[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.934991][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 64.935000][ T26] audit: type=1800 audit(1568228999.234:29): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 64.961348][ T26] audit: type=1800 audit(1568228999.234:30): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. 2019/09/11 19:11:36 parsed 1 programs 2019/09/11 19:11:38 executed programs: 0 syzkaller login: [ 164.309600][ T9841] IPVS: ftp: loaded support on port[0] = 21 [ 164.319605][ T9842] IPVS: ftp: loaded support on port[0] = 21 [ 164.330736][ T9844] IPVS: ftp: loaded support on port[0] = 21 [ 164.334325][ T9839] IPVS: ftp: loaded support on port[0] = 21 [ 164.376403][ T9847] IPVS: ftp: loaded support on port[0] = 21 [ 164.376419][ T9848] IPVS: ftp: loaded support on port[0] = 21 [ 164.574360][ T9844] chnl_net:caif_netlink_parms(): no params data found [ 164.607017][ T9842] chnl_net:caif_netlink_parms(): no params data found [ 164.655510][ T9848] chnl_net:caif_netlink_parms(): no params data found [ 164.686527][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.693710][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.701351][ T9844] device bridge_slave_0 entered promiscuous mode [ 164.720357][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.727418][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.735182][ T9842] device bridge_slave_0 entered promiscuous mode [ 164.743833][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.750910][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.758441][ T9842] device bridge_slave_1 entered promiscuous mode [ 164.765286][ T9841] chnl_net:caif_netlink_parms(): no params data found [ 164.773503][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.781114][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.788564][ T9844] device bridge_slave_1 entered promiscuous mode [ 164.801725][ T9847] chnl_net:caif_netlink_parms(): no params data found [ 164.848153][ T9842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.858328][ T9844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.868836][ T9844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.895151][ T9842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.914166][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.921652][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.929119][ T9848] device bridge_slave_0 entered promiscuous mode [ 164.939770][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.946932][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.954556][ T9848] device bridge_slave_1 entered promiscuous mode [ 164.965341][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 164.999507][ T9842] team0: Port device team_slave_0 added [ 165.007420][ T9844] team0: Port device team_slave_0 added [ 165.013382][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.021796][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.029340][ T9847] device bridge_slave_0 entered promiscuous mode [ 165.036490][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.043776][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.051706][ T9841] device bridge_slave_0 entered promiscuous mode [ 165.066464][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.076538][ T9842] team0: Port device team_slave_1 added [ 165.083037][ T9844] team0: Port device team_slave_1 added [ 165.089115][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.096226][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.103975][ T9847] device bridge_slave_1 entered promiscuous mode [ 165.114627][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.121799][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.129286][ T9841] device bridge_slave_1 entered promiscuous mode [ 165.143934][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.166399][ T9848] team0: Port device team_slave_0 added [ 165.185384][ T9841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.198969][ T9841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.210573][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.223737][ T9848] team0: Port device team_slave_1 added [ 165.233560][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.241530][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.248981][ T9839] device bridge_slave_0 entered promiscuous mode [ 165.265274][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.283955][ T9847] team0: Port device team_slave_0 added [ 165.290588][ T9841] team0: Port device team_slave_0 added [ 165.296328][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.303801][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.311424][ T9839] device bridge_slave_1 entered promiscuous mode [ 165.362224][ T9842] device hsr_slave_0 entered promiscuous mode [ 165.420144][ T9842] device hsr_slave_1 entered promiscuous mode [ 165.465525][ T9847] team0: Port device team_slave_1 added [ 165.476303][ T9841] team0: Port device team_slave_1 added [ 165.521225][ T9844] device hsr_slave_0 entered promiscuous mode [ 165.560085][ T9844] device hsr_slave_1 entered promiscuous mode [ 165.609908][ T9844] debugfs: Directory 'hsr0' with parent '/' already present! [ 165.661483][ T9848] device hsr_slave_0 entered promiscuous mode [ 165.700128][ T9848] device hsr_slave_1 entered promiscuous mode [ 165.739846][ T9848] debugfs: Directory 'hsr0' with parent '/' already present! [ 165.792219][ T9841] device hsr_slave_0 entered promiscuous mode [ 165.830086][ T9841] device hsr_slave_1 entered promiscuous mode [ 165.869853][ T9841] debugfs: Directory 'hsr0' with parent '/' already present! [ 165.891495][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.903094][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.920867][ T9839] team0: Port device team_slave_0 added [ 165.927371][ T9839] team0: Port device team_slave_1 added [ 166.002222][ T9839] device hsr_slave_0 entered promiscuous mode [ 166.041289][ T9839] device hsr_slave_1 entered promiscuous mode [ 166.099882][ T9839] debugfs: Directory 'hsr0' with parent '/' already present! [ 166.142238][ T9847] device hsr_slave_0 entered promiscuous mode [ 166.180133][ T9847] device hsr_slave_1 entered promiscuous mode [ 166.229830][ T9847] debugfs: Directory 'hsr0' with parent '/' already present! [ 166.309545][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.336253][ T9841] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.352742][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.360478][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.367932][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.377060][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.385580][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.392681][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.401525][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.417271][ T9848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.429907][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.438363][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.448124][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.455234][ T9850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.463013][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.471491][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.493643][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.506300][ T9842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.525330][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.534157][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.542312][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.550718][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.558885][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.567405][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.575795][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.583415][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.592831][ T9842] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.607116][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.615514][ T9844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.624588][ T9847] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.635974][ T9841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.646632][ T9841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.658677][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 166.666694][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.674390][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.682098][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.689570][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.698039][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.706315][ T9850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.726455][ T9844] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.735677][ T9848] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.743000][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.752093][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.761912][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.769051][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.777150][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.785889][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.794430][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.801497][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.808941][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.816589][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.824152][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.832610][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.840954][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.847979][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.855667][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.864146][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.871895][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.879470][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.889632][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.897563][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.905921][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.930102][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.937746][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.946488][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.956481][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.963544][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.971145][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.979631][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.988136][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.996595][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.003653][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.011121][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.019497][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.027865