[ 35.285285][ T26] audit: type=1800 audit(1551545107.150:28): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [ 35.983070][ T26] audit: type=1800 audit(1551545107.930:29): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.003201][ T26] audit: type=1800 audit(1551545107.930:30): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ssh ...[?25l[?1c7[1G[[31mFAIL[39;49m8[?25h[?0c [31mfailed![39;49m Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.21' (ECDSA) to the list of known hosts. 2019/03/02 16:45:20 parsed 1 programs 2019/03/02 16:45:22 executed programs: 0 syzkaller login: [ 50.996369][ T7709] IPVS: ftp: loaded support on port[0] = 21 [ 51.000515][ T7712] IPVS: ftp: loaded support on port[0] = 21 [ 51.006546][ T7710] IPVS: ftp: loaded support on port[0] = 21 [ 51.035603][ T7715] IPVS: ftp: loaded support on port[0] = 21 [ 51.068024][ T7717] IPVS: ftp: loaded support on port[0] = 21 [ 51.096914][ T7718] IPVS: ftp: loaded support on port[0] = 21 [ 51.150244][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 51.195655][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.203026][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.212008][ T7709] device bridge_slave_0 entered promiscuous mode [ 51.220054][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.227146][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.234934][ T7709] device bridge_slave_1 entered promiscuous mode [ 51.251563][ T7709] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.262804][ T7709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.330094][ T7709] team0: Port device team_slave_0 added [ 51.338221][ T7709] team0: Port device team_slave_1 added [ 51.371628][ T7712] chnl_net:caif_netlink_parms(): no params data found [ 51.434989][ T7709] device hsr_slave_0 entered promiscuous mode [ 51.493662][ T7709] device hsr_slave_1 entered promiscuous mode [ 51.569667][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 51.635246][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.642315][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.651014][ T7710] device bridge_slave_0 entered promiscuous mode [ 51.678875][ T7712] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.686396][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.694396][ T7712] device bridge_slave_0 entered promiscuous mode [ 51.710439][ T7715] chnl_net:caif_netlink_parms(): no params data found [ 51.722895][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.730139][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.737841][ T7710] device bridge_slave_1 entered promiscuous mode [ 51.759296][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.767191][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.775404][ T7712] device bridge_slave_1 entered promiscuous mode [ 51.805507][ T7710] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.835343][ T7712] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.854649][ T7710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.886428][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.893681][ T7709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.901404][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.908524][ T7709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.921077][ T7712] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.943333][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 51.982403][ T7710] team0: Port device team_slave_0 added [ 51.988923][ T7718] chnl_net:caif_netlink_parms(): no params data found [ 51.998047][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.005231][ T7715] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.012852][ T7715] device bridge_slave_0 entered promiscuous mode [ 52.022184][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.029721][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.037269][ T7715] device bridge_slave_1 entered promiscuous mode [ 52.044663][ T7712] team0: Port device team_slave_0 added [ 52.055114][ T7710] team0: Port device team_slave_1 added [ 52.072783][ T7712] team0: Port device team_slave_1 added [ 52.079142][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.086318][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.093833][ T7717] device bridge_slave_0 entered promiscuous mode [ 52.103172][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.110286][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.117791][ T7717] device bridge_slave_1 entered promiscuous mode [ 52.128858][ T7715] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.152617][ T7717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.162963][ T7715] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.190127][ T7717] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.264949][ T7712] device hsr_slave_0 entered promiscuous mode [ 52.323625][ T7712] device hsr_slave_1 entered promiscuous mode [ 52.379739][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.388056][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.404830][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.411851][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.419442][ T7718] device bridge_slave_0 entered promiscuous mode [ 52.427072][ T7715] team0: Port device team_slave_0 added [ 52.432739][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.439881][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.447498][ T7718] device bridge_slave_1 entered promiscuous mode [ 52.516698][ T7710] device hsr_slave_0 entered promiscuous mode [ 52.573797][ T7710] device hsr_slave_1 entered promiscuous mode [ 52.619330][ T7717] team0: Port device team_slave_0 added [ 52.630338][ T7715] team0: Port device team_slave_1 added [ 52.639230][ T7717] team0: Port device team_slave_1 added [ 52.694759][ T7717] device hsr_slave_0 entered promiscuous mode [ 52.733818][ T7717] device hsr_slave_1 entered promiscuous mode [ 52.814810][ T7718] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.824834][ T7718] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.872059][ T7718] team0: Port device team_slave_0 added [ 52.881654][ T7718] team0: Port device team_slave_1 added [ 52.936201][ T7715] device hsr_slave_0 entered promiscuous mode [ 52.973774][ T7715] device hsr_slave_1 entered promiscuous mode [ 53.023145][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.076737][ T7718] device hsr_slave_0 entered promiscuous mode [ 53.103712][ T7718] device hsr_slave_1 entered promiscuous mode [ 53.163124][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.191347][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.200937][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.208773][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.217386][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.225751][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.232832][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.240591][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.249006][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.257396][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.264454][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.271861][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.282959][ T7712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.304435][ T7709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.315873][ T7709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.328033][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.336952][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.345936][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.354964][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.363306][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.371709][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.379962][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.388201][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.396565][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.404878][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.412653][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.448070][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.474657][ T7712] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.489425][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.497988][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.505708][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.514265][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.522496][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.529575][ T7727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.541830][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.557072][ T7709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.568462][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.576416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.585351][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.593699][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.600741][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.622237][ T7717] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.645629][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.652788][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.665081][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.672641][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.681406][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.689382][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.698192][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.707138][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.715883][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.724325][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.732643][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.740954][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.749112][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.757368][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.765644][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.791840][ T7718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.800838][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.844419][ T7715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.851239][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.862631][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.871379][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.879645][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.886730][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.895838][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.904876][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.913196][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.920315][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.928201][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.937121][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.945541][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.952578][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.960153][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.969034][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.005170][ T7718] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.032155][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.041420][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.050083][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.058126][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.066775][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.075712][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.084388][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.091429][ T7728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.099494][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.108276][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.114250][ C0] hrtimer: interrupt took 45917 ns [ 54.117860][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.137059][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.150154][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.161088][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.184017][ T7712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.229003][ T7715] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.267742][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.317764][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.342698][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.399050][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.421409][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.450069][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.504256][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.514764][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.522479][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.531165][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.546707][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.553842][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.562648][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.579291][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.594464][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.602994][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.614274][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.621333][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.629036][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.638189][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.650620][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.664038][ T7710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.680930][ T7717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.693452][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.702571][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.710971][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.719419][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.727904][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.736933][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.745355][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.752397][ T7727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.759988][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.768918][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.777326][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.784419][ T7727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.791850][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.800296][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.808496][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.829052][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.837053][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.848193][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.856893][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.865671][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.874253][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.884797][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.904597][ T7718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.915089][ T7718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.933932][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.942313][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.950700][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.959072][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.967501][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.975652][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.983917][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.992275][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.000614][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.009260][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.017873][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.026147][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.034545][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.042718][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.050999][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.058656][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.073305][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.132017][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.155540][ T7718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.165588][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.200110][ T7715] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/03/02 16:45:27 executed programs: 28 [ 57.374094][ C0] ================================================================== [ 57.382407][ C0] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 57.389784][ C0] Read of size 8 at addr ffff88808e09eb80 by task ksoftirqd/0/9 [ 57.397416][ C0] [ 57.399760][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.0.0-rc8-next-20190301 #1 [ 57.408173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.418262][ C0] Call Trace: [ 57.421564][ C0] dump_stack+0x172/0x1f0 [ 57.425909][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 57.430950][ C0] print_address_description.cold+0x7c/0x20d [ 57.436944][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 57.441981][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 57.447014][ C0] kasan_report.cold+0x1b/0x40 [ 57.451793][ C0] ? ccid_hc_tx_delete+0xde/0x100 [ 57.456831][ C0] __asan_report_load8_noabort+0x14/0x20 [ 57.462490][ C0] ccid_hc_tx_delete+0xde/0x100 [ 57.467354][ C0] dccp_sk_destruct+0x3f/0x90 [ 57.472042][ C0] ? dccp_init_sock+0x3f0/0x3f0 [ 57.476901][ C0] __sk_destruct+0x55/0x6d0 [ 57.481416][ C0] ? proto_unregister+0x4e0/0x4e0 [ 57.486552][ C0] rcu_core+0x928/0x1390 [ 57.490818][ C0] ? rcu_check_gp_start_stall+0x250/0x250 [ 57.496636][ C0] ? sched_clock+0x2e/0x50 [ 57.501078][ C0] __do_softirq+0x266/0x95a [ 57.505613][ C0] ? __sched_text_start+0x8/0x8 [ 57.510496][ C0] ? takeover_tasklets+0x7b0/0x7b0 [ 57.515621][ C0] run_ksoftirqd+0x8e/0x110 [ 57.520138][ C0] smpboot_thread_fn+0x6ab/0xa10 [ 57.525091][ C0] ? sort_range+0x30/0x30 [ 57.529526][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 57.535782][ C0] ? __kthread_parkme+0xfb/0x1b0 [ 57.540735][ C0] kthread+0x357/0x430 [ 57.544821][ C0] ? sort_range+0x30/0x30 [ 57.544840][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 57.544855][ C0] ret_from_fork+0x3a/0x50 [ 57.544879][ C0] [ 57.544886][ C0] Allocated by task 7993: [ 57.544899][ C0] save_stack+0x45/0xd0 [ 57.544912][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 57.555615][ C0] kasan_slab_alloc+0xf/0x20 [ 57.555627][ C0] kmem_cache_alloc+0x11a/0x6f0 [ 57.555640][ C0] ccid_new+0x256/0x3f0 [ 57.555651][ C0] dccp_hdlr_ccid+0x27/0x150 [ 57.555663][ C0] __dccp_feat_activate+0x17a/0x270 [ 57.555675][ C0] dccp_feat_activate_values+0x33a/0x766 [ 57.555687][ C0] dccp_rcv_state_process+0x116f/0x1935 [ 57.555700][ C0] dccp_v6_do_rcv+0x269/0xbf0 [ 57.555711][ C0] __release_sock+0x12e/0x3a0 [ 57.555720][ C0] release_sock+0x59/0x1c0 [ 57.555734][ C0] __inet_stream_connect+0x59f/0xea0 [ 57.555746][ C0] inet_stream_connect+0x58/0xa0 [ 57.555757][ C0] __sys_connect+0x266/0x330 [ 57.555769][ C0] __x64_sys_connect+0x73/0xb0 [ 57.555782][ C0] do_syscall_64+0x103/0x610 [ 57.555793][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.555796][ C0] [ 57.555802][ C0] Freed by task 8004: [ 57.555814][ C0] save_stack+0x45/0xd0 [ 57.555826][ C0] __kasan_slab_free+0x102/0x150 [ 57.555835][ C0] kasan_slab_free+0xe/0x10 [ 57.555846][ C0] kmem_cache_free+0x86/0x260 [ 57.555865][ C0] ccid_hc_tx_delete+0xc1/0x100 [ 57.600054][ C0] dccp_hdlr_ccid+0x7d/0x150 [ 57.600067][ C0] __dccp_feat_activate+0x17a/0x270 [ 57.600080][ C0] dccp_feat_activate_values+0x33a/0x766 [ 57.600093][ C0] dccp_create_openreq_child+0x40c/0x570 [ 57.600112][ C0] dccp_v6_request_recv_sock+0x214/0x1da0 [ 57.711286][ C0] dccp_check_req+0x35c/0x6f0 [ 57.715970][ C0] dccp_v6_rcv+0x6d7/0x191e [ 57.715985][ C0] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 57.715997][ C0] ip6_input_finish+0x84/0x170 [ 57.716014][ C0] ip6_input+0xe4/0x3f0 [ 57.735053][ C0] ip6_rcv_finish+0x1e7/0x320 [ 57.739741][ C0] ipv6_rcv+0x10e/0x420 [ 57.743906][ C0] __netif_receive_skb_one_core+0x115/0x1a0 [ 57.749806][ C0] __netif_receive_skb+0x2c/0x1c0 [ 57.754839][ C0] process_backlog+0x206/0x750 [ 57.759626][ C0] net_rx_action+0x4fa/0x1070 [ 57.764316][ C0] __do_softirq+0x266/0x95a [ 57.768822][ C0] [ 57.768834][ C0] The buggy address belongs to the object at ffff88808e09eb80 [ 57.768834][ C0] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 57.768845][ C0] The buggy address is located 0 bytes inside of [ 57.768845][ C0] 1240-byte region [ffff88808e09eb80, ffff88808e09f058) [ 57.768849][ C0] The buggy address belongs to the page: [ 57.768861][ C0] page:ffffea0002382780 count:1 mapcount:0 mapping:ffff8882168e8c00 index:0x0 compound_mapcount: 0 [ 57.815270][ C0] flags: 0x1fffc0000010200(slab|head) [ 57.820660][ C0] raw: 01fffc0000010200 ffffea00022f5008 ffffea00022a7388 ffff8882168e8c00 [ 57.829267][ C0] raw: 0000000000000000 ffff88808e09e080 0000000100000005 0000000000000000 [ 57.829274][ C0] page dumped because: kasan: bad access detected [ 57.829278][ C0] [ 57.829282][ C0] Memory state around the buggy address: [ 57.829293][ C0] ffff88808e09ea80: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 57.829304][ C0] ffff88808e09eb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.829314][ C0] >ffff88808e09eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [