[ 38.273365] audit: type=1800 audit(1568459267.743:32): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.777937] audit: type=1800 audit(1568459268.253:33): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 38.801616] audit: type=1800 audit(1568459268.253:34): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.256455] audit: type=1400 audit(1568459269.723:35): avc: denied { map } for pid=7536 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.35' (ECDSA) to the list of known hosts. [ 183.251319] audit: type=1400 audit(1568459412.723:36): avc: denied { map } for pid=7549 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/14 11:10:12 parsed 1 programs [ 183.327572] audit: type=1400 audit(1568459412.803:37): avc: denied { map } for pid=7549 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14988 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/09/14 11:10:15 executed programs: 0 [ 185.812772] IPVS: ftp: loaded support on port[0] = 21 [ 185.831364] IPVS: ftp: loaded support on port[0] = 21 [ 185.832033] IPVS: ftp: loaded support on port[0] = 21 [ 185.838876] IPVS: ftp: loaded support on port[0] = 21 [ 185.853460] IPVS: ftp: loaded support on port[0] = 21 [ 185.868032] IPVS: ftp: loaded support on port[0] = 21 [ 186.104980] chnl_net:caif_netlink_parms(): no params data found [ 186.146199] chnl_net:caif_netlink_parms(): no params data found [ 186.185705] chnl_net:caif_netlink_parms(): no params data found [ 186.214514] chnl_net:caif_netlink_parms(): no params data found [ 186.235742] chnl_net:caif_netlink_parms(): no params data found [ 186.311892] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.318671] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.325686] device bridge_slave_0 entered promiscuous mode [ 186.379710] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.386100] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.393752] device bridge_slave_1 entered promiscuous mode [ 186.416686] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.423057] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.430951] device bridge_slave_0 entered promiscuous mode [ 186.437922] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.444278] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.451416] device bridge_slave_0 entered promiscuous mode [ 186.457929] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.464271] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.471809] device bridge_slave_0 entered promiscuous mode [ 186.483850] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.490277] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.497408] device bridge_slave_1 entered promiscuous mode [ 186.511950] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.519740] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.526076] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.533096] device bridge_slave_1 entered promiscuous mode [ 186.539327] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.545667] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.553391] device bridge_slave_1 entered promiscuous mode [ 186.568076] chnl_net:caif_netlink_parms(): no params data found [ 186.575987] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.582406] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.592123] device bridge_slave_0 entered promiscuous mode [ 186.602708] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.609192] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.616065] device bridge_slave_1 entered promiscuous mode [ 186.623295] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.648836] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.658856] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.672877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.686473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.699783] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.725956] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.751463] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.760487] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.768368] team0: Port device team_slave_0 added [ 186.773604] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.781355] team0: Port device team_slave_0 added [ 186.791789] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.800321] team0: Port device team_slave_1 added [ 186.814768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.822921] team0: Port device team_slave_0 added [ 186.829612] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.837508] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.844676] team0: Port device team_slave_1 added [ 186.853666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.862141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.870107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.877499] team0: Port device team_slave_1 added [ 186.882709] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.890275] team0: Port device team_slave_0 added [ 186.899479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.920920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.928489] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.935692] team0: Port device team_slave_1 added [ 186.940958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.948407] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.955708] team0: Port device team_slave_0 added [ 186.960930] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.968003] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.974898] device bridge_slave_0 entered promiscuous mode [ 186.985630] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.992001] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.999320] device bridge_slave_1 entered promiscuous mode [ 187.005743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.013068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.024751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.032290] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.040159] team0: Port device team_slave_1 added [ 187.088448] device hsr_slave_0 entered promiscuous mode [ 187.126917] device hsr_slave_1 entered promiscuous mode [ 187.239568] device hsr_slave_0 entered promiscuous mode [ 187.306944] device hsr_slave_1 entered promiscuous mode [ 187.377327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.390747] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.397877] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.409978] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.423749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.430977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.479599] device hsr_slave_0 entered promiscuous mode [ 187.506871] device hsr_slave_1 entered promiscuous mode [ 187.547769] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.555517] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.598752] device hsr_slave_0 entered promiscuous mode [ 187.636933] device hsr_slave_1 entered promiscuous mode [ 187.677180] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.684053] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.700950] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.708991] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.733345] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.799656] device hsr_slave_0 entered promiscuous mode [ 187.836977] device hsr_slave_1 entered promiscuous mode [ 