[ 34.370603] audit: type=1800 audit(1549741099.588:27): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.393012] audit: type=1800 audit(1549741099.598:28): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.173964] audit: type=1800 audit(1549741100.448:29): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 35.197146] audit: type=1800 audit(1549741100.448:30): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.198' (ECDSA) to the list of known hosts. 2019/02/09 19:39:25 parsed 1 programs 2019/02/09 19:39:27 executed programs: 0 syzkaller login: [ 102.275631] IPVS: ftp: loaded support on port[0] = 21 [ 102.281974] IPVS: ftp: loaded support on port[0] = 21 [ 102.293959] IPVS: ftp: loaded support on port[0] = 21 [ 102.294542] IPVS: ftp: loaded support on port[0] = 21 [ 102.313272] IPVS: ftp: loaded support on port[0] = 21 [ 102.324071] IPVS: ftp: loaded support on port[0] = 21 [ 102.508411] chnl_net:caif_netlink_parms(): no params data found [ 102.618176] chnl_net:caif_netlink_parms(): no params data found [ 102.661222] chnl_net:caif_netlink_parms(): no params data found [ 102.672591] chnl_net:caif_netlink_parms(): no params data found [ 102.687462] chnl_net:caif_netlink_parms(): no params data found [ 102.736521] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.743019] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.752580] device bridge_slave_0 entered promiscuous mode [ 102.762538] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.769034] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.775971] device bridge_slave_1 entered promiscuous mode [ 102.788683] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.795074] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.803294] device bridge_slave_0 entered promiscuous mode [ 102.832999] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.839519] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.846634] device bridge_slave_1 entered promiscuous mode [ 102.874891] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.887170] chnl_net:caif_netlink_parms(): no params data found [ 102.902944] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.914944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.924156] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.936995] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.943445] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.950677] device bridge_slave_0 entered promiscuous mode [ 102.959588] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.967023] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.973961] device bridge_slave_1 entered promiscuous mode [ 102.980361] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.986787] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.993707] device bridge_slave_0 entered promiscuous mode [ 103.003752] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.012478] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.019467] device bridge_slave_1 entered promiscuous mode [ 103.025562] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.035107] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.042199] device bridge_slave_0 entered promiscuous mode [ 103.057267] team0: Port device team_slave_0 added [ 103.080592] team0: Port device team_slave_0 added [ 103.085651] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.092513] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.099558] device bridge_slave_1 entered promiscuous mode [ 103.116044] team0: Port device team_slave_1 added [ 103.122173] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 103.134562] team0: Port device team_slave_1 added [ 103.152732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 103.161822] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 103.179824] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 103.188985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 103.211487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 103.223280] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.230479] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.238005] device bridge_slave_0 entered promiscuous mode [ 103.308044] device hsr_slave_0 entered promiscuous mode [ 103.356639] device hsr_slave_1 entered promiscuous mode [ 103.441062] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.448264] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.455302] device bridge_slave_1 entered promiscuous mode [ 103.478694] team0: Port device team_slave_0 added [ 103.484386] team0: Port device team_slave_0 added [ 103.491256] team0: Port device team_slave_0 added [ 103.537941] device hsr_slave_0 entered promiscuous mode [ 103.586497] device hsr_slave_1 entered promiscuous mode [ 103.628084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 103.636997] team0: Port device team_slave_1 added [ 103.643159] team0: Port device team_slave_1 added [ 103.648872] team0: Port device team_slave_1 added [ 103.663199] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 103.739040] device hsr_slave_0 entered promiscuous mode [ 103.786379] device hsr_slave_1 entered promiscuous mode [ 103.894291] team0: Port device team_slave_0 added [ 103.948442] device hsr_slave_0 entered promiscuous mode [ 104.006388] device hsr_slave_1 entered promiscuous mode [ 104.047149] team0: Port device team_slave_1 added [ 104.087909] device hsr_slave_0 entered promiscuous mode [ 104.136553] device hsr_slave_1 entered promiscuous mode [ 104.228108] device hsr_slave_0 entered promiscuous mode [ 104.286455] device hsr_slave_1 entered promiscuous mode [ 