[ 63.901838][ T26] audit: type=1804 audit(1570336793.071:50): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="init" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 63.901863][ T26] audit: type=1804 audit(1570336793.091:51): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="init" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 63.901886][ T26] audit: type=1804 audit(1570336793.091:52): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="init" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 63.901910][ T26] audit: type=1804 audit(1570336793.101:53): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="getty" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 63.901933][ T26] audit: type=1804 audit(1570336793.101:54): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="getty" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 63.901956][ T26] audit: type=1804 audit(1570336793.111:55): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="getty" name="/run/utmp" dev="sda1" ino=1421 res=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. 2019/10/06 05:04:04 parsed 1 programs syzkaller login: [ 1515.192758][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1515.192773][ T26] audit: type=1400 audit(1570338244.471:63): avc: denied { map } for pid=9032 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16502 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 1515.272384][ T26] audit: type=1400 audit(1570338244.551:64): avc: denied { map } for pid=9032 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16543 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/10/06 05:04:07 executed programs: 0 [ 1518.070137][ T9059] IPVS: ftp: loaded support on port[0] = 21 [ 1518.083559][ T9061] IPVS: ftp: loaded support on port[0] = 21 [ 1518.095045][ T9053] IPVS: ftp: loaded support on port[0] = 21 [ 1518.103571][ T9057] IPVS: ftp: loaded support on port[0] = 21 [ 1518.128887][ T9055] IPVS: ftp: loaded support on port[0] = 21 [ 1518.154004][ T9062] IPVS: ftp: loaded support on port[0] = 21 [ 1518.410218][ T9057] chnl_net:caif_netlink_parms(): no params data found [ 1518.428422][ T9061] chnl_net:caif_netlink_parms(): no params data found [ 1518.507783][ T9053] chnl_net:caif_netlink_parms(): no params data found [ 1518.529604][ T9059] chnl_net:caif_netlink_parms(): no params data found [ 1518.544333][ T9055] chnl_net:caif_netlink_parms(): no params data found [ 1518.609719][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.617373][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.625252][ T9055] device bridge_slave_0 entered promiscuous mode [ 1518.644603][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.651750][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.659333][ T9057] device bridge_slave_0 entered promiscuous mode [ 1518.679642][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.686820][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.694982][ T9055] device bridge_slave_1 entered promiscuous mode [ 1518.702598][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.709642][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.718166][ T9061] device bridge_slave_0 entered promiscuous mode [ 1518.731802][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.738845][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.746617][ T9057] device bridge_slave_1 entered promiscuous mode [ 1518.761964][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.769028][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.777197][ T9053] device bridge_slave_0 entered promiscuous mode [ 1518.789252][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.796411][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.804552][ T9061] device bridge_slave_1 entered promiscuous mode [ 1518.832475][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.839532][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.847260][ T9053] device bridge_slave_1 entered promiscuous mode [ 1518.863488][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.873461][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.881283][ T9059] device bridge_slave_0 entered promiscuous mode [ 1518.893491][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.900587][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.908146][ T9059] device bridge_slave_1 entered promiscuous mode [ 1518.924388][ T9057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.936300][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.954591][ T9061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.965596][ T9061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.990173][ T9057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.000425][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.016956][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.033846][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.052518][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.066912][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.096258][ T9061] team0: Port device