][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.034935][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.042609][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.051290][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.059523][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.067928][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.076071][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.084385][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.092857][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.101821][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.121323][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.131920][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.142062][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.150646][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.158917][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.167297][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.175543][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.183650][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.192234][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.200664][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.209021][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.217350][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.224391][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.232491][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.240249][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.252954][ T9842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.264328][ T9842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.273965][ T9847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.283299][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.293236][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.301636][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.310419][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.318832][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.334623][ T9848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.345069][ T9848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.360931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.369334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.377979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.386215][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.395107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.403583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.411787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.420544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.428838][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.435994][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.443604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.452467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.460938][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.467960][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.475575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.483198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.500127][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.508634][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.517597][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.524729][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.532300][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.541369][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.553063][ T9841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.587882][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.596368][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.614543][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.623721][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.632165][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.640582][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.648917][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.657331][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.665690][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.673811][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.682264][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.690906][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.699246][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.708134][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.716129][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.725660][ T9848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.735355][ T9839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.746950][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.762876][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.780321][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.788769][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.800674][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.813485][ T9844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.826507][ T9844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.837436][ T9842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.861267][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.876971][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.918554][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.952950][ T9844] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/09/11 19:11:43 executed programs: 68 2019/09/11 19:11:48 executed programs: 328 2019/09/11 19:11:53 executed programs: 586 2019/09/11 19:11:58 executed programs: 846 2019/09/11 19:12:03 executed programs: 1102 2019/09/11 19:12:08 executed programs: 1364 2019/09/11 19:12:13 executed programs: 1616 2019/09/11 19:12:18 executed programs: 1868 2019/09/11 19:12:23 executed programs: 2104 2019/09/11 19:12:28 executed programs: 2351 2019/09/11 19:12:33 executed programs: 2603 2019/09/11 19:12:38 executed programs: 2855 2019/09/11 19:12:43 executed programs: 3106 2019/09/11 19:12:48 executed programs: 3345 [ 235.050096][ C0] ================================================================== [ 235.058252][ C0] BUG: KASAN: use-after-free in rxrpc_put_peer+0x685/0x6a0 [ 235.065468][ C0] Read of size 8 at addr ffff8880a8bfc918 by task udevd/3907 [ 235.072855][ C0] [ 235.075215][ C0] CPU: 0 PID: 3907 Comm: udevd Not tainted 5.3.0-rc7+ #0 [ 235.082249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.092328][ C0] Call Trace: [ 235.095621][ C0] [ 235.098495][ C0] dump_stack+0x172/0x1f0 [ 235.102849][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 235.107894][ C0] ? rxrpc_rcu_destroy_call+0x5e/0x140 [ 235.113372][ C0] print_address_description.cold+0xd4/0x306 [ 235.119363][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 235.124227][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 235.129092][ C0] ? rxrpc_rcu_destroy_call+0x5e/0x140 [ 235.134656][ C0] __kasan_report.cold+0x1b/0x36 [ 235.139716][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 235.144568][ C0] kasan_report+0x12/0x17 [ 235.148891][ C0] __asan_report_load8_noabort+0x14/0x20 [ 235.154605][ C0] rxrpc_put_peer+0x685/0x6a0 [ 235.159275][ C0] ? kmem_cache_free+0x1a7/0x320 [ 235.164214][ C0] ? rxrpc_process_call.cold+0x21/0x21 [ 235.169761][ C0] rxrpc_rcu_destroy_call+0x5e/0x140 [ 235.175056][ C0] rcu_core+0x67f/0x1580 [ 235.179502][ C0] ? rcu_preempt_deferred_qs+0x1e0/0x1e0 [ 235.185276][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.192413][ C0] rcu_core_si+0x9/0x10 [ 235.196568][ C0] __do_softirq+0x262/0x98c [ 235.201164][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 235.206018][ C0] irq_exit+0x19b/0x1e0 [ 235.210169][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 235.215949][ C0] apic_timer_interrupt+0xf/0x20 [ 235.220877][ C0] [ 235.223818][ C0] RIP: 0010:kfree+0x239/0x2c0 [ 235.228775][ C0] Code: 55 7e 0f 85 20 fe ff ff e8 14 2f 54 ff e9 16 fe ff ff e8 ca b8 cb ff 48 83 3d c2 bb 26 07 00 0f 84 85 00 00 00 48 89 df 57 9d <0f> 1f 44 00 00 5b 41 5c 41 5d 41 5e 5d c3 e8 a4 b8 cb ff 48 83 3d [ 235.248666][ C0] RSP: 0018:ffff888096667bb0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 235.257168][ C0] RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffffffff134b5de [ 235.265166][ C0] RDX: 0000000000000000 RSI: ffffffff8177f1ae RDI: 0000000000000286 [ 235.273138][ C0] RBP: ffff888096667bd0 R08: ffff88809665e580 R09: fffffbfff134afa0 [ 235.281116][ C0] R10: fffffbfff134af9f R11: ffffffff89a57cff R12: ffff888098f73e40 [ 235.289429][ C0] R13: ffff8880aa4001c0 R14: ffffffff830503f9 R15: ffff888096667da0 [ 235.297560][ C0] ? tomoyo_path_number_perm+0x459/0x520 [ 235.303369][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 235.308428][ C0] tomoyo_path_number_perm+0x459/0x520 [ 235.313884][ C0] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 235.319814][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 235.324872][ C0] ? vfs_write+0x160/0x5d0 [ 235.329283][ C0] ? wake_up_q+0xf0/0xf0 [ 235.333521][ C0] tomoyo_file_ioctl+0x23/0x30 [ 235.338293][ C0] security_file_ioctl+0x77/0xc0 [ 235.343525][ C0] ksys_ioctl+0x57/0xd0 [ 235.347874][ C0] __x64_sys_ioctl+0x73/0xb0 [ 235.352728][ C0] do_syscall_64+0xfd/0x6a0 [ 235.357233][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.363241][ C0] RIP: 0033:0x7febd1b9c347 [ 235.367833][ C0] Code: 90 90 90 48 8b 05 f1 fa 2a 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 90 90 90 90 90 90 90 90 90 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 fa 2a 00 31 d2 48 29 c2 64 [ 235.387830][ C0] RSP: 002b:00007fffd24fc638 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.396441][ C0] RAX: ffffffffffffffda RBX: 00000000006254a0 RCX: 00007febd1b9c347 [ 235.404510][ C0] RDX: 00007fffd24fc6bc RSI: 000000000000541b RDI: 0000000000000006 [ 235.412484][ C0] RBP: 00000000025e2230 R08: 0000000000000000 R09: 0000000000000001 [ 235.420454][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 235.428712][ C0] R13: 0000000000000000 R14: 00000000025f8090 R15: 00000000025df250 [ 235.436752][ C0] [ 235.439071][ C0] Allocated by task 23117: [ 235.443492][ C0] save_stack+0x23/0x90 [ 235.447808][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 235.453438][ C0] kasan_kmalloc+0x9/0x10 [ 235.457762][ C0] kmem_cache_alloc_trace+0x158/0x790 [ 235.463141][ C0] rxrpc_lookup_local+0x562/0x1ba0 [ 235.468257][ C0] rxrpc_sendmsg+0x379/0x5f0 [ 235.472967][ C0] sock_sendmsg+0xd7/0x130 [ 235.477515][ C0] ___sys_sendmsg+0x3e2/0x920 [ 235.482195][ C0] __sys_sendmmsg+0x1bf/0x4d0 [ 235.486877][ C0] __x64_sys_sendmmsg+0x9d/0x100 [ 235.491931][ C0] do_syscall_64+0xfd/0x6a0 [ 235.496629][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.502517][ C0] [ 235.504836][ C0] Freed by task 16: [ 235.508643][ C0] save_stack+0x23/0x90 [ 235.512791][ C0] __kasan_slab_free+0x102/0x150 [ 235.517719][ C0] kasan_slab_free+0xe/0x10 [ 235.522386][ C0] kfree+0x10a/0x2c0 [ 235.526279][ C0] rxrpc_local_rcu+0x62/0x80 [ 235.530860][ C0] rcu_core+0x67f/0x1580 [ 235.535092][ C0] rcu_core_si+0x9/0x10 [ 235.539266][ C0] __do_softirq+0x262/0x98c [ 235.543838][ C0] [ 235.546180][ C0] The buggy address belongs to the object at ffff8880a8bfc900 [ 235.546180][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 235.560550][ C0] The buggy address is located 24 bytes inside of [ 235.560550][ C0] 1024-byte region [ffff8880a8bfc900, ffff8880a8bfcd00) [ 235.573822][ C0] The buggy address belongs to the page: [ 235.579468][ C0] page:ffffea0002a2ff00 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0 compound_mapcount: 0 [ 235.590565][ C0] flags: 0x1fffc0000010200(slab|head) [ 235.595992][ C0] raw: 01fffc0000010200 ffffea0002a1e808 ffffea00023a8808 ffff8880aa400c40 [ 235.604574][ C0] raw: 0000000000000000 ffff8880a8bfc000 0000000100000007 0000000000000000 [ 235.613272][ C0] page dumped because: kasan: bad access detected [ 235.619673][ C0] [ 235.622003][ C0] Memory state around the buggy address: [ 235.627776][ C0] ffff8880a8bfc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.635947][ C0] ffff8880a8bfc880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.644447][ C0] >ffff8880a8bfc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.652607][ C0] ^ [ 235.657689][ C0] ffff8880a8bfc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.665850][ C0] ffff8880a8bfca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.673996][ C0] ================================================================== [ 235.682254][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 235.688937][ C0] CPU: 0 PID: 3907 Comm: udevd Tainted: G B 5.3.0-rc7+ #0 [ 235.697466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.707595][ C0] Call Trace: [ 235.710886][ C0] [ 235.713738][ C0] dump_stack+0x172/0x1f0 [ 235.718061][ C0] ? rxrpc_rcu_destroy_call+0x5e/0x140 [ 235.723597][ C0] panic+0x2dc/0x755 [ 235.727492][ C0] ? add_taint.cold+0x16/0x16 [ 235.732182][ C0] ? retint_kernel+0x2b/0x2b [ 235.736861][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 235.741985][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 235.746979][ C0] ? rxrpc_rcu_destroy_call+0x5e/0x140 [ 235.752688][ C0] end_report+0x47/0x4f [ 235.757055][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 235.761934][ C0] __kasan_report.cold+0xe/0x36 [ 235.766799][ C0] ? rxrpc_put_peer+0x685/0x6a0 [ 235.771654][ C0] kasan_report+0x12/0x17 [ 235.775990][ C0] __asan_report_load8_noabort+0x14/0x20 [ 235.781642][ C0] rxrpc_put_peer+0x685/0x6a0 [ 235.786324][ C0] ? kmem_cache_free+0x1a7/0x320 [ 235.791275][ C0] ? rxrpc_process_call.cold+0x21/0x21 [ 235.796745][ C0] rxrpc_rcu_destroy_call+0x5e/0x140 [ 235.802037][ C0] rcu_core+0x67f/0x1580 [ 235.806291][ C0] ? rcu_preempt_deferred_qs+0x1e0/0x1e0 [ 235.811935][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.818326][ C0] rcu_core_si+0x9/0x10 [ 235.822506][ C0] __do_softirq+0x262/0x98c [ 235.827039][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 235.832042][ C0] irq_exit+0x19b/0x1e0 [ 235.836207][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 235.842166][ C0] apic_timer_interrupt+0xf/0x20 [ 235.847110][ C0] [ 235.850236][ C0] RIP: 0010:kfree+0x239/0x2c0 [ 235.855004][ C0] Code: 55 7e 0f 85 20 fe ff ff e8 14 2f 54 ff e9 16 fe ff ff e8 ca b8 cb ff 48 83 3d c2 bb 26 07 00 0f 84 85 00 00 00 48 89 df 57 9d <0f> 1f 44 00 00 5b 41 5c 41 5d 41 5e 5d c3 e8 a4 b8 cb ff 48 83 3d [ 235.875319][ C0] RSP: 0018:ffff888096667bb0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 235.883832][ C0] RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffffffff134b5de [ 235.891810][ C0] RDX: 0000000000000000 RSI: ffffffff8177f1ae RDI: 0000000000000286 [ 235.900059][ C0] RBP: ffff888096667bd0 R08: ffff88809665e580 R09: fffffbfff134afa0 [ 235.908036][ C0] R10: fffffbfff134af9f R11: ffffffff89a57cff R12: ffff888098f73e40 [ 235.916010][ C0] R13: ffff8880aa4001c0 R14: ffffffff830503f9 R15: ffff888096667da0 [ 235.924097][ C0] ? tomoyo_path_number_perm+0x459/0x520 [ 235.929734][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 235.934766][ C0] tomoyo_path_number_perm+0x459/0x520 [ 235.940385][ C0] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 235.946281][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 235.951377][ C0] ? vfs_write+0x160/0x5d0 [ 235.955936][ C0] ? wake_up_q+0xf0/0xf0 [ 235.960196][ C0] tomoyo_file_ioctl+0x23/0x30 [ 235.964963][ C0] security_file_ioctl+0x77/0xc0 [ 235.970032][ C0] ksys_ioctl+0x57/0xd0 [ 235.974447][ C0] __x64_sys_ioctl+0x73/0xb0 [ 235.979245][ C0] do_syscall_64+0xfd/0x6a0 [ 235.984547][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.990698][ C0] RIP: 0033:0x7febd1b9c347 [ 235.995231][ C0] Code: 90 90 90 48 8b 05 f1 fa 2a 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 90 90 90 90 90 90 90 90 90 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 fa 2a 00 31 d2 48 29 c2 64 [ 236.015073][ C0] RSP: 002b:00007fffd24fc638 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.023484][ C0] RAX: ffffffffffffffda RBX: 00000000006254a0 RCX: 00007febd1b9c347 [ 236.031708][ C0] RDX: 00007fffd24fc6bc RSI: 000000000000541b RDI: 0000000000000006 [ 236.039823][ C0] RBP: 00000000025e2230 R08: 0000000000000000 R09: 0000000000000001 [ 236.048098][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 236.056504][ C0] R13: 0000000000000000 R14: 00000000025f8090 R15: 00000000025df250 [ 236.066162][ C0] Kernel Offset: disabled [ 236.070503][ C0] Rebooting in 86400 seconds..