[ 34.036944] audit: type=1800 audit(1549740113.439:27): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.075688] audit: type=1800 audit(1549740113.439:28): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.814762] audit: type=1800 audit(1549740114.259:29): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.834335] audit: type=1800 audit(1549740114.259:30): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. 2019/02/09 19:23:04 parsed 1 programs 2019/02/09 19:23:07 executed programs: 0 syzkaller login: [ 108.346120] IPVS: ftp: loaded support on port[0] = 21 [ 108.346941] IPVS: ftp: loaded support on port[0] = 21 [ 108.354402] IPVS: ftp: loaded support on port[0] = 21 [ 108.377718] IPVS: ftp: loaded support on port[0] = 21 [ 108.378100] IPVS: ftp: loaded support on port[0] = 21 [ 108.390612] IPVS: ftp: loaded support on port[0] = 21 [ 108.619918] chnl_net:caif_netlink_parms(): no params data found [ 108.696236] chnl_net:caif_netlink_parms(): no params data found [ 108.839344] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.845728] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.852849] device bridge_slave_0 entered promiscuous mode [ 108.862598] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.869034] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.875907] device bridge_slave_1 entered promiscuous mode [ 108.917581] chnl_net:caif_netlink_parms(): no params data found [ 108.935948] chnl_net:caif_netlink_parms(): no params data found [ 108.943706] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.950947] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.957846] device bridge_slave_0 entered promiscuous mode [ 108.983003] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.994026] chnl_net:caif_netlink_parms(): no params data found [ 109.007693] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.014122] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.021270] device bridge_slave_1 entered promiscuous mode [ 109.031741] chnl_net:caif_netlink_parms(): no params data found [ 109.041919] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.117806] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.140642] team0: Port device team_slave_0 added [ 109.173764] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.183573] team0: Port device team_slave_1 added [ 109.207698] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.214216] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.221744] device bridge_slave_0 entered promiscuous mode [ 109.244537] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.251023] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.257880] device bridge_slave_0 entered promiscuous mode [ 109.281783] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.288130] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.295727] device bridge_slave_1 entered promiscuous mode [ 109.302337] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.309951] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.316842] device bridge_slave_0 entered promiscuous mode [ 109.330048] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.336399] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.343619] device bridge_slave_1 entered promiscuous mode [ 109.401827] device hsr_slave_0 entered promiscuous mode [ 109.438903] device hsr_slave_1 entered promiscuous mode [ 109.478907] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.485268] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.493322] device bridge_slave_0 entered promiscuous mode [ 109.506380] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.513706] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.522167] device bridge_slave_1 entered promiscuous mode [ 109.528415] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.537363] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.544427] device bridge_slave_1 entered promiscuous mode [ 109.557950] team0: Port device team_slave_0 added [ 109.564681] team0: Port device team_slave_1 added [ 109.589953] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.608091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.619746] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.628696] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.637623] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.677515] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.705095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.714524] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.760860] device hsr_slave_0 entered promiscuous mode [ 109.798915] device hsr_slave_1 entered promiscuous mode [ 109.856790] team0: Port device team_slave_0 added [ 109.884129] team0: Port device team_slave_0 added [ 109.890580] team0: Port device team_slave_1 added [ 109.905825] team0: Port device team_slave_1 added [ 109.918783] team0: Port device team_slave_0 added [ 109.924914] team0: Port device team_slave_1 added [ 109.953368] team0: Port device team_slave_0 added [ 110.011019] device hsr_slave_0 entered promiscuous mode [ 110.059032] device hsr_slave_1 entered promiscuous mode [ 110.160463] device hsr_slave_0 entered promiscuous mode [ 110.198828] device hsr_slave_1 entered promiscuous mode [ 110.240180] team0: Port device team_slave_1 added [ 110.311376] device hsr_slave_0 entered promiscuous mode [ 110.368835] device hsr_slave_1 entered promiscuous mode [ 110.491365] device hsr_slave_0 entered promiscuous mode [ 110.528796] device hsr_slave_1 entered promiscuous mode [ 110.697642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.720387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.735532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.755543] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.782727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.790647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.797421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.804807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.823088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.834291] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.850128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.870054] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.876073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.884300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.892280] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.898781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.905821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.914338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.922038] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.928371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.935379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.942356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.949381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.957040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.964676] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.971017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.978249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.985637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.999778] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.011634] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.031522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.038456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.045710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.052964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.059890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