[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Starting mcstransd:
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
syzkaller login: [ 65.878834][ T27] kauditd_printk_skb: 6 callbacks suppressed
[ 65.878847][ T27] audit: type=1400 audit(1564030722.595:35): avc: denied { map } for pid=9135 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.15.219' (ECDSA) to the list of known hosts.
[ 78.616146][ T27] audit: type=1400 audit(1564030735.335:36): avc: denied { map } for pid=9147 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
2019/07/25 04:58:56 parsed 1 programs
[ 79.558404][ T27] audit: type=1400 audit(1564030736.275:37): avc: denied { map } for pid=9147 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=95 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
2019/07/25 04:58:58 executed programs: 0
[ 81.670806][ T9168] IPVS: ftp: loaded support on port[0] = 21
[ 81.679713][ T9174] IPVS: ftp: loaded support on port[0] = 21
[ 81.709155][ T9169] IPVS: ftp: loaded support on port[0] = 21
[ 81.738782][ T9177] IPVS: ftp: loaded support on port[0] = 21
[ 81.738799][ T9172] IPVS: ftp: loaded support on port[0] = 21
[ 81.804555][ T9176] IPVS: ftp: loaded support on port[0] = 21
[ 81.980318][ T9174] chnl_net:caif_netlink_parms(): no params data found
[ 82.051914][ T9177] chnl_net:caif_netlink_parms(): no params data found
[ 82.069226][ T9168] chnl_net:caif_netlink_parms(): no params data found
[ 82.096242][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.104257][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.111911][ T9174] device bridge_slave_0 entered promiscuous mode
[ 82.120089][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.127418][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.135206][ T9174] device bridge_slave_1 entered promiscuous mode
[ 82.227424][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.235595][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.243377][ T9168] device bridge_slave_0 entered promiscuous mode
[ 82.260564][ T9174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.276670][ T9174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.293651][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.300691][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.308707][ T9168] device bridge_slave_1 entered promiscuous mode
[ 82.325119][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.332209][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.339934][ T9177] device bridge_slave_0 entered promiscuous mode
[ 82.348342][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.355460][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.363440][ T9177] device bridge_slave_1 entered promiscuous mode
[ 82.386513][ T9174] team0: Port device team_slave_0 added
[ 82.396440][ T9169] chnl_net:caif_netlink_parms(): no params data found
[ 82.421010][ T9172] chnl_net:caif_netlink_parms(): no params data found
[ 82.443529][ T9174] team0: Port device team_slave_1 added
[ 82.456062][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.497730][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.508963][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.526282][ T9176] chnl_net:caif_netlink_parms(): no params data found
[ 82.536487][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.543878][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.551430][ T9169] device bridge_slave_0 entered promiscuous mode
[ 82.576214][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.598078][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.606259][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.614088][ T9169] device bridge_slave_1 entered promiscuous mode
[ 82.673941][ T9174] device hsr_slave_0 entered promiscuous mode
[ 82.732557][ T9174] device hsr_slave_1 entered promiscuous mode
[ 82.795368][ T9168] team0: Port device team_slave_0 added
[ 82.816736][ T9172] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.824144][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.831699][ T9172] device bridge_slave_0 entered promiscuous mode
[ 82.839746][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.846958][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.854825][ T9172] device bridge_slave_1 entered promiscuous mode
[ 82.863192][ T9168] team0: Port device team_slave_1 added
[ 82.877479][ T9177] team0: Port device team_slave_0 added
[ 82.886137][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.897589][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.927017][ T9169] team0: Port device team_slave_0 added
[ 82.933284][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.940333][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.948560][ T9176] device bridge_slave_0 entered promiscuous mode
[ 82.958425][ T9177] team0: Port device team_slave_1 added
[ 82.972607][ T9172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.994724][ T9169] team0: Port device team_slave_1 added
[ 83.044090][ T9168] device hsr_slave_0 entered promiscuous mode
[ 83.102279][ T9168] device hsr_slave_1 entered promiscuous mode
[ 83.172305][ T9168] debugfs: Directory 'hsr0' with parent '/' already present!
