[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 86.179803][ T30] audit: type=1800 audit(1574247755.228:25): pid=12382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 86.210536][ T30] audit: type=1800 audit(1574247755.258:26): pid=12382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 86.230830][ T30] audit: type=1800 audit(1574247755.268:27): pid=12382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. 2019/11/20 11:03:10 parsed 1 programs 2019/11/20 11:03:30 executed programs: 0 syzkaller login: [ 141.734371][T12554] IPVS: ftp: loaded support on port[0] = 21 [ 141.734889][T12560] IPVS: ftp: loaded support on port[0] = 21 [ 141.756149][T12556] IPVS: ftp: loaded support on port[0] = 21 [ 141.756839][T12558] IPVS: ftp: loaded support on port[0] = 21 [ 141.784907][T12562] IPVS: ftp: loaded support on port[0] = 21 [ 141.786539][T12563] IPVS: ftp: loaded support on port[0] = 21 [ 142.293004][T12562] chnl_net:caif_netlink_parms(): no params data found [ 142.320892][T12554] chnl_net:caif_netlink_parms(): no params data found [ 142.381476][T12560] chnl_net:caif_netlink_parms(): no params data found [ 142.449288][T12556] chnl_net:caif_netlink_parms(): no params data found [ 142.472374][T12563] chnl_net:caif_netlink_parms(): no params data found [ 142.575050][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.582498][T12554] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.591200][T12554] device bridge_slave_0 entered promiscuous mode [ 142.649871][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.657257][T12554] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.665892][T12554] device bridge_slave_1 entered promiscuous mode [ 142.674808][T12558] chnl_net:caif_netlink_parms(): no params data found [ 142.685956][T12562] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.693289][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.701903][T12562] device bridge_slave_0 entered promiscuous mode [ 142.748973][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.756269][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.765100][T12560] device bridge_slave_0 entered promiscuous mode [ 142.773735][T12556] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.780904][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.789783][T12556] device bridge_slave_0 entered promiscuous mode [ 142.828949][T12560] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.836277][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.845412][T12560] device bridge_slave_1 entered promiscuous mode [ 142.853118][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.860267][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.869254][T12556] device bridge_slave_1 entered promiscuous mode [ 142.887959][T12562] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.895577][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.904266][T12562] device bridge_slave_1 entered promiscuous mode [ 142.924347][T12554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.934094][T12563] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.941258][T12563] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.949966][T12563] device bridge_slave_0 entered promiscuous mode [ 142.961670][T12554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.971092][T12563] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.978760][T12563] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.987516][T12563] device bridge_slave_1 entered promiscuous mode [ 143.016465][T12560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.037659][T12560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.077826][T12562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.127691][T12563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.140119][T12556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.157203][T12563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.169255][T12562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.213392][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.220583][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.229575][T12558] device bridge_slave_0 entered promiscuous mode [ 143.240635][T12556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.250069][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.257379][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.266135][T12558] device bridge_slave_1 entered promiscuous mode [ 143.307281][T12554] team0: Port device team_slave_0 added [ 143.315514][T12560] team0: Port device team_slave_0 added [ 143.324057][T12554] team0: Port device team_slave_1 added [ 143.332072][T12560] team0: Port device team_slave_1 added [ 143.357278][T12562] team0: Port device team_slave_0 added [ 143.384671][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.397058][T12563] team0: Port device team_slave_0 added [ 143.405968][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.417118][T12562] team0: Port device team_slave_1 added [ 143.425503][T12556] team0: Port device team_slave_0 added [ 143.455590][T12556] team0: Port device team_slave_1 added [ 143.464564][T12563] team0: Port device team_slave_1 added [ 143.506221][T12554] device hsr_slave_0 entered promiscuous mode [ 143.552792][T12554] device hsr_slave_1 entered promiscuous mode [ 143.655002][T12558] team0: Port device team_slave_0 added [ 143.696198][T12560] device hsr_slave_0 entered promiscuous mode [ 143.762739][T12560] device hsr_slave_1 entered promiscuous mode [ 143.802283][T12560] debugfs: Directory 'hsr0' with parent '/' already present! [ 143.886022][T12556] device hsr_slave_0 entered promiscuous mode [ 143.932890][T12556] device hsr_slave_1 entered promiscuous mode [ 143.992330][T12556] debugfs: Directory 'hsr0' with parent '/' already present! [ 144.010813][T12558] team0: Port device team_slave_1 added [ 144.055290][T12563] device hsr_slave_0 entered promiscuous mode [ 144.103163][T12563] device hsr_slave_1 entered promiscuous mode [ 144.152420][T12563] debugfs: Directory 