[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.395291][ T27] audit: type=1800 audit(1566346218.310:25): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.441306][ T27] audit: type=1800 audit(1566346218.310:26): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.489404][ T27] audit: type=1800 audit(1566346218.320:27): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. syzkaller login: [ 65.026574][ T8576] IPVS: ftp: loaded support on port[0] = 21 [ 65.026580][ T8582] IPVS: ftp: loaded support on port[0] = 21 [ 65.044713][ T8583] IPVS: ftp: loaded support on port[0] = 21 [ 65.062722][ T8581] IPVS: ftp: loaded support on port[0] = 21 [ 65.067658][ T8580] IPVS: ftp: loaded support on port[0] = 21 [ 65.095681][ T8584] IPVS: ftp: loaded support on port[0] = 21 [ 65.294102][ T8576] chnl_net:caif_netlink_parms(): no params data found [ 65.313169][ T8583] chnl_net:caif_netlink_parms(): no params data found [ 65.376261][ T8582] chnl_net:caif_netlink_parms(): no params data found [ 65.471134][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.479782][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.487569][ T8583] device bridge_slave_0 entered promiscuous mode [ 65.499567][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.506645][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.514390][ T8583] device bridge_slave_1 entered promiscuous mode [ 65.530869][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.538726][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.546905][ T8576] device bridge_slave_0 entered promiscuous mode [ 65.554565][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.561812][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.569414][ T8576] device bridge_slave_1 entered promiscuous mode [ 65.584938][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 65.602468][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 65.633605][ T8580] chnl_net:caif_netlink_parms(): no params data found [ 65.649811][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.660611][ T8576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.670551][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.678429][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.686387][ T8582] device bridge_slave_0 entered promiscuous mode [ 65.707057][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.723717][ T8576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.733203][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.740251][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.748053][ T8582] device bridge_slave_1 entered promiscuous mode [ 65.803611][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.810744][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.818443][ T8581] device bridge_slave_0 entered promiscuous mode [ 65.827948][ T8583] team0: Port device team_slave_0 added [ 65.839025][ T8583] team0: Port device team_slave_1 added [ 65.857103][ T8576] team0: Port device team_slave_0 added [ 65.865928][ T8582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.876379][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.886333][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.894126][ T8581] device bridge_slave_1 entered promiscuous mode [ 65.921307][ T8576] team0: Port device team_slave_1 added [ 65.932154][ T8582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.941372][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.948402][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.957554][ T8584] device bridge_slave_0 entered promiscuous mode [ 65.964917][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.972116][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.979655][ T8580] device bridge_slave_0 entered promiscuous mode [ 65.991290][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.998349][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.006155][ T8580] device bridge_slave_1 entered promiscuous mode [ 66.053257][ T8583] device hsr_slave_0 entered promiscuous mode [ 66.091546][ T8583] device hsr_slave_1 entered promiscuous mode [ 66.148218][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.155525][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.163230][ T8584] device bridge_slave_1 entered promiscuous mode [ 66.187189][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.203018][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.264237][ T8576] device hsr_slave_0 entered promiscuous mode [ 66.301746][ T8576] device hsr_slave_1 entered promiscuous mode [ 66.341748][ T8576] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.350695][ T8580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.361617][ T8582] team0: Port device team_slave_0 added [ 66.380403][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.403247][ T8580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.414114][ T8582] team0: Port device team_slave_1 added [ 66.435579][ T8581] team0: Port device team_slave_0 added [ 66.443509][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.460800][ T8580] team0: Port device team_slave_0 added [ 66.469924][ T8580] team0: Port device team_slave_1 added [ 66.476686][ T8581] team0: Port device team_slave_1 added [ 66.489172][ T8584] team0: Port device team_slave_0 added [ 66.506494][ T8584] team0: Port device team_slave_1 added [ 66.594232][ T8582] device hsr_slave_0 entered promiscuous mode [ 66.641579][ T8582] device hsr_slave_1 entered promiscuous mode [ 66.681481][ T8582] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.754530][ T8581] device hsr_slave_0 entered promiscuous mode [ 66.801850][ T8581] device hsr_slave_1 entered promiscuous mode [ 66.851377][ T8581] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.914215][ T8584] device hsr_slave_0 entered promiscuous mode [ 66.951634][ T8584] device hsr_slave_1 entered promiscuous mode [ 66.991336][ T8584] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.053885][ T8580] device hsr_slave_0 entered promiscuous mode [ 67.091539][ T8580] device hsr_slave_1 entered promiscuous mode [ 67.141442][ T8580] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.253353][ T8583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.305339][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.313519][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.332086][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.347415][ T8576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.357868][ T8583] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.378531][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.394841][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.407603][ T8582] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.419463][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.428154][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.436952][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.444158][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.452282][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.459851][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.482038][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.494751][ T8576] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.502426][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.510611][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.518774][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.526439][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.536109][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.544496][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.551570][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.559211][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.568287][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.576000][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.584205][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.592933][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.601501][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.609747][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.616815][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.625045][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.640892][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.673430][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.683069][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.692096][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.700514][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.709268][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.716364][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.724678][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.733260][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.741634][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.748662][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.756261][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.764958][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.773470][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.782079][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.790364][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.797439][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.805084][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.813605][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.822072][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.830493][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.838865][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.845938][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.853571][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.863798][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.872396][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.880759][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.889254][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.897347][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.905309][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.913193][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.920884][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.952653][ T8576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.963296][ T8576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.989089][ T8583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.000736][ T8583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.013714][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.021887][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.029445][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.038296][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.046799][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.053896][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.062211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.070627][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.079160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.087780][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.096392][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.105123][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.116543][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.124935][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.133655][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.142140][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.150206][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.158923][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.167414][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.176117][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.184869][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.193520][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.201884][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.210266][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.218735][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.226967][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.235286][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.243744][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.254209][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.267736][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.286138][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.294878][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.302553][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.310029][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.318992][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.327635][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.335634][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.352157][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.360640][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.369081][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.376160][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.384028][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.392846][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.401128][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.408207][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.415855][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.447961][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.458023][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.469632][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.478360][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.487526][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.496434][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.505059][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.513975][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.522341][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.530499][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.540504][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.550326][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.562506][ T8582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.575138][ T8581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.586301][ T8581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.600034][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.618246][ T8576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.637552][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.646112][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.654975][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.663860][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.672800][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.681308][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.689562][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.696670][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.704188][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.713591][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.722051][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.729081][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.736650][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.745437][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.753735][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.781056][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.801462][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.810644][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.827220][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.836212][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program [ 68.859896][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.887848][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 68.911427][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.919912][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.935334][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.944232][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program executing program [ 68.956433][ T8580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.968612][ T8580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.981898][ T8591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.990643][ T8591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program executing program [ 69.038258][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.346935][ T8604] IPVS: ftp: loaded support on port[0] = 21 [ 69.787055][ T8609] IPVS: ftp: loaded support on port[0] = 21 [ 69.896914][ T8613] IPVS: ftp: loaded support on port[0] = 21 [ 70.006912][ T8617] IPVS: ftp: loaded support on port[0] = 21 [ 70.115312][ T8620] IPVS: ftp: loaded support on port[0] = 21 [ 70.225174][ T8624] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program [ 74.886161][ T8625] IPVS: ftp: loaded support on port[0] = 21 [ 75.007356][ T8626] IPVS: ftp: loaded support on port[0] = 21 [ 75.127204][ T8627] IPVS: ftp: loaded support on port[0] = 21 [ 75.245085][ T8628] IPVS: ftp: loaded support on port[0] = 21 [ 75.356426][ T8629] IPVS: ftp: loaded support on port[0] = 21 [ 75.476750][ T8630] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program [ 79.347018][ T8640] IPVS: ftp: loaded support on port[0] = 21 executing program [ 79.916131][ T8641] IPVS: ftp: loaded support on port[0] = 21 [ 80.035026][ T8642] IPVS: ftp: loaded support on port[0] = 21 [ 80.156928][ T8643] IPVS: ftp: loaded support on port[0] = 21 [ 80.386296][ T8644] IPVS: ftp: loaded support on port[0] = 21 [ 81.056190][ T8645] IPVS: ftp: loaded support on port[0] = 21 [ 81.505389][ T8646] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program [ 84.029343][ T8643] ================================================================== [ 84.037557][ T8643] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200 [ 84.047781][ T8643] Read of size 4 at addr ffff8880988ceb00 by task syz-executor719/8643 [ 84.055997][ T8643] [ 84.058425][ T8643] CPU: 1 PID: 8643 Comm: syz-executor719 Not tainted 5.3.0-rc5-next-20190820 #69 [ 84.067521][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 executing program [ 84.077571][ T8643] Call Trace: [ 84.080864][ T8643] dump_stack+0x172/0x1f0 [ 84.085183][ T8643] ? refcount_inc_not_zero_checked+0x81/0x200 [ 84.091253][ T8643] print_address_description.cold+0xd4/0x306 [ 84.097217][ T8643] ? refcount_inc_not_zero_checked+0x81/0x200 [ 84.103264][ T8643] ? refcount_inc_not_zero_checked+0x81/0x200 [ 84.109330][ T8643] __kasan_report.cold+0x1b/0x36 [ 84.114274][ T8643] ? refcount_inc_not_zero_checked+0x81/0x200 [ 84.120330][ T8643] kasan_report+0x12/0x17 [ 84.124638][ T8643] check_memory_region+0x134/0x1a0 [ 84.129733][ T8643] __kasan_check_read+0x11/0x20 [ 84.134577][ T8643] refcount_inc_not_zero_checked+0x81/0x200 [ 84.140446][ T8643] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 84.146252][ T8643] ? __kasan_check_write+0x14/0x20 [ 84.151345][ T8643] refcount_inc_checked+0x17/0x70 [ 84.156348][ T8643] nr_release+0x62/0x3e0 [ 84.160575][ T8643] __sock_release+0xce/0x280 [ 84.165156][ T8643] sock_close+0x1e/0x30 [ 84.169296][ T8643] __fput+0x2ff/0x890 [ 84.173267][ T8643] ? __sock_release+0x280/0x280 [ 84.178132][ T8643] ____fput+0x16/0x20 [ 84.182101][ T8643] task_work_run+0x145/0x1c0 [ 84.186697][ T8643] do_exit+0x92f/0x2e50 [ 84.190835][ T8643] ? mm_update_next_owner+0x640/0x640 [ 84.196193][ T8643] ? lock_downgrade+0x920/0x920 [ 84.201030][ T8643] ? _raw_spin_unlock_irq+0x28/0x90 [ 84.206220][ T8643] ? get_signal+0x392/0x2500 [ 84.210785][ T8643] ? _raw_spin_unlock_irq+0x28/0x90 [ 84.215973][ T8643] do_group_exit+0x135/0x360 [ 84.220542][ T8643] get_signal+0x47c/0x2500 [ 84.224943][ T8643] ? __kasan_check_read+0x11/0x20 [ 84.229962][ T8643] do_signal+0x87/0x1700 [ 84.234195][ T8643] ? __sys_accept4+0x482/0x6a0 [ 84.238945][ T8643] ? setup_sigcontext+0x7d0/0x7d0 [ 84.243945][ T8643] ? getname+0x1a/0x20 [ 84.247990][ T8643] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 84.254222][ T8643] ? do_sys_open+0x31d/0x5d0 [ 84.258796][ T8643] ? exit_to_usermode_loop+0x43/0x380 [ 84.264154][ T8643] ? do_syscall_64+0x65f/0x760 [ 84.268890][ T8643] ? exit_to_usermode_loop+0x43/0x380 [ 84.274241][ T8643] ? lockdep_hardirqs_on+0x418/0x5d0 [ 84.279504][ T8643] ? trace_hardirqs_on+0x67/0x240 [ 84.284510][ T8643] exit_to_usermode_loop+0x286/0x380 [ 84.289778][ T8643] do_syscall_64+0x65f/0x760 [ 84.294348][ T8643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.300213][ T8643] RIP: 0033:0x442639 [ 84.304092][ T8643] Code: Bad RIP value. [ 84.308138][ T8643] RSP: 002b:00007fffaacf6cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 84.316536][ T8643] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000442639 [ 84.324486][ T8643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 84.332443][ T8643] RBP: 0000000000000003 R08: 0000000500000009 R09: 0000000500000009 [ 84.340403][ T8643] R10: 0000000000000800 R11: 0000000000000246 R12: 000055555739b850 [ 84.348349][ T8643] R13: 000000000000000e R14: 0000000000000000 R15: 0000000000000000 [ 84.356323][ T8643] [ 84.358643][ T8643] Allocated by task 8643: [ 84.362957][ T8643] save_stack+0x23/0x90 [ 84.367097][ T8643] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 84.372702][ T8643] kasan_kmalloc+0x9/0x10 [ 84.377007][ T8643] __kmalloc+0x163/0x770 [ 84.381237][ T8643] sk_prot_alloc+0x23a/0x310 [ 84.385805][ T8643] sk_alloc+0x39/0xf70 [ 84.389852][ T8643] nr_create+0xb9/0x5e0 [ 84.393982][ T8643] __sock_create+0x3d8/0x730 [ 84.398548][ T8643] __sys_socket+0x103/0x220 [ 84.403030][ T8643] __x64_sys_socket+0x73/0xb0 [ 84.407692][ T8643] do_syscall_64+0xfa/0x760 [ 84.412168][ T8643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.418030][ T8643] [ 84.420338][ T8643] Freed by task 8643: [ 84.424305][ T8643] save_stack+0x23/0x90 [ 84.428436][ T8643] __kasan_slab_free+0x102/0x150 [ 84.433346][ T8643] kasan_slab_free+0xe/0x10 [ 84.437823][ T8643] kfree+0x10a/0x2c0 [ 84.441697][ T8643] __sk_destruct+0x4f7/0x6e0 [ 84.446261][ T8643] sk_destruct+0x86/0xa0 [ 84.450484][ T8643] __sk_free+0xfb/0x360 [ 84.454620][ T8643] sk_free+0x42/0x50 [ 84.458504][ T8643] nr_release+0x356/0x3e0 [ 