Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 73.796214][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 73.796228][ T26] audit: type=1800 audit(1558982103.353:33): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 73.842113][ T26] audit: type=1800 audit(1558982103.363:34): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 76.916875][ T26] audit: type=1400 audit(1558982106.473:35): avc: denied { map } for pid=9575 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. [ 83.610243][ T26] audit: type=1400 audit(1558982113.173:36): avc: denied { map } for pid=9587 comm="syz-executor117" path="/root/syz-executor117956775" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 83.687679][ T9599] IPVS: ftp: loaded support on port[0] = 21 [ 83.687900][ T9597] IPVS: ftp: loaded support on port[0] = 21 [ 83.694450][ T9598] IPVS: ftp: loaded support on port[0] = 21 [ 83.706265][ T9595] IPVS: ftp: loaded support on port[0] = 21 [ 83.709056][ T9596] IPVS: ftp: loaded support on port[0] = 21 [ 83.714904][ T9594] IPVS: ftp: loaded support on port[0] = 21 [ 84.001266][ T9598] chnl_net:caif_netlink_parms(): no params data found [ 84.081651][ T9594] chnl_net:caif_netlink_parms(): no params data found [ 84.098268][ T9596] chnl_net:caif_netlink_parms(): no params data found [ 84.138003][ T9599] chnl_net:caif_netlink_parms(): no params data found [ 84.174118][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.181860][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.190156][ T9598] device bridge_slave_0 entered promiscuous mode [ 84.246913][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.256245][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.264512][ T9598] device bridge_slave_1 entered promiscuous mode [ 84.291533][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.299603][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.307444][ T9594] device bridge_slave_0 entered promiscuous mode [ 84.328877][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.336053][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.343922][ T9594] device bridge_slave_1 entered promiscuous mode [ 84.370048][ T9598] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 84.378452][ T9595] chnl_net:caif_netlink_parms(): no params data found [ 84.411747][ T9598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 84.420275][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.427341][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.435301][ T9596] device bridge_slave_0 entered promiscuous mode [ 84.445832][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.452983][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.461185][ T9596] device bridge_slave_1 entered promiscuous mode [ 84.489539][ T9594] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 84.505617][ T9594] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 84.514204][ T9597] chnl_net:caif_netlink_parms(): no params data found [ 84.561006][ T9598] team0: Port device team_slave_0 added [ 84.566974][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.574197][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.581902][ T9599] device bridge_slave_0 entered promiscuous mode [ 84.595599][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.603143][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.611279][ T9599] device bridge_slave_1 entered promiscuous mode [ 84.620841][ T9596] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 84.643584][ T9598] team0: Port device team_slave_1 added [ 84.665100][ T9596] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 84.675794][ T9594] team0: Port device team_slave_0 added [ 84.696592][ T9594] team0: Port device team_slave_1 added [ 84.730417][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.739496][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.747224][ T9595] device bridge_slave_0 entered promiscuous mode [ 84.755378][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.762560][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.770742][ T9595] device bridge_slave_1 entered promiscuous mode [ 84.779321][ T9599] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 84.817308][ T9596] team0: Port device team_slave_0 added [ 84.828046][ T9599] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 84.892313][ T9598] device hsr_slave_0 entered promiscuous mode [ 84.929262][ T9598] device hsr_slave_1 entered promiscuous mode [ 84.969563][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.976667][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.984777][ T9597] device bridge_slave_0 entered promiscuous mode [ 84.994295][ T9596] team0: Port device team_slave_1 added [ 85.014264][ T9595] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.029372][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.036496][ T9597] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.045195][ T9597] device bridge_slave_1 entered promiscuous