[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 75.916279][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 75.916291][ T26] audit: type=1800 audit(1560829117.567:33): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 75.946752][ T26] audit: type=1800 audit(1560829117.567:34): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 76.748760][ T26] audit: type=1400 audit(1560829118.397:35): avc: denied { map } for pid=9616 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts. syzkaller login: [ 83.188012][ T26] audit: type=1400 audit(1560829124.837:36): avc: denied { map } for pid=9628 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/06/18 03:38:45 parsed 1 programs [ 84.171308][ T26] audit: type=1400 audit(1560829125.817:37): avc: denied { map } for pid=9628 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16199 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/06/18 03:38:47 executed programs: 0 [ 86.343550][ T9649] IPVS: ftp: loaded support on port[0] = 21 [ 86.356069][ T9650] IPVS: ftp: loaded support on port[0] = 21 [ 86.422916][ T9655] IPVS: ftp: loaded support on port[0] = 21 [ 86.448118][ T9657] IPVS: ftp: loaded support on port[0] = 21 [ 86.472908][ T9653] IPVS: ftp: loaded support on port[0] = 21 [ 86.488234][ T9658] IPVS: ftp: loaded support on port[0] = 21 [ 86.657827][ T9649] chnl_net:caif_netlink_parms(): no params data found [ 86.813603][ T9655] chnl_net:caif_netlink_parms(): no params data found [ 86.853095][ T9650] chnl_net:caif_netlink_parms(): no params data found [ 86.865629][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.873416][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.881251][ T9649] device bridge_slave_0 entered promiscuous mode [ 86.891311][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.898473][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.906765][ T9649] device bridge_slave_1 entered promiscuous mode [ 86.913711][ T9653] chnl_net:caif_netlink_parms(): no params data found [ 87.024819][ T9657] chnl_net:caif_netlink_parms(): no params data found [ 87.035509][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.042681][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.052260][ T9650] device bridge_slave_0 entered promiscuous mode [ 87.066351][ T9649] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.097789][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.104861][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.113210][ T9650] device bridge_slave_1 entered promiscuous mode [ 87.127146][ T9649] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.135534][ T9655] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.142663][ T9655] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.150455][ T9655] device bridge_slave_0 entered promiscuous mode [ 87.172272][ T9653] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.179625][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.187700][ T9653] device bridge_slave_0 entered promiscuous mode [ 87.207386][ T9655] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.214452][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.222500][ T9655] device bridge_slave_1 entered promiscuous mode [ 87.239300][ T9653] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.247575][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.255230][ T9653] device bridge_slave_1 entered promiscuous mode [ 87.270296][ T9650] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.289513][ T9649] team0: Port device team_slave_0 added [ 87.301742][ T9658] chnl_net:caif_netlink_parms(): no params data found [ 87.322503][ T9650] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.332312][ T9649] team0: Port device team_slave_1 added [ 87.340205][ T9655] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.378110][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.385260][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.393488][ T9657] device bridge_slave_0 entered promiscuous mode [ 87.402398][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.409803][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.418027][ T9657] device bridge_slave_1 entered promiscuous mode [ 87.426395][ T9655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.449761][ T9653] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.465561][ T9653] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.508962][ T9650] team0: Port device team_slave_0 added [ 87.533740][ T9657] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.545837][ T9655] team0: Port device team_slave_0 added [ 87.557623][ T9650] team0: Port device team_slave_1 added [ 87.571611][ T9653] team0: Port device team_slave_0 added [ 87.629114][ T9649] device hsr_slave_0 entered promiscuous mode [ 87.695974][ T9649] device hsr_slave_1 entered promiscuous mode [ 87.747875][ T9657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.758099][ T9655] team0: Port device team_slave_1 added [ 87.777523][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.784684][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.792541][ T9658] device bridge_slave_0 entered promiscuous mode [ 87.801142][ T9653] team0: Port device team_slave_1 added [ 87.823903][ T9657] team0: Port device team_slave_0 added [ 87.831395][ T9657] team0: Port device team_slave_1 added [ 87.852182][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.859353][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.867673][ T9658] device bridge_slave_1 entered promiscuous mode [ 87.949023][ T9653] device hsr_slave_0 entered promiscuous mode [ 87.996045][ T9653] device hsr_slave_1 entered promiscuous mode [ 88.107619][ T9657] device hsr_slave_0 entered promiscuous mode [ 88.156116][ T9657] device hsr_slave_1 entered promiscuous mode [ 88.238983][ T9655] device hsr_slave_0 entered promiscuous mode [ 88.276265][ T9655] device hsr_slave_1 entered promiscuous mode [ 88.387632][ T9650] device hsr_slave_0 entered promiscuous mode [ 88.456340][ T9650] device hsr_slave_1 entered promiscuous mode [ 88.517656][ T9658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 88.528119][ T9658] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 88.584685][ T9658] team0: Port device team_slave_0 added [ 88.608282][ T9658] team0: Port device team_slave_1 added [ 88.677451][ T9658] device hsr_slave_0 entered promiscuous mode [ 88.716051][ T9658] device hsr_slave_1 entered promiscuous mode [ 88.857048][ T9649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.873827][ T9653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.920319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.930100][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.938365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.947054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.955547][ T9653] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.978737][ T9649] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.997239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.006521][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.014961][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.022182][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.030924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.039795][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.048182][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.055229][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.063279][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.074657][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.104471][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.113068][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.121628][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.128847][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.137994][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.146644][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.154883][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.161968][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.169498][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.184264][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.201934][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.211022][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.219857][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.251687][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.262600][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.271748][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.280343][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.288805][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.297373][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.306112][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.314395][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.322712][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.331184][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.339749][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.348858][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.357058][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.372424][ T9655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.395855][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.403624][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.412115][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.420198][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.428599][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.437174][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.445370][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.453220][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.463143][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.476617][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.492434][ T9658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.502598][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.511519][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.520215][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.529839][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.538263][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.545293][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.553493][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.563578][ T9655] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.584132][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.597067][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.606510][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.614996][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.622096][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.631089][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.639703][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.648356][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.655389][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.663109][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.671888][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.680115][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.688563][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.697619][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.704659][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.712284][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.720866][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.729512][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.736610][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.744697][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.752753][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.763149][ T9649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.793147][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.802619][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.811205][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.820894][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.829612][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.838617][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.847699][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.856232][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.864600][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.873562][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.885649][ T9658] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.914518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.923411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.932490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.939694][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.950486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.958959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.967458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.976246][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.984436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.010798][ T9657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.020699][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.031297][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.040587][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.049617][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.056716][ T9666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.071354][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.079927][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.088513][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.105382][ T9649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.118065][ T9653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.154691][ T9650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.165547][ T9650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.181206][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.189987][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.198219][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.207819][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.216844][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.223917][ T9666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.231735][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.241262][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.249816][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.258576][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.267529][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.275968][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.284272][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.292956][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.301509][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.309900][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.318341][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.326942][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.335116][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.344853][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.352622][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.360423][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.373575][ T9655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.386595][ T9655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.423281][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.443263][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.462079][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.470751][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.479537][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.488049][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.497140][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.525200][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.534935][ T26] audit: type=1400 audit(1560829132.187:38): avc: denied { associate } for pid=9649 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 90.558339][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.566940][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.575163][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.599879][ T9665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.616928][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.629251][ T9655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.656446][ T9650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.744915][ T26] audit: type=1400 audit(1560829132.387:39): avc: denied { map_create } for pid=9686 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 90.767295][ T9658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.841869][ T26] audit: type=1400 audit(1560829132.427:40): avc: denied { map_read map_write } for pid=9686 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2019/06/18 03:38:52 executed programs: 15 2019/06/18 03:38:57 executed programs: 184 2019/06/18 03:39:02 executed programs: 339 2019/06/18 03:39:07 executed programs: 493 2019/06/18 03:39:12 executed programs: 650 2019/06/18 03:39:18 executed programs: 808 2019/06/18 03:39:23 executed programs: 963 2019/06/18 03:39:28 executed programs: 1119 2019/06/18 03:39:33 executed programs: 1278 2019/06/18 03:39:38 executed programs: 1427 2019/06/18 03:39:43 executed programs: 1581 2019/06/18 03:39:48 executed programs: 1733 2019/06/18 03:39:53 executed programs: 1880 2019/06/18 03:39:58 executed programs: 2031 2019/06/18 03:40:03 executed programs: 2181 2019/06/18 03:40:08 executed programs: 2316 [ 168.462596][T19005] ================================================================== [ 168.470905][T19005] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 168.478204][T19005] Read of size 4 at addr ffff8880a0b1f318 by task syz-executor.1/19005 [ 168.478218][T19005] [ 168.478233][T19005] CPU: 0 PID: 19005 Comm: syz-executor.1 Not tainted 5.2.0-rc5 #28 [ 168.478240][T19005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.478245][T19005] Call Trace: [ 168.478269][T19005] dump_stack+0x172/0x1f0 [ 168.478283][T19005] ? sk_psock_unlink+0x3dd/0x4b0 [ 168.478299][T19005] ? tcp_check_oom+0x560/0x560 [ 168.478314][T19005] print_address_description.cold+0x7c/0x20d [ 168.478334][T19005] ? sk_psock_unlink+0x3dd/0x4b0 [ 168.478345][T19005] ? sk_psock_unlink+0x3dd/0x4b0 [ 168.478355][T19005] ? tcp_check_oom+0x560/0x560 [ 168.478365][T19005] __kasan_report.cold+0x1b/0x40 [ 168.478377][T19005] ? sk_psock_unlink+0x3dd/0x4b0 [ 168.478389][T19005] kasan_report+0x12/0x20 [ 168.478404][T19005] __asan_report_load4_noabort+0x14/0x20 [ 168.564767][T19005] sk_psock_unlink+0x3dd/0x4b0 [ 168.569550][T19005] ? sk_psock_link_pop+0x186/0x1f0 [ 168.574705][T19005] ? tcp_check_oom+0x560/0x560 [ 168.579497][T19005] tcp_bpf_remove+0x21/0x50 [ 168.584025][T19005] tcp_bpf_close+0x130/0x390 [ 168.588644][T19005] inet_release+0xe0/0x1f0 [ 168.593076][T19005] inet6_release+0x53/0x80 [ 168.597532][T19005] __sock_release+0xce/0x2a0 [ 168.602133][T19005] sock_close+0x1b/0x30 [ 168.606301][T19005] __fput+0x2ff/0x890 [ 168.610291][T19005] ? __sock_release+0x2a0/0x2a0 [ 168.615157][T19005] ____fput+0x16/0x20 [ 168.619144][T19005] task_work_run+0x145/0x1c0 [ 168.619166][T19005] exit_to_usermode_loop+0x273/0x2c0 [ 168.619182][T19005] do_syscall_64+0x58e/0x680 [ 168.619199][T19005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.619210][T19005] RIP: 0033:0x412fb1 [ 168.619224][T19005] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 168.619231][T19005] RSP: 002b:00007ffc3793ecd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 168.619243][T19005] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412fb1 [ 168.619250][T19005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 168.619259][T19005] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 168.619267][T19005] R10: 00007ffc3793edb0 R11: 0000000000000293 R12: 00000000007610a8 [ 168.619275][T19005] R13: 00000000000291b5 R14: 00000000000291e2 R15: 000000000075bfd4 [ 168.619293][T19005] [ 168.714039][T19005] Allocated by task 19011: [ 168.718473][T19005] save_stack+0x23/0x90 [ 168.722654][T19005] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 168.728317][T19005] kasan_kmalloc+0x9/0x10 [ 168.732700][T19005] kmem_cache_alloc_trace+0x151/0x750 [ 168.738091][T19005] sock_hash_alloc+0x1e3/0x5b0 [ 168.742964][T19005] __do_sys_bpf+0x730/0x43d0 [ 168.747569][T19005] __x64_sys_bpf+0x73/0xb0 [ 168.751998][T19005] do_syscall_64+0xfd/0x680 [ 168.756514][T19005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.762404][T19005] [ 168.764737][T19005] Freed by task 9667: [ 168.764760][T19005] save_stack+0x23/0x90 [ 168.772913][T19005] __kasan_slab_free+0x102/0x150 [ 168.777872][T19005] kasan_slab_free+0xe/0x10 [ 168.782390][T19005] kfree+0xcf/0x220 [ 168.786208][T19005] sock_hash_free+0x327/0x4a0 [ 168.790901][T19005] bpf_map_free_deferred+0xb4/0xe0 [ 168.796025][T19005] process_one_work+0x989/0x1790 [ 168.800979][T19005] worker_thread+0x98/0xe40 [ 168.805497][T19005] kthread+0x354/0x420 [ 168.809579][T19005] ret_from_fork+0x24/0x30 [ 168.814026][T19005] [ 168.816362][T19005] The buggy address belongs to the object at ffff8880a0b1f300 [ 168.816362][T19005] which belongs to the cache kmalloc-512 of size 512 [ 168.830442][T19005] The buggy address is located 24 bytes inside of [ 168.830442][T19005] 512-byte region [ffff8880a0b1f300, ffff8880a0b1f500) [ 168.843652][T19005] The buggy address belongs to the page: [ 168.849310][T19005] page:ffffea000282c7c0 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0xffff8880a0b1f080 [ 168.859739][T19005] flags: 0x1fffc0000000200(slab) [ 168.864704][T19005] raw: 01fffc0000000200 ffffea0002808588 ffffea000299c9c8 ffff8880aa400940 [ 168.873315][T19005] raw: ffff8880a0b1f080 ffff8880a0b1f080 0000000100000004 0000000000000000 [ 168.881908][T19005] page dumped because: kasan: bad access detected [ 168.888330][T19005] [ 168.890654][T19005] Memory state around the buggy address: [ 168.896292][T19005] ffff8880a0b1f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.904372][T19005] ffff8880a0b1f280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 168.912454][T19005] >ffff8880a0b1f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.920535][T19005] ^ [ 168.925430][T19005] ffff8880a0b1f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.933546][T19005] ffff8880a0b1f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.941621][T19005] ================================================================== [ 168.949691][T19005] Disabling lock debugging due to kernel taint [ 169.041837][T19005] Kernel panic - not syncing: panic_on_warn set ... [ 169.048497][T19005] CPU: 0 PID: 19005 Comm: syz-executor.1 Tainted: G B 5.2.0-rc5 #28 [ 169.057788][T19005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.067861][T19005] Call Trace: [ 169.071179][T19005] dump_stack+0x172/0x1f0 [ 169.075535][T19005] ? tcp_check_oom+0x560/0x560 [ 169.080308][T19005] panic+0x2cb/0x744 [ 169.084383][T19005] ? __warn_printk+0xf3/0xf3 [ 169.088963][T19005] ? sk_psock_unlink+0x3dd/0x4b0 [ 169.093893][T19005] ? tcp_check_oom+0x560/0x560 [ 169.098714][T19005] ? preempt_schedule+0x4b/0x60 [ 169.103560][T19005] ? ___preempt_schedule+0x16/0x18 [ 169.108660][T19005] ? trace_hardirqs_on+0x5e/0x220 [ 169.113681][T19005] ? sk_psock_unlink+0x3dd/0x4b0 [ 169.118613][T19005] ? tcp_check_oom+0x560/0x560 [ 169.123395][T19005] end_report+0x47/0x4f [ 169.127544][T19005] ? sk_psock_unlink+0x3dd/0x4b0 [ 169.132484][T19005] __kasan_report.cold+0xe/0x40 [ 169.137323][T19005] ? sk_psock_unlink+0x3dd/0x4b0 [ 169.142249][T19005] kasan_report+0x12/0x20 [ 169.146573][T19005] __asan_report_load4_noabort+0x14/0x20 [ 169.152205][T19005] sk_psock_unlink+0x3dd/0x4b0 [ 169.156979][T19005] ? sk_psock_link_pop+0x186/0x1f0 [ 169.162122][T19005] ? tcp_check_oom+0x560/0x560 [ 169.166899][T19005] tcp_bpf_remove+0x21/0x50 [ 169.171391][T19005] tcp_bpf_close+0x130/0x390 [ 169.175969][T19005] inet_release+0xe0/0x1f0 [ 169.180366][T19005] inet6_release+0x53/0x80 [ 169.184780][T19005] __sock_release+0xce/0x2a0 [ 169.189360][T19005] sock_close+0x1b/0x30 [ 169.193503][T19005] __fput+0x2ff/0x890 [ 169.197473][T19005] ? __sock_release+0x2a0/0x2a0 [ 169.202313][T19005] ____fput+0x16/0x20 [ 169.206282][T19005] task_work_run+0x145/0x1c0 [ 169.210878][T19005] exit_to_usermode_loop+0x273/0x2c0 [ 169.216175][T19005] do_syscall_64+0x58e/0x680 [ 169.220756][T19005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.226634][T19005] RIP: 0033:0x412fb1 [ 169.230509][T19005] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 169.250191][T19005] RSP: 002b:00007ffc3793ecd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 169.258602][T19005] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412fb1 [ 169.266562][T19005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 169.274555][T19005] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 169.282537][T19005] R10: 00007ffc3793edb0 R11: 0000000000000293 R12: 00000000007610a8 [ 169.290592][T19005] R13: 00000000000291b5 R14: 00000000000291e2 R15: 000000000075bfd4 [ 169.299609][T19005] Kernel Offset: disabled [ 169.303956][T19005] Rebooting in 86400 seconds..