Starting mcstransd: [ 32.829273] sshd (6053) used greatest stack depth: 15176 bytes left [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.211554] audit: type=1800 audit(1543945514.094:33): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 33.233256] audit: type=1800 audit(1543945514.104:34): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.726482] audit: type=1400 audit(1543945516.614:35): avc: denied { map } for pid=6169 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.70' (ECDSA) to the list of known hosts. [ 48.318262] audit: type=1400 audit(1543945529.204:36): avc: denied { map } for pid=6183 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/12/04 17:45:29 parsed 1 programs [ 48.879339] audit: type=1400 audit(1543945529.764:37): avc: denied { map } for pid=6183 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=73 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/12/04 17:45:31 executed programs: 0 [ 50.738804] IPVS: ftp: loaded support on port[0] = 21 [ 50.803030] IPVS: ftp: loaded support on port[0] = 21 [ 50.826832] IPVS: ftp: loaded support on port[0] = 21 [ 50.838867] IPVS: ftp: loaded support on port[0] = 21 [ 50.839568] IPVS: ftp: loaded support on port[0] = 21 [ 50.847761] IPVS: ftp: loaded support on port[0] = 21 [ 51.511423] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.521026] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.528847] device bridge_slave_0 entered promiscuous mode [ 51.581975] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.596179] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.603058] device bridge_slave_1 entered promiscuous mode [ 51.638904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.707709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.716483] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.722902] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.731603] device bridge_slave_0 entered promiscuous mode [ 51.739500] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.749900] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.757032] device bridge_slave_0 entered promiscuous mode [ 51.776073] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.783004] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.794365] device bridge_slave_1 entered promiscuous mode [ 51.804490] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.813583] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.821138] device bridge_slave_0 entered promiscuous mode [ 51.829424] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.837373] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.847782] device bridge_slave_0 entered promiscuous mode [ 51.855696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.862891] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.870483] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.877807] device bridge_slave_1 entered promiscuous mode [ 51.884207] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.891946] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.899204] device bridge_slave_0 entered promiscuous mode [ 51.912534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.920774] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.927435] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.934643] device bridge_slave_1 entered promiscuous mode [ 51.942416] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.956156] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.963580] device bridge_slave_1 entered promiscuous mode [ 51.972658] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.980021] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.988054] device bridge_slave_1 entered promiscuous mode [ 52.005340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.013639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.040572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.068881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.088824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.100258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.126372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.135504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.156580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.172762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.204079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.258188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.307844] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.337874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.348573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.378342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.396602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.418809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.431757] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.442871] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.456431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.479636] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.498377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.513521] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.547590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.555825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.570623] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.590609] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.604535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.624255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.640274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.654906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.680530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.694368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.722168] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.731476] team0: Port device team_slave_0 added [ 52.767870] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.780077] team0: Port device team_slave_0 added [ 52.805052] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.812403] team0: Port device team_slave_1 added [ 52.848044] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.863337] team0: Port