[ 32.802031] audit: type=1800 audit(1573598393.821:33): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.828780] audit: type=1800 audit(1573598393.821:34): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.781264] random: sshd: uninitialized urandom read (32 bytes read) [ 39.166108] audit: type=1400 audit(1573598400.181:35): avc: denied { map } for pid=7015 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.247884] random: sshd: uninitialized urandom read (32 bytes read) [ 39.863353] random: sshd: uninitialized urandom read (32 bytes read) [ 901.729100] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.81' (ECDSA) to the list of known hosts. [ 907.302639] random: sshd: uninitialized urandom read (32 bytes read) [ 907.485251] audit: type=1400 audit(1573599268.501:36): avc: denied { map } for pid=7027 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/11/12 22:54:28 parsed 1 programs [ 907.549328] audit: type=1400 audit(1573599268.561:37): avc: denied { map } for pid=7027 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1124 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 908.569667] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/12 22:54:30 executed programs: 0 [ 909.826165] audit: type=1400 audit(1573599270.841:38): avc: denied { map } for pid=7027 comm="syz-execprog" path="/root/syzkaller-shm710684712" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 910.131042] IPVS: ftp: loaded support on port[0] = 21 [ 910.917784] chnl_net:caif_netlink_parms(): no params data found [ 910.931512] IPVS: ftp: loaded support on port[0] = 21 [ 910.956087] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.963673] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.972791] device bridge_slave_0 entered promiscuous mode [ 910.979820] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.986853] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.994468] device bridge_slave_1 entered promiscuous mode [ 911.014754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 911.024979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 911.049004] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 911.056231] team0: Port device team_slave_0 added [ 911.061904] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 911.068962] team0: Port device team_slave_1 added [ 911.076054] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 911.085088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 911.104003] IPVS: ftp: loaded support on port[0] = 21 [ 911.172004] device hsr_slave_0 entered promiscuous mode [ 911.230314] device hsr_slave_1 entered promiscuous mode [ 911.312582] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 911.319585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 911.385624] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.392214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.399156] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.405539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.420895] chnl_net:caif_netlink_parms(): no params data found [ 911.495067] chnl_net:caif_netlink_parms(): no params data found [ 911.503212] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.509550] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.517415] IPVS: ftp: loaded support on port[0] = 21 [ 911.523476] device bridge_slave_0 entered promiscuous mode [ 911.543049] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.549667] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.557062] device bridge_slave_1 entered promiscuous mode [ 911.586238] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 911.595176] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 911.639545] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.646031] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.652979] device bridge_slave_0 entered promiscuous mode [ 911.659507] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.667639] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.674498] device bridge_slave_1 entered promiscuous mode [ 911.681258] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 911.688241] team0: Port device team_slave_0 added [ 911.695711] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 911.703120] team0: Port device team_slave_1 added [ 911.717345] IPVS: ftp: loaded support on port[0] = 21 [ 911.722934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 911.734780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 911.742800] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 911.748856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.764190] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 911.785667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 911.792691] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 911.882965] device hsr_slave_0 entered promiscuous mode [ 911.920344] device hsr_slave_1 entered promiscuous mode [ 911.987508] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 911.994657] team0: Port device team_slave_0 added [ 912.003197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 912.010310] team0: Port device team_slave_1 added [ 912.027085] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.034164] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.041585] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 912.050788] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 912.059885] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 912.066721] chnl_net:caif_netlink_parms(): no params data found [ 912.074823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 912.083555] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 912.089810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 912.109365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.117099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.141740] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 912.147826] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.155727] IPVS: ftp: loaded support on port[0] = 21 [ 912.170536] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 912.182785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 912.252115] device hsr_slave_0 entered promiscuous mode [ 912.290318] device hsr_slave_1 entered promiscuous mode [ 912.350247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.358770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.366570] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.372932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.384807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 912.394390] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.400813] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.407649] device bridge_slave_0 entered promiscuous mode [ 912.414891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 912.422306] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 912.429766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 912.437730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.445382] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.451860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.465182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 912.472110] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.478445] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.486600] device bridge_slave_1 entered promiscuous mode [ 912.510306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 912.519608] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 912.572293] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 