[ 35.245066][ T26] audit: type=1800 audit(1550574908.032:27): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 35.266769][ T26] audit: type=1800 audit(1550574908.032:28): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.321608][ T26] audit: type=1800 audit(1550574909.152:29): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.342007][ T26] audit: type=1800 audit(1550574909.152:30): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. 2019/02/19 11:35:33 parsed 1 programs 2019/02/19 11:35:36 executed programs: 0 syzkaller login: [ 1263.432629][ T7572] IPVS: ftp: loaded support on port[0] = 21 [ 1263.437225][ T7574] IPVS: ftp: loaded support on port[0] = 21 [ 1263.503610][ T7576] IPVS: ftp: loaded support on port[0] = 21 [ 1263.526176][ T7579] IPVS: ftp: loaded support on port[0] = 21 [ 1263.540703][ T7581] IPVS: ftp: loaded support on port[0] = 21 [ 1263.540710][ T7580] IPVS: ftp: loaded support on port[0] = 21 [ 1263.673230][ T7572] chnl_net:caif_netlink_parms(): no params data found [ 1263.705654][ T7574] chnl_net:caif_netlink_parms(): no params data found [ 1263.765152][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.772768][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.780750][ T7572] device bridge_slave_0 entered promiscuous mode [ 1263.790243][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.798461][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.806314][ T7572] device bridge_slave_1 entered promiscuous mode [ 1263.842972][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.850372][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.858842][ T7574] device bridge_slave_0 entered promiscuous mode [ 1263.867932][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.874966][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.882619][ T7574] device bridge_slave_1 entered promiscuous mode [ 1263.901062][ T7572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1263.913488][ T7572] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1263.932116][ T7574] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1263.985599][ T7574] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1264.011104][ T7574] team0: Port device team_slave_0 added [ 1264.037565][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 1264.047455][ T7576] chnl_net:caif_netlink_parms(): no params data found [ 1264.057350][ T7574] team0: Port device team_slave_1 added [ 1264.067149][ T7572] team0: Port device team_slave_0 added [ 1264.074923][ T7572] team0: Port device team_slave_1 added [ 1264.158242][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.165391][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.175057][ T7576] device bridge_slave_0 entered promiscuous mode [ 1264.184359][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.191501][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.199399][ T7576] device bridge_slave_1 entered promiscuous mode [ 1264.249221][ T7574] device hsr_slave_0 entered promiscuous mode [ 1264.286202][ T7574] device hsr_slave_1 entered promiscuous mode [ 1264.347781][ T7581] chnl_net:caif_netlink_parms(): no params data found [ 1264.379292][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.386801][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.394395][ T7580] device bridge_slave_0 entered promiscuous mode [ 1264.405816][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.412856][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.421134][ T7580] device bridge_slave_1 entered promiscuous mode [ 1264.508194][ T7572] device hsr_slave_0 entered promiscuous mode [ 1264.546137][ T7572] device hsr_slave_1 entered promiscuous mode [ 1264.587647][ T7576] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1264.604015][ T7580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1264.635607][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.643309][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.651359][ T7581] device bridge_slave_0 entered promiscuous mode [ 1264.659401][ T7576] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1264.669004][ T7580] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1264.679612][ T7579] chnl_net:caif_netlink_parms(): no params data found [ 1264.700936][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.708128][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.715713][ T7581] device bridge_slave_1 entered promiscuous mode [ 1264.767552][ T7580] team0: Port device team_slave_0 added [ 1264.781915][ T7581] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1264.791926][ T7581] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1264.801221][ T7576] team0: Port device team_slave_0 added [ 1264.807829][ T7580] team0: Port device team_slave_1 added [ 1264.830123][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.837455][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.844993][ T7579] device bridge_slave_0 entered promiscuous mode [ 1264.858124][ T7576] team0: Port device team_slave_1 added [ 1264.871007][ T7581] team0: Port device team_slave_0 added [ 1264.918116][ T7580] device hsr_slave_0 entered promiscuous mode [ 1264.966192][ T7580] device hsr_slave_1 entered promiscuous mode [ 1265.016571][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.023645][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.031694][ T7579] device bridge_slave_1 entered promiscuous mode [ 1265.044253][ T7581] team0: Port device team_slave_1 added [ 1265.060828][ T7579] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1265.073753][ T7579] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1265.168652][ T7576] device hsr_slave_0 entered