[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 42.264507][ T26] audit: type=1800 audit(1554307476.762:25): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 42.285818][ T26] audit: type=1800 audit(1554307476.762:26): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.314872][ T26] audit: type=1800 audit(1554307476.762:27): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. 2019/04/03 16:06:41 parsed 1 programs 2019/04/03 16:06:43 executed programs: 0 syzkaller login: [ 169.515465][ T8052] IPVS: ftp: loaded support on port[0] = 21 [ 169.516959][ T8054] IPVS: ftp: loaded support on port[0] = 21 [ 169.529979][ T8053] IPVS: ftp: loaded support on port[0] = 21 [ 169.539565][ T8055] IPVS: ftp: loaded support on port[0] = 21 [ 169.562382][ T8059] IPVS: ftp: loaded support on port[0] = 21 [ 169.565513][ T8058] IPVS: ftp: loaded support on port[0] = 21 [ 169.820908][ T8052] chnl_net:caif_netlink_parms(): no params data found [ 169.906939][ T8053] chnl_net:caif_netlink_parms(): no params data found [ 169.937697][ T8054] chnl_net:caif_netlink_parms(): no params data found [ 170.000848][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.008644][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.016611][ T8052] device bridge_slave_0 entered promiscuous mode [ 170.027427][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.034730][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.042772][ T8052] device bridge_slave_1 entered promiscuous mode [ 170.082585][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 170.149536][ T8052] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.158618][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 170.169736][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.177423][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.185148][ T8054] device bridge_slave_0 entered promiscuous mode [ 170.199930][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.207389][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.215850][ T8053] device bridge_slave_0 entered promiscuous mode [ 170.226060][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.233526][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.241600][ T8053] device bridge_slave_1 entered promiscuous mode [ 170.251981][ T8052] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.275714][ T8052] team0: Port device team_slave_0 added [ 170.282477][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.290010][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.298250][ T8054] device bridge_slave_1 entered promiscuous mode [ 170.311760][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 170.340619][ T8052] team0: Port device team_slave_1 added [ 170.370142][ T8053] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.382623][ T8053] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.414678][ T8054] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.443756][ T8053] team0: Port device team_slave_0 added [ 170.461386][ T8054] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.476678][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.484018][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.491871][ T8055] device bridge_slave_0 entered promiscuous mode [ 170.511584][ T8053] team0: Port device team_slave_1 added [ 170.530633][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.538590][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.546656][ T8055] device bridge_slave_1 entered promiscuous mode [ 170.575423][ T8054] team0: Port device team_slave_0 added [ 170.592628][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.601289][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.609834][ T8058] device bridge_slave_0 entered promiscuous mode [ 170.617623][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.624698][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.633012][ T8059] device bridge_slave_0 entered promiscuous mode [ 170.689303][ T8052] device hsr_slave_0 entered promiscuous mode [ 170.727126][ T8052] device hsr_slave_1 entered promiscuous mode [ 170.813878][ T8054] team0: Port device team_slave_1 added [ 170.821688][ T8055] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.830708][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.838005][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.845831][ T8058] device bridge_slave_1 entered promiscuous mode [ 170.853363][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.861558][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.869494][ T8059] device bridge_slave_1 entered promiscuous mode [ 170.892596][ T8055] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.914972][ T8058] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.990219][ T8053] device hsr_slave_0 entered promiscuous mode [ 171.027380][ T8053] device hsr_slave_1 entered promiscuous mode [ 171.130136][ T8054] device hsr_slave_0 entered promiscuous mode [ 171.177154][ T8054] device hsr_slave_1 entered promiscuous mode [ 171.228534][ T8058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.260797][ T8059] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.275940][ T8059] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.289513][ T8058] team0: Port device team_slave_0 added [ 171.297267][ T8055] team0: Port device team_slave_0 added [ 171.317608][ T8058] team0: Port device team_slave_1 added [ 171.327213][ T8055] team0: Port device team_slave_1 added [ 171.342079][ T8059] team0: Port device team_slave_0 added [ 171.355227][ T8059] team0: Port device team_slave_1 added [ 171.451690][ T8058] device hsr_slave_0 entered promiscuous mode [ 171.487330][ T8058] device hsr_slave_1 entered promiscuous mode [ 171.580129][ T8059] device hsr_slave_0 