[ 40.219573] audit: type=1800 audit(1556291451.478:30): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 44.877104] kauditd_printk_skb: 4 callbacks suppressed [ 44.877120] audit: type=1400 audit(1556291456.168:35): avc: denied { map } for pid=7775 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.243' (ECDSA) to the list of known hosts. [ 51.638863] audit: type=1400 audit(1556291462.928:36): avc: denied { map } for pid=7787 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/04/26 15:11:03 parsed 1 programs [ 52.433351] audit: type=1400 audit(1556291463.728:37): avc: denied { map } for pid=7787 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=23 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/04/26 15:11:06 executed programs: 0 [ 55.156712] IPVS: ftp: loaded support on port[0] = 21 [ 55.171234] IPVS: ftp: loaded support on port[0] = 21 [ 55.179353] IPVS: ftp: loaded support on port[0] = 21 [ 55.180272] IPVS: ftp: loaded support on port[0] = 21 [ 55.192582] IPVS: ftp: loaded support on port[0] = 21 [ 55.229499] IPVS: ftp: loaded support on port[0] = 21 [ 55.515026] chnl_net:caif_netlink_parms(): no params data found [ 55.566799] chnl_net:caif_netlink_parms(): no params data found [ 55.659517] chnl_net:caif_netlink_parms(): no params data found [ 55.675202] chnl_net:caif_netlink_parms(): no params data found [ 55.704995] chnl_net:caif_netlink_parms(): no params data found [ 55.735455] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.741892] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.750031] device bridge_slave_0 entered promiscuous mode [ 55.781300] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.789582] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.797284] device bridge_slave_0 entered promiscuous mode [ 55.827856] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.834420] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.841434] device bridge_slave_1 entered promiscuous mode [ 55.862220] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.870623] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.877943] device bridge_slave_1 entered promiscuous mode [ 55.910335] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.918057] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.925175] device bridge_slave_0 entered promiscuous mode [ 55.937767] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.944265] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.951332] device bridge_slave_1 entered promiscuous mode [ 55.970624] chnl_net:caif_netlink_parms(): no params data found [ 55.984824] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.991239] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.998499] device bridge_slave_0 entered promiscuous mode [ 56.037520] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.045025] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.052062] device bridge_slave_1 entered promiscuous mode [ 56.060124] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.068909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.077482] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.086396] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.100294] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.108079] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.115315] device bridge_slave_0 entered promiscuous mode [ 56.127435] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.136831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.160579] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.168644] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.176418] device bridge_slave_1 entered promiscuous mode [ 56.214922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.228453] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.236463] team0: Port device team_slave_0 added [ 56.243084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.251431] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.258889] team0: Port device team_slave_1 added [ 56.277889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.298956] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.308293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.315928] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.323971] team0: Port device team_slave_0 added [ 56.330057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.337567] team0: Port device team_slave_0 added [ 56.349219] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.357601] team0: Port device team_slave_1 added [ 56.362901] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.369319] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.377220] device bridge_slave_0 entered promiscuous mode [ 56.389771] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.397367] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.404831] device bridge_slave_1 entered promiscuous mode [ 56.411107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.419252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.427087] team0: Port device team_slave_1 added [ 56.432355] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.440445] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.447909] team0: Port device team_slave_0 added [ 56.453897] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.461446] team0: Port device team_slave_1 added [ 56.489654] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.497239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.504722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.516902] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.525722] team0: Port device team_slave_0 added [ 56.585980] device hsr_slave_0 entered promiscuous mode [ 56.623041] device hsr_slave_1 entered promiscuous mode [ 56.673093] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.680044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.696967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.716944] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.724454] team0: Port device team_slave_1 added [ 56.730926] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.738988] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.795425] device hsr_slave_0 entered promiscuous mode [ 56.832900] device hsr_slave_1 entered promiscuous mode [ 56.878444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.887979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.902361] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.954695] device hsr_slave_0 entered promiscuous mode [ 57.012847] device hsr_slave_1 entered promiscuous mode [ 57.053064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.060429] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.070431] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.084929] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.144327] device hsr_slave_0 entered promiscuous mode [ 57.182909] device hsr_slave_1 entered promiscuous mode [ 57.233224] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.255939] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.266085] team0: Port device team_slave_0 added [ 57.271374] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.325545] device hsr_slave_0 entered promiscuous mode [ 57.362895] device hsr_slave_1 entered promiscuous mode [ 57.413339] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.420565] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.428276] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.438453] team0: Port device team_slave_1 added [ 