[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 49.926713][ T7364] IPVS: ftp: loaded support on port[0] = 21 [ 50.340715][ T7354] can: request_module (can-proto-0) failed. [ 51.316776][ T7354] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.249' (ECDSA) to the list of known hosts. 2019/07/17 12:41:59 parsed 1 programs 2019/07/17 12:42:00 executed programs: 0 [ 60.038627][ T7437] IPVS: ftp: loaded support on port[0] = 21 [ 60.077148][ T7441] IPVS: ftp: loaded support on port[0] = 21 [ 60.087200][ T7440] IPVS: ftp: loaded support on port[0] = 21 [ 60.103923][ T7444] IPVS: ftp: loaded support on port[0] = 21 [ 60.123254][ T7446] IPVS: ftp: loaded support on port[0] = 21 [ 60.194047][ T7447] IPVS: ftp: loaded support on port[0] = 21 [ 60.275379][ T7437] chnl_net:caif_netlink_parms(): no params data found [ 60.303554][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 60.353162][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.360268][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.368089][ T7437] device bridge_slave_0 entered promiscuous mode [ 60.408014][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.415178][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.422780][ T7437] device bridge_slave_1 entered promiscuous mode [ 60.454728][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.461835][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.469238][ T7440] device bridge_slave_0 entered promiscuous mode [ 60.476608][ T7441] chnl_net:caif_netlink_parms(): no params data found [ 60.486867][ T7437] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.497066][ T7437] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.513269][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.520346][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.527865][ T7440] device bridge_slave_1 entered promiscuous mode [ 60.544654][ T7440] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.569122][ T7444] chnl_net:caif_netlink_parms(): no params data found [ 60.579995][ T7440] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.600972][ T7437] team0: Port device team_slave_0 added [ 60.614871][ T7437] team0: Port device team_slave_1 added [ 60.634779][ T7440] team0: Port device team_slave_0 added [ 60.675181][ T7440] team0: Port device team_slave_1 added [ 60.692237][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.699264][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.707048][ T7444] device bridge_slave_0 entered promiscuous mode [ 60.718000][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.725107][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.732934][ T7444] device bridge_slave_1 entered promiscuous mode [ 60.743064][ T7447] chnl_net:caif_netlink_parms(): no params data found [ 60.767620][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.774706][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.782542][ T7441] device bridge_slave_0 entered promiscuous mode [ 60.793780][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.800816][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.808500][ T7441] device bridge_slave_1 entered promiscuous mode [ 60.883762][ T7437] device hsr_slave_0 entered promiscuous mode [ 60.921539][ T7437] device hsr_slave_1 entered promiscuous mode [ 60.963786][ T7446] chnl_net:caif_netlink_parms(): no params data found [ 60.973969][ T7444] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.987753][ T7444] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.053513][ T7440] device hsr_slave_0 entered promiscuous mode [ 61.101677][ T7440] device hsr_slave_1 entered promiscuous mode [ 61.159085][ T7441] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.173845][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.180954][ T7437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.188534][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.195584][ T7437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.211886][ T7441] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.246951][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.254998][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.264664][ T7447] device bridge_slave_0 entered promiscuous mode [ 61.275879][ T7444] team0: Port device team_slave_0 added [ 61.290917][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.299563][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.307125][ T7447] device bridge_slave_1 entered promiscuous mode [ 61.318005][ T7444] team0: Port device team_slave_1 added [ 61.324090][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.331126][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.338456][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.345531][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.355778][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.373714][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.381199][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.388582][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.398591][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.405834][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.413821][ T7446] device bridge_slave_0 entered promiscuous mode [ 61.425802][ T7441] team0: Port device team_slave_0 added [ 61.433049][ T7441] team0: Port device team_slave_1 added [ 61.453062][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.460102][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.469889][ T7446] device bridge_slave_1 entered promiscuous mode [ 61.482497][ T7447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.492233][ T7447] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.511180][ T7447] team0: Port device team_slave_0 added [ 61.583573][ T7444] device hsr_slave_0 entered promiscuous mode [ 61.621725][ T7444] device hsr_slave_1 entered promiscuous mode [ 61.676636][ T7447] team0: Port device team_slave_1 added [ 61.700688][ T7437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.753579][ T7441] device hsr_slave_0 entered promiscuous mode [ 61.801612][ T7441] device hsr_slave_1 entered promiscuous mode [ 61.853905][ T7446] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.875421][ T7437] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.884061][ T7446] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.901576][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.909798][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.938333][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.946954][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.955373][ T2885] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.962437][ T2885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.969865][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.978645][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.986907][ T2885] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.993964][ T2885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.003172][ T7446] team0: Port device team_slave_0 added [ 62.043487][ T7447] device hsr_slave_0 entered promiscuous mode [ 62.081676][ T7447] device hsr_slave_1 entered promiscuous mode [ 62.134616][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.143060][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.153440][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.162756][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.172383][ T7446] team0: Port device team_slave_1 added [ 62.233414][ T7446] device hsr_slave_0 entered promiscuous mode [ 62.281658][ T7446] device hsr_slave_1 entered promiscuous mode [ 62.330389][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.338388][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.346890][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.360897][ T7437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.371900][ T7437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.396934][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.405081][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.414536][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.422735][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.430686][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.465604][ T7444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.484046][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.502940][ T7437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.516100][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.528248][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.537635][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.549863][ T7444] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.561037][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.573054][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.600962][ T7441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.632145][ T7447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.638858][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.647910][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.660062][ T3770] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.667164][ T3770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.675887][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.684530][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.693025][ T3770] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.700036][ T3770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.707492][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.716082][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.724508][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.732772][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.740905][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.749408][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.757761][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.766483][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.774897][ T3770] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.781971][ T3770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.795053][ T7444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.806736][ T7444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.832929][ T7446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.840527][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.848381][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.857631][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.865919][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.874492][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.883406][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.891476][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.899809][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.908547][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.915625][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.923475][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.936615][ T7441] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.947375][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.954994][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.962754][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.970203][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.978591][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.987291][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.996023][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.013162][ T7447] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.034083][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.041781][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.049238][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.056859][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.064566][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.073020][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.081202][ T3770] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.088270][ T3770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.096209][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.104624][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.112949][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.121586][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.130878][ T3770] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.137943][ T3770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.146612][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.158158][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.166443][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.174719][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.183275][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.191353][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.200873][ T7446] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.219061][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.230726][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.239487][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.257664][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.264740][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.272824][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.281160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.289478][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.296535][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.304150][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.312631][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.320957][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.329323][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.336383][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.345256][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.361946][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.369687][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.378193][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.386663][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.395171][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.404258][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.412882][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.419903][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.427330][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.435595][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.443848][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.452292][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.460334][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.468849][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.495365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.504166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.512757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.521909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.530056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.538976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.547184][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.555858][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.564559][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.574972][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.587794][ T7441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.607552][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.624286][ T7446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.635770][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.651133][ T7444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.658856][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.672713][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.680802][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.692556][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.700782][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.719600][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.728094][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.736285][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.745512][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.753355][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.761841][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.780700][ T7441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.800115][ T7447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.816541][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.828370][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.837879][ T2885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.861130][ T7447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.897469][ T7446] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/17 12:42:05 executed programs: 21 2019/07/17 12:42:10 executed programs: 81 2019/07/17 12:42:16 