team_slave_0 added [ 1519.114330][ T9057] team0: Port device team_slave_0 added [ 1519.127779][ T9057] team0: Port device team_slave_1 added [ 1519.136341][ T9061] team0: Port device team_slave_1 added [ 1519.148781][ T9055] team0: Port device team_slave_0 added [ 1519.156260][ T9055] team0: Port device team_slave_1 added [ 1519.164380][ T9053] team0: Port device team_slave_0 added [ 1519.171345][ T9062] chnl_net:caif_netlink_parms(): no params data found [ 1519.188397][ T9059] team0: Port device team_slave_0 added [ 1519.195695][ T9059] team0: Port device team_slave_1 added [ 1519.209956][ T9053] team0: Port device team_slave_1 added [ 1519.313565][ T9059] device hsr_slave_0 entered promiscuous mode [ 1519.360327][ T9059] device hsr_slave_1 entered promiscuous mode [ 1519.471808][ T9061] device hsr_slave_0 entered promiscuous mode [ 1519.550202][ T9061] device hsr_slave_1 entered promiscuous mode [ 1519.600210][ T9061] debugfs: Directory 'hsr0' with parent '/' already present! [ 1519.643036][ T9057] device hsr_slave_0 entered promiscuous mode [ 1519.680404][ T9057] device hsr_slave_1 entered promiscuous mode [ 1519.749970][ T9057] debugfs: Directory 'hsr0' with parent '/' already present! [ 1519.822989][ T9055] device hsr_slave_0 entered promiscuous mode [ 1519.890178][ T9055] device hsr_slave_1 entered promiscuous mode [ 1519.930032][ T9055] debugfs: Directory 'hsr0' with parent '/' already present! [ 1520.043948][ T9053] device hsr_slave_0 entered promiscuous mode [ 1520.090388][ T9053] device hsr_slave_1 entered promiscuous mode [ 1520.130210][ T9053] debugfs: Directory 'hsr0' with parent '/' already present! [ 1520.148942][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.157469][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.166059][ T9062] device bridge_slave_0 entered promiscuous mode [ 1520.174243][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.182045][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.189716][ T9062] device bridge_slave_1 entered promiscuous mode [ 1520.221530][ T9062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.251650][ T9062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1520.293625][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.319503][ T9062] team0: Port device team_slave_0 added [ 1520.328197][ T9062] team0: Port device team_slave_1 added [ 1520.361112][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1520.369267][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1520.394330][ T9057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.451919][ T9062] device hsr_slave_0 entered promiscuous mode [ 1520.490259][ T9062] device hsr_slave_1 entered promiscuous mode [ 1520.530057][ T9062] debugfs: Directory 'hsr0' with parent '/' already present! [ 1520.543170][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1520.551764][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1520.560245][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.567460][ T9063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.576073][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1520.594990][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.614042][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1520.623448][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1520.632158][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.639252][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.654945][ T9061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.664997][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.684658][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.692316][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1520.702733][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1520.712484][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1520.720568][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1520.737628][ T9061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.750696][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.769389][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1520.779633][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1520.788895][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1520.798469][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1520.806907][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1520.814535][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1520.822409][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1520.831012][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1520.839071][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1520.847867][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1520.856467][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.863549][ T9066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.871684][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1520.880311][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1520.888582][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.895651][ T9066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.903369][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1520.919331][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.938004][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1520.945744][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1520.955941][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1520.964180][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1520.972080][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1520.979644][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1520.988637][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1520.997015][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.004063][ T9066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.012358][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1521.021909][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1521.030438][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.037476][ T9066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.046287][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1521.054323][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1521.075499][ T9057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.088266][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1521.097795][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1521.107163][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1521.116649][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.123737][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.131807][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1521.140548][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1521.148811][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1521.157398][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1521.165847][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.172929][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.181708][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1521.223844][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1521.234548][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1521.246309][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1521.254476][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1521.262824][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1521.271854][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1521.280258][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1521.288647][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1521.297835][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.306578][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.315030][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.323334][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.331952][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1521.340709][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1521.349119][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1521.357926][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1521.366651][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1521.374434][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1521.385337][ T9059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.393403][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.411574][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.429449][ T9061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1521.446250][ T9061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1521.474624][ T9053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1521.485155][ T9053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1521.498208][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1521.508285][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1521.517191][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1521.526110][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1521.534815][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.543181][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.552340][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.560815][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.569053][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.577415][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.585807][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.594535][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.602903][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1521.611532][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1521.619763][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.626837][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.634556][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.642707][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.651053][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1521.691718][ T9062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.700889][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1521.709605][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1521.718274][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.725353][ T9077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.750303][ T26] audit: type=1400 audit(1570338251.021:65): avc: denied { associate } for pid=9057 comm="syz-executor.4" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 1521.775298][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.788185][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1521.797400][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1521.806869][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1521.819185][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1521.827952][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1521.837046][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1521.847604][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.856114][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.864526][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1521.878267][ T9055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.897168][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.932034][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.951084][ T26] audit: type=1400 audit(1570338251.231:66): avc: denied { create } for pid=9088 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1521.979431][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1521.987448][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1522.003774][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.013791][ C0] hrtimer: interrupt took 25021 ns [ 1522.036983][ T26] audit: type=1400 audit(1570338251.291:67): avc: denied { bind } for pid=9088 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1522.049955][ T9062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.101877][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.128187][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.143851][ T2846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.151053][ T2846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.189044][ T9059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.244072][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1522.262756][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1522.298450][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1522.325541][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.332677][ T9066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.340551][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1522.349131][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1522.374825][ T9062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1522.392540][ T9062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1522.493915][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1522.533073][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1522.569157][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1522.616816][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1522.630326][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1522.639787][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1522.648990][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1522.657468][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1522.666429][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1522.674265][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1522.742573][ T9062] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/10/06 05:04:12 executed programs: 14 2019/10/06 05:04:17 executed programs: 127 2019/10/06 05:04:22 executed programs: 240 2019/10/06 05:04:27 executed programs: 353 2019/10/06 05:04:32 executed programs: 464 2019/10/06 05:04:37 executed programs: 576 2019/10/06 05:04:42 executed programs: 691 2019/10/06 05:04:47 executed programs: 804 2019/10/06 05:04:52 executed programs: 917 2019/10/06 05:04:57 executed programs: 1031 2019/10/06 05:05:02 executed programs: 1145 2019/10/06 05:05:07 executed programs: 1259 2019/10/06 05:05:12 executed programs: 1368 2019/10/06 05:05:17 executed programs: 1478 2019/10/06 05:05:22 executed programs: 1588 2019/10/06 05:05:27 executed programs: 1697 2019/10/06 05:05:32 executed programs: 1806 2019/10/06 05:05:37 executed programs: 1912 2019/10/06 05:05:42 executed programs: 2019 2019/10/06 05:05:47 executed programs: 2123 2019/10/06 05:05:53 executed programs: 2227 2019/10/06 05:05:58 executed programs: 2334 2019/10/06 05:06:03 executed programs: 2445 2019/10/06 05:06:08 executed programs: 2554 2019/10/06 05:06:13 executed programs: 2659 2019/10/06 05:06:18 executed programs: 2764 2019/10/06 05:06:23 executed programs: 2868 2019/10/06 05:06:28 executed programs: 2971 2019/10/06 05:06:33 executed programs: 3079 2019/10/06 05:06:38 executed programs: 3188 2019/10/06 05:06:43 executed programs: 3293 2019/10/06 05:06:48 executed programs: 3397 2019/10/06 05:06:53 executed programs: 3502 2019/10/06 05:06:58 executed programs: 3604 2019/10/06 05:07:03 executed programs: 3711 2019/10/06 05:07:08 executed programs: 3817 2019/10/06 05:07:13 executed programs: 3920 2019/10/06 05:07:18 executed programs: 