187.877273] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.884268] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.891834] team0: Port device team_slave_0 added [ 187.905734] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.913820] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.923950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.931103] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.939175] team0: Port device team_slave_1 added [ 187.944585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.952717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.987271] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.049685] device hsr_slave_0 entered promiscuous mode [ 188.086979] device hsr_slave_1 entered promiscuous mode [ 188.127436] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 188.138367] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.144931] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 188.163942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.181359] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.202831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.211101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.227580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.234926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.243957] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.250754] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.288287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.306466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.320407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.328973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.336511] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.343012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.351005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.360751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.374295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.383929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.392613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.401279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.409580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.417308] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.423639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.432584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.442747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.453975] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.463285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.472313] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.481863] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.490309] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.497544] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.504430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.513491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.521380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.528353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.539837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.547289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.555952] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.562582] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.570863] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.577023] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.585388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.593448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.601363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.609245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.616819] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.623163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.630542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.638356] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.647086] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.654502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.662861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.670388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.678093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.684924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.691973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.699016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.707000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.715275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.723533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.734351] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.742803] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.749406] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.756413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.765993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.776449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.784682] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.791080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.798546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.805372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.812359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.820112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.827942] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.834272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.842207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.853442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.863280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.872696] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.879923] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.888499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.897390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.904493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.912434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.920152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.928136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.935955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.943894] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.950285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.957275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.965024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.972710] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.979257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.986419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.994653] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 189.003748] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.012616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 189.022384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 