57.443977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.451378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.483342] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.499320] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.544442] device hsr_slave_0 entered promiscuous mode [ 57.602907] device hsr_slave_1 entered promiscuous mode [ 57.638458] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.648293] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.660770] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.672088] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.689983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.765615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.788902] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.800682] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 57.838320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.850766] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 57.857719] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.867469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.875701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.887091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.897675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.908667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.920450] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.928040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.936259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.944298] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.950765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.960283] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.976236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.987759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.996267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.003419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.010517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.018558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.026411] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.032809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.043224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.053085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.061941] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.069747] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.078829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.087769] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.097079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.104967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.111951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.121296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.128466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.135607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.146315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.156487] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.164910] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.182808] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.188890] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.195863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.204545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.212165] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.218710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.225595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.232602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.239455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.246769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.256206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.264164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.271321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.279374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.287260] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.293675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.304666] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.310848] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.320775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.330100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.342109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.353873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.363936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.371733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.380942] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.387342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.395044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.404665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.411670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.419496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.427513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.437607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.446911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.453799] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.464023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.472286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.479294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.487699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.495560] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.501898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.508990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.519566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.529758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.538592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.546877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.555908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.566128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.574938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 58.584084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.592045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.600219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.608231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.616703] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.623115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.630399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.639851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.647539] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.653936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.660723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.668722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.676620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.683840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.694137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.702185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.713264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.722339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.731894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.740529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.749453] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.755864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.762991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.770679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.778354] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.784747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.791569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.799212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.808476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.817541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.827443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.842022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.850107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.858516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.866449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.874618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.882282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.890151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.899070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.909138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.918226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.928906] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 