912.582301] chnl_net:caif_netlink_parms(): no params data found [ 912.600708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 912.629112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 912.641892] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 912.648921] team0: Port device team_slave_0 added [ 912.654862] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 912.662310] team0: Port device team_slave_1 added [ 912.683017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 912.696248] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.702711] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.709682] device bridge_slave_0 entered promiscuous mode [ 912.716297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 912.725224] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 912.734246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 912.741868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 912.749267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 912.757349] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.765456] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.772788] device bridge_slave_1 entered promiscuous mode [ 912.789948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 912.811711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 912.823382] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 912.832563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 912.844991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 912.853315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 912.902048] device hsr_slave_0 entered promiscuous mode [ 912.940404] device hsr_slave_1 entered promiscuous mode [ 912.980882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 912.998482] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 913.007034] team0: Port device team_slave_0 added [ 913.013152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 913.020426] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 913.027814] team0: Port device team_slave_1 added [ 913.035152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 913.042651] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 913.053280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 913.061354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 913.068895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 913.076688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 913.085252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.092463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 913.104563] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 913.110627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.119045] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 913.130398] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 913.243529] device hsr_slave_0 entered promiscuous mode [ 913.290346] device hsr_slave_1 entered promiscuous mode [ 913.331944] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 913.339067] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 913.352422] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 913.369481] chnl_net:caif_netlink_parms(): no params data found [ 913.379356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.386645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.394985] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 913.407574] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 913.429749] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 913.437037] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 913.443779] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.451116] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 913.457878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 913.464998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.478964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.505224] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.512149] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.519032] device bridge_slave_0 entered promiscuous mode [ 913.526095] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.532935] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.539844] device bridge_slave_1 entered promiscuous mode [ 913.547448] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 913.558886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 913.578249] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 913.588290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.596315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 913.603994] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.610377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.627809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 913.637010] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 913.651923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.672153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.679057] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 913.700947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.709256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.719313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 913.727859] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 913.736225] team0: Port device team_slave_0 added [ 913.743511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.750109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.757857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.765947] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.772346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.780505] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 913.786569] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.795199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 913.803247] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 913.809589] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 913.816849] team0: Port device team_slave_1 added [ 913.823031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 913.832492] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 913.841052] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 913.848000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.855990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.863176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.872033] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 913.882288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 913.890261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 913.908447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.916386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 913.924461] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.930844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.937716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.946814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 913.954997] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 913.964800] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 913.972748] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.980515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 913.989186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 914.042306] device hsr_slave_0 entered promiscuous mode [ 914.060308] device hsr_slave_1 entered promiscuous mode [ 914.100461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 914.107498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 914.115444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 