[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 48.786736][ T24] audit: type=1800 audit(1563589386.594:25): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 48.807522][ T24] audit: type=1800 audit(1563589386.604:26): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 48.827723][ T24] audit: type=1800 audit(1563589386.604:27): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts. syzkaller login: [ 199.588661][ T8333] IPVS: ftp: loaded support on port[0] = 21 [ 199.595947][ T8332] IPVS: ftp: loaded support on port[0] = 21 [ 199.607487][ T8328] IPVS: ftp: loaded support on port[0] = 21 [ 199.607615][ T8329] IPVS: ftp: loaded support on port[0] = 21 [ 199.614269][ T8330] IPVS: ftp: loaded support on port[0] = 21 [ 199.626338][ T8331] IPVS: ftp: loaded support on port[0] = 21 [ 199.814908][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 199.834105][ T8328] chnl_net:caif_netlink_parms(): no params data found [ 199.849808][ T8329] chnl_net:caif_netlink_parms(): no params data found [ 199.880370][ T8332] chnl_net:caif_netlink_parms(): no params data found [ 199.974061][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.982638][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.991171][ T8333] device bridge_slave_0 entered promiscuous mode [ 200.002525][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.009977][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.018236][ T8333] device bridge_slave_1 entered promiscuous mode [ 200.035981][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.043198][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.051325][ T8328] device bridge_slave_0 entered promiscuous mode [ 200.058992][ T8331] chnl_net:caif_netlink_parms(): no params data found [ 200.079990][ T8330] chnl_net:caif_netlink_parms(): no params data found [ 200.099879][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.107081][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.116846][ T8328] device bridge_slave_1 entered promiscuous mode [ 200.152147][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.160936][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.170369][ T8329] device bridge_slave_0 entered promiscuous mode [ 200.182107][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.189927][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.197534][ T8329] device bridge_slave_1 entered promiscuous mode [ 200.210568][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.217641][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.226721][ T8332] device bridge_slave_0 entered promiscuous mode [ 200.242929][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.254306][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.274013][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.282378][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.290899][ T8332] device bridge_slave_1 entered promiscuous mode [ 200.322594][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.334304][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.369884][ T8333] team0: Port device team_slave_0 added [ 200.377333][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.403027][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.410384][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.418367][ T8331] device bridge_slave_0 entered promiscuous mode [ 200.431241][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.438379][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.446463][ T8331] device bridge_slave_1 entered promiscuous mode [ 200.454947][ T8333] team0: Port device team_slave_1 added [ 200.462446][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.472712][ T8332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.483580][ T8328] team0: Port device team_slave_0 added [ 200.489540][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.496594][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.504666][ T8330] device bridge_slave_0 entered promiscuous mode [ 200.517389][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.524991][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.532699][ T8330] device bridge_slave_1 entered promiscuous mode [ 200.541242][ T8332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.562126][ T8328] team0: Port device team_slave_1 added [ 200.579363][ T8330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.593000][ T8332] team0: Port device team_slave_0 added [ 200.600464][ T8332] team0: Port device team_slave_1 added [ 200.607351][ T8331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.617489][ T8330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.630620][ T8329] team0: Port device team_slave_0 added [ 200.647227][ T8331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.709772][ T8333] device hsr_slave_0 entered promiscuous mode [ 200.768235][ T8333] device hsr_slave_1 entered promiscuous