84.462808][ T8643] __sock_release+0xce/0x280 [ 84.467378][ T8643] sock_close+0x1e/0x30 [ 84.471519][ T8643] __fput+0x2ff/0x890 [ 84.475477][ T8643] ____fput+0x16/0x20 [ 84.479433][ T8643] task_work_run+0x145/0x1c0 [ 84.483999][ T8643] do_exit+0x92f/0x2e50 [ 84.488146][ T8643] do_group_exit+0x135/0x360 [ 84.492711][ T8643] get_signal+0x47c/0x2500 [ 84.497102][ T8643] do_signal+0x87/0x1700 [ 84.501321][ T8643] exit_to_usermode_loop+0x286/0x380 [ 84.506593][ T8643] do_syscall_64+0x65f/0x760 [ 84.511160][ T8643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.517020][ T8643] [ 84.519324][ T8643] The buggy address belongs to the object at ffff8880988cea80 executing program [ 84.519324][ T8643] which belongs to the cache kmalloc-2k of size 2048 [ 84.533458][ T8643] The buggy address is located 128 bytes inside of [ 84.533458][ T8643] 2048-byte region [ffff8880988cea80, ffff8880988cf280) [ 84.546782][ T8643] The buggy address belongs to the page: [ 84.552388][ T8643] page:ffffea0002623380 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 compound_mapcount: 0 [ 84.563290][ T8643] flags: 0x1fffc0000010200(slab|head) [ 84.568651][ T8643] raw: 01fffc0000010200 ffffea0002144108 ffffea0002884288 ffff8880aa400e00 [ 84.578141][ T8643] raw: 0000000000000000 ffff8880988ce200 0000000100000003 0000000000000000 [ 84.586698][ T8643] page dumped because: kasan: bad access detected [ 84.593081][ T8643] [ 84.595388][ T8643] Memory state around the buggy address: [ 84.601001][ T8643] ffff8880988cea00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.609055][ T8643] ffff8880988cea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.617095][ T8643] >ffff8880988ceb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.625128][ T8643] ^ [ 84.629173][ T8643] ffff8880988ceb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.637215][ T8643] ffff8880988cec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.645257][ T8643] ================================================================== [ 84.653289][ T8643] Disabling lock debugging due to kernel taint [ 84.667135][ T8643] Kernel panic - not syncing: panic_on_warn set ... [ 84.673726][ T8643] CPU: 1 PID: 8643 Comm: syz-executor719 Tainted: G B 5.3.0-rc5-next-20190820 #69 [ 84.684197][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.694312][ T8643] Call Trace: [ 84.697580][ T8643] dump_stack+0x172/0x1f0 [ 84.701887][ T8643] panic+0x2dc/0x755 [ 84.705755][ T8643] ? add_taint.cold+0x16/0x16 [ 84.710417][ T8643] ? refcount_inc_not_zero_checked+0x81/0x200 [ 84.716461][ T8643] ? preempt_schedule+0x4b/0x60 [ 84.721291][ T8643] ? ___preempt_schedule+0x16/0x20 [ 84.726390][ T8643] ? trace_hardirqs_on+0x5e/0x240 [ 84.731404][ T8643] ? refcount_inc_not_zero_checked+0x81/0x200 [ 84.737445][ T8643] end_report+0x47/0x4f [ 84.741584][ T8643] ? refcount_inc_not_zero_checked+0x81/0x200 [ 84.747625][ T8643] __kasan_report.cold+0xe/0x36 [ 84.752451][ T8643] ? refcount_inc_not_zero_checked+0x81/0x200 [ 84.758512][ T8643] kasan_report+0x12/0x17 [ 84.762825][ T8643] check_memory_region+0x134/0x1a0 [ 84.767908][ T8643] __kasan_check_read+0x11/0x20 [ 84.772751][ T8643] refcount_inc_not_zero_checked+0x81/0x200 [ 84.778626][ T8643] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 84.784408][ T8643] ? __kasan_check_write+0x14/0x20 [ 84.789494][ T8643] refcount_inc_checked+0x17/0x70 [ 84.794490][ T8643] nr_release+0x62/0x3e0 [ 84.798708][ T8643] __sock_release+0xce/0x280 [ 84.803272][ T8643] sock_close+0x1e/0x30 [ 84.807400][ T8643] __fput+0x2ff/0x890 [ 84.811360][ T8643] ? __sock_release+0x280/0x280 [ 84.816189][ T8643] ____fput+0x16/0x20 [ 84.820146][ T8643] task_work_run+0x145/0x1c0 [ 84.824712][ T8643] do_exit+0x92f/0x2e50 [ 84.828847][ T8643] ? mm_update_next_owner+0x640/0x640 [ 84.834193][ T8643] ? lock_downgrade+0x920/0x920 [ 84.839036][ T8643] ? _raw_spin_unlock_irq+0x28/0x90 [ 84.844248][ T8643] ? get_signal+0x392/0x2500 [ 84.848810][ T8643] ? _raw_spin_unlock_irq+0x28/0x90 [ 84.853984][ T8643] do_group_exit+0x135/0x360 [ 84.858556][ T8643] get_signal+0x47c/0x2500 [ 84.862957][ T8643] ? __kasan_check_read+0x11/0x20 [ 84.867960][ T8643] do_signal+0x87/0x1700 [ 84.872176][ T8643] ? __sys_accept4+0x482/0x6a0 [ 84.876921][ T8643] ? setup_sigcontext+0x7d0/0x7d0 [ 84.881918][ T8643] ? getname+0x1a/0x20 [ 84.885960][ T8643] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 84.892170][ T8643] ? do_sys_open+0x31d/0x5d0 [ 84.896738][ T8643] ? exit_to_usermode_loop+0x43/0x380 [ 84.902081][ T8643] ? do_syscall_64+0x65f/0x760 [ 84.906817][ T8643] ? exit_to_usermode_loop+0x43/0x380 [ 84.912161][ T8643] ? lockdep_hardirqs_on+0x418/0x5d0 [ 84.917425][ T8643] ? trace_hardirqs_on+0x67/0x240 [ 84.922431][ T8643] exit_to_usermode_loop+0x286/0x380 [ 84.927693][ T8643] do_syscall_64+0x65f/0x760 [ 84.932273][ T8643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.938152][ T8643] RIP: 0033:0x442639 [ 84.942028][ T8643] Code: Bad RIP value. [ 84.946065][ T8643] RSP: 002b:00007fffaacf6cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 84.954447][ T8643] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000442639 [ 84.962391][ T8643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 84.970346][ T8643] RBP: 0000000000000003 R08: 0000000500000009 R09: 0000000500000009 [ 84.978292][ T8643] R10: 0000000000000800 R11: 0000000000000246 R12: 000055555739b850 [ 84.986240][ T8643] R13: 000000000000000e R14: 0000000000000000 R15: 0000000000000000 [ 84.995257][ T8643] Kernel Offset: disabled [ 84.999573][ T8643] Rebooting in 86400 seconds..