entered promiscuous mode [ 171.617319][ T8059] device hsr_slave_1 entered promiscuous mode [ 171.709910][ T8055] device hsr_slave_0 entered promiscuous mode [ 171.747360][ T8055] device hsr_slave_1 entered promiscuous mode [ 171.850630][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.885845][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.904505][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.923707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.932940][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.945675][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.975937][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.997822][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.006581][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.016176][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.023704][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.032925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.041249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.049182][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.057882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.066218][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.073378][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.081782][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.096354][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.122314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.132531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.144189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.153564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.162322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.172865][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.181595][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.188919][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.197447][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.238487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.249775][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.258370][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.265451][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.273938][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.282907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.292998][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.301707][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.310392][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.319289][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.327980][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.337423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.359777][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.368685][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.380343][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.389658][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.398467][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.405664][ T8068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.413600][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.422246][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.431201][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.439902][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.448354][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.455438][ T8068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.463716][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.488759][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.505403][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.515983][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.528662][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.538127][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.546550][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.555313][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.563917][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.571690][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.579513][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.588985][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.612048][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.621057][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.630351][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.639105][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.648128][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.658751][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.676368][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.684431][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.703275][ T8053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.715393][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.730993][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.738911][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.748052][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.756548][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.765329][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.773828][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.782335][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.794373][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.810777][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.820053][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.829704][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.836944][ T8067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.867809][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.894005][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.902102][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.916273][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.925600][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.940835][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.948000][ T8067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.956323][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.965534][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.974370][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.982245][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.993475][ T8053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.003685][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.014362][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.024668][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.038898][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.046740][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.080232][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.094607][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.111477][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.121042][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.133323][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.134771][ C0] hrtimer: interrupt took 25874 ns [ 173.142286][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.155892][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.165144][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.174079][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.183416][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.194676][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.201894][ T8069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.211266][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.246542][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.255461][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.278726][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.314752][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.321947][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.346561][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.355616][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.364981][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.372105][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.381757][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.394039][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.408821][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.415927][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.424357][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.437911][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.448172][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.484609][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.538048][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.617724][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.637914][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.678541][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.730138][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.777476][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.795236][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.810406][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.832299][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.864374][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.873773][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.895847][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.930120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.961260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.013132][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.042571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.069581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.143224][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.198222][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.206574][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.251776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.275534][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.286452][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2019/04/03 16:06:48 executed programs: 18 [ 174.405419][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/04/03 16:06:53 executed programs: 110 2019/04/03 16:06:59 executed programs: 212 2019/04/03 16:07:04 executed programs: 313 2019/04/03 16:07:09 executed programs: 412 2019/04/03 16:07:14 executed programs: 513 2019/04/03 16:07:19 executed programs: 610 2019/04/03 16:07:24 executed programs: 705 2019/04/03 16:07:29 executed programs: 804 2019/04/03 16:07:34 executed programs: 906 2019/04/03 16:07:39 executed programs: 1005 [ 226.317035][ C0] ================================================================== [ 226.325369][ C0] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 226.332766][ C0] Read of size 8 at addr ffff888090cb0b80 by task modprobe/15860 [ 226.340502][ C0] [ 226.342847][ C0] CPU: 0 PID: 15860 Comm: modprobe Not tainted 5.1.0-rc3+ #50 [ 226.350311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.360386][ C0] Call Trace: [ 226.363684][ C0] [ 226.366569][ C0] dump_stack+0x172/0x1f0 [ 226.370997][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 226.376046][ C0] print_address_description.cold+0x7c/0x20d [ 226.382052][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 226.387123][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 226.392177][ C0] kasan_report.cold+0x1b/0x40 [ 226.396967][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 226.402190][ C0] __asan_report_load8_noabort+0x14/0x20 [ 226.407840][ C0] ccid_hc_tx_delete+0xde/0x100 [ 226.412722][ C0] dccp_sk_destruct+0x3f/0x90 [ 226.417407][ C0] ? dccp_init_sock+0x3f0/0x3f0 [ 226.422274][ C0] __sk_destruct+0x55/0x6d0 [ 226.426829][ C0] ? proto_unregister+0x4e0/0x4e0 [ 226.431879][ C0] rcu_core+0x928/0x1390 [ 226.436142][ C0] ? rcu_check_gp_start_stall+0x250/0x250 [ 226.441891][ C0] __do_softirq+0x266/0x95a [ 226.446421][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 226.451304][ C0] irq_exit+0x180/0x1d0 [ 226.455492][ C0] smp_apic_timer_interrupt+0x14a/0x570 [ 226.461154][ C0] apic_timer_interrupt+0xf/0x20 [ 226.466098][ C0] [ 226.469053][ C0] RIP: 0010:lock_is_held_type+0x272/0x320 [ 226.474810][ C0] Code: ff df c7 83 7c 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 88 00 00 00 48 83 3d 16 b1 3b 07 00 74 31 48 8b 7d c0 57 9d <0f> 1f 44 00 00 48 83 c4 20 44 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d [ 226.494430][ C0] RSP: 0018:ffff88808be179f0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 226.494466][ C0] RAX: 1ffffffff11252d6 RBX: ffff88808ceca640 RCX: ffff88808cecaec0 [ 226.494474][ C0] RDX: dffffc0000000000 RSI: ffffffff889a5900 RDI: 0000000000000282 [ 226.494481][ C0] RBP: ffff88808be17a38 R08: 1ffff1101129726b R09: ffffed101129726c [ 226.511211][ C0] R10: ffffed101129726b R11: ffff8880894b935f R12: 0000000000000000 [ 226.511220][ C0] R13: ffff88808cecaec0 R14: ffffffff889a5900 R15: 0000000000000001 [ 226.511265][ C0] ___might_sleep+0x1c4/0x280 [ 226.511286][ C0] __might_sleep+0x95/0x190 [ 226.552659][ C0] down_read+0x1d/0x90 [ 226.556754][ C0] validate_mm+0xdb/0x620 [ 226.561108][ C0] __vma_adjust+0xabb/0x1840 [ 226.565738][ C0] __split_vma+0x2c9/0x570 [ 226.570174][ C0] split_vma+0xa6/0xf0 [ 226.574268][ C0] mprotect_fixup+0x826/0xa70 [ 226.578993][ C0] ? change_protection+0x2620/0x2620 [ 226.584301][ C0] ? common_mmap.part.0+0xa5/0xc0 [ 226.589354][ C0] ? apparmor_file_mprotect+0xda/0x110 [ 226.594842][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.601133][ C0] ? security_file_mprotect+0x93/0xc0 [ 226.606548][ C0] do_mprotect_pkey+0x594/0xa30 [ 226.611448][ C0] ? mprotect_fixup+0xa70/0xa70 [ 226.616329][ C0] ? do_syscall_64+0x26/0x610 [ 226.621043][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.627122][ C0] ? do_syscall_64+0x26/0x610 [ 226.631817][ C0] __x64_sys_mprotect+0x78/0xb0 [ 226.636735][ C0] do_syscall_64+0x103/0x610 [ 226.641343][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.647270][ C0] RIP: 0033:0x7f394f31f447 [ 226.651731][ C0] Code: 73 01 c3 48 8d 0d 5d ad 20 00 31 d2 48 29 c2 89 11 48 83 c8 ff eb eb 90 90 90 90 90 90 90 90 90 90 90 90 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 2d ad 20 00 31 d2 48 29 c2 89 [ 226.671352][ C0] RSP: 002b:00007fffd2f0bc88 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 226.679790][ C0] RAX: ffffffffffffffda RBX: 00007f394f5299d8 RCX: 00007f394f31f447 [ 226.687857][ C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f394f528000 [ 226.687866][ C0] RBP: 00007fffd2f0bd80 R08: 0000000000000001 R09: 0000000000000007 [ 226.687873][ C0] R10: 00007f394f319a0b R11: 0000000000000206 R12: 00007f394f309000 [ 226.687880][ C0] R13: 00007f394f309a78 R14: 00007f394f319a0b R15: 00007f394f529028 [ 226.687904][ C0] [ 226.722267][ C0] Allocated by task 15826: [ 226.726790][ C0] save_stack+0x45/0xd0 [ 226.726805][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 226.726817][ C0] kasan_slab_alloc+0xf/0x20 [ 226.726828][ C0] kmem_cache_alloc+0x11a/0x6f0 [ 226.726849][ C0] ccid_new+0x256/0x3f0 [ 226.750256][ C0] dccp_hdlr_ccid+0x27/0x150 [ 226.754882][ C0] __dccp_feat_activate+0x17a/0x270 [ 226.760105][ C0] dccp_feat_activate_values+0x33a/0x766 [ 226.765843][ C0] dccp_rcv_state_process+0x116f/0x1935 [ 226.771410][ C0] dccp_v6_do_rcv+0x269/0xbf0 [ 226.776456][ C0] __release_sock+0x12e/0x3a0 [ 226.781235][ C0] release_sock+0x59/0x1c0 [ 226.785667][ C0] __inet_stream_connect+0x59f/0xea0 [ 226.790966][ C0] inet_stream_connect+0x58/0xa0 [ 226.795920][ C0] __sys_connect+0x266/0x330 [ 226.800544][ C0] __x64_sys_connect+0x73/0xb0 [ 226.805325][ C0] do_syscall_64+0x103/0x610 [ 226.809934][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.815922][ C0] [ 226.818256][ C0] Freed by task 15835: [ 226.822342][ C0] save_stack+0x45/0xd0 [ 226.826515][ C0] __kasan_slab_free+0x102/0x150 [ 226.831506][ C0] kasan_slab_free+0xe/0x10 [ 226.836054][ C0] kmem_cache_free+0x86/0x260 [ 226.841448][ C0] ccid_hc_tx_delete+0xc1/0x100 [ 226.846322][ C0] dccp_hdlr_ccid+0x7d/0x150 [ 226.850931][ C0] __dccp_feat_activate+0x17a/0x270 [ 226.856179][ C0] dccp_feat_activate_values+0x33a/0x766 [ 226.856201][ C0] dccp_create_openreq_child+0x40c/0x570 [ 226.867528][ C0] dccp_v6_request_recv_sock+0x214/0x1e80 [ 226.873367][ C0] dccp_check_req+0x35c/0x6f0 [ 226.878151][ C0] dccp_v6_rcv+0x6d7/0x191e [ 226.882975][ C0] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 226.888638][ C0] ip6_input_finish+0x84/0x170 [ 226.893450][ C0] ip6_input+0xe4/0x3f0 [ 226.897654][ C0] ip6_rcv_finish+0x1e7/0x320 [ 226.902346][ C0] ipv6_rcv+0x10e/0x420 [ 226.906523][ C0] __netif_receive_skb_one_core+0x115/0x1a0 [ 226.912433][ C0] __netif_receive_skb+0x2c/0x1c0 [ 226.917688][ C0] process_backlog+0x206/0x750 [ 226.922613][ C0] net_rx_action+0x4fa/0x1070 [ 226.927314][ C0] __do_softirq+0x266/0x95a [ 226.931850][ C0] [ 226.934190][ C0] The buggy address belongs to the object at ffff888090cb0b80 [ 226.934190][ C0] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 226.948865][ C0] The buggy address is located 0 bytes inside of [ 226.948865][ C0] 1240-byte region [ffff888090cb0b80, ffff888090cb1058) [ 226.962087][ C0] The buggy address belongs to the page: [ 226.967832][ C0] page:ffffea0002432c00 count:1 mapcount:0 