[ 83.188205][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.195578][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.203353][ T9176] device bridge_slave_1 entered promiscuous mode
[ 83.229441][ T9172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.263258][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.274581][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.334247][ T9177] device hsr_slave_0 entered promiscuous mode
[ 83.382417][ T9177] device hsr_slave_1 entered promiscuous mode
[ 83.432211][ T9177] debugfs: Directory 'hsr0' with parent '/' already present!
[ 83.441037][ T9172] team0: Port device team_slave_0 added
[ 83.505296][ T9169] device hsr_slave_0 entered promiscuous mode
[ 83.542458][ T9169] device hsr_slave_1 entered promiscuous mode
[ 83.602104][ T9169] debugfs: Directory 'hsr0' with parent '/' already present!
[ 83.620237][ T9172] team0: Port device team_slave_1 added
[ 83.685099][ T9172] device hsr_slave_0 entered promiscuous mode
[ 83.742243][ T9172] device hsr_slave_1 entered promiscuous mode
[ 83.812162][ T9172] debugfs: Directory 'hsr0' with parent '/' already present!
[ 83.820685][ T9176] team0: Port device team_slave_0 added
[ 83.834344][ T9176] team0: Port device team_slave_1 added
[ 83.925096][ T9176] device hsr_slave_0 entered promiscuous mode
[ 83.982383][ T9176] device hsr_slave_1 entered promiscuous mode
[ 84.042095][ T9176] debugfs: Directory 'hsr0' with parent '/' already present!
[ 84.160790][ T9172] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.177415][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.193758][ T9174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.210217][ T9172] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.221848][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.244623][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.257942][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.267175][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.282724][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.291270][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.303082][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.310173][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.319000][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.327825][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.336245][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.343325][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.356528][ T9177] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.371516][ T9168] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.389832][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 84.397964][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.409040][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.419379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.428312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.436146][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 84.450372][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 84.466293][ T9169] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.498098][ T9174] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.506118][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.514878][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.522987][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.531386][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.540253][ T22] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.547345][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.555649][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.564281][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.572765][ T22] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.579787][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.587414][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 84.595901][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.604549][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.612978][ T22] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.620001][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.627624][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.636513][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.645048][ T22] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.652136][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.659592][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 84.668135][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 84.676416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 84.685210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.693600][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.701189][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 84.709115][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 84.716934][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 84.731349][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 84.740419][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 84.749790][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.758772][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.767778][ T22] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.774860][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.791300][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.810012][ T9172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 84.820515][ T9172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 84.835950][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 84.843862][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.852854][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.861089][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.868186][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.880408][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.889496][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.897960][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.905049][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.913123][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 84.921381][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 84.930102][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.938630][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.947250][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.954356][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.961849][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 84.970423][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 84.978876][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 85.020991][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 85.029734][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.039794][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.048862][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.058253][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.067149][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 85.076929][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.086057][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.094842][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.103525][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.111937][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.121682][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.130350][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 85.138200][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 85.146135][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.154886][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.163439][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.171659][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.180153][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.188566][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.197027][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.212578][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.220467][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.228446][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.237277][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.245939][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.254640][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.264461][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.273025][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.281421][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.290042][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.300964][ T9176] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.320057][ T9172] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.341677][ T9169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 85.360474][ T9169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 85.383918][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.399478][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.408383][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.417573][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.425987][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.437906][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.446376][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.454860][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.463106][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.471223][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.479758][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.505435][ T27] audit: type=1400 audit(1564030742.225:38): avc: denied { associate } for pid=9172 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
[ 85.511431][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.544569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.570904][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.580477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.594934][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.605315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 85.614069][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 85.622852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.629884][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.639591][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.650505][ T9177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.679107][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.712496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 85.738371][ T9177] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.750257][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 85.774076][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 85.788549][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.795712][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.846398][ T9174] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.879468][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 85.897644][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.931165][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.941932][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.962734][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.970538][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.983546][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.991906][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 86.001070][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 86.018671][ T9176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 86.032442][ T9176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 86.041798][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 86.051942][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 86.117087][ T9176] 8021q: adding VLAN 0 to HW filter on device batadv0
2019/07/25 04:59:03 executed programs: 11
2019/07/25 04:59:08 executed programs: 69
2019/07/25 04:59:13 executed programs: 132
2019/07/25 04:59:18 executed programs: 192
2019/07/25 04:59:23 executed programs: 251
2019/07/25 04:59:28 executed programs: 312
2019/07/25 04:59:33 executed programs: 373
[ 121.302404][ C0] ------------[ cut here ]------------
[ 121.303842][T11334] ==================================================================
[ 121.308212][ C0] refcount_t: increment on 0; use-after-free.
