[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.481332][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 65.481343][ T24] audit: type=1800 audit(1564411295.308:29): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 65.520665][ T24] audit: type=1800 audit(1564411295.308:30): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.173' (ECDSA) to the list of known hosts. 2019/07/29 14:41:54 parsed 1 programs 2019/07/29 14:41:56 executed programs: 0 syzkaller login: [ 87.164847][ T9920] IPVS: ftp: loaded support on port[0] = 21 [ 87.207579][ T9923] IPVS: ftp: loaded support on port[0] = 21 [ 87.215811][ T9926] IPVS: ftp: loaded support on port[0] = 21 [ 87.230669][ T9922] IPVS: ftp: loaded support on port[0] = 21 [ 87.277218][ T9929] IPVS: ftp: loaded support on port[0] = 21 [ 87.296423][ T9928] IPVS: ftp: loaded support on port[0] = 21 [ 87.406542][ T9926] chnl_net:caif_netlink_parms(): no params data found [ 87.438556][ T9920] chnl_net:caif_netlink_parms(): no params data found [ 87.508556][ T9923] chnl_net:caif_netlink_parms(): no params data found [ 87.520073][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.527712][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.535377][ T9920] device bridge_slave_0 entered promiscuous mode [ 87.544397][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.551717][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.559322][ T9920] device bridge_slave_1 entered promiscuous mode [ 87.572926][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.579973][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.587617][ T9926] device bridge_slave_0 entered promiscuous mode [ 87.597372][ T9929] chnl_net:caif_netlink_parms(): no params data found [ 87.612279][ T9920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.625720][ T9920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.634922][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.642852][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.650603][ T9926] device bridge_slave_1 entered promiscuous mode [ 87.692688][ T9920] team0: Port device team_slave_0 added [ 87.699456][ T9920] team0: Port device team_slave_1 added [ 87.709790][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.745854][ T9926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.755167][ T9922] chnl_net:caif_netlink_parms(): no params data found [ 87.767671][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.774914][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.782563][ T9923] device bridge_slave_0 entered promiscuous mode [ 87.793078][ T9923] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.800136][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.807893][ T9923] device bridge_slave_1 entered promiscuous mode [ 87.883367][ T9920] device hsr_slave_0 entered promiscuous mode [ 87.931375][ T9920] device hsr_slave_1 entered promiscuous mode [ 87.987946][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.995200][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.002950][ T9929] device bridge_slave_0 entered promiscuous mode [ 88.013782][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.021289][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.028899][ T9929] device bridge_slave_1 entered promiscuous mode [ 88.042804][ T9923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.053403][ T9923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.063201][ T9926] team0: Port device team_slave_0 added [ 88.084172][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.097456][ T9926] team0: Port device team_slave_1 added [ 88.128879][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.144971][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.153649][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.161546][ T9922] device bridge_slave_0 entered promiscuous mode [ 88.170301][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.177498][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.185082][ T9922] device bridge_slave_1 entered promiscuous mode [ 88.196364][ T9923] team0: Port device team_slave_0 added [ 88.203406][ T9923] team0: Port device team_slave_1 added [ 88.225677][ T9928] chnl_net:caif_netlink_parms(): no params data found [ 88.303278][ T9926] device hsr_slave_0 entered promiscuous mode [ 88.351251][ T9926] device hsr_slave_1 entered promiscuous mode [ 88.401034][ T9926] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.409600][ T9929] team0: Port device team_slave_0 added [ 88.418628][ T9929] team0: Port device team_slave_1 added [ 88.426626][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.440178][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.466100][ T9922] team0: Port device team_slave_0 added [ 88.533424][ T9923] device hsr_slave_0 entered promiscuous mode [ 88.601221][ T9923] device hsr_slave_1 entered promiscuous mode [ 88.641026][ T9923] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.663180][ T9922] team0: Port device team_slave_1 added [ 88.684519][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.692964][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.700397][ T9928] device bridge_slave_0 entered promiscuous mode [ 88.707932][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.715168][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.723292][ T9928] device bridge_slave_1 entered promiscuous mode [ 88.751239][ T9928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.803413][ T9929] device hsr_slave_0 entered promiscuous mode [ 88.842610][ T9929] device hsr_slave_1 entered promiscuous mode [ 88.921110][ T9929] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.942581][ T9928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.023618][ T9922] device hsr_slave_0 entered promiscuous mode [ 89.061326][ T9922] device hsr_slave_1 entered promiscuous mode [ 89.101068][ T9922] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.116421][ T9928] team0: Port device team_slave_0 added [ 89.123129][ T9928] team0: Port device team_slave_1 added [ 89.193423][ T9928] device hsr_slave_0 entered promiscuous mode [ 89.251369][ T9928] device hsr_slave_1 entered promiscuous mode [ 89.291069][ T9928] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.304318][ T9926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.324066][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.331162][ T9928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.338443][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.345564][ T9928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.355766][ T9923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.373197][ T9920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.390799][ T9926] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.401806][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.419456][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.428229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.435978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.443510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.451781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.461529][ T9923] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.483910][ T9928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.495060][ T9920] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.517743][ T9928] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.526683][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.535989][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.543713][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.552806][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.561382][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.568420][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.576135][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.584605][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.592904][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.600009][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.607589][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.616068][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.624538][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.632750][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.639781][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.647282][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.655282][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.664153][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.671895][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.692017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.700410][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.710127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.717201][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.726855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.735575][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.743944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.751078][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.758596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.767377][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.775838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.784155][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.791202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.798639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.807339][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.815682][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.822737][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.830304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.849832][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.865607][ T9923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.878772][ T9923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.889930][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.899473][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.907924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.916316][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.923364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.931004][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.939384][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.948987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.957354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.965779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.974388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.983220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.991557][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.999889][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.008158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.016273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.024449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.032706][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.040773][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.048581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.056315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.079789][ T9926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.090377][ T9926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.112297][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.120773][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.129298][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.139036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.147973][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.156201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.164432][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.173247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.181728][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.190048][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.198515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.206816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.215210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.223595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.231775][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.240062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.248340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.256019][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.263660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.272084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.279597][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.295287][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.305004][ T9929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.317399][ T9923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.324920][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.333418][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.347060][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.356012][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.364733][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.373262][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.383129][ T9928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.401417][ T9929] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.418949][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.427511][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.440920][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.448080][ T9934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.456722][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.465308][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.473570][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.480637][ T9934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.488168][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.496204][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.503772][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.512349][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.520441][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.529071][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.549433][ T9922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.560708][ T9922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.573940][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.585360][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.594489][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.603180][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.611760][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.619894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.628101][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.636225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.644484][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.659719][ T9928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.678342][ T9926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.697467][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.711186][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.719051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.745348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.768487][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.776911][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.783975][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.791868][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.800385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.808742][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.815780][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.823625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.832499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.841184][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.849549][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.861269][ T9920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.884013][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.895711][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.910834][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.933248][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.970606][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.009528][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.034967][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.046764][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.056958][ T9929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.142148][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/29 14:42:01 executed programs: 67 2019/07/29 14:42:07 executed programs: 356 [ 99.477140][T11284] ================================================================== [ 99.481020][T11266] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 99.485265][T11284] BUG: KASAN: slab-out-of-bounds in vma_interval_tree_remove+0xbeb/0xf10 [ 99.493999][T11266] CPU: 1 PID: 11266 Comm: syz-executor.1 Not tainted 5.3.0-rc2 #88 [ 99.502378][T11284] Read of size 8 at addr ffff8880995c6ca8 by task udevd/11284 [ 99.510253][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.517677][T11284] [ 99.528138][T11266] Call Trace: [ 99.533706][T11284] CPU: 0 PID: 11284 Comm: udevd Not tainted 5.3.0-rc2 #88 [ 99.540789][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.551010][T11284] Call Trace: [ 99.554297][T11284] dump_stack+0x172/0x1f0 [ 99.558628][T11284] ? vma_interval_tree_remove+0xbeb/0xf10 [ 99.564335][T11284] print_address_description.cold+0xd4/0x306 [ 99.570297][T11284] ? vma_interval_tree_remove+0xbeb/0xf10 [ 99.576022][T11284] ? vma_interval_tree_remove+0xbeb/0xf10 [ 99.581725][T11284] __kasan_report.cold+0x1b/0x36 [ 99.586665][T11284] ? lock_acquire+0x140/0x410 [ 99.591323][T11284] ? vma_interval_tree_remove+0xbeb/0xf10 [ 99.597024][T11284] kasan_report+0x12/0x17 [ 99.601347][T11284] __asan_report_load8_noabort+0x14/0x20 [ 99.606958][T11284] vma_interval_tree_remove+0xbeb/0xf10 [ 99.612490][T11284] ? __kasan_check_write+0x14/0x20 [ 99.617595][T11284] __remove_shared_vm_struct+0x89/0x140 [ 99.623127][T11284] unlink_file_vma+0x84/0xb0 [ 99.627701][T11284] free_pgtables+0xee/0x2f0 [ 99.632190][T11284] exit_mmap+0x2c9/0x530 [ 99.636411][T11284] ? __ia32_sys_munmap+0x80/0x80 [ 99.641337][T11284] ? mutex_unlock+0xd/0x10 [ 99.645743][T11284] mmput+0x179/0x4d0 [ 99.649636][T11284] flush_old_exec+0x8c2/0x1e90 [ 99.654381][T11284] ? writenote+0x2d0/0x2d0 [ 99.658789][T11284] ? __kasan_check_write+0x14/0x20 [ 99.663885][T11284] load_elf_binary+0xa64/0x5730 [ 99.668719][T11284] ? load_misc_binary+0xb1/0x114f [ 99.673729][T11284] ? search_binary_handler+0x127/0x570 [ 99.679166][T11284] ? __kasan_check_read+0x11/0x20 [ 99.684174][T11284] ? elf_map+0x2b0/0x2b0 [ 99.688401][T11284] ? search_binary_handler+0x1a6/0x570 [ 99.693840][T11284] ? __kasan_check_write+0x14/0x20 [ 99.698936][T11284] search_binary_handler+0x16d/0x570 [ 99.704204][T11284] __do_execve_file.isra.0+0x1333/0x2340 [ 99.709820][T11284] ? flush_old_exec+0x1e90/0x1e90 [ 99.714832][T11284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.721141][T11284] ? getname_flags+0x277/0x5b0 [ 99.725891][T11284] __x64_sys_execve+0x8f/0xc0 [ 99.730639][T11284] do_syscall_64+0xfd/0x6a0 [ 99.735126][T11284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.741000][T11284] RIP: 0033:0x7f27feba8207 [ 99.745405][T11284] Code: Bad RIP value. [ 99.749464][T11284] RSP: 002b:00007ffd8a84e238 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 99.757872][T11284] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f27feba8207 [ 99.765827][T11284] RDX: 0000000001b7dfe0 RSI: 00007ffd8a84e330 RDI: 00007ffd8a84f340 [ 99.773782][T11284] RBP: 0000000000625500 R08: 000000000000269a R09: 000000000000269a [ 99.781744][T11284] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000001b7dfe0 [ 99.789786][T11284] R13: 0000000000000007 R14: 0000000001b6d250 R15: 0000000000000005 [ 99.797744][T11284] [ 99.800057][T11284] Allocated by task 0: [ 99.804100][T11284] (stack is not available) [ 99.808488][T11284] [ 99.810796][T11284] Freed by task 0: [ 99.814579][T11284] (stack is not available) [ 99.818969][T11284] [ 99.821280][T11284] The buggy address belongs to the object at ffff8880995c6100 [ 99.821280][T11284] which belongs to the cache TCPv6(97:syz1) of size 2896 [ 99.835765][T11284] The buggy address is located 88 bytes to the right of [ 99.835765][T11284] 2896-byte region [ffff8880995c6100, ffff8880995c6c50) [ 99.849530][T11284] The buggy address belongs to the page: [ 99.855146][T11284] page:ffffea0002657180 refcount:1 mapcount:0 mapping:ffff8880a7bade00 index:0xffff8880995c7ffe compound_mapcount: 0 [ 99.867359][T11284] flags: 0x1fffc0000010200(slab|head) [ 99.872816][T11284] raw: 01fffc0000010200 ffffea00027f0e08 ffff88808ebb6448 ffff8880a7bade00 [ 99.881383][T11284] raw: ffff8880995c7ffe ffff8880995c6100 0000000100000002 0000000000000000 [ 99.889942][T11284] page dumped because: kasan: bad access detected [ 99.896327][T11284] [ 99.898648][T11284] Memory state around the buggy address: [ 99.904365][T11284] ffff8880995c6b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.912408][T11284] ffff8880995c6c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.920449][T11284] >ffff8880995c6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 99.928489][T11284] ^ [ 99.933842][T11284] ffff8880995c6d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 99.941884][T11284] ffff8880995c6d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 99.949938][T11284] ================================================================== [ 99.959171][T11266] Kernel Offset: disabled [ 99.963496][T11266] Rebooting in 86400 seconds..