104.414805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.451791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.465179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.474064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.482113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.492123] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.511076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.518159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.531111] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.542781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.552490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.568732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.578657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.586376] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.592833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.600562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.609091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.617410] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.623748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.630649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.638021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.644829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.652704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.660261] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.666653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.674071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.681211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.692634] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.704741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.715985] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.731065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.739802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.747191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.753992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.761388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.768305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.776010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.783841] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.790218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.797788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.823572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.834791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.852724] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.861403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.870206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.878221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.885737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.893675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.901415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.909094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.917235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.924931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.932416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.939616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.946560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.954236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.962146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.969819] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.976200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.983011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.990285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.997149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.006039] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.036774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.044748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.052838] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.059200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.068677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.076765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.084279] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.090662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.098927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.106811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.114315] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.120694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.127634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.135347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.143446] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.149883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.157283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.165042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.173137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.180890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.188780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.196873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.204403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.212393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.220326] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.226725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.233520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.241285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.248869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.256675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.264179] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.270563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.277335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.284941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.292633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.299692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.306847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.313801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.320958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.343955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.354080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.386561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.394124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.401880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.409861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.418125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.425865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.433610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.441270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.449674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.457576] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.463904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.470862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.478885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.486814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.494520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.502328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.510269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.518311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.525977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.533726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.541662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.549404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.557127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.564800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.572447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.579940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.594894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.608608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.623809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.631469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.648046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.655325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.662789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.670184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.678086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.685470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.693501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.704790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.719373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.731936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.748982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.775870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.791435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.799964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.814850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.836090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.846753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.854277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.863341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.880055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.887781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.895392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.907096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.914965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.939678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.964041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.975634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.995582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.105495] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/02/09 19:39:32 executed programs: 71 2019/02/09 19:39:37 executed programs: 359 2019/02/09 19:39:42 executed programs: 649 2019/02/09 19:39:47 executed programs: 946 2019/02/09 19:39:52 executed programs: 1237 2019/02/09 19:39:57 executed programs: 1534 2019/02/09 19:40:02 executed programs: 1830 2019/02/09 19:40:07 executed programs: 2120 2019/02/09 19:40:12 executed programs: 2416 2019/02/09 19:40:17 executed programs: 2709 2019/02/09 19:40:22 executed programs: 3004 2019/02/09 19:40:27 executed programs: 3295 2019/02/09 19:40:32 executed programs: 3579 2019/02/09 19:40:37 executed programs: 3872 2019/02/09 19:40:42 executed programs: 4165 2019/02/09 19:40:47 executed programs: 4458 2019/02/09 19:40:52 executed programs: 4745 2019/02/09 19:40:57 executed programs: 5041 2019/02/09 19:41:02 executed programs: 5333 2019/02/09 19:41:07 executed programs: 5623 2019/02/09 19:41:12 executed programs: 5918 2019/02/09 19:41:17 executed programs: 6199 2019/02/09 19:41:22 executed programs: 6494 2019/02/09 19:41:27 executed programs: 6782 2019/02/09 19:41:32 executed programs: 7075 2019/02/09 19:41:37 executed programs: 7365 2019/02/09 19:41:42 executed programs: 7658 2019/02/09 19:41:47 executed programs: 7952 2019/02/09 19:41:52 executed programs: 8241 2019/02/09 19:41:58 executed programs: 8545 2019/02/09 19:42:03 executed programs: 8842 2019/02/09 19:42:08 executed programs: 9142 [ 263.256961] ================================================================== [ 263.264744] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 263.271415] Read of size 8 at addr ffff888091ad8300 by task ksoftirqd/1/16 [ 263.278422] [ 263.280150] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.0.0-rc5+ #63 [ 263.286902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.296263] Call Trace: [ 263.298916] dump_stack+0x172/0x1f0 [ 263.302555] ? ccid_hc_tx_delete+0xde/0x100 [ 263.306986] print_address_description.cold+0x7c/0x20d [ 263.312272] ? ccid_hc_tx_delete+0xde/0x100 [ 263.316597] ? ccid_hc_tx_delete+0xde/0x100 [ 263.316617] kasan_report.cold+0x1b/0x40 [ 263.316631] ? ccid_hc_tx_delete+0xde/0x100 [ 263.316647] __asan_report_load8_noabort+0x14/0x20 [ 263.316656] ccid_hc_tx_delete+0xde/0x100 [ 263.316731] dccp_sk_destruct+0x3f/0x90 [ 263.325151] ? dccp_init_sock+0x3f0/0x3f0 [ 263.346666] __sk_destruct+0x55/0x6d0 [ 263.350459] ? sock_no_getname+0x10/0x10 [ 263.354542] rcu_process_callbacks+0x928/0x1390 [ 263.359204] ? rcu_check_gp_start_stall+0x240/0x240 [ 263.364209] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 