promiscuous mode [ 1265.226146][ T7576] device hsr_slave_1 entered promiscuous mode [ 1265.378586][ T7581] device hsr_slave_0 entered promiscuous mode [ 1265.416316][ T7581] device hsr_slave_1 entered promiscuous mode [ 1265.469033][ T7579] team0: Port device team_slave_0 added [ 1265.479916][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.502636][ T7579] team0: Port device team_slave_1 added [ 1265.580361][ T7579] device hsr_slave_0 entered promiscuous mode [ 1265.636276][ T7579] device hsr_slave_1 entered promiscuous mode [ 1265.681979][ T7572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.691724][ T7574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.718271][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1265.727130][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1265.759048][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1265.767601][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1265.780267][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.787546][ T7593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.797244][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1265.804747][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1265.822117][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.832624][ T7574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.843942][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1265.851843][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1265.860638][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1265.869098][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.876177][ T7593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.901344][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.910134][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.918439][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1265.926306][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1265.958363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1265.970161][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1265.978767][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1265.987169][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.994192][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.001760][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1266.010416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1266.018941][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1266.027241][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.034260][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.041771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1266.050545][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1266.058835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1266.067384][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1266.075631][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1266.083879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1266.092319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1266.102299][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1266.110482][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1266.118963][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1266.127274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.134295][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.141802][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1266.150308][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1266.158587][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.165596][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.173121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1266.180644][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1266.188589][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1266.196372][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1266.203950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1266.217352][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.224151][ T7572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1266.236172][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1266.248594][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.256177][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1266.264348][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1266.273173][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1266.281599][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1266.290046][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1266.298355][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1266.307978][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.323968][ T7580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1266.334771][ T7580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1266.358952][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.365956][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1266.374305][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1266.386032][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1266.394181][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1266.403017][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1266.411292][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1266.419540][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1266.428585][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1266.437119][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1266.445307][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1266.452890][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1266.460680][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1266.468277][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1266.482337][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.495570][ T7579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.507991][ T7572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.526561][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1266.535007][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1266.544030][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.551131][ T7593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.558676][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1266.566471][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1266.573968][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1266.582419][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1266.590795][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.597906][ T7593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.605364][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1266.614409][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1266.622684][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.629753][ T7593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.637383][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1266.646159][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1266.654364][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.661426][ T7593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.668915][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1266.677565][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1266.686054][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.693076][ T7593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.700640][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1266.709235][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1266.718035][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1266.725721][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1266.733527][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1266.760248][ T7574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1266.772343][ T7574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1266.785312][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1266.798844][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1266.810744][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.817852][ T7593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.825407][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1266.834208][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1266.842908][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1266.851113][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1266.859501][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1266.867849][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1266.876273][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1266.884271][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1266.892676][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1266.900835][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1266.909097][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1266.917266][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1266.925488][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1266.933726][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1266.941507][ T7593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1266.962671][ T7574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.981201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1267.000543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1267.021632][ T7579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1267.036514][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1267.055045][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1267.064492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1267.073073][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1267.091730][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1267.102462][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1267.155223][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1267.173283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1267.201520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1267.228628][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1267.242403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1267.251898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1267.270254][ T7579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.287642][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1267.327540][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1267.352520][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1267.375314][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1267.392921][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1267.432192][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1267.473204][ T7581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1267.484354][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1267.497764][ T7576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1267.508683][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1267.518350][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1267.527176][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1267.535219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1267.543513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1267.560358][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.591004][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/02/19 11:35:41 executed programs: 51 