[ 41.726086] audit: type=1800 audit(1564723517.828:30): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 46.130359] kauditd_printk_skb: 4 callbacks suppressed [ 46.130375] audit: type=1400 audit(1564723522.268:35): avc: denied { map } for pid=7906 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. [ 1499.764755] audit: type=1400 audit(1564724975.898:36): avc: denied { map } for pid=7918 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/08/02 05:49:36 parsed 1 programs [ 1500.632262] audit: type=1400 audit(1564724976.768:37): avc: denied { map } for pid=7918 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=4566 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/08/02 05:49:39 executed programs: 0 [ 1502.945008] IPVS: ftp: loaded support on port[0] = 21 [ 1502.945705] IPVS: ftp: loaded support on port[0] = 21 [ 1502.957117] IPVS: ftp: loaded support on port[0] = 21 [ 1502.962080] IPVS: ftp: loaded support on port[0] = 21 [ 1503.016312] IPVS: ftp: loaded support on port[0] = 21 [ 1503.042127] IPVS: ftp: loaded support on port[0] = 21 [ 1503.365524] chnl_net:caif_netlink_parms(): no params data found [ 1503.381826] chnl_net:caif_netlink_parms(): no params data found [ 1503.403535] chnl_net:caif_netlink_parms(): no params data found [ 1503.446324] chnl_net:caif_netlink_parms(): no params data found [ 1503.487968] chnl_net:caif_netlink_parms(): no params data found [ 1503.548909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.556108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.563992] device bridge_slave_0 entered promiscuous mode [ 1503.577323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.583788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.591248] device bridge_slave_1 entered promiscuous mode [ 1503.660586] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1503.668335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.675440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.682617] device bridge_slave_0 entered promiscuous mode [ 1503.701198] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1503.708878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.715532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.723226] device bridge_slave_0 entered promiscuous mode [ 1503.735844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.742387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.751662] device bridge_slave_1 entered promiscuous mode [ 1503.766607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.773871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.781081] device bridge_slave_1 entered promiscuous mode [ 1503.818337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.825265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.833922] device bridge_slave_0 entered promiscuous mode [ 1503.840670] chnl_net:caif_netlink_parms(): no params data found [ 1503.849406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.855838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.863306] device bridge_slave_1 entered promiscuous mode [ 1503.896230] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1503.909191] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1503.924912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1503.933791] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1503.941236] team0: Port device team_slave_0 added [ 1503.946279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.953198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.960453] device bridge_slave_0 entered promiscuous mode [ 1503.984781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1503.993989] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1504.001645] team0: Port device team_slave_1 added [ 1504.006757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.013581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.020693] device bridge_slave_1 entered promiscuous mode [ 1504.040884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1504.048804] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1504.056401] team0: Port device team_slave_0 added [ 1504.066488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1504.075446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1504.103007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1504.111072] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1504.118549] team0: Port device team_slave_1 added [ 1504.137285] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1504.146188] team0: Port device team_slave_0 added [ 1504.179837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1504.189351] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1504.197355] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1504.205052] team0: Port device team_slave_1 added [ 1504.252054] device hsr_slave_0 entered promiscuous mode [ 1504.290314] device hsr_slave_1 entered promiscuous mode [ 1504.338569] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1504.346069] team0: Port device team_slave_0 added [ 1504.351414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1504.359785] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1504.368289] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1504.375940] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1504.382773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.389124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.396837] device bridge_slave_0 entered promiscuous mode [ 1504.404001] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1504.411939] team0: Port device team_slave_1 added [ 1504.429262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1504.436749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1504.449287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.455734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.463205] device bridge_slave_1 entered promiscuous mode [ 