4022 2019/10/06 05:07:23 executed programs: 4125 2019/10/06 05:07:28 executed programs: 4227 2019/10/06 05:07:33 executed programs: 4335 2019/10/06 05:07:38 executed programs: 4444 2019/10/06 05:07:43 executed programs: 4546 2019/10/06 05:07:48 executed programs: 4646 2019/10/06 05:07:53 executed programs: 4744 2019/10/06 05:07:58 executed programs: 4841 2019/10/06 05:08:04 executed programs: 4947 2019/10/06 05:08:09 executed programs: 5055 2019/10/06 05:08:14 executed programs: 5158 2019/10/06 05:08:19 executed programs: 5260 2019/10/06 05:08:24 executed programs: 5361 2019/10/06 05:08:29 executed programs: 5462 2019/10/06 05:08:34 executed programs: 5568 2019/10/06 05:08:39 executed programs: 5677 2019/10/06 05:08:44 executed programs: 5779 2019/10/06 05:08:49 executed programs: 5879 2019/10/06 05:08:54 executed programs: 5979 2019/10/06 05:08:59 executed programs: 6077 2019/10/06 05:09:04 executed programs: 6184 2019/10/06 05:09:09 executed programs: 6293 2019/10/06 05:09:14 executed programs: 6396 2019/10/06 05:09:19 executed programs: 6503 2019/10/06 05:09:24 executed programs: 6615 2019/10/06 05:09:29 executed programs: 6729 2019/10/06 05:09:34 executed programs: 6842 2019/10/06 05:09:39 executed programs: 6953 2019/10/06 05:09:45 executed programs: 7065 2019/10/06 05:09:50 executed programs: 7176 2019/10/06 05:09:55 executed programs: 7288 2019/10/06 05:10:00 executed programs: 7402 2019/10/06 05:10:05 executed programs: 7513 2019/10/06 05:10:10 executed programs: 7628 2019/10/06 05:10:15 executed programs: 7739 [ 1888.033180][T14106] ================================================================== [ 1888.041626][T14106] BUG: KASAN: use-after-free in rxrpc_release_call+0x937/0xa50 [ 1888.049177][T14106] Read of size 8 at addr ffff8880a432a250 by task syz-executor.2/14106 [ 1888.057406][T14106] [ 1888.059745][T14106] CPU: 0 PID: 14106 Comm: syz-executor.2 Not tainted 5.4.0-rc1+ #0 [ 1888.067630][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1888.077677][T14106] Call Trace: [ 1888.081041][T14106] dump_stack+0x172/0x1f0 [ 1888.085381][T14106] ? rxrpc_release_call+0x937/0xa50 [ 1888.090581][T14106] print_address_description.constprop.0.cold+0xd4/0x30b [ 1888.097689][T14106] ? rxrpc_release_call+0x937/0xa50 [ 1888.102892][T14106] ? rxrpc_release_call+0x937/0xa50 [ 1888.108093][T14106] __kasan_report.cold+0x1b/0x41 [ 1888.113054][T14106] ? rxrpc_release_call+0x937/0xa50 [ 1888.118255][T14106] kasan_report+0x12/0x20 [ 1888.122585][T14106] __asan_report_load8_noabort+0x14/0x20 [ 1888.128217][T14106] rxrpc_release_call+0x937/0xa50 [ 1888.133248][T14106] ? rxrpc_release_calls_on_socket+0x6e7/0x1320 [ 1888.139493][T14106] rxrpc_release_calls_on_socket+0x6e7/0x1320 [ 1888.145559][T14106] ? rxrpc_discard_prealloc+0x664/0xf20 [ 1888.151099][T14106] ? rxrpc_release+0x238/0x550 [ 1888.155873][T14106] rxrpc_release+0x2a6/0x550 [ 1888.160554][T14106] __sock_release+0xce/0x280 [ 1888.165153][T14106] sock_close+0x1e/0x30 [ 1888.169310][T14106] __fput+0x2ff/0x890 [ 1888.173296][T14106] ? __sock_release+0x280/0x280 [ 1888.178143][T14106] ____fput+0x16/0x20 [ 1888.182120][T14106] task_work_run+0x145/0x1c0 [ 1888.186722][T14106] exit_to_usermode_loop+0x316/0x380 [ 1888.192016][T14106] do_syscall_64+0x65f/0x760 [ 1888.196645][T14106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1888.202534][T14106] RIP: 0033:0x413741 [ 1888.206428][T14106] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1888.226029][T14106] RSP: 002b:00007ffd61febfb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1888.234442][T14106] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413741 [ 1888.242414][T14106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1888.250384][T14106] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 1888.258351][T14106] R10: 00007ffd61fec090 R11: 0000000000000293 R12: 000000000075bf20 [ 1888.266319][T14106] R13: 00000000001ccedf R14: 0000000000761418 R15: 000000000075bf2c [ 1888.274300][T14106] [ 1888.276625][T14106] Allocated by task 14114: [ 1888.281043][T14106] save_stack+0x23/0x90 [ 1888.285196][T14106] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1888.290833][T14106] kasan_kmalloc+0x9/0x10 [ 1888.295164][T14106] kmem_cache_alloc_trace+0x158/0x790 [ 1888.300533][T14106] rxrpc_alloc_connection+0x86/0x5f0 [ 1888.305832][T14106] rxrpc_connect_call+0x648/0x4c00 [ 1888.310950][T14106] rxrpc_new_client_call+0x978/0x19d0 [ 1888.316398][T14106] rxrpc_do_sendmsg+0xff5/0x1d53 [ 1888.321333][T14106] rxrpc_sendmsg+0x4d6/0x5f0 [ 1888.325919][T14106] sock_sendmsg+0xd7/0x130 [ 1888.330331][T14106] ___sys_sendmsg+0x3e2/0x920 [ 1888.335007][T14106] __sys_sendmmsg+0x1bf/0x4d0 [ 1888.339677][T14106] __x64_sys_sendmmsg+0x9d/0x100 [ 1888.344613][T14106] do_syscall_64+0xfa/0x760 [ 1888.349127][T14106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1888.355010][T14106] [ 1888.357331][T14106] Freed by task 9: [ 1888.361054][T14106] save_stack+0x23/0x90 [ 1888.365208][T14106] __kasan_slab_free+0x102/0x150 [ 1888.370145][T14106] kasan_slab_free+0xe/0x10 [ 