'hsr0' with parent '/' already present! [ 144.270693][T12562] device hsr_slave_0 entered promiscuous mode [ 144.308949][T12562] device hsr_slave_1 entered promiscuous mode [ 144.352424][T12562] debugfs: Directory 'hsr0' with parent '/' already present! [ 144.688377][T12558] device hsr_slave_0 entered promiscuous mode [ 144.776704][T12558] device hsr_slave_1 entered promiscuous mode [ 144.862845][T12558] debugfs: Directory 'hsr0' with parent '/' already present! [ 146.527173][T12560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.543835][T12556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.693200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.701789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.810962][T12554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.862797][T12556] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.981174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.989874][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.998625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.008176][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.017267][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.024552][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.033114][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.043057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.052171][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.059344][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.149253][T12563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.162361][T12562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.221276][T12560] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.278693][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.409167][T12554] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.496979][T12562] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.528170][T12563] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.558524][T12556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.569475][T12556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.644719][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.137451][T12560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.148790][T12560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.225732][T12554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.236708][T12554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.403159][T12556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.411725][T12563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.422695][T12563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.602577][T12562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.613503][T12562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.656466][T12558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.666986][T12558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.783869][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.793200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.803227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.813191][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.821797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.830449][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.840404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.850100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.860100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.869763][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.878394][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.887194][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.896632][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.906496][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.915234][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.923935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.933474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.942596][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.949768][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.958378][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.967801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.976692][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.983899][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.992401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.001711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.010990][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.019664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.028391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.037912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.047166][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.054376][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.062840][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.072350][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.081364][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.088584][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.097151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.107403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.117458][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.126942][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.136029][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.143280][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.151794][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.161317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.170430][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.177659][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.186239][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.195733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.204747][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.211911][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.220457][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.230302