[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.862787][ T26] audit: type=1800 audit(1561314265.063:25): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 53.884204][ T26] audit: type=1800 audit(1561314265.073:26): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 53.918459][ T26] audit: type=1800 audit(1561314265.073:27): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.68' (ECDSA) to the list of known hosts. 2019/06/23 18:24:35 parsed 1 programs 2019/06/23 18:24:38 executed programs: 0 syzkaller login: [ 67.080160][ T8560] IPVS: ftp: loaded support on port[0] = 21 [ 67.089699][ T8562] IPVS: ftp: loaded support on port[0] = 21 [ 67.091225][ T8563] IPVS: ftp: loaded support on port[0] = 21 [ 67.143920][ T8566] IPVS: ftp: loaded support on port[0] = 21 [ 67.160032][ T8568] IPVS: ftp: loaded support on port[0] = 21 [ 67.160182][ T8569] IPVS: ftp: loaded support on port[0] = 21 [ 67.367495][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 67.398849][ T8562] chnl_net:caif_netlink_parms(): no params data found [ 67.435893][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.445385][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.454117][ T8563] device bridge_slave_0 entered promiscuous mode [ 67.497115][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.504236][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.512505][ T8563] device bridge_slave_1 entered promiscuous mode [ 67.554512][ T8560] chnl_net:caif_netlink_parms(): no params data found [ 67.566036][ T8568] chnl_net:caif_netlink_parms(): no params data found [ 67.604300][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.611645][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.619857][ T8562] device bridge_slave_0 entered promiscuous mode [ 67.631777][ T8563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.652080][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.661151][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.669614][ T8562] device bridge_slave_1 entered promiscuous mode [ 67.685399][ T8563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.694138][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.702898][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.711892][ T8560] device bridge_slave_0 entered promiscuous mode [ 67.720225][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.727533][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.735714][ T8560] device bridge_slave_1 entered promiscuous mode [ 67.742654][ T8566] chnl_net:caif_netlink_parms(): no params data found [ 67.767719][ T8562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.798479][ T8562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.824559][ T8562] team0: Port device team_slave_0 added [ 67.835527][ T8560] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.844895][ T8562] team0: Port device team_slave_1 added [ 67.871514][ T8563] team0: Port device team_slave_0 added [ 67.878482][ T8560] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.909514][ T8563] team0: Port device team_slave_1 added [ 67.930408][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.938578][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.946406][ T8566] device bridge_slave_0 entered promiscuous mode [ 67.956069][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.963113][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.970817][ T8566] device bridge_slave_1 entered promiscuous mode [ 67.977910][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.985516][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.993448][ T8568] device bridge_slave_0 entered promiscuous mode [ 68.069684][ T8563] device hsr_slave_0 entered promiscuous mode [ 68.135263][ T8563] device hsr_slave_1 entered promiscuous mode [ 68.197749][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.205518][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.213359][ T8568] device bridge_slave_1 entered promiscuous mode [ 68.221289][ T8560] team0: Port device team_slave_0 added [ 68.228661][ T8560] team0: Port device team_slave_1 added [ 68.235280][ T8569] chnl_net:caif_netlink_parms(): no params data found [ 68.297878][ T8562] device hsr_slave_0 entered promiscuous mode [ 68.356216][ T8562] device hsr_slave_1 entered promiscuous mode [ 68.437931][ T8566] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.451816][ T8566] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.468446][ T8568] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 68.547932][ T8560] device hsr_slave_0 entered promiscuous mode [ 68.605481][ T8560] device hsr_slave_1 entered promiscuous mode [ 68.697660][ T8568] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.708991][ T8566] team0: Port device team_slave_0 added [ 68.720435][ T8566] team0: Port device team_slave_1 added [ 68.753390][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.761227][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.769795][ T8569] device bridge_slave_0 entered promiscuous mode [ 68.827208][ T8566] device hsr_slave_0 entered promiscuous mode [ 68.876516][ T8566] device hsr_slave_1 entered promiscuous mode [ 68.926166][ T8568] team0: Port device team_slave_0 added [ 68.937968][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.945256][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.952877][ T8569] device bridge_slave_1 entered promiscuous mode [ 68.971166][ T8568] team0: Port device team_slave_1 added [ 68.990554][ T8569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 69.004244][ T8569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 69.056975][ T8568] device hsr_slave_0 entered promiscuous mode [ 69.105372][ T8568] device hsr_slave_1 entered promiscuous mode [ 69.179373][ T8569] team0: Port device team_slave_0 added [ 69.189516][ T8569] team0: Port device team_slave_1 added [ 69.267958][ T8569] device hsr_slave_0 entered promiscuous mode [ 69.305233][ T8569] device hsr_slave_1 entered promiscuous mode [ 69.427826][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.435765][ T8569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.449970][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.457519][ T8569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.502346][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.516037][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.526553][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.546449][ T8566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.556403][ T8562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.569559][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.585936][ T8562] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.601759][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.610799][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.620938][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.628830][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.636760][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.644368][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.652659][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.675307][ T8568] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.684623][ T8566] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.698775][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.706158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.714353][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.722316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.731196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.739930][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.747112][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.754926][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.763450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.771869][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.778940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.786788][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.795531][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.803949][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.812435][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.819583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.844688][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.852954][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.861042][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.871123][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.880166][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.889274][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.896549][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.904175][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.912851][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.921504][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.930159][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.938623][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.945806][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.953305][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.962462][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.971017][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.979948][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.988626][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.997391][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.004656][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.012529][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.043047][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.052173][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.062858][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.070897][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.079726][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.088477][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.097266][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.106811][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.115327][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.122366][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.130048][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.138585][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.147251][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.156393][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.164987][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.173464][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.182335][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.190199][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.197977][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.206683][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.223962][ T8569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.237181][ T8562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.249839][ T8562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.260363][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.268399][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.277206][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.285889][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.292927][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.300804][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.309924][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.318571][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.327099][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.335543][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.344136][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.352642][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.359846][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.368171][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.376676][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.385242][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.393069][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.422668][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.431439][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.440071][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.448442][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.457491][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.465422][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.473020][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.481537][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.489970][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.498535][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.507137][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.515953][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.524200][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.533117][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.542863][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.550718][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.559568][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.568265][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.575363][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.596200][ T8568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.607020][ T8569] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.629898][ T8563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.649202][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.658589][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.673305][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.680430][ T8577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.691339][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.701018][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.710116][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.717492][ T8577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.725647][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.734622][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.743453][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.754436][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.763818][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.777088][ T8562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.805634][ T8560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.821991][ T8560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.850401][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.867085][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.879981][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.892576][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.901636][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.910700][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.919907][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.928931][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.937606][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.946514][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.957613][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.972632][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.981908][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.991391][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.999343][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.007897][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.032765][ T8569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.044737][ T8569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.089025][ T8566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.117033][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.131230][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.140128][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.148945][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.158039][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.167516][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.176666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.194560][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.214059][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.277476][ T8566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.307961][ T8569] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/23 18:24:43 executed programs: 15 [ 72.390531][ T3487] ================================================================== [ 72.398789][ T3487] BUG: KASAN: use-after-free in debugfs_remove+0x10d/0x130 [ 72.398805][ T3487] Read of size 8 at addr ffff888093cf3760 by task kworker/1:2/3487 [ 72.398808][ T3487] [ 72.398824][ T3487] CPU: 1 PID: 3487 Comm: kworker/1:2 Not tainted 5.2.0-rc5+ #58 [ 72.398830][ T3487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.398845][ T3487] Workqueue: events __blk_release_queue [ 72.398860][ T3487] Call Trace: [ 72.398878][ T3487] dump_stack+0x172/0x1f0 [ 72.398888][ T3487] ? debugfs_remove+0x10d/0x130 [ 72.398904][ T3487] print_address_description.cold+0x7c/0x20d [ 72.398914][ T3487] ? debugfs_remove+0x10d/0x130 [ 72.414210][ T3487] ? debugfs_remove+0x10d/0x130 [ 72.414229][ T3487] __kasan_report.cold+0x1b/0x40 [ 72.414250][ T3487] ? __sanitizer_cov_trace_cmp1+0x10/0x20 [ 72.424171][ T3487] ? debugfs_remove+0x10d/0x130 [ 72.424189][ T3487] kasan_report+0x12/0x20 [ 72.424205][ T3487] __asan_report_load8_noabort+0x14/0x20 [ 72.424222][ T3487] debugfs_remove+0x10d/0x130 [ 72.440030][ T3487] blk_trace_free+0x38/0x140 [ 72.440047][ T3487] __blk_trace_remove+0x78/0xa0 [ 72.440060][ T3487] blk_trace_shutdown+0x67/0x90 [ 72.440082][ T3487] __blk_release_queue+0x1d6/0x330 [ 72.447661][ T3487] process_one_work+0x989/0x1790 [ 72.447685][ T3487] ? pwq_dec_nr_in_flight+0x320/0x320 [ 72.447698][ T3487] ? lock_acquire+0x16f/0x3f0 [ 72.447718][ T3487] worker_thread+0x98/0xe40 [ 72.447737][ T3487] ? trace_hardirqs_on+0x67/0x220 [ 72.452646][ T8680] kobject: 'loop0' (00000000eafd5389): kobject_uevent_env: uevent_suppress caused the event to drop! [ 72.458536][ T3487] kthread+0x354/0x420 [ 72.458550][ T3487] ? process_one_work+0x1790/0x1790 [ 72.458564][ T3487] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 72.458581][ T3487] ret_from_fork+0x24/0x30 [ 72.458599][ T3487] [ 72.464451][ T8680] kobject: 'holders' (000000008bc2fd96): kobject_add_internal: parent: 'loop0', set: '' [ 72.468529][ T3487] Allocated by task 8672: [ 72.468547][ T3487] save_stack+0x23/0x90 [ 72.468559][ T3487] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 72.468571][ T3487] kasan_slab_alloc+0xf/0x20 [ 72.468582][ T3487] kmem_cache_alloc+0x11a/0x6f0 [ 72.468595][ T3487] __d_alloc+0x2e/0x8c0 [ 72.468611][ T3487] d_alloc+0x4d/0x280 [ 72.473659][ T8680] kobject: 'slaves' (000000003cb0ae2f): kobject_add_internal: parent: 'loop0', set: '' [ 72.479318][ T3487] d_alloc_parallel+0xf4/0x1bb0 [ 72.479331][ T3487] __lookup_slow+0x1ab/0x500 [ 72.479342][ T3487] lookup_one_len+0x16d/0x1a0 [ 72.479357][ T3487] start_creating+0xbf/0x1e0 [ 72.479368][ T3487] __debugfs_create_file+0x65/0x3d0 [ 72.479377][ T3487] debugfs_create_file+0x5a/0x70 [ 72.479396][ T3487] do_blk_trace_setup+0x376/0xb90 [ 72.484399][ T8680] kobject: 'loop0' (00000000eafd5389): kobject_uevent_env [ 72.488615][ T3487] __blk_trace_setup+0xe3/0x190 [ 72.488626][ T3487] blk_trace_ioctl+0x170/0x300 [ 72.488641][ T3487] blkdev_ioctl+0x126/0x1c10 [ 72.488653][ T3487] block_ioctl+0xee/0x130 [ 72.488663][ T3487] do_vfs_ioctl+0xd5f/0x1380 [ 72.488677][ T3487] ksys_ioctl+0xab/0xd0 [ 72.494398][ T8680] kobject: 'loop0' (00000000eafd5389): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 72.498934][ T3487] __x64_sys_ioctl+0x73/0xb0 [ 72.498950][ T3487] do_syscall_64+0xfd/0x680 [ 72.498966][ T3487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.498970][ T3487] [ 72.498976][ T3487] Freed by task 16: [ 72.498986][ T3487] save_stack+0x23/0x90 [ 72.499001][ T3487] __kasan_slab_free+0x102/0x150 [ 72.504322][ T8680] kobject: 'queue' (000000009771c59e): kobject_add_internal: parent: 'loop0', set: '' [ 72.508661][ T3487] kasan_slab_free+0xe/0x10 [ 72.508672][ T3487] kmem_cache_free+0x86/0x260 [ 72.508684][ T3487] __d_free+0x20/0x30 [ 72.508700][ T3487] rcu_core+0xba5/0x1500 [ 72.508714][ T3487] __do_softirq+0x25c/0x94c [ 72.508722][ T3487] [ 72.508732][ T3487] The buggy address belongs to the object at ffff888093cf3720 [ 72.508732][ T3487] which belongs to the cache dentry(71:syz1) of size 288 [ 72.508741][ T3487] The buggy address is located 64 bytes inside of [ 72.508741][ T3487] 288-byte region [ffff888093cf3720, ffff888093cf3840) [ 72.508744][ T3487] The buggy address belongs to the page: [ 72.508753][ T3487] page:ffffea00024f3cc0 refcount:1 mapcount:0 mapping:ffff888088d5dc40 index:0x0 [ 72.514672][ T8680] kobject: 'mq' (0000000082537eef): kobject_add_internal: parent: 'loop0', set: '' [ 72.518761][ T3487] flags: 0x1fffc0000000200(slab) [ 72.518779][ T3487] raw: 01fffc0000000200 ffffea00024f5788 ffffea000220cf88 ffff888088d5dc40 [ 72.518794][ T3487] raw: 0000000000000000 ffff888093cf3040 000000010000000b ffff88807aea69c0 [ 72.518801][ T3487] page dumped because: kasan: bad access detected [ 72.518807][ T3487] page->mem_cgroup:ffff88807aea69c0 [ 72.518810][ T3487] [ 72.518815][ T3487] Memory state around the buggy address: [ 72.518826][ T3487] ffff888093cf3600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.518835][ T3487] ffff888093cf3680: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 72.518848][ T3487] >ffff888093cf3700: fc fc fc fc fb fb fb fb fb fb fb fb fb fb fb fb [ 72.523882][ T8680] kobject: 'mq' (0000000082537eef): kobject_uevent_env [ 72.529103][ T3487] ^ [ 72.529114][ T3487] ffff888093cf3780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.529124][ T3487] ffff888093cf3800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 72.529129][ T3487] ================================================================== [ 72.529133][ T3487] Disabling lock debugging due to kernel taint [ 72.540090][ T3487] Kernel panic - not syncing: panic_on_warn set ... [ 72.561462][ T8680] kobject: 'mq' (0000000082537eef): kobject_uevent_env: filter function caused the event to drop! [ 72.565266][ T3487] CPU: 1 PID: 3487 Comm: kworker/1:2 Tainted: G B 5.2.0-rc5+ #58 [ 72.565273][ T3487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.565294][ T3487] Workqueue: events __blk_release_queue [ 72.571720][ T8680] kobject: '0' (000000000af8afe9): kobject_add_internal: parent: 'mq', set: '' [ 72.576097][ T3487] Call Trace: [ 72.576119][ T3487] dump_stack+0x172/0x1f0 [ 72.576136][ T3487] panic+0x2cb/0x744 [ 72.576153][ T3487] ? __warn_printk+0xf3/0xf3 [ 72.578593][ T8680] kobject: 'cpu0' (00000000bf0ec901): kobject_add_internal: parent: '0', set: '' [ 72.588676][ T3487] ? debugfs_remove+0x10d/0x130 [ 72.588692][ T3487] ? preempt_schedule+0x4b/0x60 [ 72.588707][ T3487] ? ___preempt_schedule+0x16/0x18 [ 72.588727][ T3487] ? trace_hardirqs_on+0x5e/0x220 [ 72.593136][ T8680] kobject: 'cpu1' (0000000052888153): kobject_add_internal: parent: '0', set: '' [ 72.597178][ T3487] ? debugfs_remove+0x10d/0x130 [ 72.597192][ T3487] end_report+0x47/0x4f [ 72.597203][ T3487] ? debugfs_remove+0x10d/0x130 [ 72.597219][ T3487] __kasan_report.cold+0xe/0x40 [ 72.603779][ T8680] kobject: 'queue' (000000009771c59e): kobject_uevent_env [ 72.607392][ T3487] ? __sanitizer_cov_trace_cmp1+0x10/0x20 [ 72.607404][ T3487] ? debugfs_remove+0x10d/0x130 [ 72.607417][ T3487] kasan_report+0x12/0x20 [ 72.607434][ T3487] __asan_report_load8_noabort+0x14/0x20 [ 72.612312][ T8680] kobject: 'queue' (000000009771c59e): kobject_uevent_env: filter function caused the event to drop! [ 72.616391][ T3487] debugfs_remove+0x10d/0x130 [ 72.616406][ T3487] blk_trace_free+0x38/0x140 [ 72.616418][ T3487] __blk_trace_remove+0x78/0xa0 [ 72.616433][ T3487] blk_trace_shutdown+0x67/0x90 [ 72.620733][ T8680] kobject: 'iosched' (000000003fc055bc): kobject_add_internal: parent: 'queue', set: '' [ 72.630630][ T3487] __blk_release_queue+0x1d6/0x330 [ 72.630648][ T3487] process_one_work+0x989/0x1790 [ 72.630662][ T3487] ? pwq_dec_nr_in_flight+0x320/0x320 [ 72.630680][ T3487] ? lock_acquire+0x16f/0x3f0 [ 72.635744][ T8680] kobject: 'iosched' (000000003fc055bc): kobject_uevent_env [ 72.640166][ T3487] worker_thread+0x98/0xe40 [ 72.640181][ T3487] ? trace_hardirqs_on+0x67/0x220 [ 72.640199][ T3487] kthread+0x354/0x420 [ 72.644985][ T8680] kobject: 'iosched' (000000003fc055bc): kobject_uevent_env: filter function caused the event to drop! [ 72.649422][ T3487] ? process_one_work+0x1790/0x1790 [ 72.649434][ T3487] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 72.649451][ T3487] ret_from_fork+0x24/0x30 [ 72.654804][ T8680] kobject: 'integrity' (00000000e78b0670): kobject_add_internal: parent: 'loop0', set: '' [ 72.661561][ T3487] Kernel Offset: disabled [ 73.220710][ T3487] Rebooting in 86400 seconds..