189.031255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.041092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.050117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.057981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.065721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.073824] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.080209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.087062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.094753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.102545] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.108925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.115760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.123653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.131382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.139391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.149376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.156944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.164015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.171289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.179168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.187222] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.193566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.202565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.211351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.220414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.229827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.243221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.251141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.259616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.267613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.275140] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.281530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.288498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.296153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.303967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.313054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.321044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.328620] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.334936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.342079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.352240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.361999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.370121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.379779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.388537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.402432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.410336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.419420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.429364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.437214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.444885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.453088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.461059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.469329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.477240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.484911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.492661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.500411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.510447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.520451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.532766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.541006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.549393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.557466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.564992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.573917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.581882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.589203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.597118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.604474] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 189.610641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.620667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.629433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.638755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.647713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.654568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.662675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.670508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.678629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.686137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.694207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.701866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.709818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.717578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.725370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.733108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.743042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.752527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.762087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.772081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.780036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.790013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.797781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.805396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.813174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.820915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.828386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.835786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.848974] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 189.854986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.866149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.876386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.885042] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 189.894559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.907426] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 189.913649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.921260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.928938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.936363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.944207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.951862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.960977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.973881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.983678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.995646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.003131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.012177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.019851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.028273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.037680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 190.046361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.057255] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 190.063272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.071224] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 190.077733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.087959] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 190.093970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.101757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.110777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.124307] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 190.132963] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 190.139210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.149442] audit: type=1400 audit(1568459419.623:38): avc: denied { associate } for pid=7574 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 190.185114] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 190.197528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.218321] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 190.243631] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 190.260126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.281082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.315729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.416583] hrtimer: interrupt took 40640 ns 2019/09/14 11:10:20 executed programs: 11 2019/09/14 11:10:25 executed programs: 156 2019/09/14 11:10:30 executed programs: 309 2019/09/14 11:10:35 executed programs: 455 2019/09/14 11:10:40 executed programs: 604 2019/09/14 11:10:45 executed programs: 757 2019/09/14 11:10:50 executed programs: 901 [ 225.118405] ================================================================== [ 225.125974] BUG: KASAN: use-after-free in rxrpc_send_keepalive+0x83e/0x8e0 [ 225.132994] Read of size 8 at addr ffff8880a0b11698 by task kworker/1:2/2741 [ 225.140178] [ 225.141816] CPU: 1 PID: 2741 Comm: kworker/1:2 Not tainted 4.19.72 #0 [ 225.148392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.157758] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 225.163380] Call Trace: [ 225.165982] dump_stack+0x172/0x1f0 [ 225.169622] ? rxrpc_send_keepalive+0x83e/0x8e0 [ 225.174298] print_address_description.cold+0x7c/0x20d [ 225.179575] ? rxrpc_send_keepalive+0x83e/0x8e0 [ 225.184358] kasan_report.cold+0x8c/0x2ba [ 225.188510] __asan_report_load8_noabort+0x14/0x20 [ 225.193484] rxrpc_send_keepalive+0x83e/0x8e0 [ 225.197976] ? rxrpc_reject_packets+0xa60/0xa60 [ 225.202647] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 225.207924] ? find_held_lock+0x35/0x130 [ 225.211998] ? mark_held_locks+0xb1/0x100 [ 225.216141] ? _raw_spin_unlock_bh+0x31/0x40 [ 225.220539] ? __local_bh_enable_ip+0x15a/0x270 [ 225.225195] ? lockdep_hardirqs_on+0x415/0x5d0 [ 225.229815] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 225.235086] ? trace_hardirqs_on+0x67/0x220 [ 225.239395] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 225.244657] ? __local_bh_enable_ip+0x15a/0x270 [ 225.249336] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 225.254432] ? process_one_work+0x890/0x1750 [ 225.258847] ? rxrpc_peer_add_rtt+0x620/0x620 [ 225.263339] process_one_work+0x989/0x1750 [ 225.267576] ? pwq_dec_nr_in_flight+0x320/0x320 [ 225.272234] ? lock_acquire+0x16f/0x3f0 [ 225.276197] ? kasan_check_write+0x14/0x20 [ 225.280417] ? do_raw_spin_lock+0xc8/0x240 [ 225.284638] worker_thread+0x98/0xe40 [ 225.288434] ? trace_hardirqs_on+0x67/0x220 [ 225.292755] kthread+0x354/0x420 [ 225.296118] ? process_one_work+0x1750/0x1750 [ 225.300597] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 225.306118] ret_from_fork+0x24/0x30 [ 225.309819] [ 225.311427] Allocated by task 11537: [ 225.315130] save_stack+0x45/0xd0 [ 225.318566] kasan_kmalloc+0xce/0xf0 [ 225.322272] kmem_cache_alloc_trace+0x152/0x760 [ 225.326938] rxrpc_alloc_connection+0x6a/0x5e0 [ 225.331510] rxrpc_connect_call+0x641/0x48d0 [ 225.335898] rxrpc_new_client_call+0x8e7/0x1880 [ 225.340547] rxrpc_do_sendmsg+0xfbe/0x1c8f [ 225.344768] rxrpc_sendmsg+0x4a0/0x5b0 [ 225.348643] sock_sendmsg+0xd7/0x130 [ 225.352347] ___sys_sendmsg+0x3e2/0x920 [ 225.356303] __sys_sendmmsg+0x1bf/0x4e0 [ 225.360259] __x64_sys_sendmmsg+0x9d/0x100 [ 225.364478] do_syscall_64+0xfd/0x620 [ 225.368271] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.373454] [ 225.375067] Freed by task 7581: [ 225.378342] save_stack+0x45/0xd0 [ 225.381795] __kasan_slab_free+0x102/0x150 [ 225.386030] kasan_slab_free+0xe/0x10 [ 225.389831] kfree+0xcf/0x220 [ 225.392919] rxrpc_destroy_connection+0x1f2/0x2d0 [ 225.397745] rcu_process_callbacks+0xba0/0x1a30 [ 225.402396] __do_softirq+0x25c/0x921 [ 225.406185] [ 225.407805] The buggy address belongs to the object at ffff8880a0b11680 [ 225.407805] which belongs to the cache kmalloc-1024 of size 1024 [ 225.420631] The buggy address is located 24 bytes inside of [ 225.420631] 1024-byte region [ffff8880a0b11680, ffff8880a0b11a80) [ 225.432572] The buggy address belongs to the page: [ 225.437486] page:ffffea000282c400 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0xffff8880a0b10d80 compound_mapcount: 0 [ 225.448759] flags: 0x1fffc0000008100(slab|head) [ 225.453434] raw: 01fffc0000008100 ffffea0002356b08 ffffea000294fa08 ffff88812c3f0ac0 [ 225.461310] raw: ffff8880a0b10d80 ffff8880a0b10000 0000000100000006 0000000000000000 [ 225.469174] page dumped because: kasan: bad access detected [ 225.474892] [ 225.476499] Memory state around the buggy address: [ 225.481412] ffff8880a0b11580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.488761] ffff8880a0b11600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.496117] >ffff8880a0b11680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.503461] ^ [ 225.507597] ffff8880a0b11700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.514949] ffff8880a0b11780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.522294] ================================================================== [ 225.529637] Disabling lock debugging due to kernel taint [ 225.538683] Kernel panic - not syncing: panic_on_warn set ... [ 225.538683] [ 225.546058] CPU: 1 PID: 2741 Comm: kworker/1:2 Tainted: G B 4.19.72 #0 [ 225.554009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.563368] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 225.568971] Call Trace: [ 225.571546] dump_stack+0x172/0x1f0 [ 225.575167] ? rxrpc_send_keepalive+0x83e/0x8e0 [ 225.579822] panic+0x263/0x507 [ 225.582998] ? __warn_printk+0xf3/0xf3 [ 225.586878] ? rxrpc_send_keepalive+0x83e/0x8e0 [ 225.591544] ? preempt_schedule+0x4b/0x60 [ 225.595693] ? ___preempt_schedule+0x16/0x18 [ 225.600083] ? trace_hardirqs_on+0x5e/0x220 [ 225.604387] ? rxrpc_send_keepalive+0x83e/0x8e0 [ 225.609044] kasan_end_report+0x47/0x4f [ 225.613014] kasan_report.cold+0xa9/0x2ba [ 225.617164] __asan_report_load8_noabort+0x14/0x20 [ 225.622079] rxrpc_send_keepalive+0x83e/0x8e0 [ 225.626566] ? rxrpc_reject_packets+0xa60/0xa60 [ 225.631231] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 225.636501] ? find_held_lock+0x35/0x130 [ 225.640545] ? mark_held_locks+0xb1/0x100 [ 225.644688] ? _raw_spin_unlock_bh+0x31/0x40 [ 225.649082] ? __local_bh_enable_ip+0x15a/0x270 [ 225.653729] ? lockdep_hardirqs_on+0x415/0x5d0 [ 225.658292] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 225.663549] ? trace_hardirqs_on+0x67/0x220 [ 225.667860] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 225.673128] ? __local_bh_enable_ip+0x15a/0x270 [ 225.677782] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 225.682882] ? process_one_work+0x890/0x1750 [ 225.687286] ? rxrpc_peer_add_rtt+0x620/0x620 [ 225.691775] process_one_work+0x989/0x1750 [ 225.696008] ? pwq_dec_nr_in_flight+0x320/0x320 [ 225.700669] ? lock_acquire+0x16f/0x3f0 [ 225.704635] ? kasan_check_write+0x14/0x20 [ 225.708854] ? do_raw_spin_lock+0xc8/0x240 [ 225.713071] worker_thread+0x98/0xe40 [ 225.716858] ? trace_hardirqs_on+0x67/0x220 [ 225.721164] kthread+0x354/0x420 [ 225.724510] ? process_one_work+0x1750/0x1750 [ 225.728989] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 225.734510] ret_from_fork+0x24/0x30 [ 225.739622] Kernel Offset: disabled [ 225.743250] Rebooting in 86400 seconds..