[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 70.923469][ T7353] IPVS: ftp: loaded support on port[0] = 21 [ 71.345424][ T7340] can: request_module (can-proto-0) failed. [ 72.502888][ T7340] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.170' (ECDSA) to the list of known hosts. 2019/06/01 23:20:43 parsed 1 programs 2019/06/01 23:20:44 executed programs: 0 [ 80.968312][ T7426] IPVS: ftp: loaded support on port[0] = 21 [ 81.043752][ T7428] IPVS: ftp: loaded support on port[0] = 21 [ 81.070159][ T7432] IPVS: ftp: loaded support on port[0] = 21 [ 81.071101][ T7431] IPVS: ftp: loaded support on port[0] = 21 [ 81.112445][ T7436] IPVS: ftp: loaded support on port[0] = 21 [ 81.136804][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 81.187775][ T7437] IPVS: ftp: loaded support on port[0] = 21 [ 81.243019][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.250754][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.258380][ T7426] device bridge_slave_0 entered promiscuous mode [ 81.266207][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.273432][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.281295][ T7426] device bridge_slave_1 entered promiscuous mode [ 81.303835][ T7426] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.327558][ T7426] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.394935][ T7426] team0: Port device team_slave_0 added [ 81.412578][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 81.428489][ T7426] team0: Port device team_slave_1 added [ 81.492414][ T7436] chnl_net:caif_netlink_parms(): no params data found [ 81.508182][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 81.598774][ T7426] device hsr_slave_0 entered promiscuous mode [ 81.667153][ T7426] device hsr_slave_1 entered promiscuous mode [ 81.748715][ T7431] chnl_net:caif_netlink_parms(): no params data found [ 81.773070][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.780309][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.788148][ T7436] device bridge_slave_0 entered promiscuous mode [ 81.799553][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.806702][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.814207][ T7436] device bridge_slave_1 entered promiscuous mode [ 81.825978][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.833550][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.841194][ T7428] device bridge_slave_0 entered promiscuous mode [ 81.853468][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.860778][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.868449][ T7428] device bridge_slave_1 entered promiscuous mode [ 81.888449][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.895646][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.904057][ T7432] device bridge_slave_0 entered promiscuous mode [ 81.911821][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.919164][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.926886][ T7432] device bridge_slave_1 entered promiscuous mode [ 81.944422][ T7436] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.964647][ T7428] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.976135][ T7428] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.999599][ T7436] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.012691][ T7437] chnl_net:caif_netlink_parms(): no params data found [ 82.029598][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.037923][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.045686][ T7431] device bridge_slave_0 entered promiscuous mode [ 82.054238][ T7432] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.070511][ T7436] team0: Port device team_slave_0 added [ 82.084461][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.092052][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.102140][ T7431] device bridge_slave_1 entered promiscuous mode [ 82.110443][ T7432] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.127283][ T7436] team0: Port device team_slave_1 added [ 82.133939][ T7432] team0: Port device team_slave_0 added [ 82.147105][ T7428] team0: Port device team_slave_0 added [ 82.163045][ T7432] team0: Port device team_slave_1 added [ 82.171608][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.178827][ T7426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.186765][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.195322][ T7426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.207087][ T7428] team0: Port device team_slave_1 added [ 82.218290][ T7431] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.234111][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.241890][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.268751][ T7431] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.282717][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.290356][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.300323][ T7437] device bridge_slave_0 entered promiscuous mode [ 82.308079][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.315143][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.323296][ T7437] device bridge_slave_1 entered promiscuous mode [ 82.360607][ T7437] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.398032][ T7436] device hsr_slave_0 entered promiscuous mode [ 82.436702][ T7436] device hsr_slave_1 entered promiscuous mode [ 82.488349][ T7431] team0: Port device team_slave_0 added [ 82.495366][ T7431] team0: Port device team_slave_1 added [ 82.568606][ T7428] device hsr_slave_0 entered promiscuous mode [ 82.616643][ T7428] device hsr_slave_1 entered promiscuous mode [ 82.703864][ T7437] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.721475][ T7437] team0: Port device team_slave_0 added [ 82.798877][ T7432] device hsr_slave_0 entered