[ 62.278366][ T26] audit: type=1800 audit(1573717727.005:33): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.325447][ T26] audit: type=1800 audit(1573717727.015:34): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2019/11/14 07:48:56 parsed 1 programs syzkaller login: [ 72.133453][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 72.133468][ T26] audit: type=1400 audit(1573717736.865:42): avc: denied { map } for pid=9438 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 72.211968][ T26] audit: type=1400 audit(1573717736.945:43): avc: denied { map } for pid=9438 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16577 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/11/14 07:48:58 executed programs: 0 [ 74.218423][ T9465] IPVS: ftp: loaded support on port[0] = 21 [ 74.218430][ T9467] IPVS: ftp: loaded support on port[0] = 21 [ 74.241456][ T9463] IPVS: ftp: loaded support on port[0] = 21 [ 74.256822][ T9468] IPVS: ftp: loaded support on port[0] = 21 [ 74.264490][ T9459] IPVS: ftp: loaded support on port[0] = 21 [ 74.265789][ T9461] IPVS: ftp: loaded support on port[0] = 21 [ 74.502551][ T9467] chnl_net:caif_netlink_parms(): no params data found [ 74.587394][ T9459] chnl_net:caif_netlink_parms(): no params data found [ 74.597381][ T9468] chnl_net:caif_netlink_parms(): no params data found [ 74.633063][ T9465] chnl_net:caif_netlink_parms(): no params data found [ 74.702043][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.709997][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.717904][ T9467] device bridge_slave_0 entered promiscuous mode [ 74.761767][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.771197][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.779076][ T9468] device bridge_slave_0 entered promiscuous mode [ 74.786285][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.793916][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.802146][ T9467] device bridge_slave_1 entered promiscuous mode [ 74.831096][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.838247][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.846047][ T9468] device bridge_slave_1 entered promiscuous mode [ 74.874938][ T9468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.884620][ T9465] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.891987][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.902062][ T9465] device bridge_slave_0 entered promiscuous mode [ 74.909614][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.916753][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.925435][ T9459] device bridge_slave_0 entered promiscuous mode [ 74.937626][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.944754][ T9459] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.952688][ T9459] device bridge_slave_1 entered promiscuous mode [ 74.960251][ T9461] chnl_net:caif_netlink_parms(): no params data found [ 74.975643][ T9468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.992861][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.000155][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.007706][ T9465] device bridge_slave_1 entered promiscuous mode [ 75.021852][ T9467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.036293][ T9467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.045734][ T9463] chnl_net:caif_netlink_parms(): no params data found [ 75.068494][ T9468] team0: Port device team_slave_0 added [ 75.087298][ T9459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.119100][ T9467] team0: Port device team_slave_0 added [ 75.129090][ T9468] team0: Port device team_slave_1 added [ 75.136023][ T9459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.164180][ T9467] team0: Port device team_slave_1 added [ 75.179856][ T9465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.192778][ T9465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.206055][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.214813][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.222794][ T9461] device bridge_slave_0 entered promiscuous mode [ 75.235157][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.243228][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.251498][ T9461] device bridge_slave_1 entered promiscuous mode [ 75.342272][ T9467] device hsr_slave_0 entered promiscuous mode [ 75.399232][ T9467] device hsr_slave_1 entered promiscuous mode [ 75.478046][ T9459] team0: Port device team_slave_0 added [ 75.486842][ T9465] team0: Port device team_slave_0 added [ 75.494700][ T9465] team0: Port device team_slave_1 added [ 75.514651][ T9461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.529627][ T9459] team0: Port device team_slave_1 added [ 75.561581][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.568704][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.576885][ T9463] device bridge_slave_0 entered promiscuous mode [ 75.585648][ T9461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.632115][ T9468] device hsr_slave_0 entered promiscuous mode [ 75.669174][ T9468] device hsr_slave_1 entered promiscuous mode [ 75.709059][ T9468] debugfs: Directory 'hsr0' with parent '/' already present! [ 75.734900][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.742149][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.750259][ T9463] device bridge_slave_1 entered promiscuous mode [ 75.871889][ T9465] device hsr_slave_0 entered promiscuous mode [ 75.919229][ T9465] device hsr_slave_1 entered promiscuous mode [ 75.990118][ T9465] debugfs: Directory 'hsr0' with parent '/' already present! [ 76.082123][ T9459] device hsr_slave_0 entered promiscuous mode [ 76.159166][ T9459] device hsr_slave_1 entered promiscuous mode [ 76.179230][ T9459] debugfs: Directory 'hsr0' with parent '/' already present! [ 76.212409][ T9461] team0: Port device team_slave_0 added [ 76.242097][ T9461] team0: Port device team_slave_1 added [ 76.262626][ T9463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.408394][ T9463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.572658][ T9461] device hsr_slave_0 entered promiscuous mode [ 76.820481][ T9461] device hsr_slave_1 entered promiscuous mode [ 76.938916][ T9461] debugfs: Directory 'hsr0' with parent '/' already