914.122983] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.129433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.136611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 914.143840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 914.153715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 914.161576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.169048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 914.176889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.184752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.194055] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 914.200205] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.207969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 914.218832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 914.226377] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 914.235056] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 914.243127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 914.252448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 914.260158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 914.267942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 914.276153] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.282575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.289532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 914.297418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 914.304846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 914.312405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 914.320005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 914.327789] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.335385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.342461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 914.349482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 914.359251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 914.368309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 914.376351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 914.386015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 914.393821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 914.402026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 914.409517] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.416026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.425561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 914.433562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 914.441110] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 914.447202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 914.460740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 914.469513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 914.477221] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.483570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.493757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 914.506716] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 914.515798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 914.524694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 914.535623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 914.542931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 914.553345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.561668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 914.569530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 914.577537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.586625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 914.595849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 914.604715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 914.616703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 914.624510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.632242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 914.639631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 914.648068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 914.656738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 914.668023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 914.677697] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 914.684911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 914.693113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 914.700971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 914.711031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 914.719761] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 914.728554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 914.736277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 914.744167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.752001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 914.758698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 914.765712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 914.773607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.786463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 914.795136] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 914.801697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 914.810738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 2019/11/12 22:54:35 executed programs: 7 [ 914.819568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 914.829438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.836850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.850990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 914.859324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.868427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 914.877851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.890797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 914.898307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 914.919388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.928835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.942172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 914.961025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 914.968937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 914.983231] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 914.989306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 914.999242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 915.007364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 915.014960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 915.022483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 915.031751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 915.041510] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 915.048675] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 915.066476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 915.076842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 915.084975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 915.092667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.099345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.107623] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 915.114145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 915.124202] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 915.132150] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 915.142938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.152368] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 915.167815] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 915.174705] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.181763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.188714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.196219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 915.203959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 915.217369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.227318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 915.248301] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 915.255260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 915.264578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 915.272851] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.279339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.288734] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 915.300779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 915.308018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 915.324258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.335674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.343205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 915.351900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 915.359566] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.365969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.379367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.388242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 915.403206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 915.418544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 915.425581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 915.439383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 915.447500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 915.455882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 915.466669] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 915.486786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 915.495080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 915.503540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 915.518320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 915.528453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 915.549682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 915.578074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 915.597316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 915.608465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 915.638279] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 915.648740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 915.685688] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 915.693565] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 915.699792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.707888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.717519] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/11/12 22:54:40 executed programs: 181 2019/11/12 22:54:45 executed programs: 340 2019/11/12 22:54:50 executed programs: 526 2019/11/12 22:54:55 executed programs: 697 2019/11/12 22:55:00 executed programs: 893 2019/11/12 22:55:06 executed programs: 1099 2019/11/12 22:55:11 executed programs: 1222 2019/11/12 22:55:16 executed programs: 1389 2019/11/12 22:55:21 executed programs: 1529 2019/11/12 22:55:26 executed programs: 1661 2019/11/12 22:55:31 executed programs: 1817 2019/11/12 22:55:36 executed programs: 1924 2019/11/12 22:55:41 executed programs: 2061 2019/11/12 22:55:46 executed programs: 2192 2019/11/12 22:55:51 executed programs: 2315 2019/11/12 22:55:56 executed programs: 2417 2019/11/12 22:56:01 executed programs: 2535 2019/11/12 22:56:07 executed programs: 2652 2019/11/12 22:56:12 executed programs: 2745 2019/11/12 22:56:17 executed programs: 2852 2019/11/12 22:56:22 executed programs: 2976 2019/11/12 22:56:27 executed programs: 3092 2019/11/12 22:56:32 executed programs: 3196 2019/11/12 22:56:37 executed programs: 3301 2019/11/12 22:56:42 executed programs: 3404 2019/11/12 22:56:47 executed programs: 3510 2019/11/12 22:56:52 executed programs: 3608 2019/11/12 22:56:57 executed programs: 3707 2019/11/12 22:57:02 executed programs: 3811 2019/11/12 22:57:07 executed programs: 3906 2019/11/12 22:57:13 executed programs: 3990 2019/11/12 22:57:18 executed programs: 4085 2019/11/12 22:57:23 executed programs: 4170 2019/11/12 22:57:28 executed programs: 4253 2019/11/12 22:57:33 executed programs: 4339 2019/11/12 22:57:38 executed programs: 4433 2019/11/12 22:57:43 executed programs: 4515 2019/11/12 22:57:48 executed programs: 4600 2019/11/12 22:57:53 executed programs: 4685 2019/11/12 22:57:58 executed programs: 4769 2019/11/12 22:58:03 executed programs: 4853 2019/11/12 22:58:08 executed programs: 4939 [ 1127.833886] random: crng init done [ 1127.885278] libceph: connect [d::]:6789 error -101 [ 1127.892703] libceph: mon0 [d::]:6789 connect error [ 1128.062674] libceph: connect [d::]:6789 error -101 [ 1128.068384] libceph: mon0 [d::]:6789 connect error [ 1128.126693] libceph: connect [d::]:6789 error -101 [ 1128.135853] libceph: mon0 [d::]:6789 connect error [ 1128.149946] libceph: connect [d::]:6789 error -101 [ 1128.157071] libceph: mon0 [d::]:6789 connect error [ 1128.752885] libceph: connect [d::]:6789 error -101 [ 1128.757921] libceph: mon0 [d::]:6789 connect error [ 1128.927471] libceph: connect [d::]:6789 error -101 [ 1128.937447] libceph: mon0 [d::]:6789 connect error [ 1129.046112] libceph: connect [d::]:6789 error -101 [ 1129.055194] libceph: mon0 [d::]:6789 connect error [ 1129.931514] libceph: mon1 [::6]:6789 socket closed (con state CONNECTING) [ 1130.090594] libceph: connect [d::]:6789 error -101 [ 1130.096747] libceph: mon0 [d::]:6789 connect error [ 1130.116476] libceph: connect [d::]:6789 error -101 [ 1130.128341] libceph: mon0 [d::]:6789 connect error [ 1130.139292] libceph: connect [d::]:6789 error -101 [ 1130.148818] libceph: mon0 [d::]:6789 connect error [ 1131.040910] libceph: connect [d::]:6789 error -101 [ 1131.046711] libceph: mon0 [d::]:6789 connect error [ 1131.062107] libceph: connect [d::]:6789 error -101 [ 1131.067788] libceph: mon0 [d::]:6789 connect error [ 1132.081979] libceph: connect [d::]:6789 error -101 [ 1132.087056] libceph: mon0 [d::]:6789 connect error [ 1132.160648] libceph: mon1 [::6]:6789 socket closed (con state CONNECTING) [ 1132.250625] libceph: connect [d::]:6789 error -101 [ 1132.255663] libceph: mon0 [d::]:6789 connect error 2019/11/12 22:58:13 executed programs: 4940 [ 1132.935260] libceph: connect [d::]:6789 error -101 [ 1133.747704] libceph: mon0 [d::]:6789 connect error [ 1133.766961] libceph: connect [d::]:6789 error -101 [ 1134.115617] libceph: connect [d::]:6789 error -101 [ 1134.135275] libceph: mon0 [d::]:6789 connect error [ 1134.317814] syz-executor.3: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1134.334868] syz-executor.4: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1134.348915] syz-executor.2: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1134.376203] syz-executor.5: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1134.392988] syz-executor.0: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1134.473986] syz-executor.2: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1134.483010] syz-executor.3: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1134.507626] syz-executor.5: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1134.545271] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 1134.580181] CPU: 1 PID: 11693 Comm: syz-executor.3 Not tainted 4.14.153 #0 [ 1134.587235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.596651] Call Trace: [ 1134.599313] dump_stack+0x138/0x197 [ 1134.602976] warn_alloc.cold+0x96/0x1af [ 1134.606947] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1134.611796] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1134.617068] __alloc_pages_slowpath+0x23c6/0x2930 [ 1134.621915] ? save_trace+0x290/0x290 [ 1134.625714] ? warn_alloc+0xf0/0xf0 [ 1134.629345] ? __might_sleep+0x93/0xb0 [ 1134.633228] __alloc_pages_nodemask+0x62c/0x7a0 [ 1134.637897] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1134.642912] ? ____cache_alloc_node+0x1be/0x1d0 [ 1134.647576] ? cache_grow_begin+0x335/0x400 [ 1134.651899] cache_grow_begin+0x80/0x400 [ 1134.655957] ? __cpuset_node_allowed+0xff/0x450 [ 1134.660622] fallback_alloc+0x1fd/0x2c0 [ 1134.664592] ____cache_alloc_node+0x1be/0x1d0 [ 1134.669084] __kmalloc+0x21a/0x7a0 [ 1134.672621] ? __lockdep_init_map+0x10c/0x570 [ 1134.677120] ? kasan_unpoison_shadow+0x35/0x50 [ 1134.681709] ? mempool_kmalloc+0x1e/0x30 [ 1134.685775] ? mempool_resize+0x600/0x600 [ 1134.689926] mempool_kmalloc+0x1e/0x30 [ 1134.693815] mempool_create_node+0x2d6/0x3d0 [ 1134.698228] ? mempool_resize+0x600/0x600 [ 1134.702367] ? generic_file_write_iter+0x660/0x660 [ 1134.707291] mempool_create+0x3a/0x50 [ 1134.711094] ceph_mount+0x706/0x1709 [ 1134.714799] ? __lockdep_init_map+0x10c/0x570 [ 1134.719306] mount_fs+0x97/0x2a1 [ 1134.722691] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1134.727185] do_mount+0x417/0x27d0 [ 1134.730730] ? copy_mount_string+0x40/0x40 [ 1134.734961] ? memdup_user+0x58/0xa0 [ 1134.738673] ? copy_mount_options+0x1fe/0x2f0 [ 1134.743166] SyS_mount+0xab/0x120 [ 1134.746611] ? copy_mnt_ns+0x8c0/0x8c0 [ 1134.750491] do_syscall_64+0x1e8/0x640 [ 1134.754370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1134.759243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1134.764435] RIP: 0033:0x45a219 [ 1134.767614] RSP: 002b:00007fabceb13c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1134.775341] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1134.782692] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1134.789957] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1134.797235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fabceb146d4 [ 1134.804507] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1135.040478] libceph: connect [d::]:6789 error -101 [ 1135.045522] libceph: mon0 [d::]:6789 connect error [ 1135.715459] syz-executor.4: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1135.733724] syz-executor.0: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1135.814865] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1135.848342] CPU: 1 PID: 11703 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 1135.855384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.864733] Call Trace: [ 1135.867326] dump_stack+0x138/0x197 [ 1135.870960] warn_alloc.cold+0x96/0x1af [ 1135.874929] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1135.879773] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1135.885052] __alloc_pages_slowpath+0x23c6/0x2930 [ 1135.889903] ? save_trace+0x290/0x290 [ 1135.893710] ? warn_alloc+0xf0/0xf0 [ 1135.897344] ? __might_sleep+0x93/0xb0 [ 1135.901233] __alloc_pages_nodemask+0x62c/0x7a0 [ 1135.905900] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1135.910916] cache_grow_begin+0x80/0x400 [ 1135.914969] ? __cpuset_node_allowed+0xff/0x450 [ 1135.919635] fallback_alloc+0x1fd/0x2c0 [ 1135.923615] ____cache_alloc_node+0x1be/0x1d0 [ 1135.928111] __kmalloc+0x21a/0x7a0 [ 1135.931644] ? __lockdep_init_map+0x10c/0x570 [ 1135.936132] ? kasan_unpoison_shadow+0x35/0x50 [ 1135.940714] ? mempool_kmalloc+0x1e/0x30 [ 1135.944766] ? mempool_resize+0x600/0x600 [ 1135.948906] mempool_kmalloc+0x1e/0x30 [ 1135.952787] mempool_create_node+0x2d6/0x3d0 [ 1135.957280] ? mempool_resize+0x600/0x600 [ 1135.961426] ? generic_file_write_iter+0x660/0x660 [ 1135.966352] mempool_create+0x3a/0x50 [ 1135.970151] ceph_mount+0x706/0x1709 [ 1135.973858] ? __lockdep_init_map+0x10c/0x570 [ 1135.978349] mount_fs+0x97/0x2a1 [ 1135.981714] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1135.986210] do_mount+0x417/0x27d0 [ 1135.989760] ? copy_mount_string+0x40/0x40 [ 1135.993989] ? memdup_user+0x58/0xa0 [ 1135.997699] ? copy_mount_options+0x1fe/0x2f0 [ 1136.002180] SyS_mount+0xab/0x120 [ 1136.005615] ? copy_mnt_ns+0x8c0/0x8c0 [ 1136.009496] do_syscall_64+0x1e8/0x640 [ 1136.013360] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1136.018186] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1136.023368] RIP: 0033:0x45a219 [ 1136.026538] RSP: 002b:00007f3d60865c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1136.034224] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1136.041471] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1136.048719] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1136.055973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3d608666d4 [ 1136.063312] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1136.080632] libceph: connect [d::]:6789 error -101 [ 1136.086247] libceph: mon0 [d::]:6789 connect error [ 1136.475746] Mem-Info: [ 1136.491587] active_anon:544466 inactive_anon:202 isolated_anon:540 [ 1136.491587] active_file:4160 inactive_file:4187 isolated_file:351 [ 1136.491587] unevictable:0 dirty:4 writeback:39 unstable:0 [ 1136.491587] slab_reclaimable:24348 slab_unreclaimable:825495 [ 1136.491587] mapped:5953 shmem:242 pagetables:43617 bounce:0 [ 1136.491587] free:27540 free_pcp:563 free_cma:0 [ 1136.662812] Node 0 active_anon:1807872kB inactive_anon:780kB active_file:13636kB inactive_file:13656kB unevictable:0kB isolated(anon):2308kB isolated(file):1500kB mapped:23512kB dirty:20kB writeback:60kB shmem:940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1699840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1136.796614] Node 1 active_anon:369792kB inactive_anon:28kB active_file:88kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:96kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1136.878250] Node 0 DMA free:10528kB min:216kB low:268kB high:320kB active_anon:4396kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1136.931829] lowmem_reserve[]: 0 2580 2580 2580 [ 1136.936897] Node 0 DMA32 free:49192kB min:36468kB low:45584kB high:54700kB active_anon:1803476kB inactive_anon:780kB active_file:11872kB inactive_file:11908kB unevictable:0kB writepending:32kB present:3129332kB managed:2644880kB mlocked:0kB kernel_stack:37152kB pagetables:35800kB bounce:0kB free_pcp:1060kB local_pcp:572kB free_cma:0kB [ 1136.974895] lowmem_reserve[]: 0 0 0 0 [ 1136.979390] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1137.033601] libceph: mon0 [d::]:6789 connect error [ 1137.039683] libceph: mon1 [::6]:6789 socket closed (con state CONNECTING) [ 1137.061314] lowmem_reserve[]: 0 0 0 0 [ 1137.066206] Node 1 Normal free:53432kB min:53420kB low:66772kB high:80124kB active_anon:369836kB inactive_anon:28kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:271168kB pagetables:138672kB bounce:0kB free_pcp:1432kB local_pcp:692kB free_cma:0kB [ 1137.367097] lowmem_reserve[]: 0 0 0 0 [ 1137.390963] Node 0 DMA: 8*4kB (ME) 6*8kB (UM) 13*16kB (UM) 5*32kB (UM) 2*64kB (U) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10560kB [ 1137.416160] Node 0 DMA32: 817*4kB (UMEH) 1594*8kB (UMEH) 664*16kB (UMEH) 515*32kB (UMEH) 225*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57524kB [ 1137.435988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1137.447769] Node 1 Normal: 4592*4kB (UME) 323*8kB (UME) 176*16kB (UM) 125*32kB (UM) 16*64kB (U) 1*128kB (E) 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 