[ 61.508614][ T27] audit: type=1800 audit(1558149662.504:25): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.529608][ T27] audit: type=1800 audit(1558149662.524:26): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.593225][ T27] audit: type=1800 audit(1558149662.524:27): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.177' (ECDSA) to the list of known hosts. 2019/05/18 03:21:12 fuzzer started 2019/05/18 03:21:15 dialing manager at 10.128.0.26:37669 2019/05/18 03:21:15 syscalls: 1006 2019/05/18 03:21:15 code coverage: enabled 2019/05/18 03:21:15 comparison tracing: enabled 2019/05/18 03:21:15 extra coverage: extra coverage is not supported by the kernel 2019/05/18 03:21:15 setuid sandbox: enabled 2019/05/18 03:21:15 namespace sandbox: enabled 2019/05/18 03:21:15 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/18 03:21:15 fault injection: enabled 2019/05/18 03:21:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/18 03:21:15 net packet injection: enabled 2019/05/18 03:21:15 net device setup: enabled 03:21:18 executing program 0: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x0, 0x0, 0x0) syzkaller login: [ 77.683746][ T9086] IPVS: ftp: loaded support on port[0] = 21 [ 77.694408][ T9086] NET: Registered protocol family 30 [ 77.699966][ T9086] Failed to register TIPC socket type 03:21:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 77.914576][ T9088] IPVS: ftp: loaded support on port[0] = 21 [ 77.932797][ T9088] NET: Registered protocol family 30 [ 77.938101][ T9088] Failed to register TIPC socket type 03:21:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x3f, 0x5, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000001540)=""/144}, 0x18) [ 78.367366][ T9090] IPVS: ftp: loaded support on port[0] = 21 [ 78.392642][ T9090] NET: Registered protocol family 30 [ 78.397953][ T9090] Failed to register TIPC socket type 03:21:19 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) [ 78.967154][ T9092] IPVS: ftp: loaded support on port[0] = 21 [ 79.002678][ T9092] NET: Registered protocol family 30 [ 79.008009][ T9092] Failed to register TIPC socket type 03:21:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @loopback}}) [ 79.554050][ T9094] IPVS: ftp: loaded support on port[0] = 21 [ 79.572795][ T9094] NET: Registered protocol family 30 [ 79.578110][ T9094] Failed to register TIPC socket type 03:21:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}, 0xc2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 80.444988][ T9086] chnl_net:caif_netlink_parms(): no params data found [ 80.603887][ T9102] IPVS: ftp: loaded support on port[0] = 21 [ 80.682851][ T9102] NET: Registered protocol family 30 [ 80.688176][ T9102] Failed to register TIPC socket type [ 80.898479][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.906205][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.950452][ T9086] device bridge_slave_0 entered promiscuous mode [ 81.079793][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.086949][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.219534][ T9086] device bridge_slave_1 entered promiscuous mode [ 81.769887][ T9086] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.110708][ T9086] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.742070][ T9086] team0: Port device team_slave_0 added [ 83.042755][ T9086] team0: Port device team_slave_1 added [ 84.555966][ T9086] device hsr_slave_0 entered promiscuous mode [ 85.091701][ T9086] device hsr_slave_1 entered promiscuous mode [ 87.572291][ T9086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.906927][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.971562][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.214899][ T9086] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.600362][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.629591][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.840342][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.847608][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.161202][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.289260][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.441329][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.591963][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.599143][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.843447][ T9454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.021530][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.251154][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.281502][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.560508][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.569086][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.780258][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.134379][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.195407][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.381933][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.549270][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.740285][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.142009][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 