1504.469473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1504.508022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1504.552951] device hsr_slave_0 entered promiscuous mode [ 1504.590266] device hsr_slave_1 entered promiscuous mode [ 1504.630475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1504.637874] team0: Port device team_slave_0 added [ 1504.683019] device hsr_slave_0 entered promiscuous mode [ 1504.720633] device hsr_slave_1 entered promiscuous mode [ 1504.760785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1504.770606] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1504.796572] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1504.804712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1504.812305] team0: Port device team_slave_1 added [ 1504.817906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1504.826818] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1504.836435] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1504.883129] device hsr_slave_0 entered promiscuous mode [ 1504.930303] device hsr_slave_1 entered promiscuous mode [ 1504.970579] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1504.977508] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1504.986043] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1504.993435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1505.013656] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1505.032675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1505.040190] team0: Port device team_slave_0 added [ 1505.047594] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1505.055697] team0: Port device team_slave_1 added [ 1505.078919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1505.086796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1505.096526] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1505.105663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1505.161917] device hsr_slave_0 entered promiscuous mode [ 1505.201077] device hsr_slave_1 entered promiscuous mode [ 1505.245051] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1505.271011] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1505.321923] device hsr_slave_0 entered promiscuous mode [ 1505.360319] device hsr_slave_1 entered promiscuous mode [ 1505.404203] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1505.423658] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1505.438355] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1505.488970] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1505.500755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.508705] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1505.537606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.551024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.564951] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1505.574792] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1505.583789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1505.595153] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1505.603884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.612328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.623059] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1505.635531] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1505.641800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.662206] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1505.670843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.678085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.686713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.693900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.705034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1505.711706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.722443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1505.735520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1505.743316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1505.751433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.757864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.766681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1505.778307] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1505.785314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.792722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1505.801459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1505.817305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1505.829521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.836478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1505.844369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1505.852092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.858437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.865429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1505.873737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1505.881523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.887872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.894872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1505.905027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1505.914669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1505.925910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1505.934785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1505.942332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1505.950653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1505.958344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.964749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.972270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1505.980146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1505.987697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.994078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.001139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1506.010350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