mode [ 85.081221][ T9595] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.142447][ T9594] device hsr_slave_0 entered promiscuous mode [ 85.179249][ T9594] device hsr_slave_1 entered promiscuous mode [ 85.230852][ T9599] team0: Port device team_slave_0 added [ 85.246485][ T9597] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.272913][ T9599] team0: Port device team_slave_1 added [ 85.289368][ T9597] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.307072][ T9595] team0: Port device team_slave_0 added [ 85.360795][ T9596] device hsr_slave_0 entered promiscuous mode [ 85.409298][ T9596] device hsr_slave_1 entered promiscuous mode [ 85.506830][ T9595] team0: Port device team_slave_1 added [ 85.572133][ T9599] device hsr_slave_0 entered promiscuous mode [ 85.609489][ T9599] device hsr_slave_1 entered promiscuous mode [ 85.656876][ T9597] team0: Port device team_slave_0 added [ 85.693974][ T9597] team0: Port device team_slave_1 added [ 85.763341][ T9595] device hsr_slave_0 entered promiscuous mode [ 85.819306][ T9595] device hsr_slave_1 entered promiscuous mode [ 85.930937][ T9597] device hsr_slave_0 entered promiscuous mode [ 85.979325][ T9597] device hsr_slave_1 entered promiscuous mode [ 86.103672][ T9598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.167711][ T9598] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.186555][ T9599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.197880][ T9596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.206825][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.218054][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.256200][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.265244][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.275914][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.284926][ T3174] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.292205][ T3174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.300878][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.309287][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.317798][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.336819][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.346427][ T9599] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.377690][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.386052][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.394775][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.403659][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.412070][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.421062][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.430274][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.437323][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.448247][ T9596] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.475541][ T9595] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.483775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.493148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.502860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.511664][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.518783][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.526426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.535917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.544779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.553293][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.560388][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.570049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.578037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.586910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.597017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.605914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.614702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.623192][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.630302][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.653750][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.661982][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.673426][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.682299][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.691619][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.698696][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.706281][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.715334][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.723804][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.730887][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.743608][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.768909][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.777008][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.788182][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.796240][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.805633][