[ 37.006169][ T26] audit: type=1800 audit(1550154703.996:27): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.006194][ T26] audit: type=1800 audit(1550154703.996:28): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.772157][ T26] audit: type=1800 audit(1550154704.806:29): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.795382][ T26] audit: type=1800 audit(1550154704.806:30): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.209' (ECDSA) to the list of known hosts. 2019/02/14 14:31:57 parsed 1 programs 2019/02/14 14:32:00 executed programs: 0 syzkaller login: [ 53.286237][ T7768] IPVS: ftp: loaded support on port[0] = 21 [ 53.294456][ T7764] IPVS: ftp: loaded support on port[0] = 21 [ 53.305074][ T7772] IPVS: ftp: loaded support on port[0] = 21 [ 53.322379][ T7770] IPVS: ftp: loaded support on port[0] = 21 [ 53.325729][ T7773] IPVS: ftp: loaded support on port[0] = 21 [ 53.339919][ T7766] IPVS: ftp: loaded support on port[0] = 21 [ 53.576767][ T7768] chnl_net:caif_netlink_parms(): no params data found [ 53.592595][ T7772] chnl_net:caif_netlink_parms(): no params data found [ 53.607223][ T7773] chnl_net:caif_netlink_parms(): no params data found [ 53.655287][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 53.690243][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.697837][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.705756][ T7768] device bridge_slave_0 entered promiscuous mode [ 53.716459][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.723605][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.731440][ T7768] device bridge_slave_1 entered promiscuous mode [ 53.775374][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.782629][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.790742][ T7772] device bridge_slave_0 entered promiscuous mode [ 53.809304][ T7768] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.834035][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.841721][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.849343][ T7772] device bridge_slave_1 entered promiscuous mode [ 53.862750][ T7768] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.910425][ T7772] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.928416][ T7768] team0: Port device team_slave_0 added [ 53.939853][ T7768] team0: Port device team_slave_1 added [ 53.955154][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.962554][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.970367][ T7773] device bridge_slave_0 entered promiscuous mode [ 53.978369][ T7772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.999237][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.006364][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.014035][ T7764] device bridge_slave_0 entered promiscuous mode [ 54.021896][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.028937][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.036626][ T7764] device bridge_slave_1 entered promiscuous mode [ 54.049374][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.058135][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.066302][ T7773] device bridge_slave_1 entered promiscuous mode [ 54.091981][ T7773] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.109749][ T7764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.120949][ T7772] team0: Port device team_slave_0 added [ 54.129089][ T7772] team0: Port device team_slave_1 added [ 54.146043][ T7773] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.155633][ T7764] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.164441][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 54.177819][ T7766] chnl_net:caif_netlink_parms(): no params data found [ 54.243175][ T7768] device hsr_slave_0 entered promiscuous mode [ 54.280384][ T7768] device hsr_slave_1 entered promiscuous mode [ 54.373177][ T7772] device hsr_slave_0 entered promiscuous mode [ 54.410461][ T7772] device hsr_slave_1 entered promiscuous mode [ 54.464139][ T7773] team0: Port device team_slave_0 added [ 54.473640][ T7773] team0: Port device team_slave_1 added [ 54.487343][ T7764] team0: Port device team_slave_0 added [ 54.494394][ T7764] team0: Port device team_slave_1 added [ 54.524914][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.533733][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.541513][ T7770] device bridge_slave_0 entered promiscuous mode [ 54.548940][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.556119][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.563848][ T7770] device bridge_slave_1 entered promiscuous mode [ 54.633663][ T7773] device hsr_slave_0 entered promiscuous mode [ 54.680531][ T7773] device hsr_slave_1 entered promiscuous mode [ 54.724959][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.732161][ T7772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.739814][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.746926][ T7772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.778662][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.787428][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.795195][ T7766] device bridge_slave_0 entered promiscuous mode [ 54.805318][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.813389][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.846156][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.853347][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.861726][ T7766] device bridge_slave_1 entered promiscuous mode [ 54.869765][ T7770] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.899487][ T7770] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.923021][ T7764] device hsr_slave_0 entered promiscuous mode [ 54.981036][ T7764] device hsr_slave_1 entered promiscuous mode [ 55.049590][ T7766] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.060988][ T7766] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.087074][ T7766] team0: Port device team_slave_0 added [ 55.098525][ T7770] team0: Port device team_slave_0 added [ 55.105456][ T7770] team0: Port device team_slave_1 added [ 55.112375][ T7766] team0: Port device team_slave_1 added [ 55.191937][ T7766] device hsr_slave_0 entered promiscuous mode [ 55.250585][ T7766] device hsr_slave_1 entered promiscuous mode [ 55.307040][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.352476][ T7770] device hsr_slave_0 entered promiscuous mode [ 55.410413][ T7770] device hsr_slave_1 entered promiscuous mode [ 55.459445][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.485495][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.494140][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.515397][ T7772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.522779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.531459][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.541266][ T7768] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.549534][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.558901][ T7773] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.580144][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.588718][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.597286][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.604376][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.612849][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.620965][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.628504][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.637013][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.645256][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.652327][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.660280][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.668032][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.681920][ T7772] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.700260][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.707957][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.716086][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.724837][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.733450][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.740532][ T7776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.748319][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.756863][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.765346][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.773896][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.782605][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.791503][ T7764] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.799719][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.809075][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.817545][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.824619][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.847938][ T7773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.858552][ T7773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.875279][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.884345][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.893169][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.901555][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.911945][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.920421][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.928540][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.937172][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.945657][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.952739][ T7781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.960312][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.968723][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.977271][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.984359][ T7781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.991972][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.000804][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.009031][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.016142][ T7781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.024974][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.032909][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.049298][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.057925][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.066635][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.077007][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.085454][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.093814][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.120648][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.128351][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.137742][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.149340][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.157871][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.166188][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.174336][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.182550][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.191070][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.199099][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.207658][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.215883][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.222949][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.231525][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.247461][ T7768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.258500][ T7768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.271972][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.283964][ T7773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.292710][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.301381][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.309599][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.318072][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.326590][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.334829][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.343429][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.360629][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.394072][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.403169][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.412262][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.421451][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.430823][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.439351][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.448595][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.456940][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.473471][ T7772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.489952][ T7772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.506928][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.515046][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.524305][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.547839][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.558486][ T7787] binder_alloc: binder_alloc_mmap_handler: 7785 20001000-20004000 already mapped failed -16 [ 56.575963][ T7786] binder: BINDER_SET_CONTEXT_MGR already set [ 56.576846][ T7766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.583929][ T7787] binder_alloc: 7785: binder_alloc_buf, no vma [ 56.597514][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.607222][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.626747][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.643770][ T7790] binder: BINDER_SET_CONTEXT_MGR already set [ 56.650758][ T7786] binder: 7785:7786 ioctl 40046207 0 returned -16 [ 56.655812][ T7790] binder: 7789:7790 ioctl 40046207 0 returned -16 [ 56.663064][ T7787] binder: 7785:7787 transaction failed 29189/-3, size 24-8 line 3147 [ 56.670605][ T7766] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.683724][ T7791] binder_alloc: binder_alloc_mmap_handler: 7789 20001000-20004000 already mapped failed -16 [ 56.695398][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.702677][ T7794] binder_alloc: binder_alloc_mmap_handler: 7792 20001000-20004000 already mapped failed -16 [ 56.702797][ T7793] binder: BINDER_SET_CONTEXT_MGR already set [ 56.702819][ T7793] binder: 7792:7793 ioctl 40046207 0 returned -16 [ 56.702935][ T7794] binder_alloc: 7792: binder_alloc_buf, no vma [ 56.702963][ T7794] binder: 7792:7794 transaction failed 29189/-3, size 24-8 line 3147 [ 56.706202][ T7791] binder: 7789:7791 transaction failed 29189/-22, size 24-8 line 2994 [ 56.733347][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.751465][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.785010][ T7800] binder_alloc: binder_alloc_mmap_handler: 7796 20001000-20004000 already mapped failed -16 [ 56.785530][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.807483][ T7802] binder: BINDER_SET_CONTEXT_MGR already