[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.159265][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 61.159274][ T26] audit: type=1800 audit(1567970477.541:29): pid=9668 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 61.185623][ T26] audit: type=1800 audit(1567970477.541:30): pid=9668 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. 2019/09/08 19:22:01 parsed 1 programs 2019/09/08 19:22:03 executed programs: 0 syzkaller login: [ 107.199344][ T9843] IPVS: ftp: loaded support on port[0] = 21 [ 107.204605][ T9842] IPVS: ftp: loaded support on port[0] = 21 [ 107.299859][ T9850] IPVS: ftp: loaded support on port[0] = 21 [ 107.307644][ T9846] IPVS: ftp: loaded support on port[0] = 21 [ 107.324905][ T9851] IPVS: ftp: loaded support on port[0] = 21 [ 107.350963][ T9848] IPVS: ftp: loaded support on port[0] = 21 [ 107.419621][ T9843] chnl_net:caif_netlink_parms(): no params data found [ 107.490902][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.499254][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.506867][ T9843] device bridge_slave_0 entered promiscuous mode [ 107.514204][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.521244][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.528907][ T9843] device bridge_slave_1 entered promiscuous mode [ 107.549211][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.570646][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 107.585035][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.607626][ T9843] team0: Port device team_slave_0 added [ 107.622847][ T9843] team0: Port device team_slave_1 added [ 107.629344][ T9842] chnl_net:caif_netlink_parms(): no params data found [ 107.651311][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.659146][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.666799][ T9851] device bridge_slave_0 entered promiscuous mode [ 107.674236][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.681276][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.688995][ T9851] device bridge_slave_1 entered promiscuous mode [ 107.739940][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.824838][ T9843] device hsr_slave_0 entered promiscuous mode [ 107.873296][ T9843] device hsr_slave_1 entered promiscuous mode [ 107.926589][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.960243][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.968558][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.976318][ T9842] device bridge_slave_0 entered promiscuous mode [ 107.995926][ T9848] chnl_net:caif_netlink_parms(): no params data found [ 108.016409][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.023912][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.031430][ T9842] device bridge_slave_1 entered promiscuous mode [ 108.038397][ T9850] chnl_net:caif_netlink_parms(): no params data found [ 108.060523][ T9851] team0: Port device team_slave_0 added [ 108.080188][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.087295][ T9843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.094642][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.101690][ T9843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.114141][ T9851] team0: Port device team_slave_1 added [ 108.123931][ T9842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.136963][ T9846] chnl_net:caif_netlink_parms(): no params data found [ 108.155542][ T9842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.178739][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.186177][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.193863][ T9848] device bridge_slave_0 entered promiscuous mode [ 108.254428][ T9851] device hsr_slave_0 entered promiscuous mode [ 108.303338][ T9851] device hsr_slave_1 entered promiscuous mode [ 108.344355][ T9851] debugfs: Directory 'hsr0' with parent '/' already present! [ 108.351974][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.359199][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.366808][ T9848] device bridge_slave_1 entered promiscuous mode [ 108.380622][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.387728][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.395302][ T9850] device bridge_slave_0 entered promiscuous mode [ 108.405817][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.412856][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.420390][ T9850] device bridge_slave_1 entered promiscuous mode [ 108.436809][ T9842] team0: Port device team_slave_0 added [ 108.452742][ T9846] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.460734][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.468467][ T9846] device bridge_slave_0 entered promiscuous mode [ 108.478590][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.485667][ T9851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.493001][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.500216][ T9851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.509091][ T9842] team0: Port device team_slave_1 added [ 108.516083][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.528659][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.546998][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.555095][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.562390][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.571610][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.578767][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.586437][ T9846] device bridge_slave_1 entered promiscuous mode [ 108.602909][ T9846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.617947][ T9846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.637340][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.647496][ T9850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.669119][ T9846] team0: Port device team_slave_0 added [ 108.679855][ T9850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.703083][ T9846] team0: Port device team_slave_1 added [ 108.709469][ T9850] team0: Port device team_slave_0 added [ 108.720955][ T9848] team0: Port device team_slave_0 added [ 108.775464][ T9842] device hsr_slave_0 entered promiscuous mode [ 108.843192][ T9842] device hsr_slave_1 entered promiscuous mode [ 108.913081][ T9842] debugfs: Directory 'hsr0' with parent '/' already present! [ 