[ 38.663432][ T26] audit: type=1800 audit(1561383214.655:28): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.378598][ T26] audit: type=1800 audit(1561383215.455:29): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 39.397830][ T26] audit: type=1800 audit(1561383215.455:30): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.149' (ECDSA) to the list of known hosts. 2019/06/24 13:33:47 parsed 1 programs 2019/06/24 13:33:49 executed programs: 0 syzkaller login: [ 53.441689][ T7783] IPVS: ftp: loaded support on port[0] = 21 [ 53.494857][ T7788] IPVS: ftp: loaded support on port[0] = 21 [ 53.494870][ T7786] IPVS: ftp: loaded support on port[0] = 21 [ 53.531445][ T7791] IPVS: ftp: loaded support on port[0] = 21 [ 53.531458][ T7793] IPVS: ftp: loaded support on port[0] = 21 [ 53.578760][ T7792] IPVS: ftp: loaded support on port[0] = 21 [ 53.679408][ T7783] chnl_net:caif_netlink_parms(): no params data found [ 53.760094][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.768343][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.776257][ T7783] device bridge_slave_0 entered promiscuous mode [ 53.813522][ T7788] chnl_net:caif_netlink_parms(): no params data found [ 53.840153][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.847383][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.855180][ T7783] device bridge_slave_1 entered promiscuous mode [ 53.893667][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 53.910220][ T7783] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.942307][ T7783] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.979976][ T7786] chnl_net:caif_netlink_parms(): no params data found [ 53.993178][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 54.005298][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.013259][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.020777][ T7788] device bridge_slave_0 entered promiscuous mode [ 54.028789][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.035895][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.043570][ T7788] device bridge_slave_1 entered promiscuous mode [ 54.054929][ T7791] chnl_net:caif_netlink_parms(): no params data found [ 54.080343][ T7783] team0: Port device team_slave_0 added [ 54.087345][ T7783] team0: Port device team_slave_1 added [ 54.105970][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.113678][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.121255][ T7793] device bridge_slave_0 entered promiscuous mode [ 54.128976][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.136405][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.144506][ T7793] device bridge_slave_1 entered promiscuous mode [ 54.167790][ T7788] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.177561][ T7788] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.197883][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.208724][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.216875][ T7786] device bridge_slave_0 entered promiscuous mode [ 54.232089][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.239157][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.247083][ T7792] device bridge_slave_0 entered promiscuous mode [ 54.264294][ T7793] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.274250][ T7793] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.283378][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.290434][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.299842][ T7786] device bridge_slave_1 entered promiscuous mode [ 54.315986][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.323598][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.331179][ T7792] device bridge_slave_1 entered promiscuous mode [ 54.394443][ T7783] device hsr_slave_0 entered promiscuous mode [ 54.452279][ T7783] device hsr_slave_1 entered promiscuous mode [ 54.497654][ T7788] team0: Port device team_slave_0 added [ 54.510448][ T7793] team0: Port device team_slave_0 added [ 54.520634][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.530532][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.538225][ T7791] device bridge_slave_0 entered promiscuous mode [ 54.547930][ T7786] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.557433][ T7788] team0: Port device team_slave_1 added [ 54.566502][ T7793] team0: Port device team_slave_1 added [ 54.575661][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.582949][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.590579][ T7791] device bridge_slave_1 entered promiscuous mode [ 54.602413][ T7786] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.617149][ T7791] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.626813][ T7792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.637054][ T7792] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.663485][ T7786] team0: Port device team_slave_0 added [ 54.671040][ T7791] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.689860][ T7792] team0: Port device team_slave_0 added [ 54.706753][ T7786] team0: Port device team_slave_1 added [ 54.725602][ T7792] team0: Port device team_slave_1 added [ 54.773354][ T7793] device hsr_slave_0 entered promiscuous mode [ 54.812146][ T7793] device hsr_slave_1 entered promiscuous mode [ 54.934138][ T7788] device hsr_slave_0 entered promiscuous mode [ 55.002095][ T7788] device hsr_slave_1 entered promiscuous mode [ 55.081586][ T7791] team0: Port device team_slave_0 added [ 55.088990][ T7791] team0: Port device team_slave_1 added [ 55.143437][ T7792] device hsr_slave_0 entered promiscuous mode [ 55.182026][ T7792] device hsr_slave_1 entered promiscuous mode [ 55.294333][ T7791] device hsr_slave_0 entered promiscuous mode [ 55.342159][ T7791] device hsr_slave_1 entered promiscuous mode [ 55.433278][ T7786] device hsr_slave_0 entered promiscuous mode [ 55.472086][ T7786] device hsr_slave_1 entered promiscuous mode [ 55.602332][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.626384][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.653470][ T7788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.676423][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.684714][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.695665][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.703866][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.714433][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.730549][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.737973][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.748192][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.757036][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.764390][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.773815][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.788714][ T7791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.799172][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.813808][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.824927][ T7788] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.836304][ T7791] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.846300][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.855392][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.864760][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.871854][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.879438][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.888118][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.895721][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.903653][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.911169][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.945252][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.954541][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.963528][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.971932][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.980620][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.989811][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.996911][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.004515][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.012352][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.019878][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.028404][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.036655][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.043736][ T7802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.051196][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.059987][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.068271][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.076648][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.086264][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.096644][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.104948][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.112066][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.119573][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.128192][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.136619][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.143708][ T7802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.151311][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.161152][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.169518][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.176571][ T7802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.184230][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.192880][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.201226][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.209816][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.225901][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.233765][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.241528][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.249477][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.259032][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.280187][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.289599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.298497][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.308449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.317096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.325825][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.334390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.343099][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.351267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.359984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.368822][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.377403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.385819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.393691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.402265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.409923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.424642][ T7791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.436787][ T7791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.447208][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.458384][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.467396][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.477504][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.486161][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.493265][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.501050][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.515143][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.523565][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.532416][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.540646][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.547719][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.555912][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.564379][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.572623][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.580761][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.589800][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.598444][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.606731][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.630691][ T7791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.644412][ T7783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.666321][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.675418][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.684478][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.693342][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.701543][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.710611][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.719096][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.727936][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.736440][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.744776][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.751842][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.759404][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.768738][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.777170][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.784271][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.791852][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.800231][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.808563][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.816880][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.825753][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.833398][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.841083][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.853802][ T7786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.872359][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.881588][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.894963][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.905329][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.913674][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.925137][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.944920][ T7788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.956308][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.978823][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.986409][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.996364][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.009017][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.017572][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.026285][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.034903][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.043245][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.051418][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.059666][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.068145][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.076636][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.087415][ T7793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.098763][ T7793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.115645][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.133468][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.169983][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.178889][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.190313][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.198908][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.207484][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.222862][ T7788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.259983][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.296032][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.094723][ T2993] ================================================================== [ 58.102960][ T2993] BUG: KASAN: use-after-free in debugfs_remove+0x4f/0xf0 [ 58.102970][ T2993] Read of size 8 at addr ffff8880911f2640 by task kworker/0:2/2993 [ 58.102973][ T2993] [ 58.102983][ T2993] CPU: 0 PID: 2993 Comm: kworker/0:2 Not tainted 5.2.0-rc5+ #5 [ 58.102988][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.102999][ T2993] Workqueue: events __blk_release_queue [ 58.103005][ T2993] Call Trace: [ 58.103015][ T2993] dump_stack+0x1d8/0x2f8 [ 58.103029][ T2993] print_address_description+0x6d/0x310 [ 58.103041][ T2993] __kasan_report+0x14b/0x1c0 [ 58.103051][ T2993] ? debugfs_remove+0x4f/0xf0 [ 58.103061][ T2993] kasan_report+0x26/0x50 [ 58.103070][ T2993] __asan_report_load8_noabort+0x14/0x20 [ 58.103077][ T2993] debugfs_remove+0x4f/0xf0 [ 58.103093][ T2993] __blk_trace_remove+0xa5/0x180 [ 58.103103][ T2993] blk_trace_shutdown+0x20b/0x260 [ 58.103116][ T2993] ? kfree_const+0x2a/0x40 [ 58.103125][ T2993] __blk_release_queue+0x1b0/0x250 [ 58.103136][ T2993] process_one_work+0x814/0x1130 [ 58.103151][ T2993] ? rescuer_thread+0x1670/0x1670 [ 58.103158][ T2993] ? worker_thread+0x10de/0x1640 [ 58.103174][ T2993] worker_thread+0xc01/0x1640 [ 58.114342][ T7922] kobject: '7:0' (000000000e1d0fed): kobject_uevent_env [ 58.118193][ T2993] kthread+0x325/0x350 [ 58.118203][ T2993] ? rcu_lock_release+0x30/0x30 [ 58.118214][ T2993] ? kthread_blkcg+0xe0/0xe0 [ 58.120629][ T7922] kobject: '7:0' (000000000e1d0fed): fill_kobj_path: path = '/devices/virtual/bdi/7:0' [ 58.128056][ T2993] ret_from_fork+0x24/0x30 [ 58.128071][ T2993] [ 58.128076][ T2993] Allocated by task 7907: [ 58.128090][ T2993] __kasan_kmalloc+0x11c/0x1b0 [ 58.128097][ T2993] kasan_slab_alloc+0xf/0x20 [ 58.128104][ T2993] kmem_cache_alloc+0x1dd/0x2b0 [ 58.128110][ T2993] __d_alloc+0x2d/0x6e0 [ 58.128116][ T2993] d_alloc_parallel+0xcc/0x1560 [ 58.128122][ T2993] __lookup_slow+0xfc/0x410 [ 58.128127][ T2993] lookup_one_len+0x173/0x2a0 [ 58.128135][ T2993] start_creating+0xe3/0x1b0 [ 58.128142][ T2993] __debugfs_create_file+0x75/0x480 [ 58.128149][ T2993] debugfs_create_file+0x4a/0x60 [ 58.128158][ T2993] do_blk_trace_setup+0x422/0xa90 [ 58.128164][ T2993] blk_trace_ioctl+0x2e8/0x8a0 [ 58.128171][ T2993] blkdev_ioctl+0x14c0/0x2c10 [ 58.128180][ T2993] block_ioctl+0xbd/0x100 [ 58.128188][ T2993] do_vfs_ioctl+0x7d4/0x1890 [ 58.128195][ T2993] __x64_sys_ioctl+0xe3/0x120 [ 58.128204][ T2993] do_syscall_64+0xfe/0x140 [ 58.128210][ T2993] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.128212][ T2993] [ 58.128215][ T2993] Freed by task 16: [ 58.128221][ T2993] __kasan_slab_free+0x12a/0x1e0 [ 58.128227][ T2993] kasan_slab_free+0xe/0x10 [ 58.128232][ T2993] kmem_cache_free+0xcb/0x170 [ 58.128237][ T2993] __d_free+0x20/0x30 [ 58.128245][ T2993] rcu_core+0x8d6/0xf90 [ 58.128252][ T2993] __do_softirq+0x340/0x7b0 [ 58.128254][ T2993] [ 58.128260][ T2993] The buggy address belongs to the object at ffff8880911f2600 [ 58.128260][ T2993] which belongs to the cache dentry(65:syz5) of size 288 [ 58.128266][ T2993] The buggy address is located 64 bytes inside of [ 58.128266][ T2993] 288-byte region [ffff8880911f2600, ffff8880911f2720) [ 58.128269][ T2993] The buggy address belongs to the page: [ 58.128277][ T2993] page:ffffea0002447c80 refcount:1 mapcount:0 mapping:ffff8880a46d4940 index:0x0 [ 58.128285][ T2993] flags: 0x1fffc0000000200(slab) [ 58.128298][ T2993] raw: 01fffc0000000200 ffffea00024e56c8 ffff88809eee6b48 ffff8880a46d4940 [ 58.128307][ T2993] raw: 0000000000000000 ffff8880911f2080 000000010000000b ffff888083fea240 [ 58.128311][ T2993] page dumped because: kasan: bad access detected [ 58.128315][ T2993] page->mem_cgroup:ffff888083fea240 [ 58.128317][ T2993] [ 58.128320][ T2993] Memory state around the buggy address: [ 58.128327][ T2993] ffff8880911f2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.128333][ T2993] ffff8880911f2580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.128339][ T2993] >ffff8880911f2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.128343][ T2993] ^ [ 58.128349][ T2993] ffff8880911f2680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.128355][ T2993] ffff8880911f2700: fb fb fb fb fc fc fc fc fc fc fc fc fb fb fb fb [ 58.128359][ T2993] ================================================================== [ 58.128362][ T2993] Disabling lock debugging due to kernel taint [ 58.129595][ T3879] kobject: 'loop5' (0000000006d20c4e): kobject_uevent_env [ 58.144282][ T7922] kobject: 'loop0' (00000000161e651b): kobject_add_internal: parent: 'block', set: 'devices' [ 58.152200][ T3879] kobject: 'loop5' (0000000006d20c4e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 58.173985][ T7922] kobject: 'loop0' (00000000161e651b): kobject_uevent_env [ 58.177254][ T2993] Kernel panic - not syncing: panic_on_warn set ... [ 58.183175][ T7922] kobject: 'loop0' (00000000161e651b): kobject_uevent_env: uevent_suppress caused the event to drop! [ 58.186663][ T2993] CPU: 0 PID: 2993 Comm: kworker/0:2 Tainted: G B 5.2.0-rc5+ #5 [ 58.186669][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.186688][ T2993] Workqueue: events __blk_release_queue [ 58.194123][ T7922] kobject: 'holders' (000000005e2749e7): kobject_add_internal: parent: 'loop0', set: '' [ 58.196064][ T2993] Call Trace: [ 58.196084][ T2993] dump_stack+0x1d8/0x2f8 [ 58.196097][ T2993] panic+0x28a/0x7c9 [ 58.201249][ T7922] kobject: 'slaves' (00000000003e562f): kobject_add_internal: parent: 'loop0', set: '' [ 58.206101][ T2993] ? __kasan_report+0x195/0x1c0 [ 58.206110][ T2993] ? trace_hardirqs_on+0x34/0x80 [ 58.206117][ T2993] ? nmi_panic+0x97/0x97 [ 58.206129][ T2993] ? ___preempt_schedule+0x16/0x18 [ 58.206138][ T2993] ? trace_hardirqs_on+0x34/0x80 [ 58.206146][ T2993] ? __kasan_report+0x195/0x1c0 [ 58.206153][ T2993] __kasan_report+0x1bb/0x1c0 [ 58.206163][ T2993] ? debugfs_remove+0x4f/0xf0 [ 58.206171][ T2993] kasan_report+0x26/0x50 [ 58.206181][ T2993] __asan_report_load8_noabort+0x14/0x20 [ 58.206187][ T2993] debugfs_remove+0x4f/0xf0 [ 58.206195][ T2993] __blk_trace_remove+0xa5/0x180 [ 58.206204][ T2993] blk_trace_shutdown+0x20b/0x260 [ 58.206211][ T2993] ? kfree_const+0x2a/0x40 [ 58.206223][ T2993] __blk_release_queue+0x1b0/0x250 [ 58.206233][ T2993] process_one_work+0x814/0x1130 [ 58.206244][ T2993] ? rescuer_thread+0x1670/0x1670 [ 58.206251][ T2993] ? worker_thread+0x10de/0x1640 [ 58.206261][ T2993] worker_thread+0xc01/0x1640 [ 58.206278][ T2993] kthread+0x325/0x350 [ 58.206285][ T2993] ? rcu_lock_release+0x30/0x30 [ 58.206292][ T2993] ? kthread_blkcg+0xe0/0xe0 [ 58.206303][ T2993] ret_from_fork+0x24/0x30 [ 58.212638][ T2993] Kernel Offset: disabled [ 58.750272][ T2993] Rebooting in 86400 seconds..