device team_slave_1 added [ 52.915994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.939121] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.951058] team0: Port device team_slave_0 added [ 52.960009] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.973087] team0: Port device team_slave_0 added [ 52.980872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.991123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.018501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.034419] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.047355] team0: Port device team_slave_1 added [ 53.054670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.071584] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.083045] team0: Port device team_slave_1 added [ 53.089348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.099514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.115338] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.122665] team0: Port device team_slave_0 added [ 53.132947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.145689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.157132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.170357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.179674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.187405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.195526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.210311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.217862] team0: Port device team_slave_1 added [ 53.229315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.242579] team0: Port device team_slave_0 added [ 53.249713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.265046] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.283102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.298411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.313842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.322225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.333776] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.341595] team0: Port device team_slave_1 added [ 53.354550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.364760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.384351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.395801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.415413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.424331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.436939] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.447115] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.458207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.469077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.477679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.492181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.500545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.508894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.516672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.526127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.535802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.543711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.575844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.589789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.599121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.613472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.628122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.645431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.654291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.670117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.684199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.700229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.716193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.728628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.754021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.775418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.783383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.814587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.841515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.852598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.170796] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.177340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.184263] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.190680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.199063] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.274031] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.280437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.287164] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.293558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.309790] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.317449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.329120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.502815] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.509232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.515959] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.522337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.534191] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.548024] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.554395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.561083] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.567517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.576276] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.658349] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.664857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.671556] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.678007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.700310] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.712856] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.719264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.725977] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.732349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.743096] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.344905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.352292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.376224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.388759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.242702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.343328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.474508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.509158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.533000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.566479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.636361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.696870] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.760762] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.768085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.777301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.801429] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.819416] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.844250] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.902735] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.996405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.002998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.012188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.054013] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.110733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.117498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.124363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.135427] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.144714] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.164680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.172587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.194172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.203143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.231160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.246610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.257509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.318940] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.410964] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.438151] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.516266] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.524749] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.659665] audit: type=1400 audit(1543945540.544:38): avc: denied { associate } for pid=6201 comm="syz-executor1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 59.823778] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 59.944609] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.058403] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/12/04 17:45:41 executed programs: 6 [ 60.194214] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.229672] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.248586] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.267090] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.369291] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.406026] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.542250] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 61.390425] ================================================================== [ 61.397940] BUG: KASAN: use-after-free in generic_gcmaes_encrypt+0xc6/0x190 [ 61.405065] Read of size 12 at addr ffff8881ba43d300 by task kworker/0:1/12 [ 61.412160] [ 61.413829] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 4.20.0-rc5+ #142 [ 61.420777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.430134] Workqueue: pencrypt padata_parallel_worker [ 61.435406] Call Trace: [ 61.438008] dump_stack+0x244/0x39d [ 61.441639] ? dump_stack_print_info.cold.1+0x20/0x20 [ 61.446830] ? printk+0xa7/0xcf [ 61.450110] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 61.454867] ? mark_held_locks+0x130/0x130 [ 61.459113] print_address_description.cold.7+0x9/0x1ff [ 61.464489] kasan_report.cold.8+0x242/0x309 [ 61.468897] ? generic_gcmaes_encrypt+0xc6/0x190 [ 61.473689] check_memory_region+0x13e/0x1b0 [ 61.478110] memcpy+0x23/0x50 [ 61.481240] generic_gcmaes_encrypt+0xc6/0x190 [ 61.485841] ? helper_rfc4106_encrypt+0x4a0/0x4a0 [ 61.490692] ? kasan_check_read+0x11/0x20 [ 61.494848] gcmaes_wrapper_encrypt+0x16d/0x3a0 [ 61.499528] pcrypt_aead_enc+0xd6/0x340 [ 61.503526] padata_parallel_worker+0x49d/0x760 [ 61.508215] ? padata_alloc_pd+0xe90/0xe90 [ 61.512490] ? zap_class+0x640/0x640 [ 61.516214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.521757] ? check_preemption_disabled+0x48/0x280 [ 61.526784] ? __lock_is_held+0xb5/0x140 [ 61.530872] process_one_work+0xc90/0x1c40 [ 61.535109] ? mark_held_locks+0x130/0x130 [ 61.539354] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 61.544020] ? __switch_to_asm+0x40/0x70 [ 61.548096] ? __switch_to_asm+0x34/0x70 [ 61.552154] ? __switch_to_asm+0x34/0x70 [ 61.556212] ? __switch_to_asm+0x40/0x70 [ 61.560271] ? __switch_to_asm+0x34/0x70 [ 61.564327] ? __switch_to_asm+0x40/0x70 [ 61.568398] ? __switch_to_asm+0x34/0x70 [ 61.572471] ? __switch_to_asm+0x40/0x70 [ 61.576542] ? __schedule+0x8d7/0x21d0 [ 61.580452] ? lock_downgrade+0x900/0x900 [ 61.584621] ? zap_class+0x640/0x640 [ 61.588785] ? find_held_lock+0x36/0x1c0 [ 61.592885] ? lock_acquire+0x1ed/0x520 [ 61.596861] ? worker_thread+0x3e0/0x1390 [ 61.601014] ? kasan_check_read+0x11/0x20 [ 61.605160] ? do_raw_spin_lock+0x14f/0x350 [ 61.609517] ? kasan_check_read+0x11/0x20 [ 61.613661] ? rwlock_bug.part.2+0x90/0x90 [ 61.617893] ? trace_hardirqs_on+0x310/0x310 [ 61.622325] worker_thread+0x17f/0x1390 [ 61.626295] ? __switch_to_asm+0x34/0x70 [ 61.630364] ? process_one_work+0x1c40/0x1c40 [ 61.634873] ? __sched_text_start+0x8/0x8 [ 61.639040] ? __kthread_parkme+0xce/0x1a0 [ 61.643272] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 61.648377] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 61.653511] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 61.658098] ? trace_hardirqs_on+0xbd/0x310 [ 61.662435] ? kasan_check_read+0x11/0x20 [ 