03:21:38 executing program 0: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x0, 0x0, 0x0) 03:21:39 executing program 0: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x0, 0x0, 0x0) 03:21:40 executing program 0: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x0, 0x0, 0x0) 03:21:42 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000), 0x10) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f00000001c0)=@generic={0x10000000001e, "010000000000020000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) [ 102.335622][ T9585] IPVS: ftp: loaded support on port[0] = 21 [ 102.671878][ T9584] IPVS: ftp: loaded support on port[0] = 21 [ 102.681475][ T9582] IPVS: ftp: loaded support on port[0] = 21 [ 102.687991][ T9586] IPVS: ftp: loaded support on port[0] = 21 03:21:43 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000), 0x10) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f00000001c0)=@generic={0x10000000001e, "010000000000020000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) [ 102.932746][ T9582] NET: Registered protocol family 30 [ 102.938074][ T9582] Failed to register TIPC socket type [ 103.180891][ T9586] list_add double add: new=ffffffff89544ab0, prev=ffffffff89334ac0, next=ffffffff89544ab0. [ 103.189315][ C0] cache_from_obj: Wrong slab cache. TIPC but object is from kmalloc-2k [ 103.199644][ C0] WARNING: CPU: 0 PID: 9 at mm/slab.h:376 kmem_cache_free.cold+0x1c/0x23 [ 103.208072][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 103.214678][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.1.0+ #18 [ 103.221704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.231786][ C0] Call Trace: [ 103.235096][ C0] dump_stack+0x172/0x1f0 [ 103.239438][ C0] ? __check_heap_object+0x50/0xb3 [ 103.244568][ C0] panic+0x2cb/0x65c [ 103.248482][ C0] ? __warn_printk+0xf3/0xf3 [ 103.253101][ C0] ? kmem_cache_free.cold+0x1c/0x23 [ 103.258346][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.264601][ C0] ? __warn.cold+0x5/0x45 [ 103.268943][ C0] ? __warn+0xe8/0x1d0 [ 103.273025][ C0] ? kmem_cache_free.cold+0x1c/0x23 [ 103.278241][ C0] __warn.cold+0x20/0x45 [ 103.282494][ C0] ? wake_up_klogd+0x99/0xd0 [ 103.287099][ C0] ? kmem_cache_free.cold+0x1c/0x23 [ 103.292311][ C0] report_bug+0x263/0x2b0 [ 103.296652][ C0] do_error_trap+0x11b/0x200 [ 103.301256][ C0] do_invalid_op+0x37/0x50 [ 103.305684][ C0] ? kmem_cache_free.cold+0x1c/0x23 [ 103.310913][ C0] invalid_op+0x14/0x20 [ 103.315081][ C0] RIP: 0010:kmem_cache_free.cold+0x1c/0x23 [ 103.320892][ C0] Code: e8 a5 ae 6e 05 44 8b 6d c4 e9 04 a6 ff ff 48 8b 48 58 48 c7 c6 80 42 74 87 48 c7 c7 f0 a9 5c 88 49 8b 54 24 58 e8 e4 9d b1 ff <0f> 0b e9 89 df ff ff 49 8b 4f 58 48 c7 c6 80 42 74 87 48 c7 c7 f0 [ 103.340592][ C0] RSP: 0018:ffff8880a98afbc0 EFLAGS: 00010286 [ 103.346668][ C0] RAX: 0000000000000044 RBX: ffff8880977cf100 RCX: 0000000000000000 [ 103.354644][ C0] RDX: 0000000000000000 RSI: ffffffff815afbe6 RDI: ffffed1015315f6a [ 103.362628][ C0] RBP: ffff8880a98afbe0 R08: 0000000000000044 R09: ffffed1015d06011 [ 103.370606][ C0] R10: ffffed1015d06010 R11: ffff8880ae830087 R12: ffff8880a90e1180 [ 103.378585][ C0] R13: 0000000000000000 R14: ffff8880a90e1180 R15: ffff8880977cf428 [ 103.386590][ C0] ? vprintk_func+0x86/0x189 [ 103.391208][ C0] __sk_destruct+0x4be/0x6e0 [ 103.395817][ C0] ? tipc_wait_for_connect.isra.0+0x4c0/0x4c0 [ 103.401899][ C0] sk_destruct+0x7b/0x90 [ 103.406155][ C0] __sk_free+0xce/0x300 [ 103.410325][ C0] ? tipc_wait_for_connect.isra.0+0x4c0/0x4c0 [ 103.416406][ C0] sk_free+0x42/0x50 [ 103.420313][ C0] tipc_sk_callback+0x48/0x60 [ 103.425013][ C0] rcu_core+0x973/0x1430 [ 103.429272][ C0] ? rcu_note_context_switch+0x1760/0x1760 [ 103.435089][ C0] ? sched_clock+0x2e/0x50 [ 103.439531][ C0] __do_softirq+0x266/0x95a [ 103.444059][ C0] ? takeover_tasklets+0x7b0/0x7b0 [ 103.449180][ C0] run_ksoftirqd+0x8e/0x110 [ 103.453694][ C0] smpboot_thread_fn+0x6ab/0xa40 [ 103.458662][ C0] ? sort_range+0x30/0x30 [ 103.463004][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 103.469253][ C0] ? __kthread_parkme+0xfb/0x1b0 [ 103.474206][ C0] kthread+0x357/0x430 [ 103.478286][ C0] ? sort_range+0x30/0x30 [ 103.482626][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 103.488901][ C0] ret_from_fork+0x3a/0x50 [ 103.494496][ C0] Kernel Offset: disabled [ 103.498870][ C0] Rebooting in 86400 seconds..