[ 48.476758][ T26] audit: type=1800 audit(1555641028.571:25): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 48.505391][ T26] audit: type=1800 audit(1555641028.571:26): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 48.552319][ T26] audit: type=1800 audit(1555641028.571:27): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts. 2019/04/19 02:31:35 parsed 1 programs 2019/04/19 02:31:37 executed programs: 0 syzkaller login: [ 117.692452][ T8192] IPVS: ftp: loaded support on port[0] = 21 [ 117.711153][ T8189] IPVS: ftp: loaded support on port[0] = 21 [ 117.712055][ T8194] IPVS: ftp: loaded support on port[0] = 21 [ 117.728758][ T8196] IPVS: ftp: loaded support on port[0] = 21 [ 117.731366][ T8191] IPVS: ftp: loaded support on port[0] = 21 [ 117.739475][ T8197] IPVS: ftp: loaded support on port[0] = 21 [ 118.084107][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 118.124527][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 118.146427][ T8194] chnl_net:caif_netlink_parms(): no params data found [ 118.260562][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 118.271397][ T8197] chnl_net:caif_netlink_parms(): no params data found [ 118.280323][ T8196] chnl_net:caif_netlink_parms(): no params data found [ 118.316288][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.324162][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.332315][ T8192] device bridge_slave_0 entered promiscuous mode [ 118.342935][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.350130][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.358072][ T8192] device bridge_slave_1 entered promiscuous mode [ 118.365520][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.373158][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.381486][ T8191] device bridge_slave_0 entered promiscuous mode [ 118.389087][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.396649][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.404408][ T8194] device bridge_slave_0 entered promiscuous mode [ 118.436849][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.443979][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.451925][ T8191] device bridge_slave_1 entered promiscuous mode [ 118.459072][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.466986][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.474756][ T8194] device bridge_slave_1 entered promiscuous mode [ 118.487798][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.495285][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.506239][ T8189] device bridge_slave_0 entered promiscuous mode [ 118.545025][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.552283][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.561678][ T8196] device bridge_slave_0 entered promiscuous mode [ 118.575054][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.582335][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.590411][ T8196] device bridge_slave_1 entered promiscuous mode [ 118.609154][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.616832][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.624665][ T8189] device bridge_slave_1 entered promiscuous mode [ 118.639911][ T8192] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.654689][ T8194] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.672263][ T8194] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.694669][ T8192] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.704986][ T8191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.730084][ T8191] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.740512][ T8196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.750455][ T8189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.764802][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.772078][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.780270][ T8197] device bridge_slave_0 entered promiscuous mode [ 118.790800][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.797960][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.806089][ T8197] device bridge_slave_1 entered promiscuous mode [ 118.821834][ T8189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.834182][ T8196] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.850596][ T8194] team0: Port device team_slave_0 added [ 118.869443][ T8191] team0: Port device team_slave_0 added [ 118.885278][ T8192] team0: Port device team_slave_0 added [ 118.896520][ T8192] team0: Port device team_slave_1 added [ 118.903446][ T8194] team0: Port device team_slave_1 added [ 118.915512][ T8191] team0: Port device team_slave_1 added [ 118.938080][ T8189] team0: Port device team_slave_0 added [ 118.946934][ T8189] team0: Port device team_slave_1 added [ 118.955233][ T8197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.966541][ T8197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.976935][ T8196] team0: Port device team_slave_0 added [ 118.984467][ T8196] team0: Port device team_slave_1 added [ 119.097892][ T8191] device hsr_slave_0 entered promiscuous mode [ 119.146072][ T8191] device hsr_slave_1 entered promiscuous mode [ 119.228941][ T8192] device hsr_slave_0 entered promiscuous mode [ 119.266263][ T8192] device hsr_slave_1 entered promiscuous mode [ 119.357811][ T8194] device hsr_slave_0 entered promiscuous mode [ 119.406345][ T8194] device hsr_slave_1 entered promiscuous mode [ 119.509023][ T8189] device hsr_slave_0 entered promiscuous mode [ 119.546496][ T8189] device hsr_slave_1 entered promiscuous mode [ 119.601919][ T8197] team0: Port device team_slave_0 added [ 119.609372][ T8197] team0: Port device team_slave_1 added [ 119.669002][ T8196] device hsr_slave_0 entered promiscuous mode [ 119.726366][ T8196] device hsr_slave_1 entered promiscuous mode [ 119.859725][ T8197] device hsr_slave_0 entered promiscuous mode [ 119.926153][ T8197] device hsr_slave_1 entered promiscuous mode [ 120.113817][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.147074][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.175181][ T8194] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.194351][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.205517][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.215119][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.231818][ T8197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.251261][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.264046][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.273295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.280783][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.303619][ T8196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.317162][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.332267][ T8189] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.343079][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.353005][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.362327][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.371043][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.378162][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.387686][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.396471][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.404192][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.412431][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.420712][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.428803][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.437170][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.457619][ T8196] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.467656][ T8197] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.484622][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.493305][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.503282][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.513489][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.522092][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.530153][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.538177][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.547536][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.556543][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.565264][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.574022][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.581293][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.589513][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.597566][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.612052][ T8194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.624956][ T8194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.656619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.665322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.674558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.683196][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.692546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.701397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.710271][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.718186][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.727959][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.737161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.745577][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.752915][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.760899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.771057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.780167][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.787319][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.795109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.804127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.812814][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.820004][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.827809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.836690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.845039][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.852176][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.861151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.870230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.878701][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.885825][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.893481][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.902317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.911398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.949661][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.957983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.966675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.974721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.984569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.993228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.002509][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.009655][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.018651][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.027912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.036658][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.045135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.053874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.062811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.071597][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.080885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.090166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.098396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.108136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.119646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.128129][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.136755][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.144679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.163629][ T8197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.178514][ T8197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.207807][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.220611][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.229803][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.238526][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.246774][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.255125][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.263663][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.272418][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.281207][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.290025][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.298817][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.307350][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.316099][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.324003][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.334658][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.350379][ T8192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.363040][ T8192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.383869][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.391260][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.400020][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.408572][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.418656][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.427742][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.438795][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.452983][ T8197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.510447][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.526754][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.540272][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.549011][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.558148][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.566763][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.573904][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.581826][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.592344][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.600807][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.607909][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.616612][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.624776][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.640648][ T8196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.651588][ T8196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.684487][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.705487][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.720145][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.729351][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.738181][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.746684][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.755148][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.764215][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.773962][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.795598][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.817214][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.874970][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.919885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.938123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.952271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.964677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.983039][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.997358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.014934][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.039204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.052694][ T8196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.072943][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.193549][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/04/19 02:31:42 executed programs: 28 2019/04/19 02:31:47 executed programs: 259 2019/04/19 02:31:52 executed programs: 494 2019/04/19 02:31:57 executed programs: 711 2019/04/19 02:32:02 executed programs: 945 2019/04/19 02:32:07 executed programs: 1172 2019/04/19 02:32:12 executed programs: 1392 2019/04/19 02:32:17 executed programs: 1610 2019/04/19 02:32:22 executed programs: 1832 2019/04/19 02:32:27 executed programs: 2032 [ 172.575459][T21075] cgroup: fork rejected by pids controller in /syz2 2019/04/19 02:32:32 executed programs: 2243 [ 174.761142][T22217] cgroup: fork rejected by pids controller in /syz3 2019/04/19 02:32:37 executed programs: 2421 [ 178.508916][T25595] cgroup: fork rejected by pids controller in /syz4 [ 182.599489][T30923] cgroup: fork rejected by pids controller in /syz0 [ 182.829165][T31157] ================================================================== [ 182.837614][T31157] BUG: KASAN: use-after-free in refcount_sub_and_test_checked+0x87/0x200 [ 182.846046][T31157] Read of size 4 at addr ffff8880a8d5e060 by task syz-executor.0/31157 [ 182.846060][T31157] [ 182.846075][T31157] CPU: 0 PID: 31157 Comm: syz-executor.0 Not tainted 5.1.0-rc5+ #74 [ 182.846083][T31157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.846102][T31157] Call Trace: [ 182.846139][T31157] dump_stack+0x172/0x1f0 [ 182.846157][T31157] ? refcount_sub_and_test_checked+0x87/0x200 [ 182.846179][T31157] print_address_description.cold+0x7c/0x20d [ 182.846191][T31157] ? refcount_sub_and_test_checked+0x87/0x200 [ 182.846205][T31157] ? refcount_sub_and_test_checked+0x87/0x200 [ 182.846217][T31157] kasan_report.cold+0x1b/0x40 [ 182.877487][T31157] ? refcount_sub_and_test_checked+0x87/0x200 [ 182.877507][T31157] check_memory_region+0x123/0x190 [ 182.877525][T31157] kasan_check_read+0x11/0x20 [ 182.877540][T31157] refcount_sub_and_test_checked+0x87/0x200 [ 182.877563][T31157] ? refcount_dec_not_one+0x1f0/0x1f0 [ 182.877590][T31157] refcount_dec_and_test_checked+0x1b/0x20 [ 182.877609][T31157] _free_event+0x3d7/0x13b0 [ 182.877631][T31157] ? kasan_check_write+0x14/0x20 [ 182.938887][T31157] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 182.938908][T31157] ? ring_buffer_attach+0x650/0x650 [ 182.938923][T31157] ? wait_for_completion+0x440/0x440 2019/04/19 02:32:43 executed programs: 2584 [ 182.938945][T31157] free_event+0x5f/0xd0 [ 182.950119][T31157] perf_event_release_kernel+0x5b2/0xbe0 [ 182.950135][T31157] ? put_event+0x60/0x60 [ 182.950153][T31157] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 182.950175][T31157] ? perf_event_release_kernel+0xbe0/0xbe0 [ 182.992204][T31347] cgroup: fork rejected by pids controller in /syz1 [ 182.997967][T31157] perf_release+0x37/0x50 [ 182.997984][T31157] __fput+0x2e5/0x8d0 [ 182.998005][T31157] ____fput+0x16/0x20 [ 182.998019][T31157] task_work_run+0x14a/0x1c0 [ 182.998045][T31157] exit_to_usermode_loop+0x273/0x2c0 [ 182.998062][T31157] do_syscall_64+0x52d/0x610 [ 182.998081][T31157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.998100][T31157] RIP: 0033:0x4129e1 [ 183.048251][T31157] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 183.069799][T31157] RSP: 002b:00007ffc793703e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 183.078367][T31157] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004129e1 [ 183.086365][T31157] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000003 [ 183.094360][T31157] RBP: 0000000000741220 R08: 0000000000741218 R09: 000000000002c9b0 [ 183.102484][T31157] R10: 00007ffc793704a0 R11: 0000000000000293 R12: 0000000000000000 [ 183.111071][T31157] R13: 