set [ 56.815824][ T7802] binder: 7801:7802 ioctl 40046207 0 returned -16 [ 56.852840][ T7797] binder: BINDER_SET_CONTEXT_MGR already set [ 56.858867][ T7797] binder: 7796:7797 ioctl 40046207 0 returned -16 [ 56.862974][ T7805] binder_alloc: binder_alloc_mmap_handler: 7801 20001000-20004000 already mapped failed -16 [ 56.877466][ T7802] binder: BINDER_SET_CONTEXT_MGR already set [ 56.888101][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.891857][ T7800] binder_alloc: 7796: binder_alloc_buf, no vma [ 56.908922][ T7802] binder: 7801:7802 ioctl 40046207 0 returned -16 [ 56.912985][ T7806] binder: BINDER_SET_CONTEXT_MGR already set [ 56.927224][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.934848][ T7800] binder: 7796:7800 transaction failed 29189/-3, size 24-8 line 3147 [ 56.939452][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.950444][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.965817][ T7806] binder: 7804:7806 ioctl 40046207 0 returned -16 [ 56.965848][ T7805] binder_alloc: 7796: binder_alloc_buf, no vma [ 56.972798][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.979085][ T7809] binder: BINDER_SET_CONTEXT_MGR already set [ 56.992515][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.000502][ T7805] binder: 7801:7805 transaction failed 29189/-3, size 24-8 line 3147 [ 57.006715][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.015881][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.018120][ T7809] binder: 7808:7809 ioctl 40046207 0 returned -16 [ 57.029775][ T7810] binder_alloc: binder_alloc_mmap_handler: 7804 20001000-20004000 already mapped failed -16 [ 57.031058][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.058689][ T7817] binder: BINDER_SET_CONTEXT_MGR already set [ 57.064169][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.065098][ T7814] binder: BINDER_SET_CONTEXT_MGR already set [ 57.079513][ T7817] binder: 7816:7817 ioctl 40046207 0 returned -16 [ 57.081309][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.086998][ T7810] binder_alloc: 7796: binder_alloc_buf, no vma [ 57.093054][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.099104][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.099486][ T7814] binder: 7812:7814 ioctl 40046207 0 returned -16 [ 57.115151][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.122193][ T7819] binder_alloc: binder_alloc_mmap_handler: 7816 20001000-20004000 already mapped failed -16 [ 57.134436][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.139933][ T7806] binder: BINDER_SET_CONTEXT_MGR already set [ 57.146296][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.152203][ T7813] binder_alloc: binder_alloc_mmap_handler: 7808 20001000-20004000 already mapped failed -16 [ 57.153244][ T7810] binder: 7804:7810 transaction failed 29189/-3, size 24-8 line 3147 [ 57.159790][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.175091][ T7817] binder: BINDER_SET_CONTEXT_MGR already set [ 57.188211][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.192846][ T7806] binder: 7804:7806 ioctl 40046207 0 returned -16 [ 57.205764][ T7818] binder_alloc: binder_alloc_mmap_handler: 7812 20001000-20004000 already mapped failed -16 [ 57.217771][ T7820] binder_alloc: 7796: binder_alloc_buf, no vma [ 57.220295][ T7809] binder: BINDER_SET_CONTEXT_MGR already set [ 57.232289][ T7817] binder: 7816:7817 ioctl 40046207 0 returned -16 [ 57.235324][ T7809] binder: 7808:7809 ioctl 40046207 0 returned -16 [ 57.241539][ T7824] binder: BINDER_SET_CONTEXT_MGR already set [ 57.245970][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.251562][ T7820] binder: 7816:7820 transaction failed 29189/-3, size 24-8 line 3147 [ 57.266202][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.272405][ T7824] binder: 7823:7824 ioctl 40046207 0 returned -16 [ 57.280502][ T7814] binder: BINDER_SET_CONTEXT_MGR already set [ 57.289857][ T7821] binder_alloc: 7796: binder_alloc_buf, no vma [ 57.297571][ T7814] binder: 7812:7814 ioctl 40046207 0 returned -16 [ 57.303080][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.305709][ T7828] binder_alloc: binder_alloc_mmap_handler: 7823 20001000-20004000 already mapped failed -16 [ 57.317209][ T7821] binder: 7808:7821 transaction failed 29189/-3, size 24-8 line 3147 [ 57.324540][ T7818] binder_alloc: 7796: binder_alloc_buf, no vma [ 57.332361][ T7826] binder: BINDER_SET_CONTEXT_MGR already set [ 57.344504][ T7818] binder: 7812:7818 transaction failed 29189/-3, size 24-8 line 3147 [ 57.355840][ T7770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.372681][ T7770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.383634][ T7826] binder: 7825:7826 ioctl 40046207 0 returned -16 [ 57.383700][ T7824] binder_alloc: 7796: binder_alloc_buf, no vma [ 57.396765][ T7826] binder: BINDER_SET_CONTEXT_MGR already set [ 57.403725][ T7826] binder: 7825:7826 ioctl 40046207 0 returned -16 [ 57.426691][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.428782][ T7829] binder: BINDER_SET_CONTEXT_MGR already set [ 57.446433][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.447097][ T7824] binder: 7823:7824 transaction failed 29189/-3, size 24-8 line 3147 [ 57.457695][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.465907][ T7829] binder: 7823:7829 ioctl 40046207 0 returned -16 [ 57.494879][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.512860][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.521889][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.530015][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.538345][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.546508][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.554628][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.566027][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.574512][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.583078][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.591674][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.599867][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.608173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.616350][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.624737][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.633339][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.641209][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.650838][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.679429][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.706423][ T7766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.754538][ T7838] binder: BINDER_SET_CONTEXT_MGR already set [ 57.770694][ T7839] binder_alloc: 7837: binder_alloc_buf, no vma [ 57.783613][ T7838] binder: 7837:7838 ioctl 40046207 0 returned -16 [ 57.788283][ T7842] binder: BINDER_SET_CONTEXT_MGR already set [ 57.796137][ T7842] binder: 7841:7842 ioctl 40046207 0 returned -16 [ 57.813889][ T7846] binder: BINDER_SET_CONTEXT_MGR already set [ 57.821371][ T7844] binder: BINDER_SET_CONTEXT_MGR already set [ 57.827430][ T7846] binder: 7845:7846 ioctl 40046207 0 returned -16 [ 57.834541][ T7844] binder: 7843:7844 ioctl 40046207 0 returned -16 [ 57.850799][ T7844] binder: BINDER_SET_CONTEXT_MGR already set [ 57.895516][ T7844] binder: 7843:7844 ioctl 40046207 0 returned -16 [ 57.902121][ T7858] binder: BINDER_SET_CONTEXT_MGR already set [ 57.908316][ T7856] binder: BINDER_SET_CONTEXT_MGR already set [ 57.921758][ T7858] binder: 7852:7858 ioctl 40046207 0 returned -16 [ 57.928753][ T7856] binder: 7854:7856 ioctl 40046207 0 returned -16 [ 57.928793][ T7859] binder: BINDER_SET_CONTEXT_MGR already set [ 57.928814][ T7859] binder: 7857:7859 ioctl 40046207 0 returned -16 [ 57.948032][ T7855] binder: BINDER_SET_CONTEXT_MGR already set [ 57.957084][ T7855] binder: 7853:7855 ioctl 40046207 0 returned -16 [ 57.961643][ T7868] binder: BINDER_SET_CONTEXT_MGR already set [ 57.970361][ T7868] binder: 7866:7868 ioctl 40046207 0 returned -16 [ 57.976938][ T7862] binder: BINDER_SET_CONTEXT_MGR already set [ 57.989879][ T7862] binder: 7861:7862 ioctl 40046207 0 returned -16 [ 57.990820][ T7873] binder: BINDER_SET_CONTEXT_MGR already set [ 58.008779][ T7873] binder: 7872:7873 ioctl 40046207 0 returned -16 [ 58.011355][ T7856] binder: BINDER_SET_CONTEXT_MGR already set [ 58.022824][ T7856] binder: 7854:7856 ioctl 40046207 0 returned -16 [ 58.029941][ T7859] binder: BINDER_SET_CONTEXT_MGR already set [ 58.043489][ T7859] binder: 7857:7859 ioctl 40046207 0 returned -16 [ 58.043502][ T7868] binder: BINDER_SET_CONTEXT_MGR already set [ 58.095814][ T7873] binder: BINDER_SET_CONTEXT_MGR already set [ 58.106997][ T7868] binder: 7866:7868 ioctl 40046207 0 returned -16 [ 58.110448][ T7873] binder: 7872:7873 ioctl 40046207 0 returned -16 [ 58.130878][ T7862] binder: BINDER_SET_CONTEXT_MGR already set [ 58.146045][ T7862] binder: 7861:7862 ioctl 40046207 0 returned -16 [ 58.152779][ T7881] binder: BINDER_SET_CONTEXT_MGR already set [ 58.170935][ T7884] binder: BINDER_SET_CONTEXT_MGR already set [ 58.177090][ T7881] binder: 7879:7881 ioctl 40046207 0 returned -16 [ 58.194744][ T7883] binder: BINDER_SET_CONTEXT_MGR already set [ 58.201967][ T7884] binder: 7878:7884 ioctl 40046207 0 returned -16 [ 58.214720][ T7883] binder: 7882:7883 ioctl 40046207 0 returned -16 [ 58.222426][ T7891] binder: BINDER_SET_CONTEXT_MGR already set [ 58.230996][ T7894] binder: BINDER_SET_CONTEXT_MGR already set [ 58.237296][ T7891] binder: 7890:7891 ioctl 40046207 0 returned -16 2019/02/14 14:32:05 executed programs: 28 [ 58.245213][ T7894] binder: 7892:7894 ioctl 40046207 0 returned -16 [ 58.245427][ T7887] binder: BINDER_SET_CONTEXT_MGR already set [ 58.261091][ T7897] binder: BINDER_SET_CONTEXT_MGR already set [ 58.273317][ T7887] binder: 7879:7887 ioctl 40046207 0 returned -16 [ 58.276834][ T7897] binder: 7895:7897 ioctl 40046207 0 returned -16 [ 58.319105][ T7900] binder: BINDER_SET_CONTEXT_MGR already set [ 58.327224][ T7900] binder: 7892:7900 ioctl 40046207 0 returned -16 [ 58.329679][ T7913] binder: BINDER_SET_CONTEXT_MGR already set [ 58.347649][ T7913] binder: 7909:7913 ioctl 40046207 0 returned -16 [ 58.356457][ T7905] binder: BINDER_SET_CONTEXT_MGR already set [ 58.380470][ T7905] binder: 7904:7905 ioctl 40046207 0 returned -16 [ 58.380728][ T7908] binder: BINDER_SET_CONTEXT_MGR already set [ 58.407764][ T7908] binder: 7907:7908 ioctl 40046207 0 returned -16 [ 58.421020][ T7918] binder: BINDER_SET_CONTEXT_MGR already set [ 58.448962][ T7922] binder: BINDER_SET_CONTEXT_MGR already set [ 58.456435][ T7918] binder: 7916:7918 ioctl 40046207 0 returned -16 [ 58.472689][ T7932] binder: BINDER_SET_CONTEXT_MGR already set [ 58.479944][ T7922] binder: 7921:7922 ioctl 40046207 0 returned -16 [ 58.515645][ T7932] binder: 7926:7932 ioctl 40046207 0 returned -16 [ 58.515658][ T7933] binder: BINDER_SET_CONTEXT_MGR already set [ 58.530243][ T7933] binder: 7931:7933 ioctl 40046207 0 returned -16 [ 58.537579][ T7934] binder: BINDER_SET_CONTEXT_MGR already set [ 58.545158][ T7928] binder: BINDER_SET_CONTEXT_MGR already set [ 58.546236][ T7934] binder: 7925:7934 ioctl 40046207 0 returned -16 [ 58.551497][ T7928] binder: 7916:7928 ioctl 40046207 0 returned -16 [ 58.558992][ T7941] binder: BINDER_SET_CONTEXT_MGR already set [ 58.573625][ T7939] binder: BINDER_SET_CONTEXT_MGR already set [ 58.575824][ T7941] binder: 7931:7941 ioctl 40046207 0 returned -16 [ 58.588326][ T7930] binder: BINDER_SET_CONTEXT_MGR already set [ 58.595110][ T7939] binder: 7937:7939 ioctl 40046207 0 returned -16 [ 58.599898][ T7930] binder: 7921:7930 ioctl 40046207 0 returned -16 [ 58.608929][ T7932] binder: BINDER_SET_CONTEXT_MGR already set [ 58.617186][ T7932] binder: 7926:7932 ioctl 40046207 0 returned -16 [ 58.624598][ T7944] binder: BINDER_SET_CONTEXT_MGR already set [ 58.638021][ T7944] binder: 7937:7944 ioctl 40046207 0 returned -16 [ 58.656745][ T7953] binder: BINDER_SET_CONTEXT_MGR already set [ 58.670304][ T7953] binder: 7950:7953 ioctl 40046207 0 returned -16 [ 58.697323][ T7952] binder: BINDER_SET_CONTEXT_MGR already set [ 58.724268][ T7952] binder: 7946:7952 ioctl 40046207 0 returned -16 [ 58.730979][ T7959] binder: BINDER_SET_CONTEXT_MGR already set [ 58.748791][ T7959] binder: 7958:7959 ioctl 40046207 0 returned -16 [ 58.756160][ T7960] binder: BINDER_SET_CONTEXT_MGR already set [ 58.771556][ T7960] binder: 7957:7960 ioctl 40046207 0 returned -16 [ 58.780352][ T7953] binder: BINDER_SET_CONTEXT_MGR already set [ 58.786558][ T7967] binder: BINDER_SET_CONTEXT_MGR already set [ 58.787012][ T7962] ------------[ cut here ]------------ [ 58.797989][ T7962] kernel BUG at drivers/android/binder_alloc.c:1141! [ 58.803629][ T7967] binder: 7966:7967 ioctl 40046207 0 returned -16 [ 58.805277][ T7974] ------------[ cut here ]------------ [ 58.811345][ T7970] binder: BINDER_SET_CONTEXT_MGR already set [ 58.816490][ T7974] kernel BUG at drivers/android/binder_alloc.c:1141! [ 58.831975][ T7953] binder: 7950:7953 ioctl 40046207 0 returned -16 [ 58.837689][ T7960] binder: BINDER_SET_CONTEXT_MGR already set [ 58.838539][ T7974] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 58.846950][ T7970] binder: 7969:7970 ioctl 40046207 0 returned -16 [ 58.850446][ T7974] CPU: 1 PID: 7974 Comm: syz-executor.3 Not tainted 5.0.0-rc6-next-20190214 #35 [ 58.850453][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.850471][ T7974] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 58.850484][ T7974] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 9f e1 26 fc 4c 89 e6 4c 89 ef e8 b4 e2 26 fc 4d 39 e5 76 07 e8 8a e1 26 fc <0f> 0b e8 83 e1 26 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 91 [ 58.850490][ T7974] RSP: 0018:ffff888095fff558 EFLAGS: 00010293 [ 58.850500][ T7974] RAX: ffff888030314400 RBX: 0000000020001020 RCX: ffffffff8549806c [ 58.850507][ T7974] RDX: 0000000000000000 RSI: ffffffff85498076 RDI: 0000000000000006 [ 58.850520][ T7974] RBP: ffff888095fff5d8 R08: ffff888030314400 R09: 0000000000000028 [ 58.859007][ T7960] binder: 7957:7960 ioctl 40046207 0 returned -16 [ 58.865901][ T7974] R10: ffffed1012bfff01 R11: ffff888095fff80f R12: 0000000000000020 [ 58.865909][ T7974] R13: 0000000000000028 R14: ffff8880a1111890 R15: 0000000000000000 [ 58.865918][ T7974] FS: 00007ff057df2700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 58.865926][ T7974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.865933][ T7974] CR2: 0000000002024fd0 CR3: 0000000071c10000 CR4: 00000000001406e0 [ 58.865949][ T7974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.876821][ T7968] binder: BINDER_SET_CONTEXT_MGR already set [ 58.882463][ T7974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.882467][ T7974] Call Trace: [ 58.882484][ T7974] ? memcpy+0x46/0x50 [ 58.882501][ T7974] ? binder_alloc_do_buffer_copy+0x442/0x510 [ 58.882516][ T7974] binder_alloc_copy_from_buffer+0x37/0x42 [ 58.882532][ T7974] binder_get_object+0xa2/0x1e0 [ 58.882544][ T7974] binder_transaction+0x2b4a/0x6690 [ 58.882565][ T7974] ? binder_thread_read+0x3d20/0x3d20 [ 58.882578][ T7974] ? mark_held_locks+0xf0/0xf0 [ 58.882593][ T7974] ? __might_fault+0x12b/0x1e0 [ 58.882609][ T7974] ? lock_downgrade+0x880/0x880 [ 58.882629][ T7974] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 58.882643][ T7974] ? _copy_from_user+0xdd/0x150 [ 58.882655][ T7974] binder_thread_write+0x64a/0x2820 [ 58.882667][ T7974] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 58.882684][ T7974] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 58.906628][ T7968] binder: 7958:7968 ioctl 40046207 0 returned -16 [ 58.908323][ T7974] ? binder_transaction+0x6690/0x6690 [ 58.908334][ T7974] ? __might_fault+0x12b/0x1e0 [ 58.908356][ T7974] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 58.919829][ T3874] kobject: 'loop1' (0000000006452dd1): kobject_uevent_env [ 58.924261][ T7974] ? _copy_from_user+0xdd/0x150 [ 58.924276][ T7974] binder_ioctl+0x1033/0x183b [ 58.924289][ T7974] ? binder_thread_write+0x2820/0x2820 [ 58.924302][ T7974] ? mark_held_locks+0xf0/0xf0 [ 58.924319][ T7974] ? __fget+0x35a/0x550 [ 58.924331][ T7974] ? find_held_lock+0x35/0x130 [ 58.924345][ T7974] ? binder_thread_write+0x2820/0x2820 [ 58.924356][ T7974] do_vfs_ioctl+0xd6e/0x1390 [ 58.924368][ T7974] ? kasan_check_read+0x11/0x20 [ 58.924381][ T7974] ? ioctl_preallocate+0x210/0x210 [ 58.924392][ T7974] ? __fget+0x381/0x550 [ 58.924406][ T7974] ? ksys_dup3+0x3e0/0x3e0 [ 58.924420][ T7974] ? nsecs_to_jiffies+0x30/0x30 [ 58.924438][ T7974] ? security_file_ioctl+0x93/0xc0 [ 58.924450][ T7974] ksys_ioctl+0xab/0xd0 [ 58.924463][ T7974] __x64_sys_ioctl+0x73/0xb0 [ 58.924478][ T7974] do_syscall_64+0x103/0x610 [ 58.924495][ T7974] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.924505][ T7974] RIP: 0033:0x457e29 [ 58.924517][ T7974] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.924523][ T7974] RSP: 002b:00007ff057df1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.924535][ T7974] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 58.924543][ T7974] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000004 [ 58.924550][ T7974] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 58.924557][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff057df26d4 [ 58.924565][ T7974] R13: 00000000004bf15b R14: 00000000004d0a60 R15: 00000000ffffffff [ 58.924576][ T7974] Modules linked in: [ 58.925964][ T7964] binder: BINDER_SET_CONTEXT_MGR already set [ 58.940810][ T3874] kobject: 'loop1' (0000000006452dd1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 58.950968][ T7962] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 58.969055][ T7974] ---[ end trace 29641ffdc0155fca ]--- [ 58.970489][ T7962] CPU: 1 PID: 7962 Comm: syz-executor.5 Tainted: G D 5.0.0-rc6-next-20190214 #35 [ 58.970497][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.970515][ T7962] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 58.970526][ T7962] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 9f e1 26 fc 4c 89 e6 4c 89 ef e8 b4 e2 26 fc 4d 39 e5 76 07 e8 8a e1 26 fc <0f> 0b e8 83 e1 26 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 91 [ 58.970533][ T7962] RSP: 0018:ffff888018107558 EFLAGS: 00010293 [ 58.970543][ T7962] RAX: ffff8880469d6700 RBX: 0000000020001000 RCX: ffffffff8549806c [ 58.970550][ T7962] RDX: 0000000000000000 RSI: ffffffff85498076 RDI: 0000000000000006 [ 58.970558][ T7962] RBP: ffff8880181075d8 R08: ffff8880469d6700 R09: 0000000000000028 [ 58.970565][ T7962] R10: ffffed1003020f01 R11: ffff88801810780f R12: 0000000000000020 [ 58.970578][ T7962] R13: 0000000000000028 R14: ffff8880a1111890 R15: 0000000000000000 [ 58.980608][ T7974] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 58.986497][ T7962] FS: 00007fdbd5eda700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 58.986506][ T7962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.986513][ T7962] CR2: 0000000002024fd0 CR3: 00000000572d3000 CR4: 00000000001406e0 [ 58.986526][ T7962] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.994785][ T7974] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 9f e1 26 fc 4c 89 e6 4c 89 ef e8 b4 e2 26 fc 4d 39 e5 76 07 e8 8a e1 26 fc <0f> 0b e8 83 e1 26 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 91 [ 59.000426][ T7962] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.000430][ T7962] Call Trace: [ 59.000448][ T7962] ? memcpy+0x46/0x50 [ 59.000463][ T7962] ? binder_alloc_do_buffer_copy+0x442/0x510 [ 59.000478][ T7962] binder_alloc_copy_from_buffer+0x37/0x42 [ 59.000493][ T7962] binder_get_object+0xa2/0x1e0 [ 59.000507][ T7962] binder_transaction+0x2b4a/0x6690 [ 59.000530][ T7962] ? binder_thread_read+0x3d20/0x3d20 [ 59.000544][ T7962] ? mark_held_locks+0xf0/0xf0 [ 59.000557][ T7962] ? __might_fault+0x12b/0x1e0 [ 59.000570][ T7962] ? lock_downgrade+0x880/0x880 [ 59.000589][ T7962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 59.000601][ T7962] ? _copy_from_user+0xdd/0x150 [ 59.000614][ T7962] binder_thread_write+0x64a/0x2820 [ 59.000626][ T7962] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 59.000643][ T7962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 59.005804][ T7974] RSP: 0018:ffff888095fff558 EFLAGS: 00010293 [ 59.007875][ T7962] ? binder_transaction+0x6690/0x6690 [ 59.007887][ T7962] ? __might_fault+0x12b/0x1e0 [ 59.007910][ T7962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 59.015487][ T7974] RAX: ffff888030314400 RBX: 0000000020001020 RCX: ffffffff8549806c [ 59.019637][ T7962] ? _copy_from_user+0xdd/0x150 [ 59.019652][ T7962] binder_ioctl+0x1033/0x183b [ 59.019669][ T7962] ? binder_thread_write+0x2820/0x2820 [ 59.025390][ T7974] RDX: 0000000000000000 RSI: ffffffff85498076 RDI: 0000000000000006 [ 59.029666][ T7962] ? mark_held_locks+0xf0/0xf0 [ 59.029684][ T7962] ? __fget+0x35a/0x550 [ 59.029704][ T7962] ? find_held_lock+0x35/0x130 [ 59.036722][ T7974] RBP: ffff888095fff5d8 R08: ffff888030314400 R09: 0000000000000028 [ 59.039789][ T7962] ? binder_thread_write+0x2820/0x2820 [ 59.039803][ T7962] do_vfs_ioctl+0xd6e/0x1390 [ 59.039821][ T7962] ? kasan_check_read+0x11/0x20 [ 59.045483][ T7974] R10: ffffed1012bfff01 R11: ffff888095fff80f R12: 0000000000000020 [ 59.049383][ T7962] ? ioctl_preallocate+0x210/0x210 [ 59.049396][ T7962] ? __fget+0x381/0x550 [ 59.049414][ T7962] ? ksys_dup3+0x3e0/0x3e0 [ 59.057288][ T7974] R13: 0000000000000028 R14: ffff8880a1111890 R15: 0000000000000000 [ 59.060456][ T7962] ? nsecs_to_jiffies+0x30/0x30 [ 59.060475][ T7962] ? security_file_ioctl+0x93/0xc0 [ 59.060488][ T7962] ksys_ioctl+0xab/0xd0 [ 59.060502][ T7962] __x64_sys_ioctl+0x73/0xb0 [ 59.060520][ T7962] do_syscall_64+0x103/0x610 [ 59.066566][ T7974] FS: 00007ff057df2700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 59.071313][ T7962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.071323][ T7962] RIP: 0033:0x457e29 [ 59.071335][ T7962] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.071341][ T7962] RSP: 002b:00007fdbd5ed9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.071351][ T7962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 59.071358][ T7962] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000004 [ 59.071365][ T7962] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 59.071373][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdbd5eda6d4 [ 59.071385][ T7962] R13: 00000000004bf15b R14: 00000000004d0a60 R15: 00000000ffffffff [ 59.079326][ T7974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.083983][ T7962] Modules linked in: [ 59.089190][ T7964] binder: 7963:7964 ioctl 40046207 0 returned -16 [ 59.093827][ T7979] binder: BINDER_SET_CONTEXT_MGR already set [ 59.099530][ T7962] ---[ end trace 29641ffdc0155fcb ]--- [ 59.101086][ T3874] kobject: 'loop2' (000000004ec7dd02): kobject_uevent_env [ 59.117266][ T7962] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 59.125279][ T7976] binder: BINDER_SET_CONTEXT_MGR already set [ 59.128139][ T7962] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 9f e1 26 fc 4c 89 e6 4c 89 ef e8 b4 e2 26 fc 4d 39 e5 76 07 e8 8a e1 26 fc <0f> 0b e8 83 e1 26 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 91 [ 59.132597][ T7979] binder: 7978:7979 ioctl 40046207 0 returned -16 [ 59.137462][ T7962] RSP: 0018:ffff888095fff558 EFLAGS: 00010293 [ 59.144133][ T7976] binder: 7969:7976 ioctl 40046207 0 returned -16 [ 59.146655][ T7986] binder: BINDER_SET_CONTEXT_MGR already set [ 59.152048][ T3874] kobject: 'loop2' (000000004ec7dd02): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 59.157201][ T7986] binder: 7985:7986 ioctl 40046207 0 returned -16 [ 59.161537][ T7981] binder: BINDER_SET_CONTEXT_MGR already set [ 59.170112][ T7962] RAX: ffff888030314400 RBX: 0000000020001020 RCX: ffffffff8549806c [ 59.174561][ T7974] CR2: 000000000073c000 CR3: 0000000071c10000 CR4: 00000000001406f0 [ 59.175504][ T7962] RDX: 0000000000000000 RSI: ffffffff85498076 RDI: 0000000000000006 [ 59.179834][ T7974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.185584][ T7962] RBP: ffff888095fff5d8 R08: ffff888030314400 R09: 0000000000000028 [ 59.192265][ T7981] binder: 7978:7981 ioctl 40046207 0 returned -16 [ 59.195474][ T7989] binder: BINDER_SET_CONTEXT_MGR already set [ 59.203589][ T3874] kobject: 'loop0' (0000000040d59310): kobject_uevent_env [ 59.218927][ T7962] R10: ffffed1012bfff01 R11: ffff888095fff80f R12: 0000000000000020 [ 59.235320][ T7974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.248340][ T7984] binder: BINDER_SET_CONTEXT_MGR already set [ 59.257593][ T3874] kobject: 'loop0' (0000000040d59310): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 59.262989][ T7989] binder: 7985:7989 ioctl 40046207 0 returned -16 [ 59.273584][ T3874] kobject: 'loop4' (0000000038d4540c): kobject_uevent_env [ 59.277746][ T7984] binder: 7983:7984 ioctl 40046207 0 returned -16 [ 59.288648][ T7995] binder: BINDER_SET_CONTEXT_MGR already set [ 59.293775][ T7974] Kernel panic - not syncing: Fatal exception [ 59.294839][ T7974] Kernel Offset: disabled [ 60.007196][ T7974] Rebooting in 86400 seconds..