1*2048kB (M) 5*4096kB (M) = 53496kB [ 1137.469031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.487376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1137.496570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.523861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1137.536818] 4892 total pagecache pages [ 1137.542431] 0 pages in swap cache [ 1137.545963] Swap cache stats: add 0, delete 0, find 0/0 [ 1137.555516] Free swap = 0kB [ 1137.558635] Total swap = 0kB [ 1137.561966] 1965979 pages RAM [ 1137.565081] 0 pages HighMem/MovableOnly [ 1137.569202] 333230 pages reserved [ 1137.577875] 0 pages cma reserved [ 1138.080646] libceph: mon1 [::6]:6789 socket closed (con state CONNECTING) [ 1138.309003] libceph: mon1 [::6]:6789 socket closed (con state CONNECTING) [ 1138.440937] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 1138.446363] CPU: 0 PID: 25736 Comm: syz-executor.0 Not tainted 4.14.153 #0 [ 1138.453495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.462840] Call Trace: [ 1138.465415] dump_stack+0x138/0x197 [ 1138.469095] warn_alloc.cold+0x96/0x1af [ 1138.473076] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1138.477914] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1138.483179] __alloc_pages_slowpath+0x23c6/0x2930 [ 1138.488012] ? save_trace+0x290/0x290 [ 1138.491798] ? warn_alloc+0xf0/0xf0 [ 1138.495439] ? __might_sleep+0x93/0xb0 [ 1138.499584] __alloc_pages_nodemask+0x62c/0x7a0 [ 1138.504237] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1138.509245] ? ____cache_alloc_node+0x1be/0x1d0 [ 1138.513903] ? cache_grow_begin+0x335/0x400 [ 1138.518221] cache_grow_begin+0x80/0x400 [ 1138.522278] ? __cpuset_node_allowed+0xff/0x450 [ 1138.526929] fallback_alloc+0x1fd/0x2c0 [ 1138.530885] ____cache_alloc_node+0x1be/0x1d0 [ 1138.535448] __kmalloc+0x21a/0x7a0 [ 1138.538984] ? __lockdep_init_map+0x10c/0x570 [ 1138.543460] ? kasan_unpoison_shadow+0x35/0x50 [ 1138.548022] ? mempool_kmalloc+0x1e/0x30 [ 1138.552061] ? mempool_resize+0x600/0x600 [ 1138.556200] mempool_kmalloc+0x1e/0x30 [ 1138.560067] mempool_create_node+0x2d6/0x3d0 [ 1138.564457] ? mempool_resize+0x600/0x600 [ 1138.568582] ? generic_file_write_iter+0x660/0x660 [ 1138.573490] mempool_create+0x3a/0x50 [ 1138.577287] ceph_mount+0x706/0x1709 [ 1138.580981] ? __lockdep_init_map+0x10c/0x570 [ 1138.585465] mount_fs+0x97/0x2a1 [ 1138.588826] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1138.593303] do_mount+0x417/0x27d0 [ 1138.596839] ? copy_mount_string+0x40/0x40 [ 1138.601230] ? memdup_user+0x58/0xa0 [ 1138.604926] ? copy_mount_options+0x1fe/0x2f0 [ 1138.609400] SyS_mount+0xab/0x120 [ 1138.612834] ? copy_mnt_ns+0x8c0/0x8c0 [ 1138.616706] do_syscall_64+0x1e8/0x640 [ 1138.620572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1138.625399] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1138.630568] RIP: 0033:0x45a219 [ 1138.633795] RSP: 002b:00007f6bd6acac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1138.641494] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1138.648752] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1138.656041] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1138.663292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6bd6acb6d4 [ 1138.670557] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1138.693909] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1138.699368] CPU: 0 PID: 25852 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 1138.706389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.715730] Call Trace: [ 1138.718320] dump_stack+0x138/0x197 [ 1138.721931] warn_alloc.cold+0x96/0x1af [ 1138.725886] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1138.730713] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1138.735971] __alloc_pages_slowpath+0x23c6/0x2930 [ 1138.740831] ? save_trace+0x290/0x290 [ 1138.744622] ? warn_alloc+0xf0/0xf0 [ 1138.748235] ? __might_sleep+0x93/0xb0 [ 1138.752111] __alloc_pages_nodemask+0x62c/0x7a0 [ 1138.756765] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1138.761779] ? ____cache_alloc_node+0x1be/0x1d0 [ 1138.766454] ? cache_grow_begin+0x335/0x400 [ 1138.770756] cache_grow_begin+0x80/0x400 [ 1138.774810] ? __cpuset_node_allowed+0xff/0x450 [ 1138.779462] fallback_alloc+0x1fd/0x2c0 [ 1138.783418] ____cache_alloc_node+0x1be/0x1d0 [ 1138.787894] __kmalloc+0x21a/0x7a0 [ 1138.791419] ? __lockdep_init_map+0x10c/0x570 [ 1138.795899] ? kasan_unpoison_shadow+0x35/0x50 [ 1138.800463] ? mempool_kmalloc+0x1e/0x30 [ 1138.804501] ? mempool_resize+0x600/0x600 [ 1138.808653] mempool_kmalloc+0x1e/0x30 [ 1138.812522] mempool_create_node+0x2d6/0x3d0 [ 1138.816911] ? mempool_resize+0x600/0x600 [ 1138.821060] ? generic_file_write_iter+0x660/0x660 [ 1138.825976] mempool_create+0x3a/0x50 [ 1138.829781] ceph_mount+0x706/0x1709 [ 1138.833478] ? __lockdep_init_map+0x10c/0x570 [ 1138.837974] mount_fs+0x97/0x2a1 [ 1138.841423] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1138.845898] do_mount+0x417/0x27d0 [ 1138.849418] ? copy_mount_string+0x40/0x40 [ 1138.853644] ? memdup_user+0x58/0xa0 [ 1138.857349] ? copy_mount_options+0x1fe/0x2f0 [ 1138.861837] SyS_mount+0xab/0x120 [ 1138.865267] ? copy_mnt_ns+0x8c0/0x8c0 [ 1138.869395] do_syscall_64+0x1e8/0x640 [ 1138.873287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1138.878113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1138.883282] RIP: 0033:0x45a219 [ 1138.886460] RSP: 002b:00007f4326cdac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1138.894149] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1138.901399] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1138.908647] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1138.915898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4326cdb6d4 [ 1138.923160] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1138.940094] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 1138.945506] CPU: 0 PID: 25013 Comm: syz-executor.0 Not tainted 4.14.153 #0 [ 1138.952511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.961847] Call Trace: [ 1138.964418] dump_stack+0x138/0x197 [ 1138.968029] warn_alloc.cold+0x96/0x1af [ 1138.971983] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1138.976808] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1138.982065] __alloc_pages_slowpath+0x23c6/0x2930 [ 1138.986924] ? save_trace+0x290/0x290 [ 1138.990719] ? warn_alloc+0xf0/0xf0 [ 1138.994344] ? __might_sleep+0x93/0xb0 [ 1138.998209] __alloc_pages_nodemask+0x62c/0x7a0 [ 1139.003116] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1139.008138] ? ____cache_alloc_node+0x1be/0x1d0 [ 1139.012800] ? cache_grow_begin+0x335/0x400 [ 1139.017103] cache_grow_begin+0x80/0x400 [ 1139.021143] ? __cpuset_node_allowed+0xff/0x450 [ 1139.025802] fallback_alloc+0x1fd/0x2c0 [ 1139.029781] ____cache_alloc_node+0x1be/0x1d0 [ 1139.034270] __kmalloc+0x21a/0x7a0 [ 1139.037789] ? __lockdep_init_map+0x10c/0x570 [ 1139.042263] ? kasan_unpoison_shadow+0x35/0x50 [ 1139.046825] ? mempool_kmalloc+0x1e/0x30 [ 1139.050865] ? mempool_resize+0x600/0x600 [ 1139.054992] mempool_kmalloc+0x1e/0x30 [ 1139.058871] mempool_create_node+0x2d6/0x3d0 [ 1139.063275] ? mempool_resize+0x600/0x600 [ 1139.067537] ? generic_file_write_iter+0x660/0x660 [ 1139.072462] mempool_create+0x3a/0x50 [ 1139.076252] ceph_mount+0x706/0x1709 [ 1139.080020] ? __lockdep_init_map+0x10c/0x570 [ 1139.084646] mount_fs+0x97/0x2a1 [ 1139.088010] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1139.092492] do_mount+0x417/0x27d0 [ 1139.096018] ? copy_mount_string+0x40/0x40 [ 1139.100233] ? memdup_user+0x58/0xa0 [ 1139.103928] ? copy_mount_options+0x1fe/0x2f0 [ 1139.108409] SyS_mount+0xab/0x120 [ 1139.111841] ? copy_mnt_ns+0x8c0/0x8c0 [ 1139.115710] do_syscall_64+0x1e8/0x640 [ 1139.119575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1139.124414] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1139.129585] RIP: 0033:0x45a219 [ 1139.132752] RSP: 002b:00007f6bd6acac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1139.140454] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1139.147703] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1139.154953] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1139.162423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6bd6acb6d4 [ 1139.169686] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1139.181384] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 1139.186792] CPU: 0 PID: 25804 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 1139.193795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.203128] Call Trace: [ 1139.205707] dump_stack+0x138/0x197 [ 1139.209324] warn_alloc.cold+0x96/0x1af [ 1139.213303] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1139.218143] ? __alloc_pages_direct_compact+0xbc/0x380 [ 1139.223412] __alloc_pages_slowpath+0x23c6/0x2930 [ 1139.228248] ? save_trace+0x290/0x290 [ 1139.232030] ? warn_alloc+0xf0/0xf0 [ 1139.235641] ? __might_sleep+0x93/0xb0 [ 1139.239518] __alloc_pages_nodemask+0x62c/0x7a0 [ 1139.244177] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1139.249175] ? ____cache_alloc_node+0x1be/0x1d0 [ 1139.253819] ? cache_grow_begin+0x335/0x400 [ 1139.258316] cache_grow_begin+0x80/0x400 [ 1139.262435] ? __cpuset_node_allowed+0xff/0x450 [ 1139.267094] fallback_alloc+0x1fd/0x2c0 [ 1139.271057] ____cache_alloc_node+0x1be/0x1d0 [ 1139.275534] __kmalloc+0x21a/0x7a0 [ 1139.279055] ? __lockdep_init_map+0x10c/0x570 [ 1139.283529] ? kasan_unpoison_shadow+0x35/0x50 [ 1139.288178] ? mempool_kmalloc+0x1e/0x30 [ 1139.292214] ? mempool_resize+0x600/0x600 [ 1139.296614] mempool_kmalloc+0x1e/0x30 [ 1139.300480] mempool_create_node+0x2d6/0x3d0 [ 1139.304868] ? mempool_resize+0x600/0x600 [ 1139.308992] ? generic_file_write_iter+0x660/0x660 [ 1139.313915] mempool_create+0x3a/0x50 [ 1139.318239] ceph_mount+0x706/0x1709 [ 1139.321940] ? __lockdep_init_map+0x10c/0x570 [ 1139.326433] mount_fs+0x97/0x2a1 [ 1139.329791] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1139.334276] do_mount+0x417/0x27d0 [ 1139.337806] ? copy_mount_string+0x40/0x40 [ 1139.342028] ? memdup_user+0x58/0xa0 [ 1139.345892] ? copy_mount_options+0x1fe/0x2f0 [ 1139.350365] SyS_mount+0xab/0x120 [ 1139.353795] ? copy_mnt_ns+0x8c0/0x8c0 [ 1139.357661] do_syscall_64+0x1e8/0x640 [ 1139.361526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1139.366350] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1139.371518] RIP: 0033:0x45a219 [ 1139.374683] RSP: 002b:00007f4326cdac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1139.382377] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1139.389626] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1139.396905] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1139.404151] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4326cdb6d4 [ 1139.411398] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1139.424180] warn_alloc: 189 callbacks suppressed [ 1139.424190] syz-executor.0: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.440528] syz-executor.2: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.458382] syz-executor.1: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.474488] syz-executor.5: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.485383] syz-executor.5: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.504920] syz-executor.0: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.515725] syz-executor.2: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.535239] syz-executor.0: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.547909] syz-executor.3: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1139.569478] syz-executor.3: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1140.080785] libceph: connect [d::]:6789 error -101 [ 1140.086885] libceph: mon0 [d::]:6789 connect error [ 1141.040723] libceph: connect [d::]:6789 error -101 [ 1141.047364] libceph: mon0 [d::]:6789 connect error [ 1141.599552] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 1141.627480] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 1141.639269] ================================================================== [ 1141.646811] BUG: KASAN: double-free or invalid-free in ceph_destroy_options+0xd4/0x110 [ 1141.654844] [ 1141.656457] CPU: 1 PID: 11706 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 1141.663448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.672795] Call Trace: [ 1141.675371] dump_stack+0x138/0x197 [ 1141.678977] ? mpi_powm+0x1390/0x19e0 [ 1141.682768] ? ceph_destroy_options+0xd4/0x110 [ 1141.687335] print_address_description.cold+0x7c/0x1dc [ 1141.692595] ? ceph_destroy_options+0xd4/0x110 [ 1141.697157] ? ceph_destroy_options+0xd4/0x110 [ 1141.701724] kasan_report_double_free+0x56/0x80 [ 1141.706393] kasan_slab_free+0xa7/0xc0 [ 1141.710259] kfree+0xcc/0x270 [ 1141.713347] ceph_destroy_options+0xd4/0x110 [ 1141.717738] ceph_mount+0xb6d/0x1709 [ 1141.721446] ? __lockdep_init_map+0x10c/0x570 [ 1141.725926] mount_fs+0x97/0x2a1 [ 1141.729277] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1141.733757] do_mount+0x417/0x27d0 [ 1141.737280] ? copy_mount_string+0x40/0x40 [ 1141.741507] ? memdup_user+0x58/0xa0 [ 1141.745197] ? copy_mount_options+0x1fe/0x2f0 [ 1141.749674] SyS_mount+0xab/0x120 [ 1141.753107] ? copy_mnt_ns+0x8c0/0x8c0 [ 1141.756974] do_syscall_64+0x1e8/0x640 [ 1141.760841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1141.765666] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1141.770843] RIP: 0033:0x45a219 [ 1141.774016] RSP: 002b:00007f4326c98c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1141.781807] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1141.789055] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1141.796303] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1141.803553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4326c996d4 [ 1141.810804] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1141.818071] [ 1141.819687] Allocated by task 11706: [ 1141.823383] save_stack_trace+0x16/0x20 [ 1141.827336] save_stack+0x45/0xd0 [ 1141.830771] kasan_kmalloc+0xce/0xf0 [ 1141.834466] kmem_cache_alloc_trace+0x152/0x790 [ 1141.839114] ceph_parse_options+0xfe/0xe80 [ 1141.843324] ceph_mount+0x3c1/0x1709 [ 1141.847020] mount_fs+0x97/0x2a1 [ 1141.850364] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1141.854836] do_mount+0x417/0x27d0 [ 1141.858353] SyS_mount+0xab/0x120 [ 1141.861784] do_syscall_64+0x1e8/0x640 [ 1141.865648] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1141.870819] [ 1141.872426] Freed by task 11706: [ 1141.875770] save_stack_trace+0x16/0x20 [ 1141.879719] save_stack+0x45/0xd0 [ 1141.883184] kasan_slab_free+0x75/0xc0 [ 1141.887049] kfree+0xcc/0x270 [ 1141.890130] ceph_destroy_options+0xd4/0x110 [ 1141.894526] ceph_destroy_client+0x9d/0xc0 [ 1141.898737] ceph_mount+0xb46/0x1709 [ 1141.902425] mount_fs+0x97/0x2a1 [ 1141.905770] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1141.910246] do_mount+0x417/0x27d0 [ 1141.913766] SyS_mount+0xab/0x120 [ 1141.917208] do_syscall_64+0x1e8/0x640 [ 1141.921075] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1141.926240] [ 1141.927848] The buggy address belongs to the object at ffff888082e61340 [ 1141.927848] which belongs to the cache kmalloc-8192 of size 8192 [ 1141.940655] The buggy address is located 0 bytes inside of [ 1141.940655] 8192-byte region [ffff888082e61340, ffff888082e63340) [ 1141.952421] The buggy address belongs to the page: [ 1141.957330] page:ffffea00020b9800 count:1 mapcount:0 mapping:ffff888082e61340 index:0x0 compound_mapcount: 0 [ 1141.967286] flags: 0x1fffc0000008100(slab|head) [ 1141.971934] raw: 01fffc0000008100 ffff888082e61340 0000000000000000 0000000100000001 [ 1141.979794] raw: ffffea0001f1df20 ffffea00020b9720 ffff8880aa802080 0000000000000000 [ 1141.987650] page dumped because: kasan: bad access detected [ 1141.993346] [ 1141.994951] Memory state around the buggy address: [ 1141.999874] ffff888082e61200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1142.007212] ffff888082e61280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1142.014548] >ffff888082e61300: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1142.021886] ^ [ 1142.027318] ffff888082e61380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1142.034916] ffff888082e61400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1142.042257] ================================================================== [ 1142.049598] Disabling lock debugging due to kernel taint [ 1142.055022] Kernel panic - not syncing: panic_on_warn set ... [ 1142.055022] [ 1142.055025] ================================================================== [ 1142.055038] BUG: KASAN: use-after-free in ceph_destroy_options+0xe9/0x110 [ 1142.062367] CPU: 1 PID: 11706 Comm: syz-executor.2 Tainted: G B 4.14.153 #0 [ 1142.069711] Read of size 8 at addr ffff88809f327850 by task syz-executor.1/23906 [ 1142.076607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.084806] [ 1142.092313] Call Trace: [ 1142.105851] dump_stack+0x138/0x197 [ 1142.109461] panic+0x1f9/0x42d [ 1142.112636] ? add_taint.cold+0x16/0x16 [ 1142.116596] ? lock_downgrade+0x740/0x740 [ 1142.121250] ? ceph_destroy_options+0xd4/0x110 [ 1142.125815] ? ceph_destroy_options+0xd4/0x110 [ 1142.130380] kasan_end_report+0x47/0x4f [ 1142.134336] kasan_report_double_free+0x73/0x80 [ 1142.138985] kasan_slab_free+0xa7/0xc0 [ 1142.142854] kfree+0xcc/0x270 [ 1142.145940] ceph_destroy_options+0xd4/0x110 [ 1142.150333] ceph_mount+0xb6d/0x1709 [ 1142.154027] ? __lockdep_init_map+0x10c/0x570 [ 1142.158512] mount_fs+0x97/0x2a1 [ 1142.161860] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1142.166338] do_mount+0x417/0x27d0 [ 1142.169863] ? copy_mount_string+0x40/0x40 [ 1142.174082] ? memdup_user+0x58/0xa0 [ 1142.177779] ? copy_mount_options+0x1fe/0x2f0 [ 1142.182258] SyS_mount+0xab/0x120 [ 1142.185695] ? copy_mnt_ns+0x8c0/0x8c0 [ 1142.189566] do_syscall_64+0x1e8/0x640 [ 1142.193436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1142.198265] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1142.203433] RIP: 0033:0x45a219 [ 1142.206608] RSP: 002b:00007f4326c98c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1142.214298] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1142.221551] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1142.228813] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1142.236068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4326c996d4 [ 1142.243319] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1142.250581] CPU: 0 PID: 23906 Comm: syz-executor.1 Tainted: G B 4.14.153 #0 [ 1142.258796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.268154] Call Trace: [ 1142.270748] dump_stack+0x138/0x197 [ 1142.274387] ? ceph_destroy_options+0xe9/0x110 [ 1142.278999] print_address_description.cold+0x7c/0x1dc [ 1142.284270] ? ceph_destroy_options+0xe9/0x110 [ 1142.288834] kasan_report.cold+0xa9/0x2af [ 1142.292967] __asan_report_load8_noabort+0x14/0x20 [ 1142.297878] ceph_destroy_options+0xe9/0x110 [ 1142.302272] ceph_mount+0xb6d/0x1709 [ 1142.305967] ? __lockdep_init_map+0x10c/0x570 [ 1142.310448] mount_fs+0x97/0x2a1 [ 1142.313799] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1142.318274] do_mount+0x417/0x27d0 [ 1142.321797] ? copy_mount_string+0x40/0x40 [ 1142.326015] ? memdup_user+0x58/0xa0 [ 1142.329723] ? copy_mount_options+0x1fe/0x2f0 [ 1142.334203] SyS_mount+0xab/0x120 [ 1142.337636] ? copy_mnt_ns+0x8c0/0x8c0 [ 1142.341509] do_syscall_64+0x1e8/0x640 [ 1142.345389] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1142.350216] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1142.355401] RIP: 0033:0x45a219 [ 1142.358581] RSP: 002b:00007f656472dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1142.366272] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 [ 1142.373529] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000500 [ 1142.380786] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1142.388042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f656472e6d4 [ 1142.395304] R13: 00000000004c6d95 R14: 00000000004dc508 R15: 00000000ffffffff [ 1142.402559] [ 1142.404170] Allocated by task 23906: [ 1142.407870] save_stack_trace+0x16/0x20 [ 1142.411824] save_stack+0x45/0xd0 [ 1142.415265] kasan_kmalloc+0xce/0xf0 [ 1142.418961] kmem_cache_alloc_trace+0x152/0x790 [ 1142.423625] ceph_parse_options+0xb8/0xe80 [ 1142.427840] ceph_mount+0x3c1/0x1709 [ 1142.431535] mount_fs+0x97/0x2a1 [ 1142.434892] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1142.439367] do_mount+0x417/0x27d0 [ 1142.442887] SyS_mount+0xab/0x120 [ 1142.446322] do_syscall_64+0x1e8/0x640 [ 1142.450187] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1142.455354] [ 1142.456962] Freed by task 23906: [ 1142.460310] save_stack_trace+0x16/0x20 [ 1142.464274] save_stack+0x45/0xd0 [ 1142.467716] kasan_slab_free+0x75/0xc0 [ 1142.471582] kfree+0xcc/0x270 [ 1142.474676] ceph_destroy_options+0xdc/0x110 [ 1142.479168] ceph_destroy_client+0x9d/0xc0 [ 1142.483383] ceph_mount+0xb46/0x1709 [ 1142.487081] mount_fs+0x97/0x2a1 [ 1142.490443] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1142.494919] do_mount+0x417/0x27d0 [ 1142.498524] SyS_mount+0xab/0x120 [ 1142.501957] do_syscall_64+0x1e8/0x640 [ 1142.505823] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1142.510999] [ 1142.512608] The buggy address belongs to the object at ffff88809f327780 [ 1142.512608] which belongs to the cache kmalloc-256 of size 256 [ 1142.525243] The buggy address is located 208 bytes inside of [ 1142.525243] 256-byte region [ffff88809f327780, ffff88809f327880) [ 1142.537185] The buggy address belongs to the page: [ 1142.542116] page:ffffea00027cc9c0 count:1 mapcount:0 mapping:ffff88809f327000 index:0xffff88809f3273c0 [ 1142.551544] flags: 0x1fffc0000000100(slab) [ 1142.555773] raw: 01fffc0000000100 ffff88809f327000 ffff88809f3273c0 000000010000000b [ 1142.563643] raw: ffffea00026fc2a0 ffffea00025e6ce0 ffff8880aa8007c0 0000000000000000 [ 1142.571500] page dumped because: kasan: bad access detected [ 1142.577285] [ 1142.578930] Memory state around the buggy address: [ 1142.583850] ffff88809f327700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1142.591189] ffff88809f327780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1142.598545] >ffff88809f327800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1142.606072] ^ [ 1142.612047] ffff88809f327880: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 1142.619506] ffff88809f327900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1142.626941] ================================================================== [ 1142.635775] Kernel Offset: disabled [ 1142.639395] Rebooting in 86400 seconds..