[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 63.566432][ T26] audit: type=1800 audit(1558155439.586:25): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 63.606022][ T26] audit: type=1800 audit(1558155439.586:26): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. 2019/05/18 04:57:29 fuzzer started 2019/05/18 04:57:32 dialing manager at 10.128.0.26:37669 2019/05/18 04:57:32 syscalls: 1006 2019/05/18 04:57:32 code coverage: enabled 2019/05/18 04:57:32 comparison tracing: enabled 2019/05/18 04:57:32 extra coverage: extra coverage is not supported by the kernel 2019/05/18 04:57:32 setuid sandbox: enabled 2019/05/18 04:57:32 namespace sandbox: enabled 2019/05/18 04:57:32 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/18 04:57:32 fault injection: enabled 2019/05/18 04:57:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/18 04:57:32 net packet injection: enabled 2019/05/18 04:57:32 net device setup: enabled 04:57:36 executing program 0: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept$alg(r1, 0x0, 0x0) syzkaller login: [ 80.973359][ T9064] IPVS: ftp: loaded support on port[0] = 21 [ 80.984367][ T9064] NET: Registered protocol family 30 [ 80.990828][ T9064] Failed to register TIPC socket type 04:57:37 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000380)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 04:57:37 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000001, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x7b, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1a}}], 0xb432d8c18b6db741, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5c97b5d4d7b0300b1fccd901812c9c56a76a3dbf4cc70a8c9b840bb0cedbb856e335d3cec11e09b913a8fcc6e777fa991fd28da6f87ce457c28d3170c6f3cf", 0x37}, 0x60) [ 81.293518][ T9066] IPVS: ftp: loaded support on port[0] = 21 [ 81.320394][ T9066] NET: Registered protocol family 30 [ 81.325721][ T9066] Failed to register TIPC socket type [ 81.553597][ T9068] IPVS: ftp: loaded support on port[0] = 21 [ 81.580424][ T9068] NET: Registered protocol family 30 [ 81.585844][ T9068] Failed to register TIPC socket type 04:57:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x3a1) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") sendfile(r1, r3, 0x0, 0x3a1) [ 82.126575][ T9070] IPVS: ftp: loaded support on port[0] = 21 [ 82.147303][ T9070] NET: Registered protocol family 30 [ 82.152832][ T9070] Failed to register TIPC socket type 04:57:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00>%x\x90\x1b\\%j\\!:\xe7\xf6\xf7\xbd`r;\xd6F\x00v\xae$\x19\xffb\xc3\xa57\xc3\x90\x86\xdb\xe3\x1d\x98$\x8d\xc1P\xbf\t\\\x8eW\x16\x906 0b 48 89 f1 48 c7 c7 e0 4c a3 87 4c 89 e6 e8 d5 5f 25 fe 0f 0b [ 110.215535][ T9582] RSP: 0018:ffff888066b9fb88 EFLAGS: 00010282 [ 110.221628][ T9582] RAX: 0000000000000058 RBX: ffffffff89544920 RCX: 0000000000000000 [ 110.229625][ T9582] RDX: 0000000000000000 RSI: ffffffff815afbe6 RDI: ffffed100cd73f63 [ 110.238245][ T9582] RBP: ffff888066b9fba0 R08: 0000000000000058 R09: ffffed1015d240f1 [ 110.246231][ T9582] R10: ffffed1015d240f0 R11: ffff8880ae920787 R12: ffffffff89544ab0 [ 110.254215][ T9582] R13: ffffffff89544ab0 R14: ffffffff89544ab0 R15: ffffffff89544a50 [ 110.262207][ T9582] FS: 0000000001e19940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 110.271154][ T9582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.277754][ T9582] CR2: 00000000006197e0 CR3: 0000000066943000 CR4: 00000000001406e0 [ 110.285741][ T9582] Call Trace: [ 110.289057][ T9582] ? mutex_lock_nested+0x16/0x20 [ 110.294016][ T9582] proto_register+0x459/0x8e0 [ 110.298723][ T9582] ? lockdep_init_map+0x1be/0x6d0 [ 110.303770][ T9582] tipc_socket_init+0x1c/0x70 [ 110.308466][ T9582] tipc_init_net+0x32a/0x5b0 [ 110.313072][ T9582] ? tipc_exit_net+0x40/0x40 [ 110.317685][ T9582] ops_init+0xb6/0x410 [ 110.321958][ T9582] setup_net+0x2d3/0x740 [ 110.326222][ T9582] ? copy_net_ns+0x1c0/0x340 [ 110.330833][ T9582] ? ops_init+0x410/0x410 [ 110.335199][ T9582] ? kasan_check_write+0x14/0x20 [ 110.340236][ T9582] ? down_read_killable+0x51/0x220 [ 110.345362][ T9582] copy_net_ns+0x1df/0x340 [ 110.349883][ T9582] create_new_namespaces+0x400/0x7b0 [ 110.355307][ T9582] unshare_nsproxy_namespaces+0xc2/0x200 [ 110.360963][ T9582] ksys_unshare+0x440/0x980 [ 110.365490][ T9582] ? trace_hardirqs_on+0x67/0x230 [ 110.370886][ T9582] ? walk_process_tree+0x2d0/0x2d0 [ 110.376041][ T9582] ? blkcg_exit_queue+0x30/0x30 [ 110.381318][ T9582] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 110.387394][ T9582] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 110.394111][ T9582] ? do_syscall_64+0x26/0x680 [ 110.399408][ T9582] ? lockdep_hardirqs_on+0x418/0x5d0 [ 110.404712][ T9582] __x64_sys_unshare+0x31/0x40 [ 110.409488][ T9582] do_syscall_64+0x103/0x680 [ 110.414135][ T9582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 110.420155][ T9582] RIP: 0033:0x45b897 [ 110.424585][ T9582] Code: 00 00 00 b8 63 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 110.444198][ T9582] RSP: 002b:00007ffd97423e88 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 110.452622][ T9582] RAX: ffffffffffffffda RBX: 000000000073c988 RCX: 000000000045b897 [ 110.460932][ T9582] RDX: 0000000000000000 RSI: 00007ffd97423e30 RDI: 0000000040000000 [ 110.468914][ T9582] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000005 [ 110.476907][ T9582] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000414ab0 [ 110.484890][ T9582] R13: 0000000000414b40 R14: 0000000000000000 R15: 0000000000000000 [ 110.492876][ T9582] Modules linked in: 04:58:06 executing program 0: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept$alg(r1, 0x0, 0x0) [ 110.877225][ C1] cache_from_obj: Wrong slab cache. TIPC but object is from TIPC [ 110.882300][ T3879] kobject: 'loop0' (000000006bba1697): kobject_uevent_env [ 110.885173][ C1] WARNING: CPU: 1 PID: 16 at mm/slab.h:376 kmem_cache_free.cold+0x1c/0x23 [ 110.900638][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 110.908269][ C1] Kernel Offset: disabled [ 110.912605][ C1] Rebooting in 86400 seconds..