58.935034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.943065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.952973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.959930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.968023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.975765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.983827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.991315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.998428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.005567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.013832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.021486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.029554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.036937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.046844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.057017] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 59.064117] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.072907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.081638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.090136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.097959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.109594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.120809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.130058] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.138319] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.146267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.154185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.161643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.169817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.177749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.185730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.193534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.200973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.208907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.220558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.231970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.240928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.252590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.260487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.268948] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.275344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.282398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.290206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.297778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.305545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.313252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.326505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.336642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.347933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.355011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.365871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.373483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.380880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.388966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.396567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.405405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.416213] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.425865] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.431892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.441161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.450311] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.457201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.464433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.472031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.480266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.488134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.495830] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.502171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.510126] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.517780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.535692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.546331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.564313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.573901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.581673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.590108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.601018] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.610092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.624478] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.630514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.642422] audit: type=1400 audit(1556291470.928:38): avc: denied { associate } for pid=7817 comm="syz-executor.4" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 59.643366] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.676309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.700437] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.711886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.723179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.739298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.751424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.770266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.783661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.811848] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 59.828497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.839236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.854889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.864141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.879927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.913984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.921613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.959943] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/04/26 15:11:11 executed programs: 9 [ 60.020550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 60.058522] vivid-003: kernel_thread() failed [ 60.071092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.087101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.143111] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 60.149168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.155922] vivid-003: kernel_thread() failed [ 60.213914] ================================================================== [ 60.218334] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 