1506.017181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1506.024674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1506.037688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1506.052138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1506.063657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1506.071930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1506.079466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.085852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.093898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1506.102096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1506.110227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1506.119396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1506.127179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1506.134772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1506.144411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1506.152902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1506.161402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1506.169222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1506.180566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1506.189328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1506.197209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1506.204956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1506.213354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1506.222697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.231284] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1506.241233] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1506.247406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.256083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1506.267088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1506.277576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1506.285274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1506.292324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1506.299128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1506.306736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1506.315580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1506.323693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1506.331625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1506.341703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1506.349533] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1506.362918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1506.373435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1506.385876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1506.393792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1506.401519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1506.408479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1506.416698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1506.424430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.431481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.438335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1506.446043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1506.453492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1506.461153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1506.468630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1506.479639] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1506.486072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.506179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1506.516059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1506.526612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1506.536286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.546114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1506.553611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1506.562046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1506.569630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1506.578167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1506.585892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1506.594240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1506.602025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.608544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.615643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1506.623511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1506.631535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.637913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.644945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1506.652461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1506.661901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1506.671330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1506.686576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1506.697710] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1506.707985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1506.716236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1506.725837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1506.733639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1506.741405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1506.748818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1506.756716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1506.764782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1506.772498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.778835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.787714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1506.799571] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1506.808976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1506.818908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1506.830393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