.067578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.075234] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.081595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.088311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.096252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.103866] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.110288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.117420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.125149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.132782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.140920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.148413] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.154791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.161512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.169484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.177423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.184553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.214716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.226119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.235919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.243888] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.250268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.257226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.265307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.273003] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.279389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.286166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.294276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.302219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.310088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.317618] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.323992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.331054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.338970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.346645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.354577] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.360988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.367818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.375701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.383335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.391228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.397995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.404970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.412323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.419829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.453781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.463765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.474998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.483250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.494098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.502252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.510130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.517614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.525796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.533368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.541235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.548821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.556352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.563927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.572096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.580053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.587495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.595421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.602991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.610668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.618301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.626040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.633992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.641431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.648451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.655824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.668862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.679440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.694910] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.707387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.717846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.731473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.739805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.747273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.755251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.762847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.770531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.777968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.785734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.793168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.801067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.809266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.816744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.824248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.831594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.855145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.865408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.877985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.889185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.896535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.904368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.913212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.920916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.928285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.958063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.964818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.974219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.982430] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.988821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.995838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.003378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.011881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.025358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.040434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.046850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.064539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.090457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.098211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.107683] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.114061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.121710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.129704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.137287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.145159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.153241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.165548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.231309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.314076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.363057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.384778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.438005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.464783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.507469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.524334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.584737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.593498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2019/02/09 