[ 34.165355] audit: type=1800 audit(1549755589.796:27): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.190343] audit: type=1800 audit(1549755589.796:28): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.946924] audit: type=1800 audit(1549755590.626:29): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.965446] audit: type=1800 audit(1549755590.626:30): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts. 2019/02/09 23:40:41 parsed 1 programs 2019/02/09 23:40:43 executed programs: 0 syzkaller login: [ 87.993915] IPVS: ftp: loaded support on port[0] = 21 [ 87.994101] IPVS: ftp: loaded support on port[0] = 21 [ 88.000585] IPVS: ftp: loaded support on port[0] = 21 [ 88.008629] IPVS: ftp: loaded support on port[0] = 21 [ 88.022966] IPVS: ftp: loaded support on port[0] = 21 [ 88.059720] IPVS: ftp: loaded support on port[0] = 21 [ 88.246819] chnl_net:caif_netlink_parms(): no params data found [ 88.311868] chnl_net:caif_netlink_parms(): no params data found [ 88.322091] chnl_net:caif_netlink_parms(): no params data found [ 88.345120] chnl_net:caif_netlink_parms(): no params data found [ 88.441690] chnl_net:caif_netlink_parms(): no params data found [ 88.456631] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.464021] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.471537] device bridge_slave_0 entered promiscuous mode [ 88.478570] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.485051] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.492299] device bridge_slave_0 entered promiscuous mode [ 88.502867] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.509197] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.516510] device bridge_slave_1 entered promiscuous mode [ 88.523216] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.529987] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.537263] device bridge_slave_0 entered promiscuous mode [ 88.546644] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.553441] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.560718] device bridge_slave_1 entered promiscuous mode [ 88.587961] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.594414] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.601677] device bridge_slave_1 entered promiscuous mode [ 88.607707] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.614548] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.622017] device bridge_slave_0 entered promiscuous mode [ 88.633303] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.640368] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.647208] device bridge_slave_1 entered promiscuous mode [ 88.695658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 88.709902] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 88.718870] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 88.731207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 88.746312] chnl_net:caif_netlink_parms(): no params data found [ 88.755460] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 88.764557] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 88.777104] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 88.785648] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 88.828857] team0: Port device team_slave_0 added [ 88.842769] team0: Port device team_slave_0 added [ 88.854168] team0: Port device team_slave_0 added [ 88.875449] team0: Port device team_slave_1 added [ 88.882140] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.888475] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.895522] device bridge_slave_0 entered promiscuous mode [ 88.903056] team0: Port device team_slave_1 added [ 88.908061] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.914463] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.921522] device bridge_slave_1 entered promiscuous mode [ 88.928250] team0: Port device team_slave_1 added [ 88.934289] team0: Port device team_slave_0 added [ 88.944428] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.951915] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.958850] device bridge_slave_0 entered promiscuous mode [ 88.966157] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.972887] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.980371] device bridge_slave_1 entered promiscuous mode [ 88.991934] team0: Port device team_slave_1 added [ 89.027101] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 89.091892] device hsr_slave_0 entered promiscuous mode [ 89.129908] device hsr_slave_1 entered promiscuous mode [ 89.211727] device hsr_slave_0 entered promiscuous mode [ 89.269804] device hsr_slave_1 entered promiscuous mode [ 89.311201] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 89.319941] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 89.373947] device hsr_slave_0 entered promiscuous mode [ 89.429921] device hsr_slave_1 entered promiscuous mode [ 89.477458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 89.542460] device hsr_slave_0 entered promiscuous mode [ 89.599953] device hsr_slave_1 entered promiscuous mode [ 89.640805] team0: Port device team_slave_0 added [ 89.657136] team0: Port device team_slave_0 added [ 89.664997] team0: Port device team_slave_1 added [ 89.702425] device hsr_slave_0 entered promiscuous mode [ 89.729716] device hsr_slave_1 entered promiscuous mode [ 89.800741] team0: Port device team_slave_1 added [ 89.851174] device hsr_slave_0 entered promiscuous mode [ 89.909741] device hsr_slave_1 entered promiscuous mode [ 90.071676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.079971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.112006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.119603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.127555] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.137746] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.162542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.172203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.180060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.186907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.194206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.202048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.209676] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.216135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.223699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.231543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.239014] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.245387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