mode [ 200.829053][ T8329] team0: Port device team_slave_1 added [ 200.889647][ T8328] device hsr_slave_0 entered promiscuous mode [ 200.968186][ T8328] device hsr_slave_1 entered promiscuous mode [ 201.047983][ T8328] debugfs: Directory 'hsr0' with parent '/' already present! [ 201.071511][ T8330] team0: Port device team_slave_0 added [ 201.098903][ T8331] team0: Port device team_slave_0 added [ 201.110885][ T8330] team0: Port device team_slave_1 added [ 201.159727][ T8332] device hsr_slave_0 entered promiscuous mode [ 201.208593][ T8332] device hsr_slave_1 entered promiscuous mode [ 201.277899][ T8332] debugfs: Directory 'hsr0' with parent '/' already present! [ 201.331373][ T8329] device hsr_slave_0 entered promiscuous mode [ 201.368370][ T8329] device hsr_slave_1 entered promiscuous mode [ 201.407999][ T8329] debugfs: Directory 'hsr0' with parent '/' already present! [ 201.416784][ T8331] team0: Port device team_slave_1 added [ 201.490818][ T8330] device hsr_slave_0 entered promiscuous mode [ 201.528386][ T8330] device hsr_slave_1 entered promiscuous mode [ 201.568091][ T8330] debugfs: Directory 'hsr0' with parent '/' already present! [ 201.639625][ T8331] device hsr_slave_0 entered promiscuous mode [ 201.688323][ T8331] device hsr_slave_1 entered promiscuous mode [ 201.737909][ T8331] debugfs: Directory 'hsr0' with parent '/' already present! [ 201.856397][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.913153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.922205][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.936417][ T8329] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.949647][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.965438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.974096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.983175][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.990311][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.999650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.008567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.016793][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.023924][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.031566][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.041990][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.055841][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.078889][ T8332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.094183][ T8332] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.109807][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.121670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.130329][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.139147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.146710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.154665][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.163462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.172146][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.179362][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.208581][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.220981][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.228710][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.236772][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.245887][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.255517][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.263871][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.271698][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.279483][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.287008][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.295889][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.304575][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.311712][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.322796][ T8331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.348793][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.356741][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.365704][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.374425][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.381517][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.389399][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.398030][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.406375][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.415590][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.423965][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.432981][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.441310][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.449678][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.458256][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.467433][ T8328] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.488585][ T8333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.500341][ T8333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.523338][ T8329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.534704][ T8329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.546818][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.557021][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.565850][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.573059][ T8336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.581218][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.589956][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.598616][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.606866][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.614025][ T8336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.621687][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.630307][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.638016][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.646471][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.654745][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.663405][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.672254][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.680753][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.689546][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.697893][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.706128][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.714419][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.722705][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.731442][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.739997][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.748300][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.756228][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.764387][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.786672][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.820201][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.829656][ T8331] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.844823][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.854626][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.864154][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.871275][ T8341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.879671][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.888284][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.900887][ T8332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.913925][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.939522][ T8330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.965153][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.976834][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.986458][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.993568][ T8343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.001509][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.011079][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.019544][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.026581][ T8343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.034437][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.043347][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.051980][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.061061][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.069514][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.078240][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.087716][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.095908][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.116642][ T8330] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.144105][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.152389][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.165376][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.176318][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.185363][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.193670][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.202171][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.210889][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.219310][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.228120][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.237538][ T8332] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 203.265169][ T8328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.277436][ T8328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.285969][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.304386][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.313300][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.320428][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.328281][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.336750][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.345619][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.352697][ T8341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.360491][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.368928][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.376959][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.385517][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.393735][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.402008][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready executing program [ 203.410378][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.421202][ T8331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.451910][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.460541][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready executing program [ 203.500365][ T8328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.515715][ T8331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.531009][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.541137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.551502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.564946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.579425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.587640][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.596271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.604568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.615908][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.625938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program [ 203.673229][ T8330] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program executing program [ 208.304863][ T8354] [ 208.307226][ T8354] ========================= [ 208.311712][ T8354] WARNING: held lock freed! [ 208.316192][ T8354] 5.2.0+ #35 Not tainted [ 208.320439][ T8354] ------------------------- [ 208.324938][ T8354] syz-executor619/8354 is freeing memory ffff88809309a140-ffff88809309a93f, with a lock still held there! [ 208.336186][ T8354] 00000000bd3d25ac (sk_lock-AF_NETROM){+.+.}, at: nr_release+0xfe/0x390 [ 208.344513][ T8354] 2 locks held by syz-executor619/8354: [ 208.350028][ T8354] #0: 0000000044454227 (&sb->s_type->i_mutex_key#11){+.+.}, at: sock_close+0x9e/0x260 [ 208.359643][ T8354] #1: 00000000bd3d25ac (sk_lock-AF_NETROM){+.+.}, at: nr_release+0xfe/0x390 [ 208.368408][ T8354] [ 208.368408][ T8354] stack backtrace: [ 208.374311][ T8354] CPU: 0 PID: 8354 Comm: syz-executor619 Not tainted 5.2.0+ #35 [ 208.381912][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.391942][ T8354] Call Trace: [ 208.395216][ T8354] dump_stack+0x1d8/0x2f8 [ 208.399535][ T8354] debug_check_no_locks_freed+0x813/0x990 [ 208.405244][ T8354] ? lockdep_unregister_key+0x660/0x660 [ 208.410766][ T8354] ? debug_check_no_obj_freed+0x505/0x5b0 [ 208.416480][ T8354] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 208.422201][ T8354] ? __sk_destruct+0x567/0x660 [ 208.426951][ T8354] kfree+0xfb/0x200 [ 208.430738][ T8354] __sk_destruct+0x567/0x660 [ 208.435301][ T8354] ? __sk_free+0x30f/0x3e0 [ 208.439706][ T8354] __sk_free+0x317/0x3e0 [ 208.443933][ T8354] sk_free+0x2a/0x40 [ 208.447815][ T8354] nr_destroy_socket+0x3e3/0x460 [ 208.452743][ T8354] nr_release+0x191/0x390 [ 208.457047][ T8354] sock_close+0xe1/0x260 [ 208.461278][ T8354] ? sock_mmap+0xa0/0xa0 [ 208.465505][ T8354] __fput+0x2e4/0x740 [ 208.469479][ T8354] ____fput+0x15/0x20 [ 208.473456][ T8354] task_work_run+0x17e/0x1b0 [ 208.478037][ T8354] do_exit+0x64c/0x2310 [ 208.482184][ T8354] ? mm_update_next_owner+0x580/0x580 [ 208.487551][ T8354] ? get_signal+0x426/0x1dd0 [ 208.492141][ T8354] ? __lock_acquire+0x4750/0x4750 [ 208.497166][ T8354] do_group_exit+0x15c/0x2b0 executing program [ 208.501742][ T8354] get_signal+0x51c/0x1dd0 [ 208.506149][ T8354] ? __lock_acquire+0x4750/0x4750 [ 208.511158][ T8354] ? ptrace_notify+0x370/0x370 [ 208.515924][ T8354] ? __fd_install+0x280/0x4f0 [ 208.520635][ T8354] do_signal+0x7b/0x720 [ 208.524793][ T8354] ? __sys_accept4+0x71b/0x9a0 [ 208.529535][ T8354] ? signal_fault+0x1f0/0x1f0 [ 208.534196][ T8354] ? __ia32_sys_listen+0x70/0x70 [ 208.539133][ T8354] ? prepare_exit_to_usermode+0x258/0x580 [ 208.544836][ T8354] prepare_exit_to_usermode+0x303/0x580 [ 208.550358][ T8354] syscall_return_slowpath+0x113/0x4a0 [ 208.555809][ T8354] do_syscall_64+0x126/0x140 [ 208.560384][ T8354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.566316][ T8354] RIP: 0033:0x444839 [ 208.570196][ T8354] Code: Bad RIP value. [ 208.574241][ T8354] RSP: 002b:00007ffdd7374068 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 208.582688][ T8354] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000000444839 [ 208.590638][ T8354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 