[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.207211][ T26] audit: type=1800 audit(1570184579.770:29): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 44.226785][ T26] audit: type=1800 audit(1570184579.770:30): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 55.549532][ T7885] IPVS: ftp: loaded support on port[0] = 21 [ 56.262250][ T7872] can: request_module (can-proto-0) failed. [ 57.154729][ T7872] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. 2019/10/04 10:23:19 parsed 1 programs 2019/10/04 10:23:20 executed programs: 0 [ 64.763129][ T7969] IPVS: ftp: loaded support on port[0] = 21 [ 64.771286][ T7964] IPVS: ftp: loaded support on port[0] = 21 [ 64.778819][ T7966] IPVS: ftp: loaded support on port[0] = 21 [ 64.800082][ T7962] IPVS: ftp: loaded support on port[0] = 21 [ 64.808264][ T7971] IPVS: ftp: loaded support on port[0] = 21 [ 64.808428][ T7968] IPVS: ftp: loaded support on port[0] = 21 [ 65.032403][ T7969] chnl_net:caif_netlink_parms(): no params data found [ 65.074586][ T7971] chnl_net:caif_netlink_parms(): no params data found [ 65.128052][ T7966] chnl_net:caif_netlink_parms(): no params data found [ 65.164275][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.171824][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.180021][ T7971] device bridge_slave_0 entered promiscuous mode [ 65.190784][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.198137][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.206228][ T7971] device bridge_slave_1 entered promiscuous mode [ 65.220129][ T7962] chnl_net:caif_netlink_parms(): no params data found [ 65.229871][ T7968] chnl_net:caif_netlink_parms(): no params data found [ 65.238592][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.245902][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.253898][ T7969] device bridge_slave_0 entered promiscuous mode [ 65.261239][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.268381][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.275924][ T7969] device bridge_slave_1 entered promiscuous mode [ 65.301453][ T7969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.332069][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.346115][ T7969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.385691][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.416679][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.423964][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.431509][ T7968] device bridge_slave_0 entered promiscuous mode [ 65.438782][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.446112][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.453676][ T7966] device bridge_slave_0 entered promiscuous mode [ 65.462935][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.469973][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.478022][ T7966] device bridge_slave_1 entered promiscuous mode [ 65.499874][ T7969] team0: Port device team_slave_0 added [ 65.509137][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.516676][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.526584][ T7968] device bridge_slave_1 entered promiscuous mode [ 65.538850][ T7964] chnl_net:caif_netlink_parms(): no params data found [ 65.550064][ T7971] team0: Port device team_slave_0 added [ 65.560759][ T7969] team0: Port device team_slave_1 added [ 65.568390][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.576003][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.583821][ T7962] device bridge_slave_0 entered promiscuous mode [ 65.595420][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.602526][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.610061][ T7962] device bridge_slave_1 entered promiscuous mode [ 65.624418][ T7971] team0: Port device team_slave_1 added [ 65.635312][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.645828][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.660569][ T7968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.674127][ T7962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.688033][ T7962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.717219][ T7968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.741164][ T7966] team0: Port device team_slave_0 added [ 65.747273][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.754722][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.762200][ T7964] device bridge_slave_0 entered promiscuous mode [ 65.835355][ T7971] device hsr_slave_0 entered promiscuous mode [ 65.873010][ T7971] device hsr_slave_1 entered promiscuous mode [ 66.015179][ T7969] device hsr_slave_0 entered promiscuous mode [ 66.052935][ T7969] device hsr_slave_1 entered promiscuous mode [ 66.102821][ T7969] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.111330][ T7966] team0: Port device team_slave_1 added [ 66.123986][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.131124][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.139363][ T7964] device bridge_slave_1 entered promiscuous mode [ 66.151219][ T7968] team0: Port device team_slave_0 added [ 66.158422][ T7968] team0: Port device team_slave_1 added [ 66.168187][ T7962] team0: Port device team_slave_0 added [ 66.190228][ T7964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.204350][ T7964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.214897][ T7962] team0: Port device team_slave_1 added [ 66.264616][ T7966] device hsr_slave_0 entered promiscuous mode [ 66.305634][ T7966] device hsr_slave_1 entered promiscuous mode [ 66.362770][ T7966] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.425526][ T7962] device hsr_slave_0 entered promiscuous mode [ 66.463135][ T7962] device hsr_slave_1 entered promiscuous mode [ 66.502904][ T7962] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.564332][ T7968] device hsr_slave_0 entered promiscuous mode [ 66.602962][ T7968] device hsr_slave_1 entered promiscuous mode [ 66.642874][ T7968] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.655448][ T7964] team0: Port device team_slave_0 added [ 66.674264][ T7964] team0: Port device team_slave_1 added [ 66.744271][ T7964] device hsr_slave_0 entered promiscuous mode [ 66.792930][ T7964] device hsr_slave_1 entered promiscuous mode [ 66.842806][ T7964] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.900730][ T7969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.928500][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.967964][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.979142][ T7962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.994112][ T7966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.004226][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.012300][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.020098][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.027889][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.036327][ T7969] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.052048][ T7968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.068074][ T7966] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.087517][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.096034][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.103962][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.112342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.120895][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.128063][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.135914][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.144901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.153265][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.160295][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.170749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.178336][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.185972][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.194905][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.203632][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.211872][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.218953][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.226410][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.235020][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.243427][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.250448][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.257990][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.267139][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.275284][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.297323][ T7962] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.319464][ T7969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.330668][ T7969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.344279][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.353326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.361691][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.370721][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.380381][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.388775][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.397635][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.404752][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.412458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.421173][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.429592][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.436652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.444468][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.453311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.461704][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.470413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.478740][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.487402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.495681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.504479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.513033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.521259][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.529983][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.538443][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.546707][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.554766][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.563386][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.571165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.579294][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.600678][ T7964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.615172][ T7968] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.622479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.631687][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.641587][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.648687][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.657222][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.665066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.673133][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.681542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.689932][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.697019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.704637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.713474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.721932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.730416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.738648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.747206][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.756061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.764362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.780155][ T7966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.791495][ T7966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.806049][ T7971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.817734][ T7971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.832345][ T7962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.843143][ T7962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.855325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.863598][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.871171][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.879650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.887873][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.896452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.904830][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.913180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.921263][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.929748][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.937990][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.946678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.955044][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.962132][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.970253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.978746][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.987107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.995406][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.003828][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.012050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.020575][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.028254][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.036229][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.064639][ T7964] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.097244][ T7966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.104415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.114074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.123993][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.131064][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.139025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.147657][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.156721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.165366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.173836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.181405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.189233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.197781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.206279][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.221940][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.231215][ T7962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.248170][ T7968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.266874][ T7968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.299277][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.310195][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.319796][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.328773][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.337277][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.346270][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.354807][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.361855][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.369594][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.378306][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.387015][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.394135][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.401981][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.410576][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.419006][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.427727][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.436347][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.444078][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.451903][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.465711][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.492475][ T7964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.514360][ T7964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.548566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.564600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.579027][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.597632][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.607078][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.616508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.637910][ T7968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.658198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.682021][ T7964] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/10/04 10:23:25 executed programs: 47 2019/10/04 10:23:30 executed programs: 279 2019/10/04 10:23:35 executed programs: 517 2019/10/04 10:23:40 executed programs: 765 2019/10/04 10:23:45 executed programs: 1010 2019/10/04 10:23:50 executed programs: 1265 2019/10/04 10:23:55 executed programs: 1515 2019/10/04 10:24:00 executed programs: 1752 2019/10/04 10:24:05 executed programs: 1994 2019/10/04 10:24:10 executed programs: 2237 2019/10/04 10:24:15 executed programs: 2482 2019/10/04 10:24:20 executed programs: 2710 2019/10/04 10:24:25 executed programs: 2942 2019/10/04 10:24:30 executed programs: 3171 2019/10/04 10:24:35 executed programs: 3403 2019/10/04 10:24:40 executed programs: 3628 2019/10/04 10:24:45 executed programs: 3880 2019/10/04 10:24:50 executed programs: 4111 2019/10/04 10:24:55 executed programs: 4342 2019/10/04 10:25:00 executed programs: 4568 2019/10/04 10:25:05 executed programs: 4787 2019/10/04 10:25:10 executed programs: 5010 2019/10/04 10:25:15 executed programs: 5246 2019/10/04 10:25:20 executed programs: 5466 2019/10/04 10:25:25 executed programs: 5683 2019/10/04 10:25:30 executed programs: 5903 2019/10/04 10:25:35 executed programs: 6119 2019/10/04 10:25:40 executed programs: 6332 2019/10/04 10:25:45 executed programs: 6573 2019/10/04 10:25:50 executed programs: 6799 2019/10/04 10:25:55 executed programs: 7019 2019/10/04 10:26:00 executed programs: 7235 2019/10/04 10:26:05 executed programs: 7447 2019/10/04 10:26:10 executed programs: 7652 2019/10/04 10:26:15 executed programs: 7904 2019/10/04 10:26:20 executed programs: 8126 2019/10/04 10:26:25 executed programs: 8334 2019/10/04 10:26:30 executed programs: 8538 2019/10/04 10:26:35 executed programs: 8741 2019/10/04 10:26:41 executed programs: 8939 2019/10/04 10:26:46 executed programs: 9172 2019/10/04 10:26:51 executed programs: 9376 2019/10/04 10:26:56 executed programs: 9578 2019/10/04 10:27:01 executed programs: 9777 2019/10/04 10:27:06 executed programs: 9971 2019/10/04 10:27:11 executed programs: 10166 2019/10/04 10:27:16 executed programs: 10400 2019/10/04 10:27:21 executed programs: 10617 2019/10/04 10:27:26 executed programs: 10819 2019/10/04 10:27:31 executed programs: 11016 2019/10/04 10:27:36 executed programs: 11208 2019/10/04 10:27:41 executed programs: 11401 2019/10/04 10:27:46 executed programs: 