.252295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.273944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.287047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.295535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.303698] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.310066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.317174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.324976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.332515] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.338901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.345858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.353602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.361426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.368194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.376608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.386488] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.398315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.408086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.423436] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.440322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.448079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.456678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.464036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.471439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.479175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.486853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.494878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.503042] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.509545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.516284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.524293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.532508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.540329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.547809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.555362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.562743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.569782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.576782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.585254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.598712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.608713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.620409] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.639708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.647399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.658779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.667281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.675519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.683232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.692694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.700490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.707950] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.714320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.721035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.728759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.736562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.744204] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.750578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.757300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.765068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.772807] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.779127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.786643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.794822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.803514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.810417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.827043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.836911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.863052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.879024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.890112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.897676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.906385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.914081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.922027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.929478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.936879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.945029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.952751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.960735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.968229] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.974586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.981650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.989339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.997055] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.003432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.010484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.018117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.025889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.033475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.047366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.068065] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.086595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.093658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.101480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.108323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.115457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.123475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.131520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.139077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.147033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.154616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.162368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.170411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.177860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.185571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.193052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.200657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.207954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.214851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.221851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.228851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.242345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.252970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.262231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.286099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.294729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.307013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.314773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.322433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.330310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.337802] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.344165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.351153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.358808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.366389] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.372722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.379702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.388591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.396630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.413360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.438235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.478299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.504634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.549365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.564279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.582359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.598013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.621052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.644242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.668234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.677555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.709900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.730813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.737768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.775720] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/02/09 23:40:48 executed programs: 69 2019/02/09 23:40:53 executed programs: 340 2019/02/09 23:40:58 executed programs: 602 2019/02/09 23:41:03 executed programs: 864 2019/02/09 23:41:08 executed programs: 1121 2019/02/09 23:41:13 executed programs: 1386 2019/02/09 23:41:18 executed programs: 1651 2019/02/09 23:41:23 executed programs: 1900 2019/02/09 23:41:28 executed programs: 2148 2019/02/09 23:41:33 executed programs: 2392 2019/02/09 23:41:38 executed programs: 2630 2019/02/09 23:41:43 executed programs: 2896 2019/02/09 23:41:48 executed programs: 3149 2019/02/09 23:41:53 executed programs: 3408 2019/02/09 23:41:58 executed programs: 3647 2019/02/09 23:42:03 executed programs: 3879 2019/02/09 23:42:08 executed programs: 4126 2019/02/09 23:42:13 executed programs: 4371 2019/02/09 23:42:18 executed programs: 4609 2019/02/09 23:42:23 executed programs: 4860 2019/02/09 23:42:28 executed programs: 5126 2019/02/09 23:42:33 executed programs: 5391 2019/02/09 23:42:38 executed programs: 5626 2019/02/09 23:42:43 executed programs: 5845 2019/02/09 23:42:48 executed programs: 6058 2019/02/09 23:42:54 executed programs: 6284 2019/02/09 23:42:59 executed programs: 6533 2019/02/09 23:43:04 executed programs: 6761 2019/02/09 23:43:09 executed programs: 6974 2019/02/09 23:43:14 executed programs: 7186 2019/02/09 23:43:19 executed programs: 7398 2019/02/09 23:43:24 executed programs: 7628 2019/02/09 23:43:29 executed programs: 7861 2019/02/09 23:43:34 executed programs: 8083 2019/02/09 23:43:39 executed programs: 8294 2019/02/09 23:43:44 executed programs: 8511 [ 272.209636] ================================================================== [ 272.217318] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 272.223998] Read of size 8 at addr ffff88808c663a00 by task kworker/1:0/17 [ 272.231003] [ 272.232644] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.0.0-rc5+ #65 [ 272.239386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.248809] Workqueue: rcu_gp process_srcu [ 272.253035] Call Trace: [ 272.255612] [ 272.257815] dump_stack+0x172/0x1f0 [ 272.261446] ? ccid_hc_tx_delete+0xde/0x100 [ 272.265850] print_address_description.cold+0x7c/0x20d [ 272.271133] ? ccid_hc_tx_delete+0xde/0x100 [ 272.275460] ? ccid_hc_tx_delete+0xde/0x100 [ 272.279792] kasan_report.cold+0x1b/0x40 [ 272.283853] ? ccid_hc_tx_delete+0xde/0x100 [ 272.288178] __asan_report_load8_noabort+0x14/0x20 [ 272.293111] ccid_hc_tx_delete+0xde/0x100 [ 272.297283] dccp_sk_destruct+0x3f/0x90 [ 272.301372] ? dccp_init_sock+0x3f0/0x3f0 [ 272.305608] __sk_destruct+0x55/0x6d0 [ 272.309410] ? sock_no_getname+0x10/0x10 [ 272.313517] rcu_process_callbacks+0x928/0x1390 [ 272.318185] ? rcu_check_gp_start_stall+0x240/0x240 [ 272.318223] ? __lock_is_held+0xb6/0x140 [ 272.318242] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 272.318258] __do_softirq+0x266/0x95a [ 272.336642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.342199] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 272.347785] irq_exit+0x180/0x1d0 [ 272.351256] smp_apic_timer_interrupt+0x14a/0x570 [ 272.356113] apic_timer_interrupt+0xf/0x20 [ 272.360343] [ 272.360391] RIP: 0010:queue_delayed_work_on+0x11d/0x200 [ 272.360404] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 d8 00 00 00 48 83 3d 63 be 47 07 00 0f 84 9a 00 00 00 e8 e8 1c 25 00 48 89 df 57 9d <0f> 1f 44 00 00 e8 d9 1c 25 00 44 89 f8 48 83 c4 10 5b 41 5c 41 5d [ 272.360411] RSP: 0018:ffff8880a98c7be0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 272.360425] RAX: ffff8880a98b8480 RBX: 0000000000000293 RCX: 1ffff110153171a9 [ 272.386885] RDX: 0000000000000000 RSI: ffffffff814ac398 RDI: 0000000000000293 [ 272.386895] RBP: ffff8880a98c7c18 R08: ffff8880a98b8480 R09: ffff8880a98b8d48 [ 272.386903] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200 [ 272.386911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 272.386939] ? queue_delayed_work_on+0x118/0x200 [ 272.386961] srcu_reschedule+0xd7/0x130 [ 272.439676] process_srcu+0xbb0/0xec0 [ 272.443503] process_one_work+0x98e/0x1790 [ 272.447776] ? pwq_dec_nr_in_flight+0x320/0x320 [ 272.452447] ? lock_acquire+0x16f/0x3f0 [ 272.456426] worker_thread+0x98/0xe40 [ 272.460303] kthread+0x357/0x430 [ 272.463668] ? process_one_work+0x1790/0x1790 [ 272.463682] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 272.463697] ret_from_fork+0x3a/0x50 [ 272.463714] [ 272.479135] Allocated