[ 121.316298][T11334] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200
[ 121.316309][T11334] Read of size 4 at addr ffff8880a408a0c0 by task syz-executor.1/11334
[ 121.316312][T11334]
[ 121.316328][T11334] CPU: 1 PID: 11334 Comm: syz-executor.1 Not tainted 5.3.0-rc1+ #76
[ 121.316335][T11334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 121.316345][T11334] Call Trace:
[ 121.322669][ C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70
[ 121.330793][T11334] dump_stack+0x172/0x1f0
[ 121.338989][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 121.341298][T11334] ? refcount_inc_not_zero_checked+0x81/0x200
[ 121.388278][T11334] print_address_description.cold+0xd4/0x306
[ 121.394241][T11334] ? refcount_inc_not_zero_checked+0x81/0x200
[ 121.400294][T11334] ? refcount_inc_not_zero_checked+0x81/0x200
[ 121.406346][T11334] __kasan_report.cold+0x1b/0x36
[ 121.411273][T11334] ? refcount_inc_not_zero_checked+0x81/0x200
[ 121.417325][T11334] kasan_report+0x12/0x17
[ 121.422490][T11334] check_memory_region+0x134/0x1a0
[ 121.427595][T11334] __kasan_check_read+0x11/0x20
[ 121.432432][T11334] refcount_inc_not_zero_checked+0x81/0x200
[ 121.438313][T11334] ? refcount_dec_and_mutex_lock+0x90/0x90
[ 121.444107][T11334] ? __kasan_check_write+0x14/0x20
[ 121.449290][T11334] refcount_inc_checked+0x17/0x70
[ 121.454309][T11334] nr_release+0x62/0x3e0
[ 121.458546][T11334] __sock_release+0xce/0x280
[ 121.463130][T11334] sock_close+0x1e/0x30
[ 121.467275][T11334] __fput+0x2ff/0x890
[ 121.471248][T11334] ? __sock_release+0x280/0x280
[ 121.476085][T11334] ____fput+0x16/0x20
[ 121.480056][T11334] task_work_run+0x145/0x1c0
[ 121.484730][T11334] exit_to_usermode_loop+0x316/0x380
[ 121.490007][T11334] do_syscall_64+0x5a9/0x6a0
[ 121.494586][T11334] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 121.500479][T11334] RIP: 0033:0x413511
[ 121.504359][T11334] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 121.523958][T11334] RSP: 002b:00007ffc72607db0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 121.532352][T11334] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413511
[ 121.540396][T11334] RDX: 0000001b31320000 RSI: 0000000000000000 RDI: 0000000000000003
[ 121.548353][T11334] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff
[ 121.556308][T11334] R10: 00007ffc72607e90 R11: 0000000000000293 R12: 000000000075c9a0
[ 121.564261][T11334] R13: 000000000075c9a0 R14: 0000000000760a50 R15: ffffffffffffffff
[ 121.572231][T11334]
[ 121.572241][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.3.0-rc1+ #76
[ 121.572253][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 121.574555][T11334] Allocated by task 0:
[ 121.581723][ C0] Call Trace:
[ 121.593281][T11334] save_stack+0x23/0x90
[ 121.597316][ C0]
[ 121.600581][T11334] __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 121.604709][ C0] dump_stack+0x172/0x1f0
[ 121.607526][T11334] kasan_kmalloc+0x9/0x10
[ 121.607541][T11334] __kmalloc+0x163/0x770
[ 121.613145][ C0] ? refcount_inc_not_zero_checked+0x190/0x200
[ 121.617433][T11334] sk_prot_alloc+0x23a/0x310
[ 121.617447][T11334] sk_alloc+0x39/0xf70
[ 121.621748][ C0] panic+0x2dc/0x755
[ 121.625952][T11334] nr_rx_frame+0x733/0x1e73
[ 121.625967][T11334] nr_loopback_timer+0x7b/0x170
[ 121.632091][ C0] ? add_taint.cold+0x16/0x16
[ 121.636645][T11334] call_timer_fn+0x1ac/0x780