11643 2019/10/04 10:27:51 executed programs: 11853 2019/10/04 10:27:56 executed programs: 12052 2019/10/04 10:28:01 executed programs: 12241 2019/10/04 10:28:06 executed programs: 12432 2019/10/04 10:28:11 executed programs: 12617 2019/10/04 10:28:16 executed programs: 12854 [ 364.384141][ C0] ================================================================== [ 364.392570][ C0] BUG: KASAN: use-after-free in rxrpc_put_peer+0xb5/0x2c0 [ 364.399689][ C0] Read of size 8 at addr ffff8880a4106958 by task ksoftirqd/0/9 [ 364.407319][ C0] [ 364.409662][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.3.0+ #0 [ 364.416589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.426644][ C0] Call Trace: [ 364.430023][ C0] dump_stack+0x1d8/0x2f8 [ 364.434409][ C0] print_address_description+0x75/0x5c0 [ 364.439995][ C0] ? vprintk_default+0x28/0x30 [ 364.444762][ C0] ? vprintk_func+0x158/0x170 [ 364.449443][ C0] ? printk+0x62/0x8d [ 364.453438][ C0] __kasan_report+0x14b/0x1c0 [ 364.458122][ C0] ? rxrpc_put_peer+0xb5/0x2c0 [ 364.462952][ C0] ? rxrpc_rcu_destroy_call+0x56/0x100 [ 364.468412][ C0] kasan_report+0x26/0x50 [ 364.472756][ C0] ? rxrpc_rcu_destroy_call+0x56/0x100 [ 364.478217][ C0] __asan_report_load8_noabort+0x14/0x20 [ 364.483848][ C0] rxrpc_put_peer+0xb5/0x2c0 [ 364.488444][ C0] ? rxrpc_cleanup_call+0x250/0x250 [ 364.493646][ C0] rxrpc_rcu_destroy_call+0x56/0x100 [ 364.499016][ C0] rcu_core+0x843/0x1050 [ 364.503278][ C0] rcu_core_si+0x9/0x10 [ 364.507517][ C0] __do_softirq+0x333/0x7c4 [ 364.512091][ C0] ? run_ksoftirqd+0x64/0xf0 [ 364.516693][ C0] run_ksoftirqd+0x64/0xf0 [ 364.521108][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 364.526378][ C0] smpboot_thread_fn+0x5b3/0x9a0 [ 364.531399][ C0] kthread+0x332/0x350 [ 364.535459][ C0] ? cpu_report_death+0x120/0x120 [ 364.540463][ C0] ? kthread_blkcg+0xe0/0xe0 [ 364.545079][ C0] ret_from_fork+0x24/0x30 [ 364.549478][ C0] [ 364.551792][ C0] Allocated by task 27170: [ 364.556183][ C0] __kasan_kmalloc+0x11c/0x1b0 [ 364.560933][ C0] kasan_kmalloc+0x9/0x10 [ 364.565630][ C0] kmem_cache_alloc_trace+0x221/0x2f0 [ 364.570976][ C0] rxrpc_lookup_local+0x708/0x16f0 [ 364.576061][ C0] rxrpc_sendmsg+0x493/0x8b0 [ 364.580672][ C0] ___sys_sendmsg+0x60d/0x910 [ 364.585339][ C0] __sys_sendmmsg+0x239/0x470 [ 364.589992][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 364.594849][ C0] do_syscall_64+0xf7/0x1c0 [ 364.599334][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.605212][ C0] [ 364.607526][ C0] Freed by task 16: [ 364.611318][ C0] __kasan_slab_free+0x12a/0x1e0 [ 364.616235][ C0] kasan_slab_free+0xe/0x10 [ 364.620723][ C0] kfree+0x115/0x200 [ 364.624595][ C0] rxrpc_local_rcu+0x63/0x80 [ 364.629161][ C0] rcu_core+0x843/0x1050 [ 364.633379][ C0] rcu_core_si+0x9/0x10 [ 364.637510][ C0] __do_softirq+0x333/0x7c4 [ 364.641982][ C0] [ 364.644289][ C0] The buggy address belongs to the object at ffff8880a4106940 [ 364.644289][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 364.658327][ C0] The buggy address is located 24 bytes inside of [ 364.658327][ C0] 1024-byte region [ffff8880a4106940, ffff8880a4106d40) [ 364.671582][ C0] The buggy address belongs to the page: [ 364.677191][ C0] page:ffffea0002904180 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0xffff8880a4107b40 compound_mapcount: 0 [ 364.689397][ C0] flags: 0x1fffc0000010200(slab|head) [ 364.694746][ C0] raw: 01fffc0000010200 ffffea00025b5d88 ffffea0001fde008 ffff8880aa400c40 [ 364.703318][ C0] raw: ffff8880a4107b40 ffff8880a4106040 0000000100000004 0000000000000000 [ 364.711893][ C0] page dumped because: kasan: bad access detected [ 364.718285][ C0] [ 364.720847][ C0] Memory state around the buggy address: [ 364.726470][ C0] ffff8880a4106800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.734506][ C0] ffff8880a4106880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.742551][ C0] >ffff8880a4106900: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 364.750601][ C0] ^ [ 364.757519][ C0] ffff8880a4106980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.765561][ C0] ffff8880a4106a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.773598][ C0] ================================================================== [ 364.781635][ C0] Disabling lock debugging due to kernel taint [ 364.787814][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 364.794397][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.3.0+ #0 [ 364.802713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.806674][ T3892] kobject: 'loop5' (0000000038dbc6f0): kobject_uevent_env [ 364.812753][ C0] Call Trace: [ 364.812768][ C0] dump_stack+0x1d8/0x2f8 [ 364.812781][ C0] panic+0x25c/0x799 [ 364.831334][ C0] ? __kasan_report+0x195/0x1c0 [ 364.836274][ C0] ? trace_hardirqs_on+0x34/0x80 [ 364.841210][ C0] ? _raw_spin_unlock_irqrestore+0xad/0xe0 [ 364.847027][ C0] __kasan_report+0x1bb/0x1c0 [ 364.848499][ T3892] kobject: 'loop5' (0000000038dbc6f0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 364.851695][ C0] ? rxrpc_put_peer+0xb5/0x2c0 [ 364.851706][ C0] ? rxrpc_rcu_destroy_call+0x56/0x100 [ 364.851714][ C0] kasan_report+0x26/0x50 [ 364.851721][ C0] ? rxrpc_rcu_destroy_call+0x56/0x100 [ 364.851732][ C0] __asan_report_load8_noabort+0x14/0x20 [ 364.883686][ T3892] kobject: 'loop4' (0000000040f8f42e): kobject_uevent_env [ 364.887386][ C0] rxrpc_put_peer+0xb5/0x2c0 [ 364.887397][ C0] ? rxrpc_cleanup_call+0x250/0x250 [ 364.887406][ C0] rxrpc_rcu_destroy_call+0x56/0x100 [ 364.887415][ C0] rcu_core+0x843/0x1050 [ 364.887429][ C0] rcu_core_si+0x9/0x10 [ 364.894640][ T3892] kobject: 'loop4' (0000000040f8f42e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 364.899092][ C0] __do_softirq+0x333/0x7c4 [ 364.899103][ C0] ? run_ksoftirqd+0x64/0xf0 [ 364.899116][ C0] run_ksoftirqd+0x64/0xf0 [ 364.899127][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 364.905055][ T3892] kobject: 'loop5' (0000000038dbc6f0): kobject_uevent_env [ 364.909558][ C0] smpboot_thread_fn+0x5b3/0x9a0 [ 364.909573][ C0] kthread+0x332/0x350 [ 364.909580][ C0] ? cpu_report_death+0x120/0x120 [ 364.909587][ C0] ? kthread_blkcg+0xe0/0xe0 [ 364.909600][ C0] ret_from_fork+0x24/0x30 [ 364.913925][ T3892] kobject: 'loop5' (0000000038dbc6f0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 364.919285][ C0] Kernel Offset: disabled [ 364.992437][ C0] Rebooting in 86400 seconds..