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.240289][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.249935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.259481][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.268565][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.275790][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.284376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.294649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.305040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.315148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.324850][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.334912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.344884][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.354706][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.364266][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.374252][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.383893][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.393154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.402824][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.412652][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.421982][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.431110][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.438337][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.446874][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.456366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.465430][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.472631][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.481143][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.491166][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.500870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.510900][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.520643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.529901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.539626][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.548908][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.558161][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.567465][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.577253][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.587177][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.596750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.606731][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.616061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.625217][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.635156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.644877][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.655050][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.665080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.674714][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.682431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.690131][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.699474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.708732][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.718149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.728100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.737378][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.746525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.756385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.765970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.906370][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.127006][T12562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.143252][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.157278][T12563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.330134][T12560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.327708][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.338277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.347643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.356967][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.364816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.372599][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.381542][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.390198][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.399129][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.407982][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.416875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.475738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.485627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.494858][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.503998][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.512791][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.521813][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.530826][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.539691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.548505][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.557208][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.565683][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.573433][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.581044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.588776][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.597009][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.604767][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.612498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.620069][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.668504][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.114033][ T1539] Bluetooth: Error in BCSP hdr checksum [ 152.248954][ T1140] Bluetooth: Error in BCSP hdr checksum [ 153.294007][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 153.300367][T12806] Bluetooth: hci0: sending frame failed (-49) [ 153.855394][ T17] Bluetooth: hci1: command 0x1003 tx