108.926308][ T9850] team0: Port device team_slave_1 added [ 108.937081][ T9848] team0: Port device team_slave_1 added [ 108.995333][ T9846] device hsr_slave_0 entered promiscuous mode [ 109.043358][ T9846] device hsr_slave_1 entered promiscuous mode [ 109.083030][ T9846] debugfs: Directory 'hsr0' with parent '/' already present! [ 109.096892][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.155261][ T9850] device hsr_slave_0 entered promiscuous mode [ 109.203308][ T9850] device hsr_slave_1 entered promiscuous mode [ 109.262999][ T9850] debugfs: Directory 'hsr0' with parent '/' already present! [ 109.335496][ T9848] device hsr_slave_0 entered promiscuous mode [ 109.363133][ T9848] device hsr_slave_1 entered promiscuous mode [ 109.443013][ T9848] debugfs: Directory 'hsr0' with parent '/' already present! [ 109.459389][ T9843] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.468037][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.480808][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.488522][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.521539][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.530072][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.538529][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.545607][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.553350][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.561764][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.570042][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.577082][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.584869][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.618222][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.626625][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.636752][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.645356][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.654012][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.662184][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.670409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.678515][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.686180][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.696512][ T9842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.713861][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.721547][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.730433][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.740523][ T9843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.753325][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.762366][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.775817][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.784019][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.803870][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.815903][ T9842] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.831456][ T9848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.844026][ T9857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.852505][ T9857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.862054][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.869135][ T9857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.881016][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.903757][ T9848] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.910619][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.919256][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.928204][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.935277][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.942742][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.951559][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.959858][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.966897][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.975133][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.983540][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.991716][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.998807][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.006268][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.015511][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.024008][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.031494][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.039178][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.051915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.059778][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.067523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.081628][ T9842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.092363][ T9842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.114469][ T9842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.158980][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.174556][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.191313][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.202678][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.221564][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.232852][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.245906][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.256532][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.267974][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.276890][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.288218][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.295321][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.308715][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.317732][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.328546][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.335644][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.346386][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.355035][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.363728][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.372065][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.380318][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.388757][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.397311][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.405555][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.414044][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.422263][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.430460][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.438745][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.446549][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.454073][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.461783][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.469578][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.478476][ T9850] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.498374][ T9846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.506832][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.520201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.529146][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.536218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.544984][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.553510][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.561744][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.570421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.578561][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.586702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.595107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.615446][ T9846] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.626614][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.651032][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.660982][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.668091][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.680319][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.689825][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.698681][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.709726][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.719081][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.731751][ T9848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.774589][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.788054][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.797353][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.805730][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.815104][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.823575][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.830608][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.838275][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.846953][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.855229][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.862251][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.869819][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.878012][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.901383][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.908888][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.917958][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.927907][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.936375][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.944750][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.953242][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.961284][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.969722][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.978064][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.986429][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.995249][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.003394][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.018447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.027260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.039106][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.047768][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.062902][ T9850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.072217][ T9848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.083627][ T9846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.101318][ T9846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.119673][ T9846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.128163][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.137206][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 2019/09/08 19:22:08 executed programs: 67 2019/09/08 19:22:13 executed programs: 338 2019/09/08 19:22:18 executed programs: 614 2019/09/08 19:22:23 executed programs: 893 2019/09/08 19:22:28 executed programs: 1170 2019/09/08 19:22:33 executed programs: 1441 2019/09/08 19:22:38 executed programs: 1704 2019/09/08 19:22:43 executed programs: 1975 2019/09/08 19:22:48 executed programs: 2239 2019/09/08 19:22:53 executed programs: 2516 2019/09/08 19:22:58 executed programs: 2793 2019/09/08 19:23:03 executed programs: 3058 2019/09/08 19:23:08 executed programs: 3321 2019/09/08 19:23:13 executed programs: 3576 2019/09/08 19:23:18 executed programs: 3828 2019/09/08 19:23:23 executed programs: 4099 2019/09/08 19:23:28 executed programs: 4364 2019/09/08 19:23:33 executed programs: 4614 2019/09/08 19:23:38 executed programs: 4865 2019/09/08 19:23:44 executed programs: 5104 2019/09/08 19:23:49 executed programs: 5352 2019/09/08 19:23:54 executed programs: 5613 2019/09/08 19:23:59 executed programs: 5862 2019/09/08 19:24:04 executed programs: 6113 2019/09/08 19:24:09 executed programs: 6352 2019/09/08 19:24:14 executed programs: 6585 2019/09/08 19:24:19 executed programs: 6822 2019/09/08 19:24:24 executed programs: 7086 2019/09/08 19:24:29 executed programs: 7338 2019/09/08 19:24:34 executed programs: 7576 2019/09/08 19:24:39 executed programs: 7811 2019/09/08 19:24:44 executed programs: 8040 2019/09/08 19:24:49 executed programs: 8263 [ 277.173623][ C0] ================================================================== [ 277.181861][ C0] BUG: KASAN: use-after-free in rxrpc_put_peer+0x685/0x6a0 [ 277.189063][ C0] Read of size 8 at addr ffff8880a8b3cd98 by task ksoftirqd/0/9 [ 277.196681][ C0] [ 277.199016][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.3.0-rc7+ #0 [ 277.206306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.216358][ C0] Call Trace: [ 277.219708][ C0] dump_stack+0x172/0x1f0 [ 277.224045][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 277.228901][ C0] ? rxrpc_rcu_destroy_call+0x5e/0x140 [ 277.234362][ C0] print_address_description.cold+0xd4/0x306 [ 277.240342][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 277.245193][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 277.250047][ C0] ? rxrpc_rcu_destroy_call+0x5e/0x140 [ 277.255512][ C0] __kasan_report.cold+0x1b/0x36 [ 277.260451][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 277.265303][ C0] kasan_report+0x12/0x17 [ 277.269625][ C0] __asan_report_load8_noabort+0x14/0x20 [ 277.275255][ C0] rxrpc_put_peer+0x685/0x6a0 [ 277.279981][ C0] ? dst_destroy+0x23c/0x3c0 [ 277.284558][ C0] ? rxrpc_process_call.cold+0x21/0x21 [ 277.289996][ C0] rxrpc_rcu_destroy_call+0x5e/0x140 [ 277.295261][ C0] rcu_core+0x67f/0x1580 [ 277.299485][ C0] ? rcu_preempt_deferred_qs+0x1e0/0x1e0 [ 277.305097][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 277.310197][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.316431][ C0] ? __this_cpu_preempt_check+0x3a/0x210 [ 277.322062][ C0] rcu_core_si+0x9/0x10 [ 277.326255][ C0] __do_softirq+0x262/0x98c [ 277.330742][ C0] ? takeover_tasklets+0x820/0x820 [ 277.335835][ C0] run_ksoftirqd+0x8e/0x110 [ 277.340318][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 277.345247][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 277.351469][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 277.357689][ C0] ? __kthread_parkme+0x108/0x1c0 [ 277.362696][ C0] ? __kasan_check_read+0x11/0x20 [ 277.367712][ C0] kthread+0x361/0x430 [ 277.371760][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 277.377979][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 277.384200][ C0] ret_from_fork+0x24/0x30 [ 277.388595][ C0] [ 277.390901][ C0] Allocated by task 9896: [ 277.395208][ C0] save_stack+0x23/0x90 [ 277.399341][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 277.404951][ C0] kasan_kmalloc+0x9/0x10 [ 277.409256][ C0] kmem_cache_alloc_trace+0x158/0x790 [ 277.414607][ C0] rxrpc_lookup_local+0x562/0x1ba0 [ 277.419696][ C0] rxrpc_sendmsg+0x379/0x5f0 [ 277.424307][ C0] sock_sendmsg+0xd7/0x130 [ 277.428702][ C0] ___sys_sendmsg+0x3e2/0x920 [ 277.433360][ C0] __sys_sendmmsg+0x1bf/0x4d0 [ 277.438017][ C0] __x64_sys_sendmmsg+0x9d/0x100 [ 277.442952][ C0] do_syscall_64+0xfd/0x6a0 [ 277.447446][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 277.453311][ C0] [ 277.455617][ C0] Freed by task 16: [ 277.459403][ C0] save_stack+0x23/0x90 [ 277.463536][ C0] __kasan_slab_free+0x102/0x150 [ 277.468464][ C0] kasan_slab_free+0xe/0x10 [ 277.472944][ C0] kfree+0x10a/0x2c0 [ 277.476820][ C0] rxrpc_local_rcu+0x62/0x80 [ 277.481386][ C0] rcu_core+0x67f/0x1580 [ 277.485619][ C0] rcu_core_si+0x9/0x10 [ 277.489755][ C0] __do_softirq+0x262/0x98c [ 277.494248][ C0] [ 277.496559][ C0] The buggy address belongs to the object at ffff8880a8b3cd80 [ 277.496559][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 277.510588][ C0] The buggy address is located 24 bytes inside of [ 277.510588][ C0] 1024-byte region [ffff8880a8b3cd80, ffff8880a8b3d180) [ 277.523839][ C0] The buggy address belongs to the page: [ 277.529451][ C0] page:ffffea0002a2cf00 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0xffff8880a8b3c480 compound_mapcount: 0 [ 277.541663][ C0] flags: 0x1fffc0000010200(slab|head) [ 277.547019][ C0] raw: 01fffc0000010200 ffffea000289de88 ffffea0002340488 ffff8880aa400c40 [ 277.555582][ C0] raw: ffff8880a8b3c480 ffff8880a8b3c000 0000000100000002 0000000000000000 [ 277.564572][ C0] page dumped because: kasan: bad access detected [ 277.570968][ C0] [ 277.573275][ C0] Memory state around the buggy address: [ 277.578883][ C0] ffff8880a8b3cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.586921][ C0] ffff8880a8b3cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.594969][ C0] >ffff8880a8b3cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.603002][ C0] ^ [ 277.607830][ C0] ffff8880a8b3ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.615870][ C0] ffff8880a8b3ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.623916][ C0] ================================================================== [ 277.632023][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 277.639305][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.3.0-rc7+ #0 [ 277.647971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.658025][ C0] Call Trace: [ 277.661313][ C0] dump_stack+0x172/0x1f0 [ 277.665703][ C0] ? rxrpc_rcu_destroy_call+0x5e/0x140 [ 277.671188][ C0] panic+0x2dc/0x755 [ 277.675064][ C0] ? add_taint.cold+0x16/0x16 [ 277.679723][ C0] ? retint_kernel+0x2b/0x2b [ 277.684296][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 277.689299][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 277.694139][ C0] ? rxrpc_rcu_destroy_call+0x5e/0x140 [ 277.699587][ C0] end_report+0x47/0x4f [ 277.703726][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 277.708556][ C0] __kasan_report.cold+0xe/0x36 [ 277.713394][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 277.718250][ C0] kasan_report+0x12/0x17 [ 277.722562][ C0] __asan_report_load8_noabort+0x14/0x20 [ 277.728176][ C0] rxrpc_put_peer+0x685/0x6a0 [ 277.732831][ C0] ? dst_destroy+0x23c/0x3c0 [ 277.737453][ C0] ? rxrpc_process_call.cold+0x21/0x21 [ 277.742892][ C0] rxrpc_rcu_destroy_call+0x5e/0x140 [ 277.748165][ C0] rcu_core+0x67f/0x1580 [ 277.752389][ C0] ? rcu_preempt_deferred_qs+0x1e0/0x1e0 [ 277.758001][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 277.763106][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.769347][ C0] ? __this_cpu_preempt_check+0x3a/0x210 [ 277.774967][ C0] rcu_core_si+0x9/0x10 [ 277.779104][ C0] __do_softirq+0x262/0x98c [ 277.783589][ C0] ? takeover_tasklets+0x820/0x820 [ 277.788679][ C0] run_ksoftirqd+0x8e/0x110 [ 277.793166][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 277.798092][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 277.804311][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 277.810540][ C0] ? __kthread_parkme+0x108/0x1c0 [ 277.815544][ C0] ? __kasan_check_read+0x11/0x20 [ 277.820556][ C0] kthread+0x361/0x430 [ 277.824607][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 277.830823][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 277.837044][ C0] ret_from_fork+0x24/0x30 [ 277.842724][ C0] Kernel Offset: disabled [ 277.847045][ C0] Rebooting in 86400 seconds..