mapping:ffff888216ad5480 index:0x0 compound_mapcount: 0 [ 226.978532][ C0] flags: 0x1fffc0000010200(slab|head) [ 226.983955][ C0] raw: 01fffc0000010200 ffffea0002466d08 ffffea0002464908 ffff888216ad5480 [ 226.992568][ C0] raw: 0000000000000000 ffff888090cb0080 0000000100000005 0000000000000000 [ 227.001173][ C0] page dumped because: kasan: bad access detected [ 227.001179][ C0] [ 227.001183][ C0] Memory state around the buggy address: [ 227.001195][ C0] ffff888090cb0a80: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 227.001204][ C0] ffff888090cb0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 227.001212][ C0] >ffff888090cb0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.001217][ C0] ^ [ 227.001225][ C0] ffff888090cb0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.001233][ C0] ffff888090cb0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.001238][ C0] ================================================================== [ 227.001242][ C0] Disabling lock debugging due to kernel taint [ 227.001332][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 227.054316][ T3876] kobject: 'loop3' (00000000a91cd4a1): kobject_uevent_env [ 227.060144][ C0] CPU: 0 PID: 15860 Comm: modprobe Tainted: G B 5.1.0-rc3+ #50 [ 227.060151][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.060155][ C0] Call Trace: [ 227.060161][ C0] [ 227.060181][ C0] dump_stack+0x172/0x1f0 [ 227.060196][ C0] panic+0x2cb/0x65c [ 227.060208][ C0] ? __warn_printk+0xf3/0xf3 [ 227.060235][ C0] ? retint_kernel+0x2d/0x2d [ 227.076514][ T3876] kobject: 'loop3' (00000000a91cd4a1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 227.081088][ C0] ? trace_hardirqs_on+0x5e/0x230 [ 227.081104][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 227.081115][ C0] end_report+0x47/0x4f [ 227.081134][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 227.081144][ C0] kasan_report.cold+0xe/0x40 [ 227.081176][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 227.107406][ T3876] kobject: 'loop0' (00000000c87bd322): kobject_uevent_env [ 227.110499][ C0] __asan_report_load8_noabort+0x14/0x20 [ 227.110515][ C0] ccid_hc_tx_delete+0xde/0x100 [ 227.110527][ C0] dccp_sk_destruct+0x3f/0x90 [ 227.110537][ C0] ? dccp_init_sock+0x3f0/0x3f0 [ 227.110556][ C0] __sk_destruct+0x55/0x6d0 [ 227.116018][ T3876] kobject: 'loop0' (00000000c87bd322): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 227.118021][ C0] ? proto_unregister+0x4e0/0x4e0 [ 227.118035][ C0] rcu_core+0x928/0x1390 [ 227.118053][ C0] ? rcu_check_gp_start_stall+0x250/0x250 [ 227.118074][ C0] __do_softirq+0x266/0x95a [ 227.118086][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 227.118105][ C0] irq_exit+0x180/0x1d0 [ 227.200130][ T3876] kobject: 'loop2' (00000000975b9a6f): kobject_uevent_env [ 227.204475][ C0] smp_apic_timer_interrupt+0x14a/0x570 [ 227.204489][ C0] apic_timer_interrupt+0xf/0x20 [ 227.204495][ C0] [ 227.204509][ C0] RIP: 0010:lock_is_held_type+0x272/0x320 [ 227.204521][ C0] Code: ff df c7 83 7c 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 88 00 00 00 48 83 3d 16 b1 3b 07 00 74 31 48 8b 7d c0 57 9d <0f> 1f 44 00 00 48 83 c4 20 44 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d [ 227.204528][ C0] RSP: 0018:ffff88808be179f0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 227.217882][ T3876] kobject: 'loop2' (00000000975b9a6f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 227.219750][ C0] RAX: 1ffffffff11252d6 RBX: ffff88808ceca640 RCX: ffff88808cecaec0 [ 227.219758][ C0] RDX: dffffc0000000000 RSI: ffffffff889a5900 RDI: 0000000000000282 [ 227.219765][ C0] RBP: ffff88808be17a38 R08: 1ffff1101129726b R09: ffffed101129726c [ 227.219773][ C0] R10: ffffed101129726b R11: ffff8880894b935f R12: 0000000000000000 [ 227.219780][ C0] R13: ffff88808cecaec0 R14: ffffffff889a5900 R15: 0000000000000001 [ 227.219819][ C0] ___might_sleep+0x1c4/0x280 [ 227.356762][ C0] __might_sleep+0x95/0x190 [ 227.361288][ C0] down_read+0x1d/0x90 [ 227.365678][ C0] validate_mm+0xdb/0x620 [ 227.370249][ C0] __vma_adjust+0xabb/0x1840 [ 227.374857][ C0] __split_vma+0x2c9/0x570 [ 227.379304][ C0] split_vma+0xa6/0xf0 [ 227.383404][ C0] mprotect_fixup+0x826/0xa70 [ 227.388118][ C0] ? change_protection+0x2620/0x2620 [ 227.393419][ C0] ? common_mmap.part.0+0xa5/0xc0 [ 227.398470][ C0] ? apparmor_file_mprotect+0xda/0x110 [ 227.404064][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.410410][ C0] ? security_file_mprotect+0x93/0xc0 [ 227.415794][ C0] do_mprotect_pkey+0x594/0xa30 [ 227.420671][ C0] ? mprotect_fixup+0xa70/0xa70 [ 227.425533][ C0] ? do_syscall_64+0x26/0x610 [ 227.430213][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.436283][ C0] ? do_syscall_64+0x26/0x610 [ 227.440973][ C0] __x64_sys_mprotect+0x78/0xb0 [ 227.445857][ C0] do_syscall_64+0x103/0x610 [ 227.450473][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.456390][ C0] RIP: 0033:0x7f394f31f447 [ 227.460812][ C0] Code: 73 01 c3 48 8d 0d 5d ad 20 00 31 d2 48 29 c2 89 11 48 83 c8 ff eb eb 90 90 90 90 90 90 90 90 90 90 90 90 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 2d ad 20 00 31 d2 48 29 c2 89 [ 227.480528][ C0] RSP: 002b:00007fffd2f0bc88 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 227.488950][ C0] RAX: ffffffffffffffda RBX: 00007f394f5299d8 RCX: 00007f394f31f447 [ 227.496932][ C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f394f528000 [ 227.504909][ C0] RBP: 00007fffd2f0bd80 R08: 0000000000000001 R09: 0000000000000007 [ 227.512909][ C0] R10: 00007f394f319a0b R11: 0000000000000206 R12: 00007f394f309000 [ 227.520999][ C0] R13: 00007f394f309a78 R14: 00007f394f319a0b R15: 00007f394f529028 [ 227.530012][ C0] Kernel Offset: disabled [ 227.534344][ C0] Rebooting in 86400 seconds..