timeout [ 153.861863][T12806] Bluetooth: hci1: sending frame failed (-49) [ 154.016518][ T17] Bluetooth: hci3: command 0x1003 tx timeout [ 154.022919][ T17] Bluetooth: hci2: command 0x1003 tx timeout [ 154.022997][T12806] Bluetooth: hci3: sending frame failed (-49) [ 154.036243][T12806] Bluetooth: hci2: sending frame failed (-49) [ 154.175517][ T17] Bluetooth: hci4: command 0x1003 tx timeout [ 154.181801][T12806] Bluetooth: hci4: sending frame failed (-49) [ 154.342321][ T3383] Bluetooth: hci5: command 0x1003 tx timeout [ 154.348555][T12806] Bluetooth: hci5: sending frame failed (-49) [ 155.372327][ T3383] Bluetooth: hci0: command 0x1001 tx timeout [ 155.378563][T12806] Bluetooth: hci0: sending frame failed (-49) [ 155.932457][ T3383] Bluetooth: hci1: command 0x1001 tx timeout [ 155.938713][T12806] Bluetooth: hci1: sending frame failed (-49) [ 156.092655][ T3383] Bluetooth: hci2: command 0x1001 tx timeout [ 156.098760][ T3383] Bluetooth: hci3: command 0x1001 tx timeout [ 156.098884][T12806] Bluetooth: hci2: sending frame failed (-49) [ 156.105778][T12807] Bluetooth: hci3: sending frame failed (-49) [ 156.252326][ T3383] Bluetooth: hci4: command 0x1001 tx timeout [ 156.258581][T12807] Bluetooth: hci4: sending frame failed (-49) [ 156.412487][ T3383] Bluetooth: hci5: command 0x1001 tx timeout [ 156.418722][T12807] Bluetooth: hci5: sending frame failed (-49) [ 157.454700][ T17] Bluetooth: hci0: command 0x1009 tx timeout [ 158.013129][ T17] Bluetooth: hci1: command 0x1009 tx timeout [ 158.172284][ T3383] Bluetooth: hci3: command 0x1009 tx timeout [ 158.172832][ T17] Bluetooth: hci2: command 0x1009 tx timeout [ 158.332284][ T17] Bluetooth: hci4: command 0x1009 tx timeout [ 158.493515][ T17] Bluetooth: hci5: command 0x1009 tx timeout 2019/11/20 11:03:50 executed programs: 6 [ 162.335555][T12793] ===================================================== [ 162.342572][T12793] BUG: KMSAN: use-after-free in kfree_skb+0x23c/0x4c0 [ 162.349349][T12793] CPU: 0 PID: 12793 Comm: syz-executor.1 Not tainted 5.4.0-rc5+ #0 [ 162.357236][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.367305][T12793] Call Trace: [ 162.370596][T12793] dump_stack+0x191/0x1f0 [ 162.374924][T12793] kmsan_report+0x128/0x220 [ 162.379426][T12793] __msan_warning+0x73/0xe0 [ 162.383927][T12793] kfree_skb+0x23c/0x4c0 [ 162.388167][T12793] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 162.394062][T12793] bcsp_close+0x127/0x1e0 [ 162.398412][T12793] ? bcsp_open+0x5d0/0x5d0 [ 162.402822][T12793] hci_uart_tty_close+0x385/0x410 [ 162.407837][T12793] ? hci_uart_tty_open+0x5a0/0x5a0 [ 162.412941][T12793] tty_ldisc_release+0x5dd/0xd50 [ 162.417875][T12793] tty_release_struct+0x4f/0x1d0 [ 162.422802][T12793] ? tty_unlock+0x82/0x100 [ 162.427208][T12793] tty_release+0x1be2/0x1e80 [ 162.431805][T12793] ? tty_release_struct+0x1d0/0x1d0 [ 162.436990][T12793] __fput+0x4c9/0xba0 [ 162.440986][T12793] ____fput+0x37/0x40 [ 162.444955][T12793] ? fput_many+0x2a0/0x2a0 [ 162.449361][T12793] task_work_run+0x22e/0x2a0 [ 162.453965][T12793] prepare_exit_to_usermode+0x39d/0x4d0 [ 162.459507][T12793] syscall_return_slowpath+0x90/0x610 [ 162.464879][T12793] do_syscall_64+0xdc/0x160 [ 162.469372][T12793] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 162.475252][T12793] RIP: 0033:0x4141b0 [ 162.479139][T12793] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d bd 42 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 162.498731][T12793] RSP: 002b:00007ffc6ea1bbf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 162.507128][T12793] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141b0 [ 162.515103][T12793] RDX: 0000001b2cd20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 162.523061][T12793] RBP: 0000000000000001 R08: 0000000000000009 R09: ffffffffffffffff [ 162.531033][T12793] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000075bf20 [ 162.539007][T12793] R13: 0000000000000003 R14: 0000000000762a58 R15: 000000000075bf2c [ 162.546975][T12793] [ 162.549284][T12793] Uninit was created at: [ 162.553521][T12793] kmsan_internal_poison_shadow+0x60/0x120 [ 162.559311][T12793] kmsan_slab_free+0x8d/0xf0 [ 162.563886][T12793] kmem_cache_free+0x2d1/0x2b70 [ 162.568720][T12793] kfree_skb+0x473/0x4c0 [ 162.572948][T12793] ip6_mc_input+0xec9/0x1470 [ 162.577519][T12793] ipv6_rcv+0x683/0x710 [ 162.581662][T12793] process_backlog+0x721/0x1410 [ 162.586496][T12793] net_rx_action+0x7a6/0x1aa0 [ 162.591161][T12793] __do_softirq+0x4a1/0x83a [ 162.595649][T12793] run_ksoftirqd+0x25/0x40 [ 162.600049][T12793] smpboot_thread_fn+0x4a3/0x990 [ 162.604976][T12793] kthread+0x4b5/0x4f0 [ 162.609031][T12793] ret_from_fork+0x35/0x40 [ 162.613448][T12793] ===================================================== [ 162.620366][T12793] Disabling lock debugging due to kernel taint [ 162.626501][T12793] Kernel panic - not syncing: panic_on_warn set ... [ 162.633078][T12793] CPU: 0 PID: 12793 Comm: syz-executor.1 Tainted: G B 5.4.0-rc5+ #0 [ 162.642949][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.652987][T12793] Call Trace: [ 162.656270][T12793] dump_stack+0x191/0x1f0 [ 162.660593][T12793] panic+0x3c9/0xc1e [ 162.664500][T12793] kmsan_report+0x215/0x220 [ 162.668994][T12793] __msan_warning+0x73/0xe0 [ 162.673487][T12793] kfree_skb+0x23c/0x4c0 [ 162.677734][T12793] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 162.683638][T12793] bcsp_close+0x127/0x1e0 [ 162.687957][T12793] ? bcsp_open+0x5d0/0x5d0 [ 162.692361][T12793] hci_uart_tty_close+0x385/0x410 [ 162.697381][T12793] ? hci_uart_tty_open+0x5a0/0x5a0 [ 162.702495][T12793] tty_ldisc_release+0x5dd/0xd50 [ 162.707432][T12793] tty_release_struct+0x4f/0x1d0 [ 162.712363][T12793] ? tty_unlock+0x82/0x100 [ 162.716771][T12793] tty_release+0x1be2/0x1e80 [ 162.721365][T12793] ? tty_release_struct+0x1d0/0x1d0 [ 162.726581][T12793] __fput+0x4c9/0xba0 [ 162.730577][T12793] ____fput+0x37/0x40 [ 162.734554][T12793] ? fput_many+0x2a0/0x2a0 [ 162.738966][T12793] task_work_run+0x22e/0x2a0 [ 