promiscuous mode [ 82.839062][ T7432] device hsr_slave_1 entered promiscuous mode [ 82.897967][ T7437] team0: Port device team_slave_1 added [ 82.978881][ T7437] device hsr_slave_0 entered promiscuous mode [ 83.047342][ T7437] device hsr_slave_1 entered promiscuous mode [ 83.144742][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.199797][ T7431] device hsr_slave_0 entered promiscuous mode [ 83.256773][ T7431] device hsr_slave_1 entered promiscuous mode [ 83.351092][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.360151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.391543][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.418326][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.430224][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.438713][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.445742][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.470388][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.480278][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.494220][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.503361][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.512093][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.519193][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.527725][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.536077][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.543753][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.553771][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.578367][ T7436] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.590712][ T7426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.601549][ T7426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.616049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.624173][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.632654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.641210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.650002][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.658794][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.667454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.675779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.684147][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.692619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.701003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.709108][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.717844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.726520][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.733667][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.742437][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.764677][ T7431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.772647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.781672][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.790556][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.799216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.807841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.816175][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.823282][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.831244][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.840317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.848948][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.856100][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.864045][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.873859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.886498][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.895139][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.904304][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.911440][ T7443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.939261][ T7437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.951510][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.960066][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.969239][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.977752][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.986244][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.995076][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.003744][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.012596][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.027482][ T7431] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.042177][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.051688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.059488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.067282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.075726][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.084777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.093289][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.102030][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.109758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.117868][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.126224][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.135072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.155938][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.173919][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.188861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.201605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.210044][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.219437][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.227921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.236364][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.244561][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.253345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.261703][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.268913][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.276896][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.285481][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.293926][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.300972][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.308604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.317075][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.325683][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.334311][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.341535][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.350210][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.363640][ T7437] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.384528][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.396629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.404483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.413136][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.421746][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.431062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.440635][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.449317][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.456450][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.464141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.472728][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.481211][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.490400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.499166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.507639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.517460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.527872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.555493][ T7431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.569170][ T7431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.581284][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.590783][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.604268][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.611422][ T7443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.619104][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.628308][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.637005][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.645835][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.654551][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.661674][ T7443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.669394][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.678156][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.686731][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.695198][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.703685][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.711983][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.720459][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.729131][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.737528][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.745862][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.754448][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.762563][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.770383][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.781550][ T7432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.793475][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.816523][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.825024][ T7443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.844234][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.872347][ T7431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.881478][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.899354][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.915183][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.944711][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.953126][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.962106][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.971089][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.989752][ T7437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.006165][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.019871][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.065041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.077705][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.077866][ C0] hrtimer: interrupt took 35948 ns [ 85.103464][ T7437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.235861][ T7463] ================================================================== [ 85.244082][ T7463] BUG: KASAN: use-after-free in kfree_skb_list+0x4c/0x50 [ 85.251130][ T7463] Read of size 8 at addr ffff888085ec3480 by task syz-executor.5/7463 [ 85.259394][ T7463] [ 85.261726][ T7463] CPU: 0 PID: 7463 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #1 [ 85.269519][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.279586][ T7463] Call Trace: [ 85.282891][ T7463] dump_stack+0x113/0x167 [ 85.287218][ T7463] print_address_description.cold.5+0x9/0x1ff [ 85.293365][ T7463] ? kfree_skb_list+0x4c/0x50 [ 85.298034][ T7463] __kasan_report.cold.6+0x1b/0x39 [ 85.303164][ T7463] ? kfree_skb_list+0x4c/0x50 [ 85.307834][ T7463] ? kfree_skb_list+0x4c/0x50 [ 85.312517][ T7463] kasan_report+0x12/0x20 [ 85.316845][ T7463] __asan_report_load8_noabort+0x14/0x20 [ 85.322597][ T7463] kfree_skb_list+0x4c/0x50 [ 85.327108][ T7463] ip6_fragment+0x1ed1/0x2e50 [ 85.331779][ T7463] ? mark_held_locks+0xb8/0x130 [ 85.336630][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.342087][ T7463] ? ip6_forward_finish+0x4b0/0x4b0 [ 85.347288][ T7463] ? ip6_forward+0x3590/0x3590 [ 85.352051][ T7463] ? retint_kernel+0x2b/0x2b [ 85.356661][ T7463] ? ip6_forward_finish+0x4b0/0x4b0 [ 85.361867][ T7463] ip6_finish_output+0x536/0xa50 [ 85.366813][ T7463] ip6_output+0x1bf/0x630 [ 85.371138][ T7463] ? ip6_finish_output+0xa50/0xa50 [ 85.376240][ T7463] ? ip6_fragment+0x2e50/0x2e50 [ 85.381187][ T7463] ip6_local_out+0x78/0x130 [ 85.385841][ T7463] ip6_send_skb+0x92/0x2f0 [ 85.390259][ T7463] ip6_push_pending_frames+0x94/0xb0 [ 85.395538][ T7463] rawv6_sendmsg+0x240a/0x3250 [ 85.400318][ T7463] ? rawv6_getsockopt+0xd0/0xd0 [ 85.405185][ T7463] ? aa_label_sk_perm+0x7e/0x4c0 [ 85.410122][ T7463] ? lockdep_hardirqs_on+0x424/0x5c0 [ 85.415403][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.421035][ T7463] ? trace_hardirqs_on_caller+0x28/0x180 [ 85.426672][ T7463] ? aa_profile_af_perm+0x320/0x320 [ 85.431875][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.437334][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.442787][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.448365][ T7463] ? lockdep_hardirqs_on+0x424/0x5c0 [ 85.453770][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.459219][ T7463] ? trace_hardirqs_on_caller+0x28/0x180 [ 85.464844][ T7463] inet_sendmsg+0x108/0x460 [ 85.469339][ T7463] ? inet_sendmsg+0x108/0x460 [ 85.474123][ T7463] ? security_socket_sendmsg+0x4a/0x90 [ 85.479565][ T7463] ? ipip_gro_receive+0xf0/0xf0 [ 85.484420][ T7463] sock_sendmsg+0xb5/0xf0 [ 85.488749][ T7463] ___sys_sendmsg+0x647/0x950 [ 85.493522][ T7463] ? find_held_lock+0x36/0x1d0 [ 85.498512][ T7463] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 85.504045][ T7463] ? __fget+0x292/0x420 [ 85.508207][ T7463] ? lock_downgrade+0x860/0x860 [ 85.513047][ T7463] ? kasan_check_read+0x11/0x20 [ 85.517971][ T7463] ? __fget+0x2af/0x420 [ 85.522114][ T7463] ? __fget_light+0x179/0x1f0 [ 85.526775][ T7463] ? lock_downgrade+0x860/0x860 [ 85.531615][ T7463] ? __fdget+0xe/0x10 [ 85.535710][ T7463] __sys_sendmsg+0xd9/0x180 [ 85.540193][ T7463] ? __ia32_sys_shutdown+0x70/0x70 [ 85.545283][ T7463] ? kasan_check_read+0x11/0x20 [ 85.550308][ T7463] ? _copy_to_user+0x91/0xb0 [ 85.555012][ T7463] ? put_timespec64+0xa9/0x100 [ 85.559779][ T7463] ? nsecs_to_jiffies+0x20/0x20 [ 85.564611][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.570075][ T7463] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.576255][ T7463] __x64_sys_sendmsg+0x73/0xb0 [ 85.581009][ T7463] do_syscall_64+0xd0/0x530 [ 85.585494][ T7463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.591367][ T7463] RIP: 0033:0x459279 [ 85.595253][ T7463] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 85.615169][ T7463] RSP: 002b:00007efcc4c0dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.623586][ T7463] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 85.631544][ T7463] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 85.639599][ T7463] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 85.647576][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcc4c0e6d4 [ 85.655543][ T7463] R13: 00000000004c6c94 R14: 00000000004dba90 R15: 00000000ffffffff [ 85.663512][ T7463] [ 85.665844][ T7463] Allocated by task 7463: [ 85.670239][ T7463] save_stack+0x21/0x90 [ 85.674380][ T7463] __kasan_kmalloc.constprop.8+0xc7/0xd0 [ 85.681039][ T7463] kasan_slab_alloc+0x12/0x20 [ 85.685738][ T7463] kmem_cache_alloc_node+0x131/0x720 [ 85.691015][ T7463] __alloc_skb+0xa7/0x570 [ 85.695334][ T7463] __ip6_append_data.isra.51+0x2397/0x37e0 [ 85.701118][ T7463] ip6_append_data+0x165/0x2f0 [ 85.705910][ T7463] rawv6_sendmsg+0x1934/0x3250 [ 85.710653][ T7463] inet_sendmsg+0x108/0x460 [ 85.715141][ T7463] sock_sendmsg+0xb5/0xf0 [ 85.719444][ T7463] ___sys_sendmsg+0x647/0x950 [ 85.724099][ T7463] __sys_sendmsg+0xd9/0x180 [ 85.728602][ T7463] __x64_sys_sendmsg+0x73/0xb0 [ 85.733392][ T7463] do_syscall_64+0xd0/0x530 [ 85.737889][ T7463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.743769][ T7463] [ 85.746070][ T7463] Freed by task 7463: [ 85.750039][ T7463] save_stack+0x21/0x90 [ 85.754196][ T7463] __kasan_slab_free+0x102/0x150 [ 85.759119][ T7463] kasan_slab_free+0xe/0x10 [ 85.763616][ T7463] kmem_cache_free+0x83/0x290 [ 85.768377][ T7463] kfree_skbmem+0x82/0xf0 [ 85.772700][ T7463] kfree_skb+0x9f/0x270 [ 85.776895][ T7463] ip6_tnl_start_xmit+0x270/0x1ec0 [ 85.781990][ T7463] dev_hard_start_xmit+0x144/0x750 [ 85.787084][ T7463] __dev_queue_xmit+0x1feb/0x2ff0 [ 85.792095][ T7463] dev_queue_xmit+0xb/0x10 [ 85.796520][ T7463] neigh_direct_output+0xc/0x10 [ 85.801446][ T7463] ip6_finish_output2+0xc68/0x22f0 [ 85.806549][ T7463] ip6_fragment+0x1ea7/0x2e50 [ 85.811250][ T7463] ip6_finish_output+0x536/0xa50 [ 85.816187][ T7463] ip6_output+0x1bf/0x630 [ 85.820531][ T7463] ip6_local_out+0x78/0x130 [ 85.825051][ T7463] ip6_send_skb+0x92/0x2f0 [ 85.829453][ T7463] ip6_push_pending_frames+0x94/0xb0 [ 85.834738][ T7463] rawv6_sendmsg+0x240a/0x3250 [ 85.839483][ T7463] inet_sendmsg+0x108/0x460 [ 85.843968][ T7463] sock_sendmsg+0xb5/0xf0 [ 85.848281][ T7463] ___sys_sendmsg+0x647/0x950 [ 85.852960][ T7463] __sys_sendmsg+0xd9/0x180 [ 85.857450][ T7463] __x64_sys_sendmsg+0x73/0xb0 [ 85.862227][ T7463] do_syscall_64+0xd0/0x530 [ 85.866745][ T7463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.872630][ T7463] [ 85.874948][ T7463] The buggy address belongs to the object at ffff888085ec3480 [ 85.874948][ T7463] which belongs to the cache skbuff_head_cache of size 224 [ 85.889513][ T7463] The buggy address is located 0 bytes inside of [ 85.889513][ T7463] 224-byte region [ffff888085ec3480, ffff888085ec3560) [ 85.902850][ T7463] The buggy address belongs to the page: [ 85.908497][ T7463] page:ffffea000217b0c0 refcount:1 mapcount:0 mapping:ffff88821b6f6540 index:0x0 [ 85.917603][ T7463] flags: 0x1fffc0000000200(slab) [ 85.922711][ T7463] raw: 01fffc0000000200 ffffea00024dd208 ffffea000240b808 ffff88821b6f6540 [ 85.931298][ T7463] raw: 0000000000000000 ffff888085ec30c0 000000010000000c 0000000000000000 [ 85.939871][ T7463] page dumped because: kasan: bad access detected [ 85.946271][ T7463] [ 85.948606][ T7463] Memory state around the buggy address: [ 85.954226][ T7463] ffff888085ec3380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.964200][ T7463] ffff888085ec3400: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 85.972277][ T7463] >ffff888085ec3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.980414][ T7463] ^ [ 85.984473][ T7463] ffff888085ec3500: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 85.992616][ T7463] ffff888085ec3580: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 86.000673][ T7463] ================================================================== [ 86.008835][ T7463] Disabling lock debugging due to kernel taint [ 86.017418][ T7463] Kernel panic - not syncing: panic_on_warn set ... [ 86.024023][ T7463] CPU: 0 PID: 7463 Comm: syz-executor.5 Tainted: G B 5.2.0-rc1+ #1 [ 86.033214][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.043368][ T7463] Call Trace: [ 86.046660][ T7463] dump_stack+0x113/0x167 [ 86.050982][ T7463] ? kfree_skb+0x200/0x270 [ 86.055393][ T7463] panic+0x212/0x4cb [ 86.059279][ T7463] ? __warn_printk+0xd6/0xd6 [ 86.063863][ T7463] ? ___preempt_schedule+0x16/0x18 [ 86.068965][ T7463] ? kfree_skb_list+0x4c/0x50 [ 86.073756][ T7463] end_report+0x47/0x4f [ 86.077909][ T7463] __kasan_report.cold.6+0xe/0x39 [ 86.082977][ T7463] ? kfree_skb_list+0x4c/0x50 [ 86.086753][ T3877] kobject: 'loop4' (00000000cdb6aacd): kobject_uevent_env [ 86.087651][ T7463] ? kfree_skb_list+0x4c/0x50 [ 86.094797][ T3877] kobject: 'loop4' (00000000cdb6aacd): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 86.099436][ T7463] kasan_report+0x12/0x20 [ 86.099443][ T7463] __asan_report_load8_noabort+0x14/0x20 [ 86.099450][ T7463] kfree_skb_list+0x4c/0x50 [ 86.099458][ T7463] ip6_fragment+0x1ed1/0x2e50 [ 86.099464][ T7463] ? mark_held_locks+0xb8/0x130 [ 86.099472][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.099477][ T7463] ? ip6_forward_finish+0x4b0/0x4b0 [ 86.099484][ T7463] ? ip6_forward+0x3590/0x3590 [ 86.099492][ T7463] ? retint_kernel+0x2b/0x2b [ 86.099498][ T7463] ? ip6_forward_finish+0x4b0/0x4b0 [ 86.099504][ T7463] ip6_finish_output+0x536/0xa50 [ 86.099510][ T7463] ip6_output+0x1bf/0x630 [ 86.099514][ T7463] ? ip6_finish_output+0xa50/0xa50 [ 86.099520][ T7463] ? ip6_fragment+0x2e50/0x2e50 [ 86.099528][ T7463] ip6_local_out+0x78/0x130 [ 86.099536][ T7463] ip6_send_skb+0x92/0x2f0 [ 86.148313][ T3877] kobject: 'loop3' (00000000e72db970): kobject_uevent_env [ 86.149266][ T7463] ip6_push_pending_frames+0x94/0xb0 [ 86.149275][ T7463] rawv6_sendmsg+0x240a/0x3250 [ 86.149284][ T7463] ? rawv6_getsockopt+0xd0/0xd0 [ 86.155045][ T3877] kobject: 'loop3' (00000000e72db970): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 86.159053][ T7463] ? aa_label_sk_perm+0x7e/0x4c0 [ 86.159062][ T7463] ? lockdep_hardirqs_on+0x424/0x5c0 [ 86.159069][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.159075][ T7463] ? trace_hardirqs_on_caller+0x28/0x180 [ 86.159080][ T7463] ? aa_profile_af_perm+0x320/0x320 [ 86.159084][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.159089][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.159092][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.159096][ T7463] ? lockdep_hardirqs_on+0x424/0x5c0 [ 86.159099][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.159103][ T7463] ? trace_hardirqs_on_caller+0x28/0x180 [ 86.159117][ T7463] inet_sendmsg+0x108/0x460 [ 86.159123][ T7463] ? inet_sendmsg+0x108/0x460 [ 86.287897][ T7463] ? security_socket_sendmsg+0x4a/0x90 [ 86.293433][ T7463] ? ipip_gro_receive+0xf0/0xf0 [ 86.298262][ T7463] sock_sendmsg+0xb5/0xf0 [ 86.302622][ T7463] ___sys_sendmsg+0x647/0x950 [ 86.307444][ T7463] ? find_held_lock+0x36/0x1d0 [ 86.312222][ T7463] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 86.317662][ T7463] ? __fget+0x292/0x420 [ 86.321803][ T7463] ? lock_downgrade+0x860/0x860 [ 86.326636][ T7463] ? kasan_check_read+0x11/0x20 [ 86.331474][ T7463] ? __fget+0x2af/0x420 [ 86.335621][ T7463] ? __fget_light+0x179/0x1f0 [ 86.340300][ T7463] ? lock_downgrade+0x860/0x860 [ 86.345131][ T7463] ? __fdget+0xe/0x10 [ 86.349111][ T7463] __sys_sendmsg+0xd9/0x180 [ 86.353597][ T7463] ? __ia32_sys_shutdown+0x70/0x70 [ 86.358704][ T7463] ? kasan_check_read+0x11/0x20 [ 86.363576][ T7463] ? _copy_to_user+0x91/0xb0 [ 86.368160][ T7463] ? put_timespec64+0xa9/0x100 [ 86.372917][ T7463] ? nsecs_to_jiffies+0x20/0x20 [ 86.377777][ T7463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.383218][ T7463] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.389269][ T7463] __x64_sys_sendmsg+0x73/0xb0 [ 86.394017][ T7463] do_syscall_64+0xd0/0x530 [ 86.398502][ T7463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.404370][ T7463] RIP: 0033:0x459279 [ 86.408249][ T7463] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 86.427936][ T7463] RSP: 002b:00007efcc4c0dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.436450][ T7463] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 86.444401][ T7463] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 86.452353][ T7463] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 86.460402][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcc4c0e6d4 [ 86.468353][ T7463] R13: 00000000004c6c94 R14: 00000000004dba90 R15: 00000000ffffffff [ 86.478027][ T7463] Kernel Offset: disabled [ 86.482401][ T7463] Rebooting in 86400 seconds..