61.666592] ? __kthread_parkme+0xce/0x1a0 [ 61.670829] ? trace_hardirqs_off_caller+0x310/0x310 [ 61.675944] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 61.681057] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 61.686601] ? __kthread_parkme+0xfb/0x1a0 [ 61.690838] ? process_one_work+0x1c40/0x1c40 [ 61.695336] kthread+0x35a/0x440 [ 61.698705] ? kthread_stop+0x900/0x900 [ 61.702678] ret_from_fork+0x3a/0x50 [ 61.706399] [ 61.708021] Allocated by task 7997: [ 61.711658] save_stack+0x43/0xd0 [ 61.715130] kasan_kmalloc+0xc7/0xe0 [ 61.718843] kmem_cache_alloc_trace+0x152/0x750 [ 61.723668] tls_set_sw_offload+0xcb3/0x1390 [ 61.728073] tls_setsockopt+0x689/0x770 [ 61.732047] sock_common_setsockopt+0x9a/0xe0 [ 61.736558] __sys_setsockopt+0x1ba/0x3c0 [ 61.740708] __x64_sys_setsockopt+0xbe/0x150 [ 61.745120] do_syscall_64+0x1b9/0x820 [ 61.749028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.754201] [ 61.755833] Freed by task 7990: [ 61.759127] save_stack+0x43/0xd0 [ 61.762576] __kasan_slab_free+0x102/0x150 [ 61.766810] kasan_slab_free+0xe/0x10 [ 61.770611] kfree+0xcf/0x230 [ 61.773715] tls_sk_proto_close+0x5fa/0x750 [ 61.778032] inet_release+0x104/0x1f0 [ 61.781829] inet6_release+0x50/0x70 [ 61.785540] __sock_release+0xd7/0x250 [ 61.789427] sock_close+0x19/0x20 [ 61.792917] __fput+0x385/0xa30 [ 61.796223] ____fput+0x15/0x20 [ 61.799503] task_work_run+0x1e8/0x2a0 [ 61.803404] exit_to_usermode_loop+0x318/0x380 [ 61.807981] do_syscall_64+0x6be/0x820 [ 61.811866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.817049] [ 61.818678] The buggy address belongs to the object at ffff8881ba43d300 [ 61.818678] which belongs to the cache kmalloc-32 of size 32 [ 61.831160] The buggy address is located 0 bytes inside of [ 61.831160] 32-byte region [ffff8881ba43d300, ffff8881ba43d320) [ 61.842793] The buggy address belongs to the page: [ 61.847719] page:ffffea0006e90f40 count:1 mapcount:0 mapping:ffff8881da8001c0 index:0xffff8881ba43dfc1 [ 61.857159] flags: 0x2fffc0000000200(slab) [ 61.861395] raw: 02fffc0000000200 ffffea0007347a88 ffffea0006df25c8 ffff8881da8001c0 [ 61.869272] raw: ffff8881ba43dfc1 ffff8881ba43d000 000000010000003f 0000000000000000 [ 61.877154] page dumped because: kasan: bad access detected [ 61.882860] [ 61.884481] Memory state around the buggy address: [ 61.889407] ffff8881ba43d200: 05 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 61.896765] ffff8881ba43d280: 00 00 01 fc fc fc fc fc fb fb fb fb fc fc fc fc [ 61.904122] >ffff8881ba43d300: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 61.911478] ^ [ 61.914862] ffff8881ba43d380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 61.922231] ffff8881ba43d400: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc [ 61.929605] ================================================================== [ 61.936975] Disabling lock debugging due to kernel taint [ 61.942528] Kernel panic - not syncing: panic_on_warn set ... [ 61.948420] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 4.20.0-rc5+ #142 [ 61.956772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.966151] Workqueue: pencrypt padata_parallel_worker [ 61.971435] Call Trace: [ 61.974097] dump_stack+0x244/0x39d [ 61.974282] kobject: 'loop4' (0000000050cb6011): kobject_uevent_env [ 61.977731] ? dump_stack_print_info.cold.1+0x20/0x20 [ 61.977751] panic+0x2ad/0x55c [ 61.977766] ? add_taint.cold.5+0x16/0x16 [ 61.977784] ? trace_hardirqs_on+0xb4/0x310 [ 61.986687] kobject: 'loop4' (0000000050cb6011): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 61.989360] kasan_end_report+0x47/0x4f [ 61.989375] kasan_report.cold.8+0x76/0x309 [ 61.989389] ? generic_gcmaes_encrypt+0xc6/0x190 [ 61.989409] check_memory_region+0x13e/0x1b0 [ 62.027924] memcpy+0x23/0x50 [ 62.031042] generic_gcmaes_encrypt+0xc6/0x190 [ 62.035620] ? helper_rfc4106_encrypt+0x4a0/0x4a0 [ 62.040473] ? kasan_check_read+0x11/0x20 [ 62.044625] gcmaes_wrapper_encrypt+0x16d/0x3a0 [ 62.049296] pcrypt_aead_enc+0xd6/0x340 [ 62.053272] padata_parallel_worker+0x49d/0x760 [ 62.057942] ? padata_alloc_pd+0xe90/0xe90 [ 62.062177] ? zap_class+0x640/0x640 [ 62.065897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 62.071437] ? check_preemption_disabled+0x48/0x280 [ 62.076491] ? __lock_is_held+0xb5/0x140 [ 62.080562] process_one_work+0xc90/0x1c40 [ 62.084798] ? mark_held_locks+0x130/0x130 [ 62.089037] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 62.093703] ? __switch_to_asm+0x40/0x70 [ 62.097759] ? __switch_to_asm+0x34/0x70 [ 62.101819] ? __switch_to_asm+0x34/0x70 [ 62.105872] ? __switch_to_asm+0x40/0x70 [ 62.109930] ? __switch_to_asm+0x34/0x70 [ 62.113998] ? __switch_to_asm+0x40/0x70 [ 62.118069] ? __switch_to_asm+0x34/0x70 [ 62.122121] ? __switch_to_asm+0x40/0x70 [ 62.126185] ? __schedule+0x8d7/0x21d0 [ 62.130103] ? lock_downgrade+0x900/0x900 [ 62.134261] ? zap_class+0x640/0x640 [ 62.137986] ? find_held_lock+0x36/0x1c0 [ 62.142060] ? lock_acquire+0x1ed/0x520 [ 62.146033] ? worker_thread+0x3e0/0x1390 [ 62.150180] ? kasan_check_read+0x11/0x20 [ 62.154323] ? do_raw_spin_lock+0x14f/0x350 [ 62.158658] ? kasan_check_read+0x11/0x20 [ 62.162805] ? rwlock_bug.part.2+0x90/0x90 [ 62.167035] ? trace_hardirqs_on+0x310/0x310 [ 62.171490] worker_thread+0x17f/0x1390 [ 62.175486] ? __switch_to_asm+0x34/0x70 [ 62.179551] ? process_one_work+0x1c40/0x1c40 [ 62.184062] ? __sched_text_start+0x8/0x8 [ 62.188249] ? __kthread_parkme+0xce/0x1a0 [ 62.192490] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 62.197602] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 62.202701] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 62.207280] ? trace_hardirqs_on+0xbd/0x310 [ 62.211597] ? kasan_check_read+0x11/0x20 [ 62.215745] ? __kthread_parkme+0xce/0x1a0 [ 62.219991] ? trace_hardirqs_off_caller+0x310/0x310 [ 62.225101] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 62.230201] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 62.235736] ? __kthread_parkme+0xfb/0x1a0 [ 62.239976] ? process_one_work+0x1c40/0x1c40 [ 62.244507] kthread+0x35a/0x440 [ 62.247874] ? kthread_stop+0x900/0x900 [ 62.251844] ret_from_fork+0x3a/0x50 [ 62.256430] Kernel Offset: disabled [ 62.260067] Rebooting in 86400 seconds..