executed programs: 145 2019/07/17 12:42:21 executed programs: 206 2019/07/17 12:42:26 executed programs: 270 2019/07/17 12:42:31 executed programs: 334 2019/07/17 12:42:36 executed programs: 394 2019/07/17 12:42:41 executed programs: 457 2019/07/17 12:42:46 executed programs: 522 2019/07/17 12:42:51 executed programs: 583 2019/07/17 12:42:56 executed programs: 647 2019/07/17 12:43:01 executed programs: 709 2019/07/17 12:43:06 executed programs: 771 2019/07/17 12:43:11 executed programs: 833 2019/07/17 12:43:16 executed programs: 895 2019/07/17 12:43:21 executed programs: 956 2019/07/17 12:43:26 executed programs: 1023 2019/07/17 12:43:31 executed programs: 1084 2019/07/17 12:43:37 executed programs: 1147 2019/07/17 12:43:42 executed programs: 1208 2019/07/17 12:43:47 executed programs: 1270 2019/07/17 12:43:52 executed programs: 1334 2019/07/17 12:43:57 executed programs: 1397 2019/07/17 12:44:02 executed programs: 1460 2019/07/17 12:44:07 executed programs: 1522 2019/07/17 12:44:12 executed programs: 1585 2019/07/17 12:44:17 executed programs: 1649 2019/07/17 12:44:22 executed programs: 1710 2019/07/17 12:44:27 executed programs: 1771 2019/07/17 12:44:32 executed programs: 1832 2019/07/17 12:44:37 executed programs: 1896 2019/07/17 12:44:42 executed programs: 1956 2019/07/17 12:44:47 executed programs: 2021 2019/07/17 12:44:52 executed programs: 2083 2019/07/17 12:44:58 executed programs: 2147 2019/07/17 12:45:03 executed programs: 2210 2019/07/17 12:45:08 executed programs: 2274 2019/07/17 12:45:13 executed programs: 2337 [ 252.572060][ C0] ------------[ cut here ]------------ [ 252.577720][ C0] refcount_t: increment on 0; use-after-free. [ 252.583954][ C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:156 refcount_inc_checked+0x2b/0x30 [ 252.592886][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 252.599457][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.2.0-rc6+ #1 [ 252.601350][T19241] ================================================================== [ 252.606551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.606558][ C0] Call Trace: [ 252.606562][ C0] [ 252.614655][T19241] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x72/0x160 [ 252.624728][ C0] dump_stack+0x113/0x167 [ 252.627941][T19241] Read of size 4 at addr ffff8880a7dd75c0 by task syz-executor.1/19241 [ 252.630766][ C0] ? refcount_inc_checked+0x2b/0x30 [ 252.639135][T19241] [ 252.643481][ C0] panic+0x212/0x4cb [ 252.662975][ C0] ? __warn_printk+0xd6/0xd6 [ 252.667548][ C0] __warn.cold.8+0x1b/0x38 [ 252.671939][ C0] ? refcount_inc_checked+0x2b/0x30 [ 252.677112][ C0] report_bug+0x1a4/0x200 [ 252.681478][ C0] do_error_trap+0x11b/0x200 [ 252.686050][ C0] do_invalid_op+0x36/0x40 [ 252.690440][ C0] ? refcount_inc_checked+0x2b/0x30 [ 252.695640][ C0] invalid_op+0x14/0x20 [ 252.699775][ C0] RIP: 0010:refcount_inc_checked+0x2b/0x30 [ 252.705558][ C0] Code: 48 89 e5 e8 97 fe ff ff 84 c0 74 02 5d c3 80 3d 93 69 f3 05 00 75 f5 48 c7 c7 00 52 41 87 c6 05 83 69 f3 05 01 e8 a8 d2 3d fe <0f> 0b 5d c3 90 55 48 89 e5 41 56 41 55 49 89 fd 48 c7 c7 60 52 41 [ 252.725140][ C0] RSP: 0018:ffff8880aea09c10 EFLAGS: 00010286 [ 252.731178][ C0] RAX: 0000000000000000 RBX: ffff8880a7dd7540 RCX: 0000000000000000 [ 252.739127][ C0] RDX: 0000000000000004 RSI: ffffffff8827a8e8 RDI: ffffffff89d60d40 [ 252.747074][ C0] RBP: ffff8880aea09c10 R08: 0000000000000002 R09: 0000000000000000 [ 252.755020][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888093a41680 [ 252.763058][ C0] R13: ffff8880a7dd75a8 R14: 0000000000000017 R15: ffff8880a7dd79de [ 252.771054][ C0] nr_insert_socket+0x28/0xd0 [ 252.775715][ C0] nr_rx_frame+0x160f/0x1f00 [ 252.780407][ C0] ? lock_downgrade+0x860/0x860 [ 252.785243][ C0] nr_loopback_timer+0x64/0x120 [ 252.790104][ C0] call_timer_fn+0x14d/0x510 [ 252.794669][ C0] ? nr_process_rx_frame+0x1280/0x1280 [ 252.800101][ C0] ? process_timeout+0x40/0x40 [ 252.804855][ C0] ? _raw_spin_unlock_irq+0x27/0x80 [ 252.810049][ C0] ? trace_hardirqs_on+0x28/0x190 [ 252.815103][ C0] ? kasan_check_read+0x11/0x20 [ 252.819933][ C0] ? nr_process_rx_frame+0x1280/0x1280 [ 252.825371][ C0] run_timer_softirq+0xc6f/0x1330 [ 252.830373][ C0] ? add_timer+0x730/0x730 [ 252.834786][ C0] ? kvm_clock_read+0x18/0x30 [ 252.839461][ C0] ? sched_clock+0x31/0x40 [ 252.843854][ C0] ? __do_softirq+0x1f9/0x958 [ 252.848516][ C0] __do_softirq+0x260/0x958 [ 252.853028][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 252.857864][ C0] irq_exit+0x17f/0x1c0 [ 252.861993][ C0] smp_apic_timer_interrupt+0x13e/0x540 [ 252.867513][ C0] apic_timer_interrupt+0xf/0x20 [ 252.872421][ C0] [ 252.875337][ C0] RIP: 0010:native_safe_halt+0x12/0x20 [ 252.880775][ C0] Code: 11 ff ff ff 4c 89 e7 e8 6c f2 f4 fa eb 97 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 e9 07 00 00 00 0f 00 2d f0 41 64 00 fb f4 <5d> c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e9 07 00 00 [ 252.900821][ C0] RSP: 0018:ffffffff88207ce0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 252.909206][ C0] RAX: dffffc0000000000 RBX: ffffffff8827a040 RCX: 0000000000000000 [ 252.917166][ C0] RDX: 1ffffffff10643e1 RSI: 0000000000000006 RDI: ffffffff88321f08 [ 252.925116][ C0] RBP: ffffffff88207ce0 R08: 0000000000000006 R09: 0000000000000000 [ 252.933061][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 252.941006][ C0] R13: ffffffff88321ef8 R14: 0000000000000000 R15: ffffffff88f68438 [ 252.948977][ C0] default_idle+0x51/0x310 [ 252.953372][ C0] arch_cpu_idle+0xa/0x10 [ 252.957677][ C0] default_idle_call+0x6d/0x90 [ 252.963900][ C0] do_idle+0x3e4/0x590 [ 252.968121][ C0] ? arch_cpu_idle_exit+0x70/0x70 [ 252.973128][ C0] cpu_startup_entry+0x18/0x20 [ 252.977863][ C0] rest_init+0x1a4/0x279 [ 252.982131][ C0] arch_call_rest_init+0x9/0xc [ 252.986873][ C0] start_kernel+0x6bd/0x6f8 [ 252.991352][ C0] ? mem_encrypt_init+0x1/0x1 [ 252.996008][ C0] ? early_idt_handler_common+0x3b/0x60 [ 253.001536][ C0] x86_64_start_reservations+0x29/0x2b [ 253.006966][ C0] x86_64_start_kernel+0x76/0x79 [ 253.011891][ C0] secondary_startup_64+0xa4/0xb0 [ 253.017188][T19241] CPU: 1 PID: 19241 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #1 [ 253.025065][T19241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.035100][T19241] Call Trace: [ 253.038369][T19241] dump_stack+0x113/0x167 [ 253.042705][T19241] print_address_description.cold.5+0x9/0x1ff [ 253.048750][T19241] ? refcount_inc_not_zero_checked+0x72/0x160 [ 253.054789][T19241] __kasan_report.cold.6+0x1b/0x39 [ 253.059872][T19241] ? refcount_inc_not_zero_checked+0x72/0x160 [ 253.065913][T19241] ? refcount_inc_not_zero_checked+0x72/0x160 [ 253.071954][T19241] kasan_report+0x12/0x20 [ 253.076259][T19241] check_memory_region+0x13e/0x1b0 [ 253.081348][T19241] kasan_check_read+0x11/0x20 [ 253.085999][T19241] refcount_inc_not_zero_checked+0x72/0x160 [ 253.091873][T19241] ? refcount_dec_and_mutex_lock+0x50/0x50 [ 253.097656][T19241] ? lock_acquire+0x173/0x3d0 [ 253.102377][T19241] ? __sock_release+0x7d/0x290 [ 253.107122][T19241] refcount_inc_checked+0x9/0x30 [ 253.112032][T19241] nr_release+0x53/0x360 [ 253.116252][T19241] __sock_release+0xc2/0x290 [ 253.120817][T19241] sock_close+0x10/0x20 [ 253.124973][T19241] __fput+0x25a/0x770 [ 253.128937][T19241] ? _raw_spin_unlock_irq+0x27/0x80 [ 253.134115][T19241] ____fput+0x9/0x10 [ 253.138006][T19241] task_work_run+0x108/0x180 [ 253.142578][T19241] exit_to_usermode_loop+0x1a9/0x200 [ 253.147849][T19241] do_syscall_64+0x447/0x530 [ 253.152418][T19241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.158284][T19241] RIP: 0033:0x413501 [ 253.162153][T19241] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 253.181729][T19241] RSP: 002b:00007fff8d3527e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 253.190115][T19241] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413501 [ 253.198077][T19241] RDX: 0000001b2ce20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 253.206025][T19241] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 253.213974][T19241] R10: 00007fff8d3528c0 R11: 0000000000000293 R12: 000000000075c9a0 [ 253.221919][T19241] R13: 000000000075c9a0 R14: 0000000000760a50 R15: ffffffffffffffff [ 253.229876][T19241] [ 253.232180][T19241] Allocated by task 0: [ 253.236227][T19241] save_stack+0x21/0x90 [ 253.240355][T19241] __kasan_kmalloc.constprop.8+0xc7/0xd0 [ 253.245960][T19241] kasan_kmalloc+0x9/0x10 [ 253.250263][T19241] __kmalloc+0x15d/0x760 [ 253.254481][T19241] sk_prot_alloc+0x148/0x240 [ 253.259044][T19241] sk_alloc+0x30/0xc70 [ 253.263091][T19241] nr_rx_frame+0x645/0x1f00 [ 253.267565][T19241] nr_loopback_timer+0x64/0x120 [ 253.272391][T19241] call_timer_fn+0x14d/0x510 [ 253.276951][T19241] run_timer_softirq+0xc6f/0x1330 [ 253.281952][T19241] __do_softirq+0x260/0x958 [ 253.286438][T19241] [ 253.288740][T19241] Freed by task 19244: [ 253.292784][T19241] save_stack+0x21/0x90 [ 253.296915][T19241] __kasan_slab_free+0x102/0x150 [ 253.301827][T19241] kasan_slab_free+0xe/0x10 [ 253.306303][T19241] kfree+0xcf/0x220 [ 253.310088][T19241] __sk_destruct+0x3f1/0x580 [ 253.314653][T19241] sk_destruct+0x49/0x60 [ 253.318871][T19241] __sk_free+0x9e/0x230 [ 253.322999][T19241] sk_free+0x23/0x30 [ 253.326864][T19241] sock_efree+0x42/0x50 [ 253.331033][T19241] skb_release_head_state+0x9f/0x1a0 [ 253.336292][T19241] skb_release_all+0xd/0x50 [ 253.340771][T19241] kfree_skb+0x97/0x270 [ 253.344898][T19241] nr_accept+0x487/0x690 [ 253.349115][T19241] __sys_accept4+0x32b/0x6b0 [ 253.353675][T19241] __x64_sys_accept+0x70/0xb0 [ 253.358324][T19241] do_syscall_64+0xd0/0x530 [ 253.362802][T19241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.368666][T19241] [ 253.370972][T19241] The buggy address belongs to the object at ffff8880a7dd7540 [ 253.370972][T19241] which belongs to the cache kmalloc-2k of size 2048 [ 253.385000][T19241] The buggy address is located 128 bytes inside of [ 253.385000][T19241] 2048-byte region [ffff8880a7dd7540, ffff8880a7dd7d40) [ 253.398331][T19241] The buggy address belongs to the page: [ 253.403935][T19241] page:ffffea00029f7580 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0 compound_mapcount: 0 [ 253.414837][T19241] flags: 0x1fffc0000010200(slab|head) [ 253.420181][T19241] raw: 01fffc0000010200 ffffea0002720488 ffffea00022f5908 ffff8880aa400c40 [ 253.428745][T19241] raw: 0000000000000000 ffff8880a7dd6440 0000000100000003 0000000000000000 [ 253.437300][T19241] page dumped because: kasan: bad access detected [ 253.443682][T19241] [ 253.445985][T19241] Memory state around the buggy address: [ 253.451589][T19241] ffff8880a7dd7480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 253.459622][T19241] ffff8880a7dd7500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 253.467656][T19241] >ffff8880a7dd7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.475709][T19241] ^ [ 253.481835][T19241] ffff8880a7dd7600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.489868][T19241] ffff8880a7dd7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.497899][T19241] ================================================================== [ 253.506103][T19241] Disabling lock debugging due to kernel taint [ 253.513175][ C0] Kernel Offset: disabled [ 253.517491][ C0] Rebooting in 86400 seconds..