1506.838220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1506.847411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1506.855821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1506.863195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1506.873031] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1506.879116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1506.889399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1506.897929] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1506.904602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1506.918556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1506.932562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1506.942928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1506.964943] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1506.975922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1506.984779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1506.993287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1507.001304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1507.008871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1507.018389] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1507.025376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.033520] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1507.044639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1507.057840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1507.065920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1507.076437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1507.084789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1507.092543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1507.100161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1507.107593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1507.115216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1507.123814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1507.132102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1507.140069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1507.149611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.159517] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1507.166225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1507.174979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1507.185417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1507.201357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.213987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1507.221702] audit: type=1400 audit(1564724983.368:38): avc: denied { associate } for pid=7948 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 1507.249514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1507.259021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.265537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.273348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1507.281243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1507.289131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1507.299739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.322906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1507.336269] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1507.347393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1507.355951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1507.375471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1507.389480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1507.397531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1507.405959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.412372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.431571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1507.454060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1507.464772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1507.477998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1507.487996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1507.510541] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1507.516592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1507.584365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1507.596479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1507.613106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.636658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1507.653960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1507.663929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1507.674982] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1507.687775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1507.701680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1507.713439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.720043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1507.739352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1507.751658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1507.773267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1507.780269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1507.788717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1507.804471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1507.819087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1507.843322] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1507.856238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2019/08/02 05:49:44 executed programs: 9 [ 1507.908034] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1507.929222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.611043] Bluetooth: hci0: command 0x1003 tx timeout [ 1509.616713] Bluetooth: hci0: sending frame failed (-49) [ 1509.850615] Bluetooth: hci1: command 0x1003 tx timeout [ 1509.856053] Bluetooth: hci1: sending frame failed (-49) [ 1509.930493] Bluetooth: hci2: command 0x1003 tx timeout [ 1509.936031] Bluetooth: hci2: sending frame failed (-49) [ 1510.169968] Bluetooth: hci4: command 0x1003 tx timeout [ 1510.175426] Bluetooth: hci3: command 0x1003 tx timeout [ 1510.175454] Bluetooth: hci4: sending frame failed (-49) [ 1510.186341] Bluetooth: hci3: sending frame failed (-49) [ 1510.489945] Bluetooth: hci5: command 0x1003 tx timeout [ 1510.495470] Bluetooth: hci5: sending frame failed (-49) [ 1511.690081] Bluetooth: hci0: command 0x1001 tx timeout [ 1511.697800] Bluetooth: hci0: sending frame failed (-49) [ 1511.930589] Bluetooth: hci1: command 0x1001 tx timeout [ 1511.935981] Bluetooth: hci1: sending frame failed (-49) [ 1512.010463] Bluetooth: hci2: command 0x1001 tx timeout [ 1512.018121] Bluetooth: hci2: sending frame failed (-49) [ 1512.250190] Bluetooth: hci3: command 0x1001 tx timeout [ 1512.255560] Bluetooth: hci4: command 0x1001 tx timeout [ 1512.255593] Bluetooth: hci3: sending frame failed (-49) [ 1512.263030] Bluetooth: hci4: sending frame failed (-49) [ 1512.570180] Bluetooth: hci5: command 0x1001 tx timeout [ 1512.575996] Bluetooth: hci5: sending frame failed (-49) [ 1513.769984] Bluetooth: hci0: command 0x1009 tx timeout [ 1514.010004] Bluetooth: hci1: command 0x1009 tx timeout [ 1514.090128] Bluetooth: hci2: command 0x1009 tx timeout [ 1514.330016] Bluetooth: hci3: command 0x1009 tx timeout [ 1514.330024] Bluetooth: hci4: command 0x1009 tx timeout [ 1514.650008] Bluetooth: hci5: command 0x1009 tx timeout 2019/08/02 05:49:54 executed programs: 10 [ 1520.250014] Bluetooth: hci0: command 0x1003 tx timeout [ 1520.255635] Bluetooth: hci0: sending frame failed (-49) [ 1520.330029] Bluetooth: hci1: command 0x1003 tx timeout [ 1520.335567] Bluetooth: hci1: sending frame failed (-49) [ 1520.810121] Bluetooth: hci2: command 0x1003 tx timeout [ 1520.815510] Bluetooth: hci2: sending frame failed (-49) [ 1520.889947] Bluetooth: hci3: command 0x1003 tx timeout [ 1520.895453] Bluetooth: hci3: sending frame failed (-49) [ 1521.370063] Bluetooth: hci4: command 0x1003 tx timeout [ 1521.375583] Bluetooth: hci4: sending frame failed (-49) [ 1522.330038] Bluetooth: hci0: command 0x1001 tx timeout [ 1522.335448] Bluetooth: hci0: sending frame failed (-49) [ 1522.410048] Bluetooth: hci1: command 0x1001 tx timeout [ 1522.415569] Bluetooth: hci1: sending frame failed (-49) [ 1522.890057] Bluetooth: hci2: command 0x1001 tx timeout [ 1522.895499] Bluetooth: hci2: sending frame failed (-49) [ 1522.969960] Bluetooth: hci3: command 0x1001 tx timeout [ 1522.975414] Bluetooth: hci3: sending frame failed (-49) [ 1523.450047] Bluetooth: hci4: command 0x1001 tx timeout [ 1523.455472] Bluetooth: hci4: sending frame failed (-49) [ 1524.410000] Bluetooth: hci0: command 0x1009 tx timeout [ 1524.489986] Bluetooth: hci1: command 0x1009 tx timeout [ 1524.970144] Bluetooth: hci2: command 0x1009 tx timeout [ 1525.050002] Bluetooth: hci3: command 0x1009 tx timeout [ 1525.530079] Bluetooth: hci4: command 0x1009 tx timeout 2019/08/02 05:50:04 executed programs: 24 [ 1530.420014] Bluetooth: hci0: command 0x1003 tx timeout [ 1530.425533] Bluetooth: hci0: sending frame failed (-49) [ 1530.490006] Bluetooth: hci1: command 0x1003 tx timeout [ 1530.495525] Bluetooth: hci1: sending frame failed (-49) [ 1531.050032] Bluetooth: hci2: command 0x1003 tx timeout [ 1531.055567] Bluetooth: hci2: sending frame failed (-49) [ 1531.210132] Bluetooth: hci3: command 0x1003 tx timeout [ 1531.215624] Bluetooth: hci3: sending frame failed (-49) [ 1531.369958] Bluetooth: hci5: command 0x1003 tx timeout [ 1531.375601] Bluetooth: hci5: sending frame failed (-49) [ 1532.489995] Bluetooth: hci0: command 0x1001 tx timeout [ 1532.495401] Bluetooth: hci0: sending frame failed (-49) [ 1532.570210] Bluetooth: hci1: command 0x1001 tx timeout [ 1532.575720] Bluetooth: hci1: sending frame failed (-49) [ 1533.130032] Bluetooth: hci2: command 0x1001 tx timeout [ 1533.135429] Bluetooth: hci2: sending frame failed (-49) [ 1533.290149] Bluetooth: hci3: command 0x1001 tx timeout [ 1533.295541] Bluetooth: hci3: sending frame failed (-49) [ 1533.450606] Bluetooth: hci5: command 0x1001 tx timeout [ 1533.455995] Bluetooth: hci5: sending frame failed (-49) [ 1534.570078] Bluetooth: hci0: command 0x1009 tx timeout [ 1534.650011] Bluetooth: hci1: command 0x1009 tx timeout [ 1535.219975] Bluetooth: hci2: command 0x1009 tx timeout [ 1535.371470] Bluetooth: hci3: command 0x1009 tx timeout [ 1535.529998] Bluetooth: hci5: command 0x1009 tx timeout 2019/08/02 05:50:14 executed programs: 37 [ 1540.650034] Bluetooth: hci0: command 0x1003 tx timeout [ 1540.655613] Bluetooth: hci0: sending frame failed (-49) [ 1540.820176] Bluetooth: hci1: command 0x1003 tx timeout [ 1540.825970] Bluetooth: hci1: sending frame failed (-49) [ 1541.929985] Bluetooth: hci2: command 0x1003 tx timeout [ 1541.935477] Bluetooth: hci2: sending frame failed (-49) [ 1542.019971] Bluetooth: hci3: command 0x1003 tx timeout [ 1542.025385] Bluetooth: hci3: sending frame failed (-49) [ 1542.329974] Bluetooth: hci4: command 0x1003 tx timeout [ 1542.335385] Bluetooth: hci4: sending frame failed (-49) [ 1542.729974] Bluetooth: hci0: command 0x1001 tx timeout [ 1542.735470] Bluetooth: hci0: sending frame failed (-49) [ 1542.889973] Bluetooth: hci1: command 0x1001 tx timeout [ 1542.895520] Bluetooth: hci1: sending frame failed (-49) [ 1544.010039] Bluetooth: hci2: command 0x1001 tx timeout [ 1544.015583] Bluetooth: hci2: sending frame failed (-49) [ 1544.090055] Bluetooth: hci3: command 0x1001 tx timeout [ 1544.095639] Bluetooth: hci3: sending frame failed (-49) [ 1544.410024] Bluetooth: hci4: command 0x1001 tx timeout [ 1544.415435] Bluetooth: hci4: sending frame failed (-49) [ 1544.810142] Bluetooth: hci0: command 0x1009 tx timeout [ 1544.970057] Bluetooth: hci1: command 0x1009 tx timeout [ 1546.090037] Bluetooth: hci2: command 0x1009 tx timeout [ 1546.170062] Bluetooth: hci3: command 0x1009 tx timeout [ 1546.490047] Bluetooth: hci4: command 0x1009 tx timeout 2019/08/02 05:50:24 executed programs: 50 [ 1550.900409] Bluetooth: hci0: command 0x1003 tx timeout [ 1550.909734] Bluetooth: hci0: sending frame failed (-49) [ 1551.050032] Bluetooth: hci1: command 0x1003 tx timeout [ 1551.055625] Bluetooth: hci1: sending frame failed (-49) [ 1552.169952] Bluetooth: hci2: command 0x1003 tx timeout [ 1552.175544] Bluetooth: hci2: sending frame failed (-49) [ 1552.250074] Bluetooth: hci3: command 0x1003 tx timeout [ 1552.255501] Bluetooth: hci3: sending frame failed (-49) [ 1552.970010] Bluetooth: hci4: command 0x1003 tx timeout [ 1552.975432] Bluetooth: hci4: sending frame failed (-49) [ 1552.980992] Bluetooth: hci0: command 0x1001 tx timeout [ 1552.986357] Bluetooth: hci0: sending frame failed (-49) [ 1553.129950] Bluetooth: hci1: command 0x1001 tx timeout [ 1553.135594] Bluetooth: hci1: sending frame failed (-49) [ 1554.249982] Bluetooth: hci2: command 0x1001 tx timeout [ 1554.255494] Bluetooth: hci2: sending frame failed (-49) [ 1554.340008] Bluetooth: hci3: command 0x1001 tx timeout [ 1554.345515] Bluetooth: hci3: sending frame failed (-49) [ 1555.049994] Bluetooth: hci0: command 0x1009 tx timeout [ 1555.050022] Bluetooth: hci4: command 0x1001 tx timeout [ 1555.060989] Bluetooth: hci4: sending frame failed (-49) [ 1555.210060] Bluetooth: hci1: command 0x1009 tx timeout [ 1556.329991] Bluetooth: hci2: command 0x1009 tx timeout [ 1556.409980] Bluetooth: hci3: command 0x1009 tx timeout [ 1557.130000] Bluetooth: hci4: command 0x1009 tx timeout 2019/08/02 05:50:35 executed programs: 63 [ 1561.130043] Bluetooth: hci0: command 0x1003 tx timeout [ 1561.136035] Bluetooth: hci0: sending frame failed (-49) [ 1561.220133] Bluetooth: hci1: command 0x1003 tx timeout [ 1561.229522] Bluetooth: hci1: sending frame failed (-49) [ 1562.410087] Bluetooth: hci2: command 0x1003 tx timeout [ 1562.415568] Bluetooth: hci2: sending frame failed (-49) [ 1562.489993] Bluetooth: hci3: command 0x1003 tx timeout [ 1562.495409] Bluetooth: hci3: sending frame failed (-49) [ 1563.210003] Bluetooth: hci0: command 0x1001 tx timeout [ 1563.215422] Bluetooth: hci0: sending frame failed (-49) [ 1563.289967] Bluetooth: hci1: command 0x1001 tx timeout [ 1563.295505] Bluetooth: hci1: sending frame failed (-49) [ 1564.490042] Bluetooth: hci2: command 0x1001 tx timeout [ 1564.495511] Bluetooth: hci2: sending frame failed (-49) [ 1564.570006] Bluetooth: hci3: command 0x1001 tx timeout [ 1564.575624] Bluetooth: hci3: sending frame failed (-49) [ 1565.290014] Bluetooth: hci0: command 0x1009 tx timeout [ 1565.370061] Bluetooth: hci1: command 0x1009 tx timeout [ 1566.580214] Bluetooth: hci2: command 0x1009 tx timeout [ 1566.650032] Bluetooth: hci3: command 0x1009 tx timeout 2019/08/02 05:50:45 executed programs: 77 [ 1571.370023] Bluetooth: hci0: command 0x1003 tx timeout [ 1571.375649] Bluetooth: hci0: sending frame failed (-49) [ 1571.460008] Bluetooth: hci1: command 0x1003 tx timeout [ 1571.465591] Bluetooth: hci1: sending frame failed (-49) [ 1572.649986] Bluetooth: hci2: command 0x1003 tx timeout [ 1572.655760] Bluetooth: hci2: sending frame failed (-49) [ 1572.661328] Bluetooth: hci3: command 0x1003 tx timeout [ 1572.666802] Bluetooth: hci3: sending frame failed (-49) [ 1572.810051] Bluetooth: hci4: command 0x1003 tx timeout [ 1572.815578] Bluetooth: hci4: sending frame failed (-49) [ 1573.450046] Bluetooth: hci0: command 0x1001 tx timeout [ 1573.455484] Bluetooth: hci0: sending frame failed (-49) [ 1573.530042] Bluetooth: hci1: command 0x1001 tx timeout [ 1573.536023] Bluetooth: hci1: sending frame failed (-49) [ 1574.730100] Bluetooth: hci2: command 0x1001 tx timeout [ 1574.730108] Bluetooth: hci3: command 0x1001 tx timeout [ 1574.730190] Bluetooth: hci3: sending frame failed (-49) [ 1574.735513] Bluetooth: hci2: sending frame failed (-49) [ 1574.890115] Bluetooth: hci4: command 0x1001 tx timeout [ 1574.895568] Bluetooth: hci4: sending frame failed (-49) [ 1575.540039] Bluetooth: hci0: command 0x1009 tx timeout [ 1575.610032] Bluetooth: hci1: command 0x1009 tx timeout [ 1576.810046] Bluetooth: hci2: command 0x1009 tx timeout [ 1576.810052] Bluetooth: hci3: command 0x1009 tx timeout [ 1576.970639] Bluetooth: hci4: command 0x1009 tx timeout 2019/08/02 05:50:55 executed programs: 88 [ 1581.609933] Bluetooth: hci0: command 0x1003 tx timeout [ 1581.615347] Bluetooth: hci0: sending frame failed (-49) [ 1581.689968] Bluetooth: hci1: command 0x1003 tx timeout [ 1581.695509] Bluetooth: hci1: sending frame failed (-49) [ 1582.890028] Bluetooth: hci2: command 0x1003 tx timeout [ 1582.895431] Bluetooth: hci2: sending frame failed (-49) [ 1582.969989] Bluetooth: hci3: command 0x1003 tx timeout [ 1582.975738] Bluetooth: hci3: sending frame failed (-49) [ 1583.050015] Bluetooth: hci4: command 0x1003 tx timeout [ 1583.055793] Bluetooth: hci4: sending frame failed (-49) [ 1583.129959] Bluetooth: hci5: command 0x1003 tx timeout [ 1583.135500] Bluetooth: hci5: sending frame failed (-49) [ 1583.689979] Bluetooth: hci0: command 0x1001 tx timeout [ 1583.695711] Bluetooth: hci0: sending frame failed (-49) [ 1583.769960] Bluetooth: hci1: command 0x1001 tx timeout [ 1583.775570] Bluetooth: hci1: sending frame failed (-49) [ 1584.970076] Bluetooth: hci2: command 0x1001 tx timeout [ 1584.975552] Bluetooth: hci2: sending frame failed (-49) [ 1585.049966] Bluetooth: hci3: command 0x1001 tx timeout [ 1585.055611] Bluetooth: hci3: sending frame failed (-49) [ 1585.130046] Bluetooth: hci4: command 0x1001 tx timeout [ 1585.135579] Bluetooth: hci4: sending frame failed (-49) [ 1585.210008] Bluetooth: hci5: command 0x1001 tx timeout [ 1585.215593] Bluetooth: hci5: sending frame failed (-49) [ 1585.770034] Bluetooth: hci0: command 0x1009 tx timeout [ 1585.850052] Bluetooth: hci1: command 0x1009 tx timeout [ 1587.050008] Bluetooth: hci2: command 0x1009 tx timeout [ 1587.130021] Bluetooth: hci3: command 0x1009 tx timeout [ 