by task 10605: [ 272.482843] save_stack+0x45/0xd0 [ 272.482855] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 272.482865] kasan_slab_alloc+0xf/0x20 [ 272.482877] kmem_cache_alloc+0x12d/0x710 [ 272.499219] ccid_new+0x256/0x3f0 [ 272.502689] dccp_hdlr_ccid+0x27/0x150 [ 272.506661] __dccp_feat_activate+0x17a/0x270 [ 272.511150] dccp_feat_activate_values+0x33a/0x766 [ 272.516060] dccp_rcv_state_process+0x116f/0x1931 [ 272.520950] dccp_v6_do_rcv+0x269/0xbf0 [ 272.524907] __release_sock+0x12e/0x3a0 [ 272.528861] release_sock+0x59/0x1c0 [ 272.532589] __inet_stream_connect+0x59f/0xea0 [ 272.537151] inet_stream_connect+0x58/0xa0 [ 272.541366] __sys_connect+0x266/0x330 [ 272.545236] __x64_sys_connect+0x73/0xb0 [ 272.549297] do_syscall_64+0x103/0x610 [ 272.553177] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.558341] [ 272.559961] Freed by task 10605: [ 272.563331] save_stack+0x45/0xd0 [ 272.566775] __kasan_slab_free+0x102/0x150 [ 272.571007] kasan_slab_free+0xe/0x10 [ 272.574791] kmem_cache_free+0x86/0x260 [ 272.578745] ccid_hc_tx_delete+0xc1/0x100 [ 272.582881] dccp_hdlr_ccid+0x7d/0x150 [ 272.586838] __dccp_feat_activate+0x17a/0x270 [ 272.591319] dccp_feat_activate_values+0x33a/0x766 [ 272.596229] dccp_create_openreq_child+0x40c/0x570 [ 272.601136] dccp_v6_request_recv_sock+0x214/0x1da0 [ 272.606132] dccp_check_req+0x35c/0x6f0 [ 272.610085] dccp_v6_rcv+0x6d7/0x191e [ 272.613921] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 272.618833] ip6_input_finish+0x84/0x170 [ 272.622874] ip6_input+0xe4/0x3f0 [ 272.626311] ip6_rcv_finish+0x1e7/0x320 [ 272.630272] ipv6_rcv+0x10e/0x420 [ 272.633739] __netif_receive_skb_one_core+0x115/0x1a0 [ 272.638917] __netif_receive_skb+0x2c/0x1c0 [ 272.643217] process_backlog+0x206/0x750 [ 272.647357] net_rx_action+0x4fa/0x1070 [ 272.651313] __do_softirq+0x266/0x95a [ 272.655090] [ 272.656697] The buggy address belongs to the object at ffff88808c663a00 [ 272.656697] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 272.669850] The buggy address is located 0 bytes inside of [ 272.669850] 1240-byte region [ffff88808c663a00, ffff88808c663ed8) [ 272.682052] The buggy address belongs to the page: [ 272.686966] page:ffffea0002319880 count:1 mapcount:0 mapping:ffff888216099300 index:0x0 compound_mapcount: 0 [ 272.697183] flags: 0x1fffc0000010200(slab|head) [ 272.701836] raw: 01fffc0000010200 ffffea0002172308 ffffea0002a5a188 ffff888216099300 [ 272.709698] raw: 0000000000000000 ffff88808c662400 0000000100000005 0000000000000000 [ 272.717552] page dumped because: kasan: bad access detected [ 272.723258] [ 272.724870] Memory state around the buggy address: [ 272.729801] ffff88808c663900: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 272.737142] ffff88808c663980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 272.744481] >ffff88808c663a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 272.751816] ^ [ 272.755182] ffff88808c663a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 272.762518] ffff88808c663b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 272.769853] ================================================================== [ 272.777192] Disabling lock debugging due to kernel taint [ 272.782646] Kernel panic - not syncing: panic_on_warn set ... [ 272.788535] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.0.0-rc5+ #65 [ 272.796679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.796996] kobject: 'loop0' (00000000b271198a): kobject_uevent_env [ 272.806031] Workqueue: rcu_gp process_srcu [ 272.806038] Call Trace: [ 272.806043] [ 272.806058] dump_stack+0x172/0x1f0 [ 272.806126] panic+0x2cb/0x65c [ 272.806141] ? __warn_printk+0xf3/0xf3 [ 272.832129] ? retint_kernel+0x2d/0x2d [ 272.836075] ? trace_hardirqs_on+0x5e/0x230 [ 272.840418] ? ccid_hc_tx_delete+0xde/0x100 [ 272.844776] end_report+0x47/0x4f [ 272.848227] ? ccid_hc_tx_delete+0xde/0x100 [ 272.852549] kasan_report.cold+0xe/0x40 [ 272.856523] ? ccid_hc_tx_delete+0xde/0x100 [ 272.860852] __asan_report_load8_noabort+0x14/0x20 [ 272.862166] kobject: 'loop0' (00000000b271198a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 272.865862] ccid_hc_tx_delete+0xde/0x100 [ 272.865876] dccp_sk_destruct+0x3f/0x90 [ 272.865890] ? dccp_init_sock+0x3f0/0x3f0 [ 272.887545] __sk_destruct+0x55/0x6d0 [ 272.891350] ? sock_no_getname+0x10/0x10 [ 272.895591] rcu_process_callbacks+0x928/0x1390 [ 272.900268] ? rcu_check_gp_start_stall+0x240/0x240 [ 272.900653] kobject: 'loop5' (00000000ad39e7c7): kobject_uevent_env [ 272.905310] ? __lock_is_held+0xb6/0x140 [ 272.915763] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 272.921217] __do_softirq+0x266/0x95a [ 272.925022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.930560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 272.934377] kobject: 'loop5' (00000000ad39e7c7): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 272.936098] irq_exit+0x180/0x1d0 [ 272.936114] smp_apic_timer_interrupt+0x14a/0x570 [ 272.953806] apic_timer_interrupt+0xf/0x20 [ 272.958033] [ 272.960273] RIP: 0010:queue_delayed_work_on+0x11d/0x200 [ 272.962619] kobject: 'loop2' (00000000be96e848): kobject_uevent_env [ 272.965638] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 d8 00 00 00 48 83 3d 63 be 47 07 00 0f 84 9a 00 00 00 e8 e8 1c 25 00 48 89 df 57 9d <0f> 1f 44 00 00 e8 d9 1c 25 00 44 89 f8 48 83 c4 10 5b 41 5c 41 5d [ 272.990911] RSP: 0018:ffff8880a98c7be0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 272.998622] RAX: ffff8880a98b8480 RBX: 0000000000000293 RCX: 1ffff110153171a9 [ 273.004242] kobject: 'loop2' (00000000be96e848): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 273.005885] RDX: 0000000000000000 RSI: ffffffff814ac398 RDI: 0000000000000293 [ 273.005911] RBP: ffff8880a98c7c18 R08: ffff8880a98b8480 R09: ffff8880a98b8d48 [ 273.005918] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200 [ 273.005926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 273.005962] ? queue_delayed_work_on+0x118/0x200 [ 273.049470] srcu_reschedule+0xd7/0x130 [ 273.053448] process_srcu+0xbb0/0xec0 [ 273.057273] process_one_work+0x98e/0x1790 [ 273.061515] ? pwq_dec_nr_in_flight+0x320/0x320 [ 273.066185] ? lock_acquire+0x16f/0x3f0 [ 273.070172] worker_thread+0x98/0xe40 [ 273.073981] kthread+0x357/0x430 [ 273.077349] ? process_one_work+0x1790/0x1790 [ 273.077750] kobject: 'loop5' (00000000ad39e7c7): kobject_uevent_env [ 273.081843] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 273.081876] ret_from_fork+0x3a/0x50 [ 273.083205] Kernel Offset: disabled [ 273.102386] Rebooting in 86400 seconds..