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.814060][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.821155][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.829050][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.837532][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.846333][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.855257][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.864230][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.903116][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.911763][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.920641][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.929259][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.937989][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.946405][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.954838][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.963426][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.972090][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.980800][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.989358][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.997865][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.006718][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.013833][ T9608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.021595][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.030465][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.038859][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.045906][ T9608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.053696][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.064271][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.072285][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.085428][ T9598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.106711][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.115936][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.124507][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.133070][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.144887][ T9597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.172724][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.180940][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.189602][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.197826][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.207674][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.216254][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.225289][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.234096][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.242553][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.252646][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.274316][ T9596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.285271][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.294057][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.303203][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.311806][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.320502][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.328855][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.337380][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.346471][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.363155][ T9599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.374483][ T9599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.406410][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.415222][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.424265][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.438329][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.447414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.455958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.464746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.472464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.481881][ T9595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.497497][ T9598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.512528][ T9597] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.532317][ T9596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.543039][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.582539][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.595872][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.605962][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.616700][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.625581][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.632685][ T9608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.640631][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.649581][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.657690][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.666463][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.675507][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.682630][ T9608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.693781][ T9599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.713608][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.726938][ T26] audit: type=1400 audit(1558982117.283:37): avc: denied { associate } for pid=9598 comm="syz-executor117" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 87.732698][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready executing program [ 87.778625][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.800692][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready executing program executing program executing program executing program [ 87.845540][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.884670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready executing program executing program executing program executing program [ 87.910718][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.924526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.941653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program executing program executing program executing program [ 87.984975][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.010599][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready executing program executing program executing program executing program executing program [ 88.049339][ T9597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.065571][ T9597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network executing program executing program executing program executing program [ 88.118594][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.133160][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.148418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.158109][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program executing program executing program executing program executing program [ 88.192777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program [ 88.298612][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program executing program [ 88.379727][ T9667] ------------[ cut here ]------------ [ 88.386736][ T9667] ODEBUG: free active (active state 0) object type: work_struct hint: smc_tx_work+0x0/0x1d0 [ 88.397108][ T9667] WARNING: CPU: 0 PID: 9667 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 88.406570][ T9667] Kernel panic - not syncing: panic_on_warn set ... [ 88.413170][ T9667] CPU: 0 PID: 9667 Comm: syz-executor117 Not tainted 5.2.0-rc2 #4 [ 88.420975][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.431138][ T9667] Call Trace: [ 88.434437][ T9667] dump_stack+0x172/0x1f0 [ 88.438784][ T9667] ? debug_print_object+0xa0/0x250 [ 88.443906][ T9667] panic+0x2cb/0x744 [ 88.447807][ T9667] ? __warn_printk+0xf3/0xf3 [ 88.452418][ T9667] ? debug_print_object+0x168/0x250 [ 88.457622][ T9667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.463967][ T9667] ? __warn.cold+0x5/0x4d [ 88.468305][ T9667] ? __warn+0xe8/0x1d0 [ 88.472385][ T9667] ? debug_print_object+0x168/0x250 [ 88.477585][ T9667] __warn.cold+0x20/0x4d executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 88.481830][ T9667] ? vprintk_emit+0x1ea/0x700 [ 88.486543][ T9667] ? debug_print_object+0x168/0x250 [ 88.491754][ T9667] report_bug+0x263/0x2b0 [ 88.496090][ T9667] do_error_trap+0x11b/0x200 [ 88.500694][ T9667] do_invalid_op+0x37/0x50 [ 88.505119][ T9667] ? debug_print_object+0x168/0x250 [ 88.510325][ T9667] invalid_op+0x14/0x20 [ 88.514490][ T9667] RIP: 0010:debug_print_object+0x168/0x250 executing program executing program executing program executing program [ 88.520308][ T9667] Code: dd 40 c6 a4 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 40 c6 a4 87 48 c7 c7 e0 bb a4 87 e8 26 94 0d fe <0f> 0b 83 05 fb 65 4b 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 88.539923][ T9667] RSP: 0018:ffff8880814efbb0 EFLAGS: 00010086 [ 88.545996][ T9667] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 88.554003][ T9667] RDX: 0000000000000000 RSI: ffffffff815ac7e6 RDI: ffffed101029df68 [ 88.561992][ T9667] RBP: ffff8880814efbf0 R08: ffff88808de46140 R09: ffffed1015d040f1 [ 88.570238][ T9667] R10: ffffed1015d040f0 R11: ffff8880ae820787 R12: 0000000000000001 executing program executing program [ 88.578271][ T9667] R13: ffffffff88b714c0 R14: ffffffff81496ec0 R15: ffff88808e3ed7d8 [ 88.586272][ T9667] ? __exit_umh+0x2e0/0x2e0 [ 88.590794][ T9667] ? vprintk_func+0x86/0x189 [ 88.595397][ T9667] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 88.601219][ T9667] debug_check_no_obj_freed+0x29f/0x464 [ 88.606780][ T9667] kmem_cache_free+0x18f/0x260 [ 88.611556][ T9667] __sk_destruct+0x4bc/0x6e0 [ 88.616160][ T9667] sk_destruct+0x7b/0x90 [ 88.620407][ T9667] __sk_free+0xce/0x300 [ 88.624573][ T9667] sk_free+0x42/0x50 executing program executing program executing program [ 88.628477][ T9667] smc_release+0x5a7/0x7b0 [ 88.632905][ T9667] __sock_release+0xce/0x2a0 [ 88.637494][ T9667] sock_close+0x1b/0x30 [ 88.641660][ T9667] __fput+0x2ff/0x890 [ 88.645656][ T9667] ? __sock_release+0x2a0/0x2a0 [ 88.650525][ T9667] ____fput+0x16/0x20 [ 88.654510][ T9667] task_work_run+0x145/0x1c0 [ 88.659114][ T9667] exit_to_usermode_loop+0x273/0x2c0 [ 88.664413][ T9667] do_syscall_64+0x58e/0x680 [ 88.669011][ T9667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.674906][ T9667] RIP: 0033:0x4026e0 [ 88.678805][ T9667] Code: 01 f0 ff ff 0f 83 40 0d 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 4d 94 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 14 0d 00 00 c3 48 83 ec 08 e8 7a 02 00 00 [ 88.698414][ T9667] RSP: 002b:00007fff253d28b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 88.706835][ T9667] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004026e0 [ 88.714897][ T9667] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 88.722869][ T9667] RBP: 0000000000000000 R08: 0000000000000004 R09: 00000000004aa19f [ 88.730841][ T9667] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000005 [ 88.739011][ T9667] R13: 0000000000403910 R14: 0000000000000000 R15: 0000000000000000 [ 88.747171][ T9667] [ 88.747178][ T9667] ====================================================== [ 88.747184][ T9667] WARNING: possible circular locking dependency detected [ 88.747188][ T9667] 5.2.0-rc2 #4 Not tainted [ 88.747193][ T9667] ------------------------------------------------------ [ 88.747198][ T9667] syz-executor117/9667 is trying to acquire lock: [ 88.747202][ T9667] 00000000759326bf ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 88.747218][ T9667] [ 88.747222][ T9667] but task is already holding lock: [ 88.747225][ T9667] 00000000fb881ec1 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 88.747240][ T9667] [ 88.747245][ T9667] which lock already depends on the new lock. [ 88.747247][ T9667] [ 88.747249][ T9667] [ 88.747255][ T9667] the existing dependency chain (in reverse order) is: [ 88.747257][ T9667] [ 88.747260][ T9667] -> #3 (&obj_hash[i].lock){-.-.}: [ 88.747276][ T9667] _raw_spin_lock_irqsave+0x95/0xcd [ 88.747280][ T9667] __debug_object_init+0xc6/0xc30 [ 88.747284][ T9667] debug_object_init+0x16/0x20 [ 88.747288][ T9667] hrtimer_init+0x2a/0x300 [ 88.747292][ T9667] init_dl_task_timer+0x1b/0x50 [ 88.747297][ T9667] __sched_fork+0x22a/0x4f0 [ 88.747301][ T9667] init_idle+0x75/0x670 [ 88.747305][ T9667] sched_init+0x952/0x9f5 [ 88.747309][ T9667] start_kernel+0x393/0x893 [ 88.747314][ T9667] x86_64_start_reservations+0x29/0x2b [ 88.747319][ T9667] x86_64_start_kernel+0x77/0x7b [ 88.747323][ T9667] secondary_startup_64+0xa4/0xb0 [ 88.747325][ T9667] [ 88.747327][ T9667] -> #2 (&rq->lock){-.-.}: [ 88.747342][ T9667] _raw_spin_lock+0x2f/0x40 [ 88.747346][ T9667] task_fork_fair+0x6a/0x520 [ 88.747350][ T9667] sched_fork+0x3af/0x900 [ 88.747355][ T9667] copy_process.part.0+0x1a25/0x6790 [ 88.747358][ T9667] _do_fork+0x25d/0xfe0 [ 88.747362][ T9667] kernel_thread+0x34/0x40 [ 88.747365][ T9667] rest_init+0x28/0x37b [ 88.747370][ T9667] arch_call_rest_init+0xe/0x1b [ 88.747374][ T9667] start_kernel+0x854/0x893 [ 88.747379][ T9667] x86_64_start_reservations+0x29/0x2b [ 88.747383][ T9667] x86_64_start_kernel+0x77/0x7b [ 88.747387][ T9667] secondary_startup_64+0xa4/0xb0 [ 88.747390][ T9667] [ 88.747392][ T9667] -> #1 (&p->pi_lock){-.-.}: [ 88.747406][ T9667] _raw_spin_lock_irqsave+0x95/0xcd [ 88.747410][ T9667] try_to_wake_up+0x90/0x13f0 [ 88.747414][ T9667] wake_up_process+0x10/0x20 [ 88.747418][ T9667] __up.isra.0+0x136/0x1a0 [ 88.747421][ T9667] up+0x9c/0xe0 [ 88.747425][ T9667] __up_console_sem+0xb7/0x1c0 [ 88.747429][ T9667] console_unlock+0x663/0xec0 [ 88.747433][ T9667] vprintk_emit+0x2a0/0x700 [ 88.747436][ T9667] vprintk_default+0x28/0x30 [ 88.747440][ T9667] vprintk_func+0x7e/0x189 [ 88.747443][ T9667] printk+0xba/0xed [ 88.747449][ T9667] kauditd_hold_skb.cold+0x3f/0x4e [ 88.747453][ T9667] kauditd_send_queue+0x12b/0x170 [ 88.747457][ T9667] kauditd_thread+0x7b5/0xb00 [ 88.747461][ T9667] kthread+0x354/0x420 [ 88.747465][ T9667] ret_from_fork+0x24/0x30 [ 88.747468][ T9667] [ 88.747470][ T9667] -> #0 ((console_sem).lock){-.-.}: [ 88.747484][ T9667] lock_acquire+0x16f/0x3f0 [ 88.747489][ T9667] _raw_spin_lock_irqsave+0x95/0xcd [ 88.747492][ T9667] down_trylock+0x13/0x70 [ 88.747497][ T9667] __down_trylock_console_sem+0xa8/0x210 [ 88.747501][ T9667] console_trylock+0x15/0xa0 [ 88.747504][ T9667] vprintk_emit+0x283/0x700 [ 88.747508][ T9667] vprintk_default+0x28/0x30 [ 88.747512][ T9667] vprintk_func+0x7e/0x189 [ 88.747515][ T9667] printk+0xba/0xed [ 88.747528][ T9667] __warn_printk+0x9b/0xf3 [ 88.747533][ T9667] debug_print_object+0x168/0x250 [ 88.747538][ T9667] debug_check_no_obj_freed+0x29f/0x464 [ 88.747542][ T9667] kmem_cache_free+0x18f/0x260 [ 88.747547][ T9667] __sk_destruct+0x4bc/0x6e0 [ 88.747550][ T9667] sk_destruct+0x7b/0x90 [ 88.747554][ T9667] __sk_free+0xce/0x300 [ 88.747558][ T9667] sk_free+0x42/0x50 [ 88.747562][ T9667] smc_release+0x5a7/0x7b0 [ 88.747566][ T9667] __sock_release+0xce/0x2a0 [ 88.747570][ T9667] sock_close+0x1b/0x30 [ 88.747574][ T9667] __fput+0x2ff/0x890 [ 88.747578][ T9667] ____fput+0x16/0x20 [ 88.747582][ T9667] task_work_run+0x145/0x1c0 [ 88.747586][ T9667] exit_to_usermode_loop+0x273/0x2c0 [ 88.747590][ T9667] do_syscall_64+0x58e/0x680 [ 88.747595][ T9667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.747598][ T9667] [ 88.747603][ T9667] other info that might help us debug this: [ 88.747605][ T9667] [ 88.747608][ T9667] Chain exists of: [ 88.747610][ T9667] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 88.747627][ T9667] [ 88.747632][ T9667] Possible unsafe locking scenario: [ 88.747634][ T9667] [ 88.747638][ T9667] CPU0 CPU1 [ 88.747642][ T9667] ---- ---- [ 88.747645][ T9667] lock(&obj_hash[i].lock); [ 88.747653][ T9667] lock(&rq->lock); [ 88.747662][ T9667] lock(&obj_hash[i].lock); [ 88.747670][ T9667] lock((console_sem).lock); [ 88.747677][ T9667] [ 88.747681][ T9667] *** DEADLOCK *** [ 88.747683][ T9667] [ 88.747687][ T9667] 2 locks held by syz-executor117/9667: [ 88.747689][ T9667] #0: 00000000c464b345 (&sb->s_type->i_mutex_key#11){+.+.}, at: __sock_release+0x89/0x2a0 [ 88.747709][ T9667] #1: 00000000fb881ec1 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 88.747728][ T9667] [ 88.747731][ T9667] stack backtrace: [ 88.747737][ T9667] CPU: 0 PID: 9667 Comm: syz-executor117 Not tainted 5.2.0-rc2 #4 [ 88.747743][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.747746][ T9667] Call Trace: [ 88.747749][ T9667] dump_stack+0x172/0x1f0 [ 88.747753][ T9667] print_circular_bug.cold+0x1cc/0x28f [ 88.747757][ T9667] __lock_acquire+0x3755/0x5490 [ 88.747760][ T9667] ? mark_held_locks+0xf0/0xf0 [ 88.747764][ T9667] ? kvm_clock_read+0x18/0x30 [ 88.747768][ T9667] ? kvm_sched_clock_read+0x9/0x20 [ 88.747771][ T9667] lock_acquire+0x16f/0x3f0 [ 88.747775][ T9667] ? down_trylock+0x13/0x70 [ 88.747778][ T9667] _raw_spin_lock_irqsave+0x95/0xcd [ 88.747782][ T9667] ? down_trylock+0x13/0x70 [ 88.747786][ T9667] ? vprintk_emit+0x283/0x700 [ 88.747790][ T9667] down_trylock+0x13/0x70 [ 88.747793][ T9667] ? vprintk_emit+0x283/0x700 [ 88.747797][ T9667] __down_trylock_console_sem+0xa8/0x210 [ 88.747801][ T9667] console_trylock+0x15/0xa0 [ 88.747804][ T9667] vprintk_emit+0x283/0x700 [ 88.747808][ T9667] ? __exit_umh+0x2e0/0x2e0 [ 88.747812][ T9667] vprintk_default+0x28/0x30 [ 88.747815][ T9667] vprintk_func+0x7e/0x189 [ 88.747818][ T9667] printk+0xba/0xed [ 88.747823][ T9667] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 88.747827][ T9667] ? mark_held_locks+0xf0/0xf0 [ 88.747830][ T9667] ? ____fput+0x16/0x20 [ 88.747833][ T9667] ? task_work_run+0x145/0x1c0 [ 88.747838][ T9667] ? exit_to_usermode_loop+0x273/0x2c0 [ 88.747842][ T9667] ? do_syscall_64+0x58e/0x680 [ 88.747845][ T9667] ? __warn_printk+0x8f/0xf3 [ 88.747849][ T9667] ? smc_tx_sendmsg+0x1820/0x1820 [ 88.747852][ T9667] __warn_printk+0x9b/0xf3 [ 88.747856][ T9667] ? add_taint.cold+0x16/0x16 [ 88.747860][ T9667] ? kasan_check_write+0x14/0x20 [ 88.747864][ T9667] ? lock_downgrade+0x880/0x880 [ 88.747868][ T9667] ? smc_tx_sendmsg+0x1820/0x1820 [ 88.747872][ T9667] debug_print_object+0x168/0x250 [ 88.747876][ T9667] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 88.747881][ T9667] debug_check_no_obj_freed+0x29f/0x464 [ 88.747885][ T9667] kmem_cache_free+0x18f/0x260 [ 88.747888][ T9667] __sk_destruct+0x4bc/0x6e0 [ 88.747892][ T9667] sk_destruct+0x7b/0x90 [ 88.747896][ T9667] __sk_free+0xce/0x300 [ 88.747899][ T9667] sk_free+0x42/0x50 [ 88.747903][ T9667] smc_release+0x5a7/0x7b0 [ 88.747906][ T9667] __sock_release+0xce/0x2a0 [ 88.747910][ T9667] sock_close+0x1b/0x30 [ 88.747913][ T9667] __fput+0x2ff/0x890 [ 88.747917][ T9667] ? __sock_release+0x2a0/0x2a0 [ 88.747921][ T9667] ____fput+0x16/0x20 [ 88.747924][ T9667] task_work_run+0x145/0x1c0 [ 88.747928][ T9667] exit_to_usermode_loop+0x273/0x2c0 [ 88.747932][ T9667] do_syscall_64+0x58e/0x680 [ 88.747937][ T9667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.747940][ T9667] RIP: 0033:0x4026e0 [ 88.747953][ T9667] Code: 01 f0 ff ff 0f 83 40 0d 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 4d 94 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 14 0d 00 00 c3 48 83 ec 08 e8 7a 02 00 00 [ 88.747957][ T9667] RSP: 002b:00007fff253d28b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 88.747968][ T9667] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004026e0 [ 88.747974][ T9667] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 88.747979][ T9667] RBP: 0000000000000000 R08: 0000000000000004 R09: 00000000004aa19f [ 88.747985][ T9667] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000005 [ 88.747990][ T9667] R13: 0000000000403910 R14: 0000000000000000 R15: 0000000000000000 [ 88.749047][ T9667] Kernel Offset: disabled [ 89.638387][ T9667] Rebooting in 86400 seconds..