0000000000000001 R14: 0000000000000003 R15: 000000000073bfac [ 183.120314][T31157] [ 183.120354][T31157] Allocated by task 31160: [ 183.120380][T31157] save_stack+0x45/0xd0 [ 183.120395][T31157] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 183.120404][T31157] kasan_slab_alloc+0xf/0x20 [ 183.120416][T31157] kmem_cache_alloc_node+0x131/0x710 [ 183.120440][T31157] copy_process.part.0+0x1d08/0x7980 [ 183.127207][T31157] _do_fork+0x257/0xfd0 [ 183.127221][T31157] __x64_sys_clone+0xbf/0x150 [ 183.127235][T31157] do_syscall_64+0x103/0x610 [ 183.127250][T31157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.127254][T31157] [ 183.127261][T31157] Freed by task 31160: [ 183.127278][T31157] save_stack+0x45/0xd0 [ 183.127291][T31157] __kasan_slab_free+0x102/0x150 [ 183.127310][T31157] kasan_slab_free+0xe/0x10 [ 183.157447][T31157] kmem_cache_free+0x86/0x260 [ 183.157463][T31157] free_task+0xdd/0x120 [ 183.157485][T31157] copy_process.part.0+0x1a3a/0x7980 [ 183.157498][T31157] _do_fork+0x257/0xfd0 [ 183.157509][T31157] __x64_sys_clone+0xbf/0x150 [ 183.157524][T31157] do_syscall_64+0x103/0x610 [ 183.157538][T31157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.157561][T31157] [ 183.167682][T31157] The buggy address belongs to the object at ffff8880a8d5e040 [ 183.167682][T31157] which belongs to the cache task_struct(44:syz0) of size 6080 [ 183.167696][T31157] The buggy address is located 32 bytes inside of [ 183.167696][T31157] 6080-byte region [ffff8880a8d5e040, ffff8880a8d5f800) [ 183.167700][T31157] The buggy address belongs to the page: [ 183.167714][T31157] page:ffffea0002a35780 count:1 mapcount:0 mapping:ffff88808b2adcc0 index:0x0 compound_mapcount: 0 [ 183.167729][T31157] flags: 0x1fffc0000010200(slab|head) [ 183.167748][T31157] raw: 01fffc0000010200 ffffea0002301808 ffffea0002171f08 ffff88808b2adcc0 [ 183.167764][T31157] raw: 0000000000000000 ffff8880a8d5e040 0000000100000001 ffff888085710580 [ 183.167770][T31157] page dumped because: kasan: bad access detected [ 183.167775][T31157] page->mem_cgroup:ffff888085710580 [ 183.167779][T31157] [ 183.167784][T31157] Memory state around the buggy address: [ 183.167796][T31157] ffff8880a8d5df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.167805][T31157] ffff8880a8d5df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.167823][T31157] >ffff8880a8d5e000: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 183.245586][T31157] ^ [ 183.290956][T31157] ffff8880a8d5e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.290967][T31157] ffff8880a8d5e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.290973][T31157] ================================================================== [ 183.290979][T31157] Disabling lock debugging due to kernel taint [ 183.358408][T31157] Kernel panic - not syncing: panic_on_warn set ... [ 183.370134][ T3879] kobject: 'loop2' (00000000306e4711): kobject_uevent_env [ 183.370285][T31157] CPU: 0 PID: 31157 Comm: syz-executor.0 Tainted: G B 5.1.0-rc5+ #74 [ 183.385722][ T3879] kobject: 'loop2' (00000000306e4711): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 183.391102][T31157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.426260][ T3879] kobject: 'loop3' (000000003df020c9): kobject_uevent_env [ 183.433096][T31157] Call Trace: [ 183.443535][T31157] dump_stack+0x172/0x1f0 [ 183.446673][ T3879] kobject: 'loop3' (000000003df020c9): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 183.447886][T31157] panic+0x2cb/0x65c [ 183.447903][T31157] ? __warn_printk+0xf3/0xf3 [ 183.447929][T31157] ? refcount_sub_and_test_checked+0x87/0x200 [ 183.474585][T31157] ? preempt_schedule+0x4b/0x60 [ 183.479452][T31157] ? ___preempt_schedule+0x16/0x18 [ 183.479609][ T3879] kobject: 'loop5' (00000000085822d3): kobject_uevent_env [ 183.484573][T31157] ? trace_hardirqs_on+0x5e/0x230 [ 183.484594][T31157] ? refcount_sub_and_test_checked+0x87/0x200 [ 183.484614][T31157] end_report+0x47/0x4f [ 183.496440][ T3879] kobject: 'loop5' (00000000085822d3): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 183.496773][T31157] ? refcount_sub_and_test_checked+0x87/0x200 [ 183.523328][T31157] kasan_report.cold+0xe/0x40 [ 183.528147][T31157] ? refcount_sub_and_test_checked+0x87/0x200 [ 183.534236][T31157] check_memory_region+0x123/0x190 [ 183.539366][T31157] kasan_check_read+0x11/0x20 [ 183.540296][ T3879] kobject: 'loop1' (00000000ecfea15b): kobject_uevent_env [ 183.544058][T31157] refcount_sub_and_test_checked+0x87/0x200 [ 183.553464][ T3879] kobject: 'loop1' (00000000ecfea15b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 183.557083][T31157] ? refcount_dec_not_one+0x1f0/0x1f0 [ 183.557104][T31157] refcount_dec_and_test_checked+0x1b/0x20 [ 183.557120][T31157] _free_event+0x3d7/0x13b0 [ 183.557137][T31157] ? kasan_check_write+0x14/0x20 [ 183.557154][T31157] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 183.557178][T31157] ? ring_buffer_attach+0x650/0x650 [ 183.598724][T31157] ? wait_for_completion+0x440/0x440 [ 183.604039][T31157] free_event+0x5f/0xd0 [ 183.604643][ T3879] kobject: 'loop3' (000000003df020c9): kobject_uevent_env [ 183.608328][T31157] perf_event_release_kernel+0x5b2/0xbe0 [ 183.608342][T31157] ? put_event+0x60/0x60 [ 183.608359][T31157] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 183.608382][T31157] ? perf_event_release_kernel+0xbe0/0xbe0 [ 183.615539][ T3879] kobject: 'loop3' (000000003df020c9): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 183.621172][T31157] perf_release+0x37/0x50 [ 183.621187][T31157] __fput+0x2e5/0x8d0 [ 183.621198][T31157] ____fput+0x16/0x20 [ 183.621209][T31157] task_work_run+0x14a/0x1c0 [ 183.621227][T31157] exit_to_usermode_loop+0x273/0x2c0 [ 183.621249][T31157] do_syscall_64+0x52d/0x610 [ 183.675246][T31157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.681136][T31157] RIP: 0033:0x4129e1 [ 183.685017][T31157] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 183.711358][T31157] RSP: 002b:00007ffc793703e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 183.719781][T31157] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004129e1 [ 183.727748][T31157] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000003 [ 183.735717][T31157] RBP: 0000000000741220 R08: 0000000000741218 R09: 000000000002c9b0 [ 183.743683][T31157] R10: 00007ffc793704a0 R11: 0000000000000293 R12: 0000000000000000 [ 183.751651][T31157] R13: 0000000000000001 R14: 0000000000000003 R15: 000000000073bfac [ 183.760642][T31157] Kernel Offset: disabled [ 183.764986][T31157] Rebooting in 86400 seconds..