60.221427] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x105d/0x1140 [ 60.221442] Read of size 4 at addr ffff888092e1de1c by task syz-executor.4/7874 [ 60.221445] [ 60.221459] CPU: 1 PID: 7874 Comm: syz-executor.4 Not tainted 4.19.36 #4 [ 60.221472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.244351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.250668] Call Trace: [ 60.250690] dump_stack+0x172/0x1f0 [ 60.250710] ? __vb2_perform_fileio+0x105d/0x1140 [ 60.250727] print_address_description.cold+0x7c/0x20d [ 60.250745] ? __vb2_perform_fileio+0x105d/0x1140 [ 60.266161] kasan_report.cold+0x8c/0x2ba [ 60.266184] __asan_report_load4_noabort+0x14/0x20 [ 60.266199] __vb2_perform_fileio+0x105d/0x1140 [ 60.266221] ? vb2_thread_start+0x370/0x370 [ 60.305419] ? fsnotify_first_mark+0x210/0x210 [ 60.310021] vb2_read+0x3b/0x50 [ 60.313320] vb2_fop_read+0x212/0x410 [ 60.317137] ? vb2_fop_write+0x410/0x410 [ 60.321213] v4l2_read+0x1ce/0x230 [ 60.324767] do_iter_read+0x495/0x650 [ 60.328583] ? dup_iter+0x280/0x280 [ 60.332232] vfs_readv+0xf0/0x160 [ 60.335696] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 60.341062] ? kasan_check_read+0x11/0x20 [ 60.345219] ? __fget+0x367/0x540 [ 60.348694] ? iterate_fd+0x360/0x360 [ 60.348711] ? kasan_check_read+0x11/0x20 [ 60.348728] ? _copy_to_user+0xc9/0x120 [ 60.348745] ? __fget_light+0x1a9/0x230 [ 60.348759] do_preadv+0x1c4/0x280 [ 60.348771] ? do_readv+0x290/0x290 [ 60.348783] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.356858] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.356873] ? do_syscall_64+0x26/0x610 [ 60.356889] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.356903] ? do_syscall_64+0x26/0x610 [ 60.356922] __x64_sys_preadv+0x9a/0xf0 [ 60.356941] do_syscall_64+0x103/0x610 [ 60.356959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.356975] RIP: 0033:0x458da9 [ 60.411898] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.430964] RSP: 002b:00007fb113075c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 60.438674] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458da9 [ 60.446000] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 60.453264] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 60.460529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1130766d4 [ 60.467785] R13: 00000000004c5afc R14: 00000000004d9e48 R15: 00000000ffffffff [ 60.475045] [ 60.476662] Allocated by task 7867: [ 60.480297] save_stack+0x45/0xd0 [ 60.483758] kasan_kmalloc+0xce/0xf0 [ 60.487468] kmem_cache_alloc_trace+0x152/0x760 [ 60.492177] __vb2_init_fileio+0x1cb/0xbe0 [ 60.496406] __vb2_perform_fileio+0xbff/0x1140 [ 60.500973] vb2_read+0x3b/0x50 [ 60.504236] vb2_fop_read+0x212/0x410 [ 60.508026] v4l2_read+0x1ce/0x230 [ 60.511575] do_iter_read+0x495/0x650 [ 60.515375] vfs_readv+0xf0/0x160 [ 60.518821] do_preadv+0x1c4/0x280 [ 60.522344] __x64_sys_preadv+0x9a/0xf0 [ 60.526311] do_syscall_64+0x103/0x610 [ 60.530196] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.535362] [ 60.536982] Freed by task 7866: [ 60.540247] save_stack+0x45/0xd0 [ 60.543682] __kasan_slab_free+0x102/0x150 [ 60.547900] kasan_slab_free+0xe/0x10 [ 60.551694] kfree+0xcf/0x230 [ 60.554800] __vb2_cleanup_fileio+0x100/0x170 [ 60.559279] vb2_core_queue_release+0x20/0x80 [ 60.563782] _vb2_fop_release+0x1cf/0x2a0 [ 60.567916] vb2_fop_release+0x75/0xc0 [ 60.571798] vivid_fop_release+0x18e/0x430 [ 60.576029] v4l2_release+0xfb/0x1a0 [ 60.579732] __fput+0x2df/0x8b0 [ 60.583017] ____fput+0x16/0x20 [ 60.586301] task_work_run+0x14a/0x1c0 [ 60.590186] exit_to_usermode_loop+0x273/0x2c0 [ 60.594774] do_syscall_64+0x52d/0x610 [ 60.598666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.603846] [ 60.605479] The buggy address belongs to the object at ffff888092e1db00 [ 60.605479] which belongs to the cache kmalloc-1024 of size 1024 [ 60.618307] The buggy address is located 796 bytes inside of [ 60.618307] 1024-byte region [ffff888092e1db00, ffff888092e1df00) [ 60.630251] The buggy address belongs to the page: [ 60.635169] page:ffffea00024b8700 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0x0 compound_mapcount: 0 [ 60.645120] flags: 0x1fffc0000008100(slab|head) [ 60.649801] raw: 01fffc0000008100 ffffea000200d188 ffffea00024d8c08 ffff88812c3f0ac0 [ 60.657670] raw: 0000000000000000 ffff888092e1c000 0000000100000007 0000000000000000 [ 60.665540] page dumped because: kasan: bad access detected [ 60.671231] [ 60.672850] Memory state around the buggy address: [ 60.677761] ffff888092e1dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.685102] ffff888092e1dd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.692452] >ffff888092e1de00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.699808] ^ [ 60.703948] ffff888092e1de80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.711291] ffff888092e1df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.718718] ================================================================== [ 60.726064] Disabling lock debugging due to kernel taint [ 60.749444] Kernel panic - not syncing: panic_on_warn set ... [ 60.749444] [ 60.756839] CPU: 1 PID: 7874 Comm: syz-executor.4 Tainted: G B 4.19.36 #4 [ 60.765064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.774416] Call Trace: [ 60.777005] dump_stack+0x172/0x1f0 [ 60.780634] ? __vb2_perform_fileio+0x105d/0x1140 [ 60.785476] panic+0x263/0x51d [ 60.788666] ? __warn_printk+0xf3/0xf3 [ 60.792556] ? __vb2_perform_fileio+0x105d/0x1140 [ 60.797401] ? preempt_schedule+0x4b/0x60 [ 60.801551] ? ___preempt_schedule+0x16/0x18 [ 60.805962] ? trace_hardirqs_on+0x5e/0x230 [ 60.810294] ? __vb2_perform_fileio+0x105d/0x1140 [ 60.815138] kasan_end_report+0x47/0x4f [ 60.819117] kasan_report.cold+0xa9/0x2ba [ 60.823270] __asan_report_load4_noabort+0x14/0x20 [ 60.828198] __vb2_perform_fileio+0x105d/0x1140 [ 60.832872] ? vb2_thread_start+0x370/0x370 [ 60.837195] ? fsnotify_first_mark+0x210/0x210 [ 60.841773] vb2_read+0x3b/0x50 [ 60.845052] vb2_fop_read+0x212/0x410 [ 60.848856] ? vb2_fop_write+0x410/0x410 [ 60.852914] v4l2_read+0x1ce/0x230 [ 60.856454] do_iter_read+0x495/0x650 [ 60.860252] ? dup_iter+0x280/0x280 [ 60.863880] vfs_readv+0xf0/0x160 [ 60.867330] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 60.872717] ? kasan_check_read+0x11/0x20 [ 60.876866] ? __fget+0x367/0x540 [ 60.880319] ? iterate_fd+0x360/0x360 [ 60.884121] ? kasan_check_read+0x11/0x20 [ 60.888267] ? _copy_to_user+0xc9/0x120 [ 60.892260] ? __fget_light+0x1a9/0x230 [ 60.896233] do_preadv+0x1c4/0x280 [ 60.899772] ? do_readv+0x290/0x290 [ 60.903404] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.908163] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.912917] ? do_syscall_64+0x26/0x610 [ 60.916888] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.922247] ? do_syscall_64+0x26/0x610 [ 60.926224] __x64_sys_preadv+0x9a/0xf0 [ 60.930202] do_syscall_64+0x103/0x610 [ 60.934091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.939450] RIP: 0033:0x458da9 [ 60.942645] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.961546] RSP: 002b:00007fb113075c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 60.969249] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458da9 [ 60.976512] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 60.983777] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 60.991038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1130766d4 [ 60.998302] R13: 00000000004c5afc R14: 00000000004d9e48 R15: 00000000ffffffff [ 61.006626] Kernel Offset: disabled [ 61.010255] Rebooting in 86400 seconds..