[ 42.842133][ T26] audit: type=1800 audit(1552254564.912:30): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.235781][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 47.235798][ T26] audit: type=1400 audit(1552254569.322:35): avc: denied { map } for pid=8191 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. [ 193.950065][ T26] audit: type=1400 audit(1552254716.042:36): avc: denied { map } for pid=8203 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/03/10 21:51:56 parsed 1 programs [ 194.810786][ T26] audit: type=1400 audit(1552254716.902:37): avc: denied { map } for pid=8203 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=4897 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/03/10 21:51:58 executed programs: 0 [ 196.728399][ T8225] IPVS: ftp: loaded support on port[0] = 21 [ 196.743762][ T8224] IPVS: ftp: loaded support on port[0] = 21 [ 196.743949][ T8223] IPVS: ftp: loaded support on port[0] = 21 [ 196.809222][ T8228] IPVS: ftp: loaded support on port[0] = 21 [ 196.828863][ T8229] IPVS: ftp: loaded support on port[0] = 21 [ 196.876864][ T8231] IPVS: ftp: loaded support on port[0] = 21 [ 197.107873][ T8223] chnl_net:caif_netlink_parms(): no params data found [ 197.130700][ T8224] chnl_net:caif_netlink_parms(): no params data found [ 197.166993][ T8225] chnl_net:caif_netlink_parms(): no params data found [ 197.268833][ T8229] chnl_net:caif_netlink_parms(): no params data found [ 197.288358][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.296524][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.304901][ T8223] device bridge_slave_0 entered promiscuous mode [ 197.315669][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.322820][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.330809][ T8223] device bridge_slave_1 entered promiscuous mode [ 197.356090][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.363273][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.371398][ T8224] device bridge_slave_0 entered promiscuous mode [ 197.378688][ T8228] chnl_net:caif_netlink_parms(): no params data found [ 197.405780][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.413368][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.420982][ T8225] device bridge_slave_0 entered promiscuous mode [ 197.428429][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.438017][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.446025][ T8224] device bridge_slave_1 entered promiscuous mode [ 197.464121][ T8223] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.480400][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.487468][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.498274][ T8225] device bridge_slave_1 entered promiscuous mode [ 197.529104][ T8223] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.566052][ T8224] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.590853][ T8223] team0: Port device team_slave_0 added [ 197.598267][ T8225] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.613117][ T8224] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.632091][ T8223] team0: Port device team_slave_1 added [ 197.637934][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.645177][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.653116][ T8229] device bridge_slave_0 entered promiscuous mode [ 197.662698][ T8225] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.688856][ T8224] team0: Port device team_slave_0 added [ 197.696290][ T8224] team0: Port device team_slave_1 added [ 197.710719][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.717838][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.725728][ T8229] device bridge_slave_1 entered promiscuous mode [ 197.754855][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.763364][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.771229][ T8228] device bridge_slave_0 entered promiscuous mode [ 197.778413][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 197.818954][ T8229] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.854949][ T8224] device hsr_slave_0 entered promiscuous mode [ 197.889973][ T8224] device hsr_slave_1 entered promiscuous mode [ 197.929695][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.936782][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.945063][ T8228] device bridge_slave_1 entered promiscuous mode [ 197.965261][ T8225] team0: Port device team_slave_0 added [ 198.031051][ T8223] device hsr_slave_0 entered promiscuous mode [ 198.109792][ T8223] device hsr_slave_1 entered promiscuous mode [ 198.161239][ T8229] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.181099][ T8225] team0: Port device team_slave_1 added [ 198.213335][ T8228] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.228736][ T8228] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.254135][ T8228] team0: Port device team_slave_0 added [ 198.301181][ T8225] device hsr_slave_0 entered promiscuous mode [ 198.339731][ T8225] device hsr_slave_1 entered promiscuous mode [ 198.394091][ T8229] team0: Port device team_slave_0 added [ 198.403807][ T8228] team0: Port device team_slave_1 added [ 198.414563][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.422051][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.429997][ T8231] device bridge_slave_0 entered promiscuous mode [ 198.438531][ T8229] team0: Port device team_slave_1 added [ 198.448794][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.456678][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.464627][ T8231] device bridge_slave_1 entered promiscuous mode [ 198.552202][ T8229] device hsr_slave_0 entered promiscuous mode [ 198.589907][ T8229] device hsr_slave_1 entered promiscuous mode [ 198.691090][ T8228] device hsr_slave_0 entered promiscuous mode [ 198.740040][ T8228] device hsr_slave_1 entered promiscuous mode [ 198.811124][ T8231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.827335][ T8231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.848922][ T8231] team0: Port device team_slave_0 added [ 198.857432][ T8231] team0: Port device team_slave_1 added [ 198.951301][ T8231] device hsr_slave_0 entered promiscuous mode [ 198.999844][ T8231] device hsr_slave_1 entered promiscuous mode [ 199.077779][ T8223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.109822][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.117084][ T8231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.124837][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.131905][ T8231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.158472][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.172079][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.191160][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.202266][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.210767][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.220838][ T8223] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.258898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.267331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.275383][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.284377][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.293075][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.300191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.308547][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.320121][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.330800][ T8225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.355268][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.368059][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.377548][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.386462][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.393614][ T8238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.402906][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.412481][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.433227][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.458077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.466998][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.476422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.484479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.492379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.501233][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.509802][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.519910][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.528230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.535335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.543033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.551818][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.560329][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.567371][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.575339][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.583093][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.595498][ T8225] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.616573][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.625458][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.634248][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.642950][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.651662][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.659228][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.667099][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.676011][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.688732][ T8223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.700941][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.712832][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.733207][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.741813][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.750751][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.759025][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.767763][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.776343][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.783461][ T8240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.791238][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.798899][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.806687][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.815178][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.823713][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.831948][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.840419][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.848620][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.857036][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.865640][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.874113][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.881228][ T8240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.889531][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.899238][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.916997][ T8224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.943309][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.952350][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.966724][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.975382][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.983689][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.990794][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.998597][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.007515][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.016096][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.023193][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.030932][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.039597][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.048396][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.060397][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.069002][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.078026][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.085178][ T8234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.093059][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.101943][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.125444][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.142435][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.152188][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.162834][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.172107][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.181009][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.189797][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.198091][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.206641][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.214886][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.223374][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.231524][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.240289][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.248505][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.255592][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.264023][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.278568][ T8229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.289866][ T8229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.308890][ T8225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.328105][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.336964][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.345581][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.354996][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.363251][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.372073][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.380558][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.393129][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.412976][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.432767][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.441220][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.448761][ T2994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.465412][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.490412][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.499201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.508437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.515615][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.524729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.533574][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.542385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.550725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.559122][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.568510][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.590425][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.601562][ T26] audit: type=1400 audit(1552254722.692:38): avc: denied { associate } for pid=8223 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 200.633250][ T8228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.647351][ T8228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.665667][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.675126][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.684074][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.691619][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.699431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.707920][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.717191][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.725558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.733782][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.743881][ T8229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.767126][ T8231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.779083][ T8231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.794239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.807789][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.824631][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.836508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.845682][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.854896][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.863532][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.871913][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.880398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.883979][ T26] audit: type=1400 audit(1552254722.972:39): avc: denied { create } for pid=8245 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.888702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.918538][ T26] audit: type=1400 audit(1552254723.012:40): avc: denied { write } for pid=8245 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.926469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.953238][ T26] audit: type=1400 audit(1552254723.012:41): avc: denied { read } for pid=8245 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.961714][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.984890][ T26] audit: type=1400 audit(1552254723.072:42): avc: denied { accept } for pid=8245 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.984927][ T26] audit: type=1400 audit(1552254723.072:43): avc: denied { prog_load } for pid=8245 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 201.055616][ T8247] Started in network mode [ 201.060601][ T8247] Own node identity ac1414aa, cluster identity 4711 [ 201.068222][ T8247] New replicast peer: 172.20.20.187 [ 201.075286][ T8247] Enabled bearer , priority 10 [ 201.144612][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.182869][ T8256] Started in network mode [ 201.202608][ T8256] Own node identity ac1414aa, cluster identity 4711 [ 201.216023][ T8256] New replicast peer: 172.20.20.187 [ 201.226157][ T8256] Enabled bearer , priority 10 [ 201.233581][ T8259] Started in network mode [ 201.243386][ T8259] Own node identity ac1414aa, cluster identity 4711 [ 201.255696][ T8259] New replicast peer: 172.20.20.187 [ 201.262053][ T8259] Enabled bearer , priority 10 [ 201.278723][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.326213][ T8268] Enabling of bearer rejected, already enabled [ 201.395448][ T8274] Started in network mode [ 201.400737][ T8274] Own node identity ac1414aa, cluster identity 4711 [ 201.407842][ T8274] New replicast peer: 172.20.20.187 [ 201.415964][ T8274] Enabled bearer , priority 10 [ 201.421864][ T8276] Enabling of bearer rejected, already enabled [ 201.430537][ T8277] Enabling of bearer rejected, already enabled [ 201.443720][ T22] [ 201.446069][ T22] ===================================== [ 201.451605][ T22] WARNING: bad unlock balance detected! [ 201.457153][ T22] 5.0.0+ #16 Not tainted [ 201.461383][ T22] ------------------------------------- [ 201.466921][ T22] kworker/1:1/22 is trying to release lock ( [ 201.466927][ T22] ================================================================== [ 201.480963][ T22] BUG: KASAN: slab-out-of-bounds in print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.487713][ T8284] Enabling of bearer rejected, already enabled [ 201.489896][ T22] Read of size 8 at addr ffff88809b11e724 by task kworker/1:1/22 [ 201.489900][ T22] [ 201.489915][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.0.0+ #16 [ 201.489922][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.489940][ T22] Workqueue: addrconf_dad_work (ipv6_addrconf) [ 201.489949][ T22] Call Trace: [ 201.489967][ T22] dump_stack+0x172/0x1f0 [ 201.489998][ T22] ? print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.514425][ T8286] Enabling of bearer rejected, already enabled [ 201.524290][ T22] print_address_description.cold+0x7c/0x20d [ 201.524306][ T22] ? print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.524317][ T22] ? print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.524332][ T22] kasan_report.cold+0x1b/0x40 [ 201.524345][ T22] ? print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.524360][ T22] ? process_one_work+0x9dc/0x1790 [ 201.524380][ T22] __asan_report_load8_noabort+0x14/0x20 [ 201.538393][ T8288] Enabling of bearer rejected, already enabled [ 201.544423][ T22] print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.544439][ T22] ? process_one_work+0x9dc/0x1790 [ 201.544450][ T22] lock_release+0x67e/0xa00 [ 201.544471][ T22] ? lock_downgrade+0x880/0x880 [ 201.565386][ T3872] kobject: 'loop1' (00000000acbf4ec0): kobject_uevent_env [ 201.570014][ T22] process_one_work+0xa47/0x1790 [ 201.570033][ T22] ? pwq_dec_nr_in_flight+0x320/0x320 [ 201.570054][ T22] ? lock_acquire+0x16f/0x3f0 [ 201.579012][ T3872] kobject: 'loop1' (00000000acbf4ec0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 201.581036][ T22] worker_thread+0x98/0xe40 [ 201.581052][ T22] ? trace_hardirqs_on+0x67/0x230 [ 201.581070][ T22] kthread+0x357/0x430 [ 201.581091][ T22] ? process_one_work+0x1790/0x1790 [ 201.587179][ T3872] kobject: 'loop2' (000000002e615ced): kobject_uevent_env [ 201.591837][ T22] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 201.591853][ T22] ret_from_fork+0x3a/0x50 [ 201.591863][ T22] [ 201.591869][ T22] Allocated by task 1: [ 201.591883][ T22] save_stack+0x45/0xd0 [ 201.591905][ T22] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 201.599499][ T3872] kobject: 'loop2' (000000002e615ced): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 201.605066][ T22] kasan_kmalloc+0x9/0x10 [ 201.605080][ T22] kmem_cache_alloc_trace+0x151/0x760 [ 201.605096][ T22] alloc_workqueue+0x7f9/0xe70 [ 201.605115][ T22] addrconf_init+0x8c/0x3a3 [ 201.611264][ T3872] kobject: 'loop5' (00000000dddfbf07): kobject_uevent_env [ 201.614705][ T22] inet6_init+0x36c/0x6e1 [ 201.614721][ T22] do_one_initcall+0x109/0x796 [ 201.614733][ T22] kernel_init_freeable+0x4da/0x5c9 [ 201.614752][ T22] kernel_init+0x12/0x1c5 [ 201.620049][ T3872] kobject: 'loop5' (00000000dddfbf07): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 201.626676][ T22] ret_from_fork+0x3a/0x50 [ 201.626680][ T22] [ 201.626686][ T22] Freed by task 0: [ 201.626689][ T22] (stack is not available) [ 201.626691][ T22] [ 201.626701][ T22] The buggy address belongs to the object at ffff88809b11e500 [ 201.626701][ T22] which belongs to the cache kmalloc-512 of size 512 [ 201.626713][ T22] The buggy address is located 36 bytes to the right of [ 201.626713][ T22] 512-byte region [ffff88809b11e500, ffff88809b11e700) [ 201.626724][ T22] The buggy address belongs to the page: [ 201.632729][ T3872] kobject: 'loop4' (0000000038fd8492): kobject_uevent_env [ 201.637006][ T22] page:ffffea00026c4780 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0x0 [ 201.637017][ T22] flags: 0x1fffc0000000200(slab) [ 201.637036][ T22] raw: 01fffc0000000200 ffffea0002a3f088 ffffea00026b4088 ffff88812c3f0940 [ 201.637051][ T22] raw: 0000000000000000 ffff88809b11e000 0000000100000006 0000000000000000 [ 201.642208][ T3872] kobject: 'loop4' (0000000038fd8492): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 201.651839][ T22] page dumped because: kasan: bad access detected [ 201.651843][ T22] [ 201.651847][ T22] Memory state around the buggy address: [ 201.651859][ T22] ffff88809b11e600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 201.651868][ T22] ffff88809b11e680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 201.651878][ T22] >ffff88809b11e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 201.651883][ T22] ^ [ 201.651891][ T22] ffff88809b11e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.651906][ T22] ffff88809b11e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.657352][ T3872] kobject: 'loop0' (00000000329db28a): kobject_uevent_env [ 201.661393][ T22] ================================================================== [ 201.661402][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 201.661417][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Tainted: G B 5.0.0+ #16 [ 201.661424][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.661443][ T22] Workqueue: addrconf_dad_work (ipv6_addrconf) [ 201.661459][ T22] Call Trace: [ 201.666927][ T3872] kobject: 'loop0' (00000000329db28a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 201.670710][ T22] dump_stack+0x172/0x1f0 [ 201.670729][ T22] panic+0x2cb/0x65c [ 201.670743][ T22] ? __warn_printk+0xf3/0xf3 [ 201.670763][ T22] ? lock_downgrade+0x880/0x880 [ 201.678625][ T3872] kobject: 'loop2' (000000002e615ced): kobject_uevent_env [ 201.684075][ T22] ? print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.684090][ T22] ? trace_hardirqs_off+0x62/0x220 [ 201.684102][ T22] ? trace_hardirqs_off+0x59/0x220 [ 201.684116][ T22] ? print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.684150][ T22] end_report+0x47/0x4f [ 201.688902][ T3872] kobject: 'loop2' (000000002e615ced): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 201.690865][ T22] ? print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.690881][ T22] kasan_report.cold+0xe/0x40 [ 201.690896][ T22] ? print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.690911][ T22] ? process_one_work+0x9dc/0x1790 [ 201.690929][ T22] __asan_report_load8_noabort+0x14/0x20 [ 201.696364][ T3872] kobject: 'loop0' (00000000329db28a): kobject_uevent_env [ 201.699127][ T22] print_unlock_imbalance_bug.cold+0x97/0x123 [ 201.699154][ T22] ? process_one_work+0x9dc/0x1790 [ 201.699168][ T22] lock_release+0x67e/0xa00 [ 201.699186][ T22] ? lock_downgrade+0x880/0x880 [ 201.705247][ T3872] kobject: 'loop0' (00000000329db28a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 201.714947][ T22] process_one_work+0xa47/0x1790 [ 201.714966][ T22] ? pwq_dec_nr_in_flight+0x320/0x320 [ 201.714977][ T22] ? lock_acquire+0x16f/0x3f0 [ 201.715001][ T22] worker_thread+0x98/0xe40 [ 201.720588][ T3872] kobject: 'loop2' (000000002e615ced): kobject_uevent_env [ 201.724674][ T22] ? trace_hardirqs_on+0x67/0x230 [ 201.724693][ T22] kthread+0x357/0x430 [ 201.724714][ T22] ? process_one_work+0x1790/0x1790 [ 201.729818][ T3872] kobject: 'loop2' (000000002e615ced): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 201.733953][ T22] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 201.733969][ T22] ret_from_fork+0x3a/0x50 [ 201.741826][ T22] Kernel Offset: disabled [ 202.180698][ T22] Rebooting in 86400 seconds..