162.743560][T12793] prepare_exit_to_usermode+0x39d/0x4d0 [ 162.749103][T12793] syscall_return_slowpath+0x90/0x610 [ 162.754479][T12793] do_syscall_64+0xdc/0x160 [ 162.758974][T12793] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 162.764851][T12793] RIP: 0033:0x4141b0 [ 162.768732][T12793] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d bd 42 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 162.788331][T12793] RSP: 002b:00007ffc6ea1bbf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 162.796727][T12793] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141b0 [ 162.804686][T12793] RDX: 0000001b2cd20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 162.812654][T12793] RBP: 0000000000000001 R08: 0000000000000009 R09: ffffffffffffffff [ 162.820615][T12793] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000075bf20 [ 162.828571][T12793] R13: 0000000000000003 R14: 0000000000762a58 R15: 000000000075bf2c [ 162.837269][T12793] ------------[ cut here ]------------ [ 162.842720][T12793] kernel BUG at mm/kmsan/kmsan.c:470! [ 162.848085][T12793] invalid opcode: 0000 [#1] SMP [ 162.852956][T12793] CPU: 0 PID: 12793 Comm: syz-executor.1 Tainted: G B 5.4.0-rc5+ #0 [ 162.862208][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.872249][T12793] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0 [ 162.878817][T12793] Code: 0f 0b 65 8b 35 1e 13 fd 7d 65 48 8b 15 a2 90 fd 7d 48 c7 c7 87 5a 20 8f 31 c0 e8 a1 fa 72 ff 0f 0b 0f 0b e8 8b c6 4e ff 0f 0b <0f> 0b 65 8b 35 f4 12 fd 7d 65 48 8b 15 78 90 fd 7d 48 c7 c7 87 5a [ 162.898644][T12793] RSP: 0018:ffff8880906cf600 EFLAGS: 00010046 [ 162.904700][T12793] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000007160049 [ 162.912664][T12793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880906cf6dc [ 162.920666][T12793] RBP: ffff8880906cf6a8 R08: 0000000000000000 R09: ffff88812fc41910 [ 162.928627][T12793] R10: 00000000ffffffff R11: ffffffff86051c90 R12: 0000000000000001 [ 162.936581][T12793] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000007160049 [ 162.944536][T12793] FS: 000000000162b940(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 162.953441][T12793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.960025][T12793] CR2: 00000000203b9fdc CR3: 00000000939da000 CR4: 00000000001406f0 [ 162.967978][T12793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.975929][T12793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.983879][T12793] Call Trace: [ 162.987167][T12793] kmsan_check_memory+0xd/0x10 [ 162.992022][T12793] iowrite8+0x99/0x2e0 [ 162.996070][T12793] ? pvpanic_mmio_remove+0x60/0x60 [ 163.001158][T12793] pvpanic_panic_notify+0x46/0x70 [ 163.006165][T12793] atomic_notifier_call_chain+0x13d/0x240 [ 163.011865][T12793] panic+0x45a/0xc1e [ 163.015752][T12793] kmsan_report+0x215/0x220 [ 163.020237][T12793] __msan_warning+0x73/0xe0 [ 163.024720][T12793] kfree_skb+0x23c/0x4c0 [ 163.028939][T12793] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 163.034822][T12793] bcsp_close+0x127/0x1e0 [ 163.039128][T12793] ? bcsp_open+0x5d0/0x5d0 [ 163.043520][T12793] hci_uart_tty_close+0x385/0x410 [ 163.048528][T12793] ? hci_uart_tty_open+0x5a0/0x5a0 [ 163.053616][T12793] tty_ldisc_release+0x5dd/0xd50 [ 163.058539][T12793] tty_release_struct+0x4f/0x1d0 [ 163.063453][T12793] ? tty_unlock+0x82/0x100 [ 163.067849][T12793] tty_release+0x1be2/0x1e80 [ 163.072428][T12793] ? tty_release_struct+0x1d0/0x1d0 [ 163.077603][T12793] __fput+0x4c9/0xba0 [ 163.081570][T12793] ____fput+0x37/0x40 [ 163.085526][T12793] ? fput_many+0x2a0/0x2a0 [ 163.089918][T12793] task_work_run+0x22e/0x2a0 [ 163.094490][T12793] prepare_exit_to_usermode+0x39d/0x4d0 [ 163.100032][T12793] syscall_return_slowpath+0x90/0x610 [ 163.105386][T12793] do_syscall_64+0xdc/0x160 [ 163.109869][T12793] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 163.115735][T12793] RIP: 0033:0x4141b0 [ 163.119611][T12793] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d bd 42 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 163.139193][T12793] RSP: 002b:00007ffc6ea1bbf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 163.147596][T12793] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141b0 [ 163.155543][T12793] RDX: 0000001b2cd20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 163.163494][T12793] RBP: 0000000000000001 R08: 0000000000000009 R09: ffffffffffffffff [ 163.171443][T12793] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000075bf20 [ 163.179392][T12793] R13: 0000000000000003 R14: 0000000000762a58 R15: 000000000075bf2c [ 163.187350][T12793] Modules linked in: [ 163.191231][T12793] ---[ end trace 971b596ef426b827 ]--- [ 163.196672][T12793] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0 [ 163.203232][T12793] Code: 0f 0b 65 8b 35 1e 13 fd 7d 65 48 8b 15 a2 90 fd 7d 48 c7 c7 87 5a 20 8f 31 c0 e8 a1 fa 72 ff 0f 0b 0f 0b e8 8b c6 4e ff 0f 0b <0f> 0b 65 8b 35 f4 12 fd 7d 65 48 8b 15 78 90 fd 7d 48 c7 c7 87 5a [ 163.222826][T12793] RSP: 0018:ffff8880906cf600 EFLAGS: 00010046 [ 163.228867][T12793] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000007160049 [ 163.236814][T12793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880906cf6dc [ 163.244763][T12793] RBP: ffff8880906cf6a8 R08: 0000000000000000 R09: ffff88812fc41910 [ 163.252728][T12793] R10: 00000000ffffffff R11: ffffffff86051c90 R12: 0000000000000001 [ 163.260679][T12793] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000007160049 [ 163.268631][T12793] FS: 000000000162b940(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 163.277538][T12793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.284098][T12793] CR2: 00000000203b9fdc CR3: 00000000939da000 CR4: 00000000001406f0 [ 163.292049][T12793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.299996][T12793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.307945][T12793] Kernel panic - not syncing: Fatal exception [ 163.314744][T12793] Kernel Offset: disabled [ 163.319089][T12793] Rebooting in 86400 seconds..