1587.210059] Bluetooth: hci4: command 0x1009 tx timeout [ 1587.290010] Bluetooth: hci5: command 0x1009 tx timeout 2019/08/02 05:51:05 executed programs: 94 [ 1592.021632] Bluetooth: Error in BCSP hdr checksum [ 1592.430396] Bluetooth: Error in BCSP hdr checksum [ 1593.770358] Bluetooth: hci0: command 0x1003 tx timeout [ 1593.778583] Bluetooth: hci0: sending frame failed (-49) [ 1594.090116] Bluetooth: hci1: command 0x1003 tx timeout [ 1594.096933] Bluetooth: hci1: sending frame failed (-49) [ 1594.250056] Bluetooth: hci2: command 0x1003 tx timeout [ 1594.250069] Bluetooth: hci3: command 0x1003 tx timeout [ 1594.250149] Bluetooth: hci3: sending frame failed (-49) [ 1594.258169] Bluetooth: hci2: sending frame failed (-49) [ 1594.330000] Bluetooth: hci5: command 0x1003 tx timeout [ 1594.330007] Bluetooth: hci4: command 0x1003 tx timeout [ 1594.330078] Bluetooth: hci4: sending frame failed (-49) [ 1594.337438] Bluetooth: hci5: sending frame failed (-49) [ 1595.850170] Bluetooth: hci0: command 0x1001 tx timeout [ 1595.855955] Bluetooth: hci0: sending frame failed (-49) [ 1596.170120] Bluetooth: hci1: command 0x1001 tx timeout [ 1596.175832] Bluetooth: hci1: sending frame failed (-49) [ 1596.330102] Bluetooth: hci2: command 0x1001 tx timeout [ 1596.330109] Bluetooth: hci3: command 0x1001 tx timeout [ 1596.341394] Bluetooth: hci3: sending frame failed (-49) [ 1596.348216] Bluetooth: hci2: sending frame failed (-49) [ 1596.410107] Bluetooth: hci5: command 0x1001 tx timeout [ 1596.410114] Bluetooth: hci4: command 0x1001 tx timeout [ 1596.421025] Bluetooth: hci4: sending frame failed (-49) [ 1596.426727] Bluetooth: hci5: sending frame failed (-49) [ 1597.930055] Bluetooth: hci0: command 0x1009 tx timeout [ 1598.250068] Bluetooth: hci1: command 0x1009 tx timeout [ 1598.410099] Bluetooth: hci3: command 0x1009 tx timeout [ 1598.410106] Bluetooth: hci2: command 0x1009 tx timeout [ 1598.490110] Bluetooth: hci5: command 0x1009 tx timeout [ 1598.500241] Bluetooth: hci4: command 0x1009 tx timeout [ 1601.931535] ================================================================== [ 1601.939200] BUG: KASAN: use-after-free in kfree_skb+0x38/0x390 [ 1601.945168] Read of size 4 at addr ffff88809f600164 by task syz-executor.5/8600 [ 1601.952608] [ 1601.954250] CPU: 0 PID: 8600 Comm: syz-executor.5 Not tainted 4.19.63 #37 [ 1601.961170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.970579] Call Trace: [ 1601.973265] dump_stack+0x172/0x1f0 [ 1601.976901] ? kfree_skb+0x38/0x390 [ 1601.980590] print_address_description.cold+0x7c/0x20d [ 1601.985867] ? kfree_skb+0x38/0x390 [ 1601.989483] kasan_report.cold+0x8c/0x2ba [ 1601.993639] check_memory_region+0x123/0x190 [ 1601.998055] kasan_check_read+0x11/0x20 [ 1602.002029] kfree_skb+0x38/0x390 [ 1602.005547] bcsp_close+0xc7/0x130 [ 1602.009083] hci_uart_tty_close+0x1ea/0x250 [ 1602.013400] ? hci_uart_close+0x50/0x50 [ 1602.017449] tty_ldisc_close.isra.0+0xaf/0xe0 [ 1602.022046] tty_ldisc_kill+0x4b/0xc0 [ 1602.025841] tty_ldisc_release+0xc6/0x280 [ 1602.029994] tty_release_struct+0x1b/0x50 [ 1602.034152] tty_release+0xbcb/0xe90 [ 1602.037870] ? put_tty_driver+0x20/0x20 [ 1602.041896] __fput+0x2dd/0x8b0 [ 1602.045172] ? __tty_fasync+0x210/0x210 [ 1602.049140] ____fput+0x16/0x20 [ 1602.052478] task_work_run+0x145/0x1c0 [ 1602.056414] do_exit+0x994/0x2fa0 [ 1602.059910] ? get_signal+0x384/0x1fc0 [ 1602.063833] ? mm_update_next_owner+0x660/0x660 [ 1602.068549] ? _raw_spin_unlock_irq+0x28/0x90 [ 1602.073049] ? get_signal+0x384/0x1fc0 [ 1602.076934] ? _raw_spin_unlock_irq+0x28/0x90 [ 1602.081449] do_group_exit+0x135/0x370 [ 1602.085338] get_signal+0x3ec/0x1fc0 [ 1602.089105] ? __might_fault+0x12b/0x1e0 [ 1602.093226] do_signal+0x95/0x1960 [ 1602.096775] ? setup_sigcontext+0x7d0/0x7d0 [ 1602.101096] ? kasan_check_read+0x11/0x20 [ 1602.105331] ? _copy_to_user+0xc9/0x120 [ 1602.110643] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1602.116355] ? __x64_sys_futex+0x40d/0x590 [ 1602.120652] ? exit_to_usermode_loop+0x43/0x2c0 [ 1602.125330] ? do_syscall_64+0x53d/0x620 [ 1602.129386] ? exit_to_usermode_loop+0x43/0x2c0 [ 1602.134114] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1602.138744] ? trace_hardirqs_on+0x67/0x220 [ 1602.143076] exit_to_usermode_loop+0x244/0x2c0 [ 1602.147678] do_syscall_64+0x53d/0x620 [ 1602.151644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1602.156843] RIP: 0033:0x459829 [ 1602.160029] Code: 48 8b 6c 24 20 48 83 c4 28 c3 31 c0 eb ee 48 89 14 24 48 89 7c 24 08 48 89 4c 24 10 e8 10 a8 ff ff 0f b6 4c 24 18 48 8b 44 24 <30> 48 8b 5c 24 38 eb bb e8 1a 8a ff ff e9 75 ff ff ff cc cc cc cc [ 1602.178942] RSP: 002b:00007f17dd9cbcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1602.186652] RAX: fffffffffffffe00 RBX: 000000000075bfd0 RCX: 0000000000459829 [ 1602.193925] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0 [ 1602.201224] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1602.208487] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 1602.215750] R13: 00007ffc8712e30f R14: 00007f17dd9cc9c0 R15: 000000000075bfd4 [ 1602.223021] [ 1602.224689] Allocated by task 7960: [ 1602.228311] save_stack+0x45/0xd0 [ 1602.231773] kasan_kmalloc+0xce/0xf0 [ 1602.235505] kasan_slab_alloc+0xf/0x20 [ 1602.239382] kmem_cache_alloc_node+0x144/0x710 [ 1602.243987] __alloc_skb+0xd5/0x5f0 [ 1602.247614] bcsp_recv+0x8c7/0x13a0 [ 1602.251243] hci_uart_tty_receive+0x225/0x530 [ 1602.255741] tty_ldisc_receive_buf+0x15f/0x1c0 [ 1602.260315] tty_port_default_receive_buf+0x7d/0xb0 [ 1602.265433] flush_to_ldisc+0x222/0x390 [ 1602.269405] process_one_work+0x989/0x1750 [ 1602.273643] worker_thread+0x98/0xe40 [ 1602.277469] kthread+0x354/0x420 [ 1602.280838] ret_from_fork+0x24/0x30 [ 1602.284550] [ 1602.286164] Freed by task 7960: [ 1602.289434] save_stack+0x45/0xd0 [ 1602.292886] __kasan_slab_free+0x102/0x150 [ 1602.297130] kasan_slab_free+0xe/0x10 [ 1602.300923] kmem_cache_free+0x86/0x260 [ 1602.304917] kfree_skbmem+0xcb/0x150 [ 1602.308641] kfree_skb+0xf0/0x390 [ 1602.312093] bcsp_recv+0x2d8/0x13a0 [ 1602.315720] hci_uart_tty_receive+0x225/0x530 [ 1602.320208] tty_ldisc_receive_buf+0x15f/0x1c0 [ 1602.324782] tty_port_default_receive_buf+0x7d/0xb0 [ 1602.329810] flush_to_ldisc+0x222/0x390 [ 1602.333783] process_one_work+0x989/0x1750 [ 1602.338024] worker_thread+0x98/0xe40 [ 1602.341820] kthread+0x354/0x420 [ 1602.345196] ret_from_fork+0x24/0x30 [ 1602.348908] [ 1602.350533] The buggy address belongs to the object at ffff88809f600080 [ 1602.350533] which belongs to the cache skbuff_head_cache of size 232 [ 1602.363720] The buggy address is located 228 bytes inside of [ 1602.363720] 232-byte region [ffff88809f600080, ffff88809f600168) [ 1602.375587] The buggy address belongs to the page: [ 1602.380515] page:ffffea00027d8000 count:1 mapcount:0 mapping:ffff8880aa346dc0 index:0x0 [ 1602.388660] flags: 0x1fffc0000000100(slab) [ 1602.399901] raw: 01fffc0000000100 ffffea0001fdb4c8 ffffea0002030248 ffff8880aa346dc0 [ 1602.408984] raw: 0000000000000000 ffff88809f600080 000000010000000c 0000000000000000 [ 1602.416858] page dumped because: kasan: bad access detected [ 1602.422574] [ 1602.424184] Memory state around the buggy address: [ 1602.429185] ffff88809f600000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1602.436542] ffff88809f600080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1602.443899] >ffff88809f600100: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 1602.451258] ^ [ 1602.457759] ffff88809f600180: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1602.465149] ffff88809f600200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1602.472507] ================================================================== [ 1602.479872] Disabling lock debugging due to kernel taint [ 1602.487461] Kernel panic - not syncing: panic_on_warn set ... [ 1602.487461] [ 1602.494864] CPU: 0 PID: 8600 Comm: syz-executor.5 Tainted: G B 4.19.63 #37 [ 1602.503176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.512518] Call Trace: [ 1602.515128] dump_stack+0x172/0x1f0 [ 1602.518756] ? kfree_skb+0x38/0x390 [ 1602.522374] panic+0x263/0x507 [ 1602.525565] ? __warn_printk+0xf3/0xf3 [ 1602.529445] ? kfree_skb+0x38/0x390 [ 1602.533065] ? preempt_schedule+0x4b/0x60 [ 1602.537205] ? ___preempt_schedule+0x16/0x18 [ 1602.541609] ? trace_hardirqs_on+0x5e/0x220 [ 1602.545930] ? kfree_skb+0x38/0x390 [ 1602.549547] kasan_end_report+0x47/0x4f [ 1602.553516] kasan_report.cold+0xa9/0x2ba [ 1602.557657] check_memory_region+0x123/0x190 [ 1602.562057] kasan_check_read+0x11/0x20 [ 1602.566130] kfree_skb+0x38/0x390 [ 1602.569575] bcsp_close+0xc7/0x130 [ 1602.570380] kobject: 'rfkill50' (00000000ac9c96f1): kobject_uevent_env [ 1602.573116] hci_uart_tty_close+0x1ea/0x250 [ 1602.579827] kobject: 'rfkill50' (00000000ac9c96f1): fill_kobj_path: path = '/devices/virtual/bluetooth/hci5/rfkill50' [ 1602.584115] ? hci_uart_close+0x50/0x50 [ 1602.584133] tty_ldisc_close.isra.0+0xaf/0xe0 [ 1602.584142] tty_ldisc_kill+0x4b/0xc0 [ 1602.584153] tty_ldisc_release+0xc6/0x280 [ 1602.584167] tty_release_struct+0x1b/0x50 [ 1602.584180] tty_release+0xbcb/0xe90 [ 1602.584196] ? put_tty_driver+0x20/0x20 [ 1602.584208] __fput+0x2dd/0x8b0 [ 1602.584226] ? __tty_fasync+0x210/0x210 [ 1602.595635] kobject: 'rfkill47' (000000006bc257be): kobject_uevent_env [ 1602.598956] ____fput+0x16/0x20 [ 1602.608471] kobject: 'rfkill47' (000000006bc257be): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill47' [ 1602.611388] task_work_run+0x145/0x1c0 [ 1602.611404] do_exit+0x994/0x2fa0 [ 1602.611418] ? get_signal+0x384/0x1fc0 [ 1602.611432] ? mm_update_next_owner+0x660/0x660 [ 1602.611454] ? _raw_spin_unlock_irq+0x28/0x90 [ 1602.616903] kobject: 'rfkill47' (000000006bc257be): kobject_cleanup, parent (null) [ 1602.619416] ? get_signal+0x384/0x1fc0 [ 1602.626239] kobject: 'rfkill47' (000000006bc257be): calling ktype release [ 1602.626654] ? _raw_spin_unlock_irq+0x28/0x90 [ 1602.631162] kobject: 'rfkill47': free name [ 1602.637463] do_group_exit+0x135/0x370 [ 1602.643599] kobject: 'rfkill50' (00000000ac9c96f1): kobject_cleanup, parent (null) [ 1602.651489] get_signal+0x3ec/0x1fc0 [ 1602.651503] ? __might_fault+0x12b/0x1e0 [ 1602.651521] do_signal+0x95/0x1960 [ 1602.651538] ? setup_sigcontext+0x7d0/0x7d0 [ 1602.651557] ? kasan_check_read+0x11/0x20 [ 1602.655934] kobject: 'hci3' (000000007a176d93): kobject_uevent_env [ 1602.658900] ? _copy_to_user+0xc9/0x120 [ 1602.665501] kobject: 'rfkill50' (00000000ac9c96f1): calling ktype release [ 1602.667446] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1602.672312] kobject: 'hci3' (000000007a176d93): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 1602.680511] ? __x64_sys_futex+0x40d/0x590 [ 1602.680527] ? exit_to_usermode_loop+0x43/0x2c0 [ 1602.680538] ? do_syscall_64+0x53d/0x620 [ 1602.680549] ? exit_to_usermode_loop+0x43/0x2c0 [ 1602.680560] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1602.680574] ? trace_hardirqs_on+0x67/0x220 [ 1602.680589] exit_to_usermode_loop+0x244/0x2c0 [ 1602.680606] do_syscall_64+0x53d/0x620 [ 1602.680625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1602.688246] kobject: 'rfkill50': free name [ 1602.691743] RIP: 0033:0x459829 [ 1602.691768] Code: Bad RIP value. [ 1602.691774] RSP: 002b:00007f17dd9cbcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1602.691787] RAX: fffffffffffffe00 RBX: 000000000075bfd0 RCX: 0000000000459829 [ 1602.691793] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0 [ 1602.691806] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1602.691819] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 1602.697807] kobject: 'hci5' (00000000326d28a2): kobject_uevent_env [ 1602.700559] R13: 00007ffc8712e30f R14: 00007f17dd9cc9c0 R15: 000000000075bfd4 [ 1602.701706] Kernel Offset: disabled [ 1602.878349] Rebooting in 86400 seconds..