present! [ 77.344005][ T9463] team0: Port device team_slave_0 added [ 77.433043][ T9463] team0: Port device team_slave_1 added [ 77.667502][ T9467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.772064][ T9468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.939922][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.948087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.096633][ T9459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.216403][ T9468] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.331521][ T9467] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.344556][ T9465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.533959][ T9463] device hsr_slave_0 entered promiscuous mode [ 78.770236][ T9463] device hsr_slave_1 entered promiscuous mode [ 78.901056][ T9463] debugfs: Directory 'hsr0' with parent '/' already present! [ 78.908718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.916651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.037616][ T9459] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.175814][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.202577][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.250433][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.346133][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.429391][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.436654][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.605055][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.679435][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.688309][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.695433][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.799825][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.862416][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.957103][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.049208][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.056300][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.129531][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.138277][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.210058][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.217148][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.276400][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.359941][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.367865][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.399305][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.425057][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.449368][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.456437][ T9470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.489267][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.497065][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.531196][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.556105][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.577452][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.587487][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.596766][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.611845][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.624976][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.636125][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.651220][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.664467][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.675402][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.688133][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.702871][ T9465] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.754902][ T9468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.777261][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.803776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.815736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.836491][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.845374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.860908][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.875448][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.882569][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.898478][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.917947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.927333][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.943614][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.955585][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.967898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.983508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.994669][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.031802][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.047055][ T9461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.095565][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.106332][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.137036][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.144161][ T9470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.179108][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.215285][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.235029][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.242162][ T9470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.269061][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.277776][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.299821][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.308497][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.341012][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.359961][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.368457][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.400011][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.408397][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.430270][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.438592][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.466241][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.526336][ T9459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.566922][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.585789][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.595035][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.619382][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.626829][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.649637][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.658161][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.689882][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.698497][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.720009][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.728330][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.748028][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.756731][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.764901][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.779650][ T9467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.789734][ T9465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.798572][ T9461] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.812844][ T9468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.830692][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.842402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.852915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.878026][ T9459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.906848][ T9465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.930681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.940938][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.950165][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.957225][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.965205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.973701][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.982065][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.989143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.996580][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.005150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.014195][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.021685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.029253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.037637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.046000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.054439][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.063082][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.070923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.096228][ T9461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.107762][ T9461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.122136][ T26] audit: type=1400 audit(1573717746.855:44): avc: denied { associate } for pid=9468 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 82.145588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.154836][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.163861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.172863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.194830][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.209583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.217014][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.257834][ T9461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.435748][ T9463] 8021q: adding VLAN 0 to HW filter on device bond0 2019/11/14 07:49:07 executed programs: 6 [ 82.531781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.544935][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.564822][ T9463] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.609790][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.663902][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.698958][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.706143][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.716701][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.726076][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.740762][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.748002][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.841033][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.881276][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.904432][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.915788][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.925564][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.934593][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.945108][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.955650][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.964607][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.974223][ T9470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.991260][ T9463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.017692][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.048828][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.057201][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.159999][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.167666][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.215914][ T9463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.251763][ C0] vcan0: j1939_tp_rxtimer: 0x00000000850e50a5: rx timeout, send abort [ 83.263896][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000f1e5495f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.278417][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000009ed5b64f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.292745][ C0] ================================================================== [ 83.300819][ C0] BUG: KASAN: use-after-free in __lock_acquire+0x3a8b/0x4a00 [ 83.308213][ C0] Read of size 8 at addr ffff888081625080 by task ksoftirqd/0/9 [ 83.308236][ C0] [ 83.308266][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.0-rc7+ #0 [ 83.325620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.335667][ C0] Call Trace: [ 83.338956][ C0] dump_stack+0x197/0x210 [ 83.343331][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 83.348398][ C0] print_address_description.constprop.0.cold+0xd4/0x30b [ 83.355485][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 83.360531][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 83.365556][ C0] __kasan_report.cold+0x1b/0x41 [ 83.370494][ C0] ? can_rcv_filter+0x270/0x8e0 [ 83.375397][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 83.380447][ C0] kasan_report+0x12/0x20 [ 83.384787][ C0] __asan_report_load8_noabort+0x14/0x20 [ 83.390425][ C0] __lock_acquire+0x3a8b/0x4a00 [ 83.395251][ C0] ? lock_downgrade+0x920/0x920 [ 83.400082][ C0] ? mark_held_locks+0xf0/0xf0 [ 83.404820][ C0] ? trace_hardirqs_off+0x62/0x240 [ 83.409905][ C0] lock_acquire+0x190/0x410 [ 83.414383][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 83.420038][ C0] _raw_spin_lock_bh+0x33/0x50 [ 83.424823][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 83.430471][ C0] j1939_session_get_by_addr+0x2d/0x60 [ 83.435903][ C0] j1939_xtp_rx_abort_one+0x8d/0x100 [ 83.441176][ C0] ? j1939_ecu_get_by_addr_locked+0xc3/0xf0 [ 83.447067][ C0] j1939_tp_recv+0x513/0x9b0 [ 83.451647][ C0] j1939_can_recv+0x4bb/0x620 [ 83.456302][ C0] can_rcv_filter+0x292/0x8e0 [ 83.461078][ C0] can_receive+0x2e7/0x530 [ 83.465469][ C0] can_rcv+0x133/0x1b0 [ 83.469512][ C0] ? can_receive+0x530/0x530 [ 83.474080][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 83.479947][ C0] ? __netif_receive_skb_core+0x3450/0x3450 [ 83.485864][ C0] ? lock_acquire+0x190/0x410 [ 83.490515][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.496747][ C0] __netif_receive_skb+0x2c/0x1d0 [ 83.501760][ C0] process_backlog+0x206/0x750 [ 83.506496][ C0] ? net_rx_action+0x27b/0x1120 [ 83.511333][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 83.516604][ C0] net_rx_action+0x508/0x1120 [ 83.521269][ C0] ? napi_busy_loop+0x970/0x970 [ 83.526092][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 83.531610][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 83.537696][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.543948][ C0] __do_softirq+0x262/0x98c [ 83.548440][ C0] ? takeover_tasklets+0x820/0x820 [ 83.553549][ C0] run_ksoftirqd+0x8e/0x110 [ 83.558025][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 83.562935][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 83.569144][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 83.575357][ C0] ? __kthread_parkme+0x108/0x1c0 [ 83.580354][ C0] ? __kasan_check_read+0x11/0x20 [ 83.585370][ C0] kthread+0x361/0x430 [ 83.589411][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 83.595620][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 83.601310][ C0] ret_from_fork+0x24/0x30 [ 83.605709][ C0] [ 83.608047][ C0] Allocated by task 9719: [ 83.612347][ C0] save_stack+0x23/0x90 [ 83.616484][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 83.622093][ C0] kasan_kmalloc+0x9/0x10 [ 83.626396][ C0] kmem_cache_alloc_trace+0x158/0x790 [ 83.631761][ C0] j1939_netdev_start+0xa4/0x550 [ 83.636673][ C0] j1939_sk_bind+0x65a/0x8e0 [ 83.641289][ C0] __sys_bind+0x239/0x290 [ 83.645595][ C0] __x64_sys_bind+0x73/0xb0 [ 83.650072][ C0] do_syscall_64+0xfa/0x760 [ 83.654548][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.660406][ C0] [ 83.662706][ C0] Freed by task 9: [ 83.666399][ C0] save_stack+0x23/0x90 [ 83.670567][ C0] __kasan_slab_free+0x102/0x150 [ 83.675474][ C0] kasan_slab_free+0xe/0x10 [ 83.679947][ C0] kfree+0x10a/0x2c0 [ 83.683891][ C0] j1939_priv_put+0x8b/0xb0 [ 83.688395][ C0] j1939_session_put+0x12c/0x180 [ 83.693360][ C0] j1939_xtp_rx_abort_one+0xc7/0x100 [ 83.698663][ C0] j1939_tp_recv+0x4fb/0x9b0 [ 83.703232][ C0] j1939_can_recv+0x4bb/0x620 [ 83.707888][ C0] can_rcv_filter+0x292/0x8e0 [ 83.712568][ C0] can_receive+0x2e7/0x530 [ 83.716984][ C0] can_rcv+0x133/0x1b0 [ 83.721050][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 83.726948][ C0] __netif_receive_skb+0x2c/0x1d0 [ 83.731945][ C0] process_backlog+0x206/0x750 [ 83.736684][ C0] net_rx_action+0x508/0x1120 [ 83.741348][ C0] __do_softirq+0x262/0x98c [ 83.745821][ C0] [ 83.748124][ C0] The buggy address belongs to the object at ffff888081624000 [ 83.748124][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 83.762150][ C0] The buggy address is located 4224 bytes inside of [ 83.762150][ C0] 8192-byte region [ffff888081624000, ffff888081626000) [ 83.775563][ C0] The buggy address belongs to the page: [ 83.781182][ C0] page:ffffea0002058900 refcount:1 mapcount:0 mapping:ffff8880aa4021c0 index:0x0 compound_mapcount: 0 [ 83.792126][ C0] flags: 0x1fffc0000010200(slab|head) [ 83.797472][ C0] raw: 01fffc0000010200 ffffea0002922a08 ffff8880aa401b48 ffff8880aa4021c0 [ 83.806028][ C0] raw: 0000000000000000 ffff888081624000 0000000100000001 0000000000000000 [ 83.814583][ C0] page dumped because: kasan: bad access detected [ 83.820966][ C0] [ 83.823266][ C0] Memory state around the buggy address: [ 83.828885][ C0] ffff888081624f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.836951][ C0] ffff888081625000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.844985][ C0] >ffff888081625080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.853015][ C0] ^ [ 83.857055][ C0] ffff888081625100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.865091][ C0] ffff888081625180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.873122][ C0] ================================================================== [ 83.881158][ C0] Disabling lock debugging due to kernel taint [ 83.887303][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 83.893883][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.4.0-rc7+ #0 [ 83.902525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.912564][ C0] Call Trace: [ 83.915835][ C0] dump_stack+0x197/0x210 [ 83.920152][ C0] panic+0x2e3/0x75c [ 83.924039][ C0] ? add_taint.cold+0x16/0x16 [ 83.928690][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 83.933688][ C0] ? trace_hardirqs_off+0x62/0x240 [ 83.938773][ C0] ? trace_hardirqs_off+0x59/0x240 [ 83.943856][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 83.948853][ C0] end_report+0x47/0x4f [ 83.952980][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 83.957974][ C0] __kasan_report.cold+0xe/0x41 [ 83.962799][ C0] ? can_rcv_filter+0x270/0x8e0 [ 83.967622][ C0] ? __lock_acquire+0x3a8b/0x4a00 [ 83.972634][ C0] kasan_report+0x12/0x20 [ 83.976938][ C0] __asan_report_load8_noabort+0x14/0x20 [ 83.982557][ C0] __lock_acquire+0x3a8b/0x4a00 [ 83.987381][ C0] ? lock_downgrade+0x920/0x920 [ 83.992212][ C0] ? mark_held_