263.369650] __do_softirq+0x266/0x95a [ 263.373436] ? pci_mmcfg_check_reserved+0x170/0x170 [ 263.378492] ? takeover_tasklets+0x7b0/0x7b0 [ 263.382887] run_ksoftirqd+0x8e/0x110 [ 263.386692] smpboot_thread_fn+0x6ab/0xa10 [ 263.390926] ? sort_range+0x30/0x30 [ 263.394556] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 263.400096] ? __kthread_parkme+0xfb/0x1b0 [ 263.404320] kthread+0x357/0x430 [ 263.407674] ? sort_range+0x30/0x30 [ 263.411283] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 263.416803] ret_from_fork+0x3a/0x50 [ 263.420506] [ 263.422117] Allocated by task 11786: [ 263.425817] save_stack+0x45/0xd0 [ 263.429264] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 263.434176] kasan_slab_alloc+0xf/0x20 [ 263.438049] kmem_cache_alloc+0x12d/0x710 [ 263.442189] ccid_new+0x256/0x3f0 [ 263.445623] dccp_hdlr_ccid+0x27/0x150 [ 263.449512] __dccp_feat_activate+0x17a/0x270 [ 263.453987] dccp_feat_activate_values+0x33a/0x766 [ 263.458903] dccp_rcv_state_process+0x116f/0x1931 [ 263.463739] dccp_v6_do_rcv+0x269/0xbf0 [ 263.467704] __release_sock+0x12e/0x3a0 [ 263.471661] release_sock+0x59/0x1c0 [ 263.475405] __inet_stream_connect+0x59f/0xea0 [ 263.479971] inet_stream_connect+0x58/0xa0 [ 263.484190] __sys_connect+0x266/0x330 [ 263.488062] __x64_sys_connect+0x73/0xb0 [ 263.492150] do_syscall_64+0x103/0x610 [ 263.496020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.501196] [ 263.502804] Freed by task 11786: [ 263.506158] save_stack+0x45/0xd0 [ 263.509605] __kasan_slab_free+0x102/0x150 [ 263.513845] kasan_slab_free+0xe/0x10 [ 263.517625] kmem_cache_free+0x86/0x260 [ 263.521587] ccid_hc_tx_delete+0xc1/0x100 [ 263.525717] dccp_hdlr_ccid+0x7d/0x150 [ 263.529595] __dccp_feat_activate+0x17a/0x270 [ 263.534072] dccp_feat_activate_values+0x33a/0x766 [ 263.538982] dccp_create_openreq_child+0x40c/0x570 [ 263.543890] dccp_v6_request_recv_sock+0x214/0x1da0 [ 263.548884] dccp_check_req+0x35c/0x6f0 [ 263.552838] dccp_v6_rcv+0x6d7/0x191e [ 263.556691] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 263.561615] ip6_input_finish+0x84/0x170 [ 263.565853] ip6_input+0xe4/0x3f0 [ 263.569290] ip6_rcv_finish+0x1e7/0x320 [ 263.573250] ipv6_rcv+0x10e/0x420 [ 263.576716] __netif_receive_skb_one_core+0x115/0x1a0 [ 263.581885] __netif_receive_skb+0x2c/0x1c0 [ 263.586186] process_backlog+0x206/0x750 [ 263.590225] net_rx_action+0x4fa/0x1070 [ 263.594180] __do_softirq+0x266/0x95a [ 263.597969] [ 263.599591] The buggy address belongs to the object at ffff888091ad8300 [ 263.599591] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 263.612749] The buggy address is located 0 bytes inside of [ 263.612749] 1240-byte region [ffff888091ad8300, ffff888091ad87d8) [ 263.624510] The buggy address belongs to the page: [ 263.629438] page:ffffea000246b600 count:1 mapcount:0 mapping:ffff88809a8f4500 index:0x0 compound_mapcount: 0 [ 263.639477] flags: 0x1fffc0000010200(slab|head) [ 263.644132] raw: 01fffc0000010200 ffffea000247d108 ffffea00023a0988 ffff88809a8f4500 [ 263.651996] raw: 0000000000000000 ffff888091ad8300 0000000100000005 0000000000000000 [ 263.659857] page dumped because: kasan: bad access detected [ 263.665545] [ 263.667156] Memory state around the buggy address: [ 263.672079] ffff888091ad8200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.679420] ffff888091ad8280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.686761] >ffff888091ad8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.694101] ^ [ 263.697448] ffff888091ad8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.704788] ffff888091ad8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.712127] ================================================================== [ 263.719465] Disabling lock debugging due to kernel taint [ 263.724952] Kernel panic - not syncing: panic_on_warn set ... [ 263.730842] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.0.0-rc5+ #63 [ 263.739066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.748458] Call Trace: [ 263.751063] dump_stack+0x172/0x1f0 [ 263.754102] kobject: 'loop2' (00000000e36685f7): kobject_uevent_env [ 263.754769] panic+0x2cb/0x65c [ 263.764280] ? __warn_printk+0xf3/0xf3 [ 263.768166] ? retint_kernel+0x2d/0x2d [ 263.772145] ? trace_hardirqs_on+0x5e/0x230 [ 263.776577] ? ccid_hc_tx_delete+0xde/0x100 [ 263.780164] kobject: 'loop2' (00000000e36685f7): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 263.780898] end_report+0x47/0x4f [ 263.793763] ? ccid_hc_tx_delete+0xde/0x100 [ 263.798091] kasan_report.cold+0xe/0x40 [ 263.800404] kobject: 'loop3' (0000000040c02e07): kobject_uevent_env [ 263.802063] ? ccid_hc_tx_delete+0xde/0x100 [ 263.802082] __asan_report_load8_noabort+0x14/0x20 [ 263.811397] kobject: 'loop3' (0000000040c02e07): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 263.812769] ccid_hc_tx_delete+0xde/0x100 [ 263.812786] dccp_sk_destruct+0x3f/0x90 [ 263.821946] kobject: 'loop3' (0000000040c02e07): kobject_uevent_env [ 263.827125] ? dccp_init_sock+0x3f0/0x3f0 [ 263.827140] __sk_destruct+0x55/0x6d0 [ 263.827154] ? sock_no_getname+0x10/0x10 [ 263.835703] kobject: 'loop3' (0000000040c02e07): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 263.841640] rcu_process_callbacks+0x928/0x1390 [ 263.841657] ? rcu_check_gp_start_stall+0x240/0x240 [ 263.841673] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 263.878262] __do_softirq+0x266/0x95a [ 263.882063] ? pci_mmcfg_check_reserved+0x170/0x170 [ 263.887082] ? takeover_tasklets+0x7b0/0x7b0 [ 263.891491] run_ksoftirqd+0x8e/0x110 [ 263.895288] smpboot_thread_fn+0x6ab/0xa10 [ 263.899521] ? sort_range+0x30/0x30 [ 263.903143] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 263.908675] ? __kthread_parkme+0xfb/0x1b0 [ 263.912992] kthread+0x357/0x430 [ 263.916357] ? sort_range+0x30/0x30 [ 263.920066] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 263.925596] ret_from_fork+0x3a/0x50 [ 263.930528] Kernel Offset: disabled [ 263.934146] Rebooting in 86400 seconds..