[ 121.636661][T11334] run_timer_softirq+0x697/0x17a0
[ 121.640701][ C0] ? __kasan_check_write+0x14/0x20
[ 121.644562][T11334] __do_softirq+0x262/0x98c
[ 121.649039][ C0] ? __warn.cold+0x5/0x4c
[ 121.653848][T11334]
[ 121.658499][ C0] ? __warn+0xe7/0x1e0
[ 121.663052][T11334] Freed by task 11337:
[ 121.668051][ C0] ? refcount_inc_checked+0x61/0x70
[ 121.673128][T11334] save_stack+0x23/0x90
[ 121.677601][ C0] __warn.cold+0x20/0x4c
[ 121.681899][T11334] __kasan_slab_free+0x102/0x150
[ 121.684205][ C0] ? vprintk_emit+0x1ea/0x700
[ 121.688244][T11334] kasan_slab_free+0xe/0x10
[ 121.692284][ C0] ? refcount_inc_checked+0x61/0x70
[ 121.697448][T11334] kfree+0x10a/0x2c0
[ 121.701575][ C0] report_bug+0x263/0x2b0
[ 121.705777][T11334] __sk_destruct+0x4f7/0x6e0
[ 121.705790][T11334] sk_destruct+0x86/0xa0
[ 121.710701][ C0] do_error_trap+0x11b/0x200
[ 121.715336][T11334] __sk_free+0xfb/0x360
[ 121.715350][T11334] sk_free+0x42/0x50
[ 121.719824][ C0] do_invalid_op+0x37/0x50
[ 121.724987][T11334] sock_efree+0x61/0x80
[ 121.728855][ C0] ? refcount_inc_checked+0x61/0x70
[ 121.733152][T11334] skb_release_head_state+0xeb/0x250
[ 121.737710][ C0] invalid_op+0x23/0x30
[ 121.741915][T11334] skb_release_all+0x16/0x60
[ 121.741930][T11334] kfree_skb+0x101/0x3c0
[ 121.746492][ C0] RIP: 0010:refcount_inc_checked+0x61/0x70
[ 121.750610][T11334] nr_accept+0x56e/0x700
[ 121.750627][T11334] __sys_accept4+0x34e/0x6a0
[ 121.754491][ C0] Code: 1d 5f 30 64 06 31 ff 89 de e8 4b b3 35 fe 84 db 75 dd e8 02 b2 35 fe 48 c7 c7 00 03 c6 87 c6 05 3f 30 64 06 01 e8 57 17 07 fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41
[ 121.758878][T11334] __x64_sys_accept+0x75/0xb0
[ 121.758894][T11334] do_syscall_64+0xfd/0x6a0
[ 121.763023][ C0] RSP: 0018:ffff8880ae809bf0 EFLAGS: 00010282
[ 121.768183][T11334] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 121.768190][T11334]
[ 121.773453][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 121.777580][T11334] The buggy address belongs to the object at ffff8880a408a040
[ 121.777580][T11334] which belongs to the cache kmalloc-2k of size 2048
[ 121.782132][ C0] RDX: 0000000000000100 RSI: ffffffff815c5966 RDI: ffffed1015d01370
[ 121.782144][ C0] RBP: ffff8880ae809c00 R08: ffffffff88c7a1c0 R09: fffffbfff14a7758
[ 121.786357][T11334] The buggy address is located 128 bytes inside of
[ 121.786357][T11334] 2048-byte region [ffff8880a408a040, ffff8880a408a840)
[ 121.792133][ C0] R10: fffffbfff14a7757 R11: ffffffff8a53babf R12: ffff8880a408a0c0
[ 121.796341][T11334] The buggy address belongs to the page:
[ 121.800895][ C0] R13: ffff8880a408a0a8 R14: ffff8880a1605248 R15: ffff8880a1605220
[ 121.800918][ C0] ? vprintk_func+0x86/0x189
[ 121.820486][T11334] page:ffffea0002902280 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 compound_mapcount: 0
[ 121.825146][ C0] nr_insert_socket+0x2d/0xe0
[ 121.829630][T11334] flags: 0x1fffc0000010200(slab|head)
[ 121.835667][ C0] nr_rx_frame+0x1605/0x1e73
[ 121.841532][T11334] raw: 01fffc0000010200 ffffea00022aa788 ffffea0002877988 ffff8880aa400e00
[ 121.843848][ C0] nr_loopback_timer+0x7b/0x170
[ 121.851788][T11334] raw: 0000000000000000 ffff8880a408a040 0000000100000003 0000000000000000
[ 121.865812][ C0] call_timer_fn+0x1ac/0x780
[ 121.873748][T11334] page dumped because: kasan: bad access detected
[ 121.881698][ C0] ? nr_process_rx_frame+0x1540/0x1540
[ 121.895277][T11334]
[ 121.903230][ C0] ? msleep_interruptible+0x150/0x150
[ 121.908815][T11334] Memory state around the buggy address:
[ 121.908827][T11334] ffff8880a4089f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 121.916776][ C0] ? run_timer_softirq+0x685/0x17a0
[ 121.921332][T11334] ffff8880a408a000: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[ 121.932243][ C0] ? trace_hardirqs_on+0x67/0x240
[ 121.936885][T11334] >ffff8880a408a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.942226][ C0] ? __kasan_check_read+0x11/0x20
[ 121.942241][ C0] ? nr_process_rx_frame+0x1540/0x1540
[ 121.946797][T11334] ^
[ 121.955353][ C0] ? nr_process_rx_frame+0x1540/0x1540
[ 121.960168][T11334] ffff8880a408a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.968723][ C0] run_timer_softirq+0x697/0x17a0
[ 121.973278][T11334] ffff8880a408a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 121.979669][ C0] ? add_timer+0x930/0x930
[ 121.985093][T11334] ==================================================================
[ 121.987405][ C0] ? kvm_clock_read+0x18/0x30
[ 121.992735][T11334] Disabling lock debugging due to kernel taint
[ 121.998337][ C0] ? kvm_sched_clock_read+0x9/0x20
[ 122.104014][ C0] ? sched_clock+0x2e/0x50
[ 122.108409][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 122.114623][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 122.120841][ C0] __do_softirq+0x262/0x98c
[ 122.125323][ C0] ? sched_clock_cpu+0x1b/0x1b0
[ 122.130151][ C0] irq_exit+0x19b/0x1e0
[ 122.134284][ C0] smp_apic_timer_interrupt+0x1a3/0x610
[ 122.139806][ C0] apic_timer_interrupt+0xf/0x20
[ 122.144714][ C0]
[ 122.147631][ C0] RIP: 0010:native_safe_halt+0xe/0x10
[ 122.152987][ C0] Code: 08 8d 73 fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 04 f7 4e 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d f4 f6 4e 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 1e 45 27 fa e8 f9
[ 122.172565][ C0] RSP: 0018:ffffffff88c07ce8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 122.180955][ C0] RAX: 1ffffffff11a5e35 RBX: ffffffff88c7a1c0 RCX: 0000000000000000
[ 122.188914][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff88c7aa4c
[ 122.196860][ C0] RBP: ffffffff88c07d18 R08: ffffffff88c7a1c0 R09: 0000000000000000
[ 122.204809][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 122.212756][ C0] R13: ffffffff89a4faf8 R14: 0000000000000000 R15: 0000000000000000
[ 122.220718][ C0] ? default_idle+0x4e/0x360
[ 122.225287][ C0] arch_cpu_idle+0xa/0x10
[ 122.229596][ C0] default_idle_call+0x84/0xb0
[ 122.234335][ C0] do_idle+0x413/0x760
[ 122.238381][ C0] ? arch_cpu_idle_exit+0x80/0x80
[ 122.243383][ C0] cpu_startup_entry+0x1b/0x20
[ 122.248119][ C0] rest_init+0x245/0x37b
[ 122.252343][ C0] arch_call_rest_init+0xe/0x1b
[ 122.257166][ C0] start_kernel+0x912/0x951
[ 122.261646][ C0] ? mem_encrypt_init+0xb/0xb
[ 122.266303][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 122.272518][ C0] ? x86_family+0x41/0x50
[ 122.276822][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 122.283040][ C0] x86_64_start_reservations+0x29/0x2b
[ 122.288473][ C0] x86_64_start_kernel+0x77/0x7b
[ 122.293388][ C0] secondary_startup_64+0xa4/0xb0
[ 122.299530][ C0] Kernel Offset: disabled
[ 122.303848][ C0] Rebooting in 86400 seconds..