1888.374646][T14106] kfree+0x10a/0x2c0 [ 1888.378541][T14106] rxrpc_destroy_connection+0x1f2/0x2d0 [ 1888.386773][T14106] rcu_core+0x581/0x1560 [ 1888.391019][T14106] rcu_core_si+0x9/0x10 [ 1888.395173][T14106] __do_softirq+0x262/0x98c [ 1888.399664][T14106] [ 1888.401993][T14106] The buggy address belongs to the object at ffff8880a432a000 [ 1888.401993][T14106] which belongs to the cache kmalloc-1k of size 1024 [ 1888.416047][T14106] The buggy address is located 592 bytes inside of [ 1888.416047][T14106] 1024-byte region [ffff8880a432a000, ffff8880a432a400) [ 1888.429428][T14106] The buggy address belongs to the page: [ 1888.435062][T14106] page:ffffea000290ca80 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0xffff8880a432b200 compound_mapcount: 0 [ 1888.447293][T14106] flags: 0x1fffc0000010200(slab|head) [ 1888.452668][T14106] raw: 01fffc0000010200 ffffea000238fd88 ffffea000231dd88 ffff8880aa400c40 [ 1888.461251][T14106] raw: ffff8880a432b200 ffff8880a432a000 0000000100000006 0000000000000000 [ 1888.469827][T14106] page dumped because: kasan: bad access detected [ 1888.476228][T14106] [ 1888.478554][T14106] Memory state around the buggy address: [ 1888.484181][T14106] ffff8880a432a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1888.492246][T14106] ffff8880a432a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1888.500308][T14106] >ffff8880a432a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1888.508364][T14106] ^ [ 1888.515031][T14106] ffff8880a432a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1888.523088][T14106] ffff8880a432a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1888.531139][T14106] ================================================================== [ 1888.539192][T14106] Disabling lock debugging due to kernel taint [ 1888.635638][T14106] Kernel panic - not syncing: panic_on_warn set ... [ 1888.642269][T14106] CPU: 0 PID: 14106 Comm: syz-executor.2 Tainted: G B 5.4.0-rc1+ #0 [ 1888.651540][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1888.661587][T14106] Call Trace: [ 1888.664107][ T3889] kobject: 'loop1' (00000000a2d7f1f2): kobject_uevent_env [ 1888.664877][T14106] dump_stack+0x172/0x1f0 [ 1888.676272][T14106] panic+0x2dc/0x755 [ 1888.678545][ T3889] kobject: 'loop1' (00000000a2d7f1f2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1888.680160][T14106] ? add_taint.cold+0x16/0x16 [ 1888.680177][T14106] ? rxrpc_release_call+0x937/0xa50 [ 1888.680194][T14106] ? preempt_schedule+0x4b/0x60 [ 1888.692032][ T3889] kobject: 'loop5' (0000000010e8f015): kobject_uevent_env [ 1888.694991][T14106] ? ___preempt_schedule+0x16/0x20 [ 1888.695008][T14106] ? trace_hardirqs_on+0x5e/0x240 [ 1888.700238][ T3889] kobject: 'loop5' (0000000010e8f015): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1888.705006][T14106] ? rxrpc_release_call+0x937/0xa50 [ 1888.705023][T14106] end_report+0x47/0x4f [ 1888.713344][ T3889] kobject: 'loop0' (00000000ea3783fb): kobject_uevent_env [ 1888.717183][T14106] ? rxrpc_release_call+0x937/0xa50 [ 1888.717200][T14106] __kasan_report.cold+0xe/0x41 [ 1888.722250][ T3889] kobject: 'loop0' (00000000ea3783fb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1888.732311][T14106] ? rxrpc_release_call+0x937/0xa50 [ 1888.732323][T14106] kasan_report+0x12/0x20 [ 1888.732340][T14106] __asan_report_load8_noabort+0x14/0x20 [ 1888.738905][ T3889] kobject: 'loop3' (00000000bd4905d4): kobject_uevent_env [ 1888.741642][T14106] rxrpc_release_call+0x937/0xa50 [ 1888.741661][T14106] ? rxrpc_release_calls_on_socket+0x6e7/0x1320 [ 1888.748770][ T3889] kobject: 'loop3' (00000000bd4905d4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1888.753934][T14106] rxrpc_release_calls_on_socket+0x6e7/0x1320 [ 1888.753947][T14106] ? rxrpc_discard_prealloc+0x664/0xf20 [ 1888.753963][T14106] ? rxrpc_release+0x238/0x550 [ 1888.828759][T14106] rxrpc_release+0x2a6/0x550 [ 1888.833350][T14106] __sock_release+0xce/0x280 [ 1888.837928][T14106] sock_close+0x1e/0x30 [ 1888.842062][T14106] __fput+0x2ff/0x890 [ 1888.846021][T14106] ? __sock_release+0x280/0x280 [ 1888.850848][T14106] ____fput+0x16/0x20 [ 1888.854907][T14106] task_work_run+0x145/0x1c0 [ 1888.859476][T14106] exit_to_usermode_loop+0x316/0x380 [ 1888.864739][T14106] do_syscall_64+0x65f/0x760 [ 1888.869314][T14106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1888.875180][T14106] RIP: 0033:0x413741 [ 1888.879053][T14106] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1888.898758][T14106] RSP: 002b:00007ffd61febfb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1888.907146][T14106] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413741 [ 1888.915096][T14106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1888.923044][T14106] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 1888.931004][T14106] R10: 00007ffd61fec090 R11: 0000000000000293 R12: 000000000075bf20 [ 1888.938955][T14106] R13: 00000000001ccedf R14: 0000000000761418 R15: 000000000075bf2c [ 1888.948549][T14106] Kernel Offset: disabled [ 1888.952869][T14106] Rebooting in 86400 seconds..