19:23:12 executed programs: 46 2019/02/09 19:23:17 executed programs: 280 2019/02/09 19:23:22 executed programs: 524 2019/02/09 19:23:27 executed programs: 761 2019/02/09 19:23:32 executed programs: 996 2019/02/09 19:23:37 executed programs: 1247 2019/02/09 19:23:42 executed programs: 1487 [ 148.158868] ================================================================== [ 148.166407] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 148.173163] Read of size 8 at addr ffff8880a5077140 by task ksoftirqd/1/16 [ 148.180189] [ 148.181843] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.0.0-rc5+ #64 [ 148.188593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.197931] Call Trace: [ 148.200529] dump_stack+0x172/0x1f0 [ 148.204152] ? ccid_hc_tx_delete+0xde/0x100 [ 148.208492] print_address_description.cold+0x7c/0x20d [ 148.213794] ? ccid_hc_tx_delete+0xde/0x100 [ 148.218124] ? ccid_hc_tx_delete+0xde/0x100 [ 148.222447] kasan_report.cold+0x1b/0x40 [ 148.226584] ? ccid_hc_tx_delete+0xde/0x100 [ 148.230919] __asan_report_load8_noabort+0x14/0x20 [ 148.235851] ccid_hc_tx_delete+0xde/0x100 [ 148.240061] dccp_sk_destruct+0x3f/0x90 [ 148.244036] ? dccp_init_sock+0x3f0/0x3f0 [ 148.248217] __sk_destruct+0x55/0x6d0 [ 148.252035] ? sock_no_getname+0x10/0x10 [ 148.256106] rcu_process_callbacks+0x928/0x1390 [ 148.260784] ? rcu_check_gp_start_stall+0x240/0x240 [ 148.260806] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 148.260822] __do_softirq+0x266/0x95a [ 148.271381] ? pci_mmcfg_check_reserved+0x170/0x170 [ 148.271400] ? takeover_tasklets+0x7b0/0x7b0 [ 148.271411] run_ksoftirqd+0x8e/0x110 [ 148.271421] smpboot_thread_fn+0x6ab/0xa10 [ 148.271433] ? sort_range+0x30/0x30 [ 148.271444] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 148.271456] ? __kthread_parkme+0xfb/0x1b0 [ 148.306045] kthread+0x357/0x430 2019/02/09 19:23:47 executed programs: 1713 [ 148.309423] ? sort_range+0x30/0x30 [ 148.313049] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 148.318587] ret_from_fork+0x3a/0x50 [ 148.322315] [ 148.323936] Allocated by task 14473: [ 148.327650] save_stack+0x45/0xd0 [ 148.331126] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 148.336054] kasan_slab_alloc+0xf/0x20 [ 148.339937] kmem_cache_alloc+0x12d/0x710 [ 148.344085] ccid_new+0x256/0x3f0 [ 148.347537] dccp_hdlr_ccid+0x27/0x150 [ 148.351438] __dccp_feat_activate+0x17a/0x270 [ 148.355931] dccp_feat_activate_values+0x33a/0x766 [ 148.360863] dccp_rcv_state_process+0x116f/0x1931 [ 148.365730] dccp_v6_do_rcv+0x269/0xbf0 [ 148.365741] __release_sock+0x12e/0x3a0 [ 148.365751] release_sock+0x59/0x1c0 [ 148.365764] __inet_stream_connect+0x59f/0xea0 [ 148.365789] inet_stream_connect+0x58/0xa0 [ 148.365816] __sys_connect+0x266/0x330 [ 148.390356] __ia32_sys_connect+0x72/0xb0 [ 148.394526] do_fast_syscall_32+0x281/0xc98 [ 148.398859] entry_SYSENTER_compat+0x70/0x7f [ 148.403277] [ 148.404897] Freed by task 14482: [ 148.408265] save_stack+0x45/0xd0 [ 148.411713] __kasan_slab_free+0x102/0x150 [ 148.415946] kasan_slab_free+0xe/0x10 [ 148.419740] kmem_cache_free+0x86/0x260 [ 148.423705] ccid_hc_tx_delete+0xc1/0x100 [ 148.427844] dccp_hdlr_ccid+0x7d/0x150 [ 148.431727] __dccp_feat_activate+0x17a/0x270 [ 148.436216] dccp_feat_activate_values+0x33a/0x766 [ 148.441139] dccp_create_openreq_child+0x40c/0x570 [ 148.446069] dccp_v6_request_recv_sock+0x214/0x1da0 [ 148.451080] dccp_check_req+0x35c/0x6f0 [ 148.455044] dccp_v6_rcv+0x6d7/0x191e [ 148.458840] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 148.463761] ip6_input_finish+0x84/0x170 [ 148.467812] ip6_input+0xe4/0x3f0 [ 148.471261] ip6_rcv_finish+0x1e7/0x320 [ 148.475229] ipv6_rcv+0x10e/0x420 [ 148.478678] __netif_receive_skb_one_core+0x115/0x1a0 [ 148.483860] __netif_receive_skb+0x2c/0x1c0 [ 148.488200] process_backlog+0x206/0x750 [ 148.492253] net_rx_action+0x4fa/0x1070 [ 148.496236] __do_softirq+0x266/0x95a [ 148.500019] [ 148.501637] The buggy address belongs to the object at ffff8880a5077140 [ 148.501637] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 148.514810] The buggy address is located 0 bytes inside of [ 148.514810] 1240-byte region [ffff8880a5077140, ffff8880a5077618) [ 148.526589] The buggy address belongs to the page: [ 148.531515] page:ffffea0002941d80 count:1 mapcount:0 mapping:ffff88809a8ec500 index:0x0 compound_mapcount: 0 [ 148.541476] flags: 0x1fffc0000010200(slab|head) [ 148.546141] raw: 01fffc0000010200 ffffea000294f408 ffffea0002932708 ffff88809a8ec500 [ 148.554031] raw: 0000000000000000 ffff8880a50760c0 0000000100000005 0000000000000000 [ 148.561903] page dumped because: kasan: bad access detected [ 148.567594] [ 148.569205] Memory state around the buggy address: [ 148.574132] ffff8880a5077000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.581517] ffff8880a5077080: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 148.588878] >ffff8880a5077100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 148.596277] ^ [ 148.601716] ffff8880a5077180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.609065] ffff8880a5077200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.616413] ================================================================== [ 148.623758] Disabling lock debugging due to kernel taint [ 148.629251] Kernel panic - not syncing: panic_on_warn set ... [ 148.630898] kobject: 'loop5' (00000000e693d47f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 148.635148] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.0.0-rc5+ #64 [ 148.635155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.635159] Call Trace: [ 148.635175] dump_stack+0x172/0x1f0 [ 148.635191] panic+0x2cb/0x65c [ 148.671478] ? __warn_printk+0xf3/0xf3 [ 148.675359] ? retint_kernel+0x2d/0x2d [ 148.679248] ? trace_hardirqs_on+0x5e/0x230 [ 148.680081] kobject: 'loop2' (00000000c06bc9fd): kobject_uevent_env [ 148.683562] ? ccid_hc_tx_delete+0xde/0x100 [ 148.683576] end_report+0x47/0x4f [ 148.683585] ? ccid_hc_tx_delete+0xde/0x100 [ 148.683598] kasan_report.cold+0xe/0x40 [ 148.706317] ? ccid_hc_tx_delete+0xde/0x100 [ 148.710679] __asan_report_load8_noabort+0x14/0x20 [ 148.715605] ccid_hc_tx_delete+0xde/0x100 [ 148.715980] kobject: 'loop2' (00000000c06bc9fd): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 148.719747] dccp_sk_destruct+0x3f/0x90 [ 148.719758] ? dccp_init_sock+0x3f0/0x3f0 [ 148.719781] __sk_destruct+0x55/0x6d0 [ 148.719793] ? sock_no_getname+0x10/0x10 [ 148.719807] rcu_process_callbacks+0x928/0x1390 [ 148.719821] ? rcu_check_gp_start_stall+0x240/0x240 [ 148.754937] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 148.760406] __do_softirq+0x266/0x95a [ 148.764203] ? pci_mmcfg_check_reserved+0x170/0x170 [ 148.769272] ? takeover_tasklets+0x7b0/0x7b0 [ 148.773713] run_ksoftirqd+0x8e/0x110 [ 148.777531] smpboot_thread_fn+0x6ab/0xa10 [ 148.781781] ? sort_range+0x30/0x30 [ 148.784287] kobject: 'loop0' (00000000e942d722): kobject_uevent_env [ 148.785419] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 148.785432] ? __kthread_parkme+0xfb/0x1b0 [ 148.785444] kthread+0x357/0x430 [ 148.785472] ? sort_range+0x30/0x30 [ 148.808599] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 148.814138] ret_from_fork+0x3a/0x50 [ 148.818869] Kernel Offset: disabled [ 148.822499] Rebooting in 86400 seconds..