208.598592][ T8354] RBP: 0000000000000003 R08: 0000000000000004 R09: 0000000000000004 [ 208.606559][ T8354] R10: 0000000000000004 R11: 0000000000000246 R12: 0000555556c17914 [ 208.614509][ T8354] R13: 0000000000000013 R14: 0000000000000000 R15: 0000000000000000 [ 208.624366][ T8354] ================================================================== [ 208.632439][ T8354] BUG: KASAN: use-after-free in do_raw_spin_lock+0x295/0x3a0 [ 208.639788][ T8354] Read of size 4 at addr ffff88809309a1cc by task syz-executor619/8354 [ 208.648000][ T8354] [ 208.650308][ T8354] CPU: 0 PID: 8354 Comm: syz-executor619 Not tainted 5.2.0+ #35 [ 208.657914][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.668055][ T8354] Call Trace: [ 208.671347][ T8354] dump_stack+0x1d8/0x2f8 [ 208.675654][ T8354] print_address_description+0x75/0x5b0 [ 208.681210][ T8354] ? log_buf_vmcoreinfo_setup+0x153/0x153 [ 208.686913][ T8354] __kasan_report+0x14b/0x1c0 [ 208.691586][ T8354] ? do_raw_spin_lock+0x295/0x3a0 [ 208.696612][ T8354] kasan_report+0x26/0x50 [ 208.700920][ T8354] __asan_report_load4_noabort+0x14/0x20 executing program [ 208.706529][ T8354] do_raw_spin_lock+0x295/0x3a0 [ 208.711354][ T8354] ? trace_lock_acquire+0x159/0x1d0 [ 208.716533][ T8354] ? __rwlock_init+0x130/0x130 [ 208.721272][ T8354] ? lock_acquire+0x158/0x250 [ 208.725936][ T8354] ? release_sock+0x30/0x1d0 [ 208.730524][ T8354] ? release_sock+0x30/0x1d0 [ 208.735276][ T8354] ? release_sock+0x30/0x1d0 [ 208.739944][ T8354] _raw_spin_lock_bh+0x40/0x50 [ 208.751098][ T8354] release_sock+0x30/0x1d0 [ 208.755502][ T8354] nr_release+0x1b9/0x390 [ 208.759819][ T8354] sock_close+0xe1/0x260 [ 208.764063][ T8354] ? sock_mmap+0xa0/0xa0 [ 208.768285][ T8354] __fput+0x2e4/0x740 [ 208.772246][ T8354] ____fput+0x15/0x20 [ 208.776202][ T8354] task_work_run+0x17e/0x1b0 [ 208.780777][ T8354] do_exit+0x64c/0x2310 [ 208.785009][ T8354] ? mm_update_next_owner+0x580/0x580 [ 208.790359][ T8354] ? get_signal+0x426/0x1dd0 [ 208.795025][ T8354] ? __lock_acquire+0x4750/0x4750 [ 208.800039][ T8354] do_group_exit+0x15c/0x2b0 [ 208.804644][ T8354] get_signal+0x51c/0x1dd0 [ 208.809056][ T8354] ? __lock_acquire+0x4750/0x4750 [ 208.814062][ T8354] ? ptrace_notify+0x370/0x370 [ 208.818816][ T8354] ? __fd_install+0x280/0x4f0 [ 208.823480][ T8354] do_signal+0x7b/0x720 [ 208.827624][ T8354] ? __sys_accept4+0x71b/0x9a0 [ 208.832375][ T8354] ? signal_fault+0x1f0/0x1f0 [ 208.837042][ T8354] ? __ia32_sys_listen+0x70/0x70 [ 208.841968][ T8354] ? prepare_exit_to_usermode+0x258/0x580 [ 208.847684][ T8354] prepare_exit_to_usermode+0x303/0x580 [ 208.853219][ T8354] syscall_return_slowpath+0x113/0x4a0 [ 208.858696][ T8354] do_syscall_64+0x126/0x140 [ 208.863276][ T8354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.869154][ T8354] RIP: 0033:0x444839 [ 208.873041][ T8354] Code: Bad RIP value. [ 208.877089][ T8354] RSP: 002b:00007ffdd7374068 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 208.885483][ T8354] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000000444839 [ 208.893438][ T8354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 208.901530][ T8354] RBP: 0000000000000003 R08: 0000000000000004 R09: 0000000000000004 [ 208.909502][ T8354] R10: 0000000000000004 R11: 0000000000000246 R12: 0000555556c17914 [ 208.917552][ T8354] R13: 0000000000000013 R14: 0000000000000000 R15: 0000000000000000 [ 208.925526][ T8354] [ 208.927841][ T8354] Allocated by task 8363: [ 208.932154][ T8354] __kasan_kmalloc+0x11c/0x1b0 [ 208.936899][ T8354] kasan_kmalloc+0x9/0x10 [ 208.941211][ T8354] __kmalloc+0x254/0x340 [ 208.945438][ T8354] sk_prot_alloc+0xb0/0x290 [ 208.949924][ T8354] sk_alloc+0x38/0x950 [ 208.953972][ T8354] nr_rx_frame+0xabc/0x1e40 [ 208.958456][ T8354] nr_loopback_timer+0x6a/0x140 [ 208.963287][ T8354] call_timer_fn+0xec/0x200 [ 208.967769][ T8354] __run_timers+0x7cd/0x9c0 [ 208.972255][ T8354] run_timer_softirq+0x4a/0x90 [ 208.976998][ T8354] __do_softirq+0x333/0x7c4 [ 208.981480][ T8354] [ 208.983793][ T8354] Freed by task 8354: [ 208.987757][ T8354] __kasan_slab_free+0x12a/0x1e0 [ 208.992678][ T8354] kasan_slab_free+0xe/0x10 [ 208.997164][ T8354] kfree+0x115/0x200 [ 209.001060][ T8354] __sk_destruct+0x567/0x660 [ 209.005891][ T8354] __sk_free+0x317/0x3e0 [ 209.010111][ T8354] sk_free+0x2a/0x40 [ 209.013985][ T8354] nr_destroy_socket+0x3e3/0x460 [ 209.018905][ T8354] nr_release+0x191/0x390 [ 209.023232][ T8354] sock_close+0xe1/0x260 [ 209.027459][ T8354] __fput+0x2e4/0x740 [ 209.031424][ T8354] ____fput+0x15/0x20 [ 209.035410][ T8354] task_work_run+0x17e/0x1b0 [ 209.039995][ T8354] do_exit+0x64c/0x2310 [ 209.044135][ T8354] do_group_exit+0x15c/0x2b0 [ 209.048709][ T8354] get_signal+0x51c/0x1dd0 [ 209.053106][ T8354] do_signal+0x7b/0x720 [ 209.057242][ T8354] prepare_exit_to_usermode+0x303/0x580 [ 209.062771][ T8354] syscall_return_slowpath+0x113/0x4a0 [ 209.068224][ T8354] do_syscall_64+0x126/0x140 [ 209.072812][ T8354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.078680][ T8354] [ 209.081082][ T8354] The buggy address belongs to the object at ffff88809309a140 [ 209.081082][ T8354] which belongs to the cache kmalloc-2k of size 2048 [ 209.095134][ T8354] The buggy address is located 140 bytes inside of [ 209.095134][ T8354] 2048-byte region [ffff88809309a140, ffff88809309a940) [ 209.108472][ T8354] The buggy address belongs to the page: [ 209.114086][ T8354] page:ffffea00024c2680 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 compound_mapcount: 0 [ 209.124999][ T8354] flags: 0x1fffc0000010200(slab|head) [ 209.130358][ T8354] raw: 01fffc0000010200 ffffea000262ce08 ffffea000229e408 ffff8880aa400e00 [ 209.138934][ T8354] raw: 0000000000000000 ffff88809309a140 0000000100000003 0000000000000000 [ 209.147495][ T8354] page dumped because: kasan: bad access detected [ 209.153888][ T8354] [ 209.156197][ T8354] Memory state around the buggy address: [ 209.161810][ T8354] ffff88809309a080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.169853][ T8354] ffff88809309a100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 209.177895][ T8354] >ffff88809309a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.185934][ T8354] ^ [ 209.192328][ T8354] ffff88809309a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.200385][ T8354] ffff88809309a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb executing program executing program [ 209.208422][ T8354] ================================================================== [ 209.216538][ T8354] Kernel panic - not syncing: panic_on_warn set ... [ 209.223156][ T8354] CPU: 0 PID: 8354 Comm: syz-executor619 Tainted: G B 5.2.0+ #35 [ 209.232164][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.242217][ T8354] Call Trace: [ 209.245506][ T8354] dump_stack+0x1d8/0x2f8 [ 209.249838][ T8354] panic+0x29b/0x7d9 executing program [ 209.253820][ T8354] ? check_preemption_disabled+0x3a/0x2a0 [ 209.259533][ T8354] ? __kasan_report+0x195/0x1c0 [ 209.264381][ T8354] ? trace_hardirqs_on+0x34/0x80 [ 209.269336][ T8354] ? nmi_panic+0x97/0x97 [ 209.273588][ T8354] ? trace_hardirqs_on+0x34/0x80 [ 209.278536][ T8354] ? __kasan_report+0x195/0x1c0 [ 209.283373][ T8354] ? _raw_spin_unlock_irqrestore+0xad/0xe0 [ 209.289157][ T8354] __kasan_report+0x1bb/0x1c0 [ 209.293823][ T8354] ? do_raw_spin_lock+0x295/0x3a0 [ 209.298846][ T8354] kasan_report+0x26/0x50 [ 209.303161][ T8354] __asan_report_load4_noabort+0x14/0x20 [ 209.308768][ T8354] do_raw_spin_lock+0x295/0x3a0 [ 209.313607][ T8354] ? trace_lock_acquire+0x159/0x1d0 [ 209.318786][ T8354] ? __rwlock_init+0x130/0x130 [ 209.323531][ T8354] ? lock_acquire+0x158/0x250 [ 209.328192][ T8354] ? release_sock+0x30/0x1d0 [ 209.332779][ T8354] ? release_sock+0x30/0x1d0 [ 209.337351][ T8354] ? release_sock+0x30/0x1d0 [ 209.341919][ T8354] _raw_spin_lock_bh+0x40/0x50 [ 209.346658][ T8354] release_sock+0x30/0x1d0 [ 209.351059][ T8354] nr_release+0x1b9/0x390 [ 209.355367][ T8354] sock_close+0xe1/0x260 [ 209.359589][ T8354] ? sock_mmap+0xa0/0xa0 [ 209.363830][ T8354] __fput+0x2e4/0x740 [ 209.367832][ T8354] ____fput+0x15/0x20 [ 209.371792][ T8354] task_work_run+0x17e/0x1b0 [ 209.376357][ T8354] do_exit+0x64c/0x2310 [ 209.380508][ T8354] ? mm_update_next_owner+0x580/0x580 [ 209.385874][ T8354] ? get_signal+0x426/0x1dd0 [ 209.390571][ T8354] ? __lock_acquire+0x4750/0x4750 [ 209.395580][ T8354] do_group_exit+0x15c/0x2b0 [ 209.400160][ T8354] get_signal+0x51c/0x1dd0 [ 209.404567][ T8354] ? __lock_acquire+0x4750/0x4750 executing program [ 209.409570][ T8354] ? ptrace_notify+0x370/0x370 [ 209.414310][ T8354] ? __fd_install+0x280/0x4f0 [ 209.418974][ T8354] do_signal+0x7b/0x720 [ 209.423117][ T8354] ? __sys_accept4+0x71b/0x9a0 [ 209.427952][ T8354] ? signal_fault+0x1f0/0x1f0 [ 209.432632][ T8354] ? __ia32_sys_listen+0x70/0x70 [ 209.437571][ T8354] ? prepare_exit_to_usermode+0x258/0x580 [ 209.443320][ T8354] prepare_exit_to_usermode+0x303/0x580 [ 209.448850][ T8354] syscall_return_slowpath+0x113/0x4a0 [ 209.454294][ T8354] do_syscall_64+0x126/0x140 [ 209.458873][ T8354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.464771][ T8354] RIP: 0033:0x444839 [ 209.468663][ T8354] Code: Bad RIP value. [ 209.472718][ T8354] RSP: 002b:00007ffdd7374068 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 209.481119][ T8354] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000000444839 [ 209.489067][ T8354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 209.497017][ T8354] RBP: 0000000000000003 R08: 0000000000000004 R09: 0000000000000004 [ 209.504965][ T8354] R10: 0000000000000004 R11: 0000000000000246 R12: 0000555556c17914 [ 209.513001][ T8354] R13: 0000000000000013 R14: 0000000000000000 R15: 0000000000000000 [ 209.522304][ T8354] Kernel Offset: disabled [ 209.526624][ T8354] Rebooting in 86400 seconds..