [ 57.150838] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 57.155682] ? check_preemption_disabled+0x48/0x290 [ 57.160704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.166239] ? __fget_light+0x2db/0x420 [ 57.170388] ? fget_raw+0x20/0x20 [ 57.173848] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 57.179125] ? rcu_read_unlock_special+0x380/0x380 [ 57.184054] ? __fdget+0x1b/0x20 [ 57.187422] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 57.192970] ? sockfd_lookup_light+0xc2/0x160 [ 57.197467] __sys_sendmsg+0x112/0x270 [ 57.201365] ? __ia32_sys_shutdown+0x80/0x80 [ 57.205774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.211308] ? vmacache_update+0x114/0x140 [ 57.215570] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.220934] ? trace_hardirqs_off_caller+0x300/0x300 [ 57.226045] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 57.230802] __x64_sys_sendmsg+0x78/0xb0 [ 57.234879] do_syscall_64+0x1a3/0x800 [ 57.238764] ? syscall_return_slowpath+0x5f0/0x5f0 [ 57.243698] ? prepare_exit_to_usermode+0x232/0x3b0 [ 57.248720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.253584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.258770] RIP: 0033:0x448a89 [ 57.261966] Code: e8 7c e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.280880] RSP: 002b:00007ffd739340a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.288586] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000448a89 [ 57.295855] RDX: 0000000000000000 RSI: 000000002014f000 RDI: 0000000000000003 [ 57.303118] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000007 [ 57.310402] R10: 000000000131c940 R11: 0000000000000246 R12: 0000000000000006 [ 57.317672] R13: 000000000000db34 R14: 0000000000000000 R15: 0000000000000000 [ 57.325879] Kernel Offset: disabled [ 57.329519] Rebooting in 86400 seconds..