2019/02/19 11:35:46 executed programs: 310 2019/02/19 11:35:51 executed programs: 571 2019/02/19 11:35:56 executed programs: 838 2019/02/19 11:36:01 executed programs: 1105 2019/02/19 11:36:06 executed programs: 1362 2019/02/19 11:36:11 executed programs: 1621 2019/02/19 11:36:16 executed programs: 1891 2019/02/19 11:36:21 executed programs: 2148 2019/02/19 11:36:26 executed programs: 2404 2019/02/19 11:36:31 executed programs: 2669 2019/02/19 11:36:36 executed programs: 2924 2019/02/19 11:36:41 executed programs: 3183 2019/02/19 11:36:46 executed programs: 3437 2019/02/19 11:36:51 executed programs: 3696 2019/02/19 11:36:56 executed programs: 3945 2019/02/19 11:37:01 executed programs: 4214 2019/02/19 11:37:06 executed programs: 4470 2019/02/19 11:37:11 executed programs: 4728 2019/02/19 11:37:16 executed programs: 4984 2019/02/19 11:37:21 executed programs: 5238 2019/02/19 11:37:26 executed programs: 5488 2019/02/19 11:37:31 executed programs: 5739 2019/02/19 11:37:36 executed programs: 5994 2019/02/19 11:37:41 executed programs: 6254 2019/02/19 11:37:46 executed programs: 6502 2019/02/19 11:37:51 executed programs: 6759 2019/02/19 11:37:56 executed programs: 7023 2019/02/19 11:38:01 executed programs: 7272 2019/02/19 11:38:06 executed programs: 7531 2019/02/19 11:38:11 executed programs: 7781 2019/02/19 11:38:16 executed programs: 8032 2019/02/19 11:38:21 executed programs: 8282 2019/02/19 11:38:26 executed programs: 8528 2019/02/19 11:38:31 executed programs: 8772 2019/02/19 11:38:36 executed programs: 9023 2019/02/19 11:38:41 executed programs: 9271 2019/02/19 11:38:46 executed programs: 9532 2019/02/19 11:38:51 executed programs: 9798 2019/02/19 11:38:56 executed programs: 10057 2019/02/19 11:39:01 executed programs: 10296 2019/02/19 11:39:06 executed programs: 10537 2019/02/19 11:39:11 executed programs: 10776 2019/02/19 11:39:16 executed programs: 11022 2019/02/19 11:39:21 executed programs: 11275 2019/02/19 11:39:26 executed programs: 11521 2019/02/19 11:39:31 executed programs: 11763 2019/02/19 11:39:36 executed programs: 11997 2019/02/19 11:39:42 executed programs: 12236 2019/02/19 11:39:47 executed programs: 12472 2019/02/19 11:39:52 executed programs: 12728 2019/02/19 11:39:57 executed programs: 12972 2019/02/19 11:40:02 executed programs: 13205 2019/02/19 11:40:07 executed programs: 13435 [ 1539.188245][ T7590] ================================================================== [ 1539.196422][ T7590] BUG: KASAN: use-after-free in __lock_acquire+0x3150/0x4710 [ 1539.203768][ T7590] Read of size 8 at addr ffff88808ce18410 by task kworker/u4:3/7590 [ 1539.211712][ T7590] [ 1539.214021][ T7590] CPU: 0 PID: 7590 Comm: kworker/u4:3 Not tainted 5.0.0-rc7-next-20190219 #38 [ 1539.222833][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.232939][ T7590] Workqueue: ib_addr process_one_req [ 1539.238196][ T7590] Call Trace: [ 1539.241489][ T7590] dump_stack+0x172/0x1f0 [ 1539.245804][ T7590] ? __lock_acquire+0x3150/0x4710 [ 1539.250843][ T7590] print_address_description.cold+0x7c/0x20d [ 1539.256885][ T7590] ? __lock_acquire+0x3150/0x4710 [ 1539.261886][ T7590] ? __lock_acquire+0x3150/0x4710 [ 1539.266884][ T7590] kasan_report.cold+0x1b/0x40 [ 1539.271628][ T7590] ? __lock_acquire+0x3150/0x4710 [ 1539.276632][ T7590] __asan_report_load8_noabort+0x14/0x20 [ 1539.282255][ T7590] __lock_acquire+0x3150/0x4710 [ 1539.287083][ T7590] ? mark_held_locks+0xa4/0xf0 [ 1539.291819][ T7590] ? fprop_fraction_percpu+0x102/0x430 [ 1539.297294][ T7590] ? __wb_calc_thresh+0xf1/0x420 [ 1539.302207][ T7590] ? fprop_fraction_percpu+0x102/0x430 [ 1539.307997][ T7590] ? mark_held_locks+0xf0/0xf0 [ 1539.312780][ T7590] ? debug_object_activate+0x1fd/0x470 [ 1539.318233][ T7590] ? find_held_lock+0x35/0x130 [ 1539.322972][ T7590] ? debug_object_activate+0x1fd/0x470 [ 1539.328409][ T7590] lock_acquire+0x16f/0x3f0 [ 1539.332917][ T7590] ? addr_handler+0xaf/0x3d0 [ 1539.337503][ T7590] ? addr_handler+0xaf/0x3d0 [ 1539.342155][ T7590] __mutex_lock+0xf7/0x1310 [ 1539.346632][ T7590] ? addr_handler+0xaf/0x3d0 [ 1539.351208][ T7590] ? addr_handler+0xaf/0x3d0 [ 1539.355884][ T7590] ? mutex_trylock+0x1e0/0x1e0 [ 1539.360623][ T7590] ? check_noncircular+0x20/0x20 [ 1539.365537][ T7590] ? mark_held_locks+0xf0/0xf0 [ 1539.370280][ T7590] mutex_lock_nested+0x16/0x20 [ 1539.375019][ T7590] ? mutex_lock_nested+0x16/0x20 [ 1539.379930][ T7590] addr_handler+0xaf/0x3d0 [ 1539.384323][ T7590] ? cma_work_handler+0x1f0/0x1f0 [ 1539.389338][ T7590] ? trace_hardirqs_off+0x62/0x220 [ 1539.394535][ T7590] ? kasan_check_read+0x11/0x20 [ 1539.399380][ T7590] ? process_one_work+0x890/0x1790 [ 1539.404466][ T7590] ? find_held_lock+0x35/0x130 [ 1539.409212][ T7590] ? process_one_work+0x890/0x1790 [ 1539.414303][ T7590] process_one_req+0x109/0x680 [ 1539.419046][ T7590] process_one_work+0x98e/0x1790 [ 1539.423961][ T7590] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1539.429307][ T7590] ? lock_acquire+0x16f/0x3f0 [ 1539.433965][ T7590] worker_thread+0x98/0xe40 [ 1539.438471][ T7590] kthread+0x357/0x430 [ 1539.442527][ T7590] ? process_one_work+0x1790/0x1790 [ 1539.447703][ T7590] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1539.453932][ T7590] ret_from_fork+0x3a/0x50 [ 1539.458321][ T7590] [ 1539.460623][ T7590] Allocated by task 5436: [ 1539.464928][ T7590] save_stack+0x45/0xd0 [ 1539.469061][ T7590] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1539.474669][ T7590] kasan_kmalloc+0x9/0x10 [ 1539.478978][ T7590] kmem_cache_alloc_trace+0x151/0x760 [ 1539.484325][ T7590] __rdma_create_id+0x5f/0x4e0 [ 1539.489104][ T7590] ucma_create_id+0x1de/0x640 [ 1539.493757][ T7590] ucma_write+0x2da/0x3c0 [ 1539.498093][ T7590] __vfs_write+0x8d/0x110 [ 1539.502396][ T7590] vfs_write+0x20c/0x580 [ 1539.506630][ T7590] ksys_write+0xea/0x1f0 [ 1539.510849][ T7590] __x64_sys_write+0x73/0xb0 [ 1539.515423][ T7590] do_syscall_64+0x103/0x610 [ 1539.519988][ T7590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1539.525848][ T7590] [ 1539.528152][ T7590] Freed by task 5453: [ 1539.532108][ T7590] save_stack+0x45/0xd0 [ 1539.536238][ T7590] __kasan_slab_free+0x102/0x150 [ 1539.541162][ T7590] kasan_slab_free+0xe/0x10 [ 1539.545642][ T7590] kfree+0xcf/0x230 [ 1539.549427][ T7590] rdma_destroy_id+0x723/0xab0 [ 1539.554163][ T7590] ucma_close+0x115/0x320 [ 1539.558463][ T7590] __fput+0x2e5/0x8d0 [ 1539.562424][ T7590] ____fput+0x16/0x20 [ 1539.566378][ T7590] task_work_run+0x14a/0x1c0 [ 1539.570984][ T7590] get_signal+0x1961/0x1d50 [ 1539.575483][ T7590] do_signal+0x87/0x1940 [ 1539.579703][ T7590] exit_to_usermode_loop+0x244/0x2c0 [ 1539.584960][ T7590] do_syscall_64+0x52d/0x610 [ 1539.589533][ T7590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1539.595392][ T7590] [ 1539.597697][ T7590] The buggy address belongs to the object at ffff88808ce18080 [ 1539.597697][ T7590] which belongs to the cache kmalloc-2k of size 2048 [ 1539.611722][ T7590] The buggy address is located 912 bytes inside of [ 1539.611722][ T7590] 2048-byte region [ffff88808ce18080, ffff88808ce18880) [ 1539.625335][ T7590] The buggy address belongs to the page: [ 1539.630939][ T7590] page:ffffea0002338600 count:1 mapcount:0 mapping:ffff88812c3f0c40 index:0x0 compound_mapcount: 0 [ 1539.641579][ T7590] flags: 0x1fffc0000010200(slab|head) [ 1539.646927][ T7590] raw: 01fffc0000010200 ffffea0002a51f88 ffffea00022f1208 ffff88812c3f0c40 [ 1539.655491][ T7590] raw: 0000000000000000 ffff88808ce18080 0000000100000003 0000000000000000 [ 1539.664058][ T7590] page dumped because: kasan: bad access detected [ 1539.670441][ T7590] [ 1539.672752][ T7590] Memory state around the buggy address: [ 1539.678360][ T7590] ffff88808ce18300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1539.686393][ T7590] ffff88808ce18380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1539.694530][ T7590] >ffff88808ce18400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1539.702560][ T7590] ^ [ 1539.707212][ T7590] ffff88808ce18480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1539.715245][ T7590] ffff88808ce18500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1539.723363][ T7590] ================================================================== [ 1539.731394][ T7590] Disabling lock debugging due to kernel taint [ 1539.737516][ T7590] Kernel panic - not syncing: panic_on_warn set ... [ 1539.744080][ T7590] CPU: 0 PID: 7590 Comm: kworker/u4:3 Tainted: G B 5.0.0-rc7-next-20190219 #38 [ 1539.754296][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.764334][ T7590] Workqueue: ib_addr process_one_req [ 1539.769590][ T7590] Call Trace: [ 1539.772857][ T7590] dump_stack+0x172/0x1f0 [ 1539.777211][ T7590] panic+0x2cb/0x65c [ 1539.781085][ T7590] ? __warn_printk+0xf3/0xf3 [ 1539.785652][ T7590] ? lock_downgrade+0x880/0x880 [ 1539.790480][ T7590] ? __lock_acquire+0x3150/0x4710 [ 1539.795480][ T7590] ? trace_hardirqs_off+0x62/0x220 [ 1539.800569][ T7590] ? trace_hardirqs_off+0x59/0x220 [ 1539.805653][ T7590] ? __lock_acquire+0x3150/0x4710 [ 1539.810651][ T7590] end_report+0x47/0x4f [ 1539.814779][ T7590] ? __lock_acquire+0x3150/0x4710 [ 1539.819778][ T7590] kasan_report.cold+0xe/0x40 [ 1539.824428][ T7590] ? __lock_acquire+0x3150/0x4710 [ 1539.829436][ T7590] __asan_report_load8_noabort+0x14/0x20 [ 1539.835049][ T7590] __lock_acquire+0x3150/0x4710 [ 1539.839872][ T7590] ? mark_held_locks+0xa4/0xf0 [ 1539.844611][ T7590] ? fprop_fraction_percpu+0x102/0x430 [ 1539.850046][ T7590] ? __wb_calc_thresh+0xf1/0x420 [ 1539.854956][ T7590] ? fprop_fraction_percpu+0x102/0x430 [ 1539.860391][ T7590] ? mark_held_locks+0xf0/0xf0 [ 1539.865131][ T7590] ? debug_object_activate+0x1fd/0x470 [ 1539.870562][ T7590] ? find_held_lock+0x35/0x130 [ 1539.875301][ T7590] ? debug_object_activate+0x1fd/0x470 [ 1539.880738][ T7590] lock_acquire+0x16f/0x3f0 [ 1539.885219][ T7590] ? addr_handler+0xaf/0x3d0 [ 1539.889785][ T7590] ? addr_handler+0xaf/0x3d0 [ 1539.894350][ T7590] __mutex_lock+0xf7/0x1310 [ 1539.898842][ T7590] ? addr_handler+0xaf/0x3d0 [ 1539.903420][ T7590] ? addr_handler+0xaf/0x3d0 [ 1539.908001][ T7590] ? mutex_trylock+0x1e0/0x1e0 [ 1539.912747][ T7590] ? check_noncircular+0x20/0x20 [ 1539.917662][ T7590] ? mark_held_locks+0xf0/0xf0 [ 1539.922402][ T7590] mutex_lock_nested+0x16/0x20 [ 1539.927142][ T7590] ? mutex_lock_nested+0x16/0x20 [ 1539.932066][ T7590] addr_handler+0xaf/0x3d0 [ 1539.936469][ T7590] ? cma_work_handler+0x1f0/0x1f0 [ 1539.941477][ T7590] ? trace_hardirqs_off+0x62/0x220 [ 1539.946565][ T7590] ? kasan_check_read+0x11/0x20 [ 1539.951393][ T7590] ? process_one_work+0x890/0x1790 [ 1539.956480][ T7590] ? find_held_lock+0x35/0x130 [ 1539.961215][ T7590] ? process_one_work+0x890/0x1790 [ 1539.966306][ T7590] process_one_req+0x109/0x680 [ 1539.971047][ T7590] process_one_work+0x98e/0x1790 [ 1539.975960][ T7590] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1539.981304][ T7590] ? lock_acquire+0x16f/0x3f0 [ 1539.985957][ T7590] worker_thread+0x98/0xe40 [ 1539.990444][ T7590] kthread+0x357/0x430 [ 1539.994489][ T7590] ? process_one_work+0x1790/0x1790 [ 1539.999665][ T7590] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1540.005881][ T7590] ret_from_fork+0x3a/0x50 [ 1540.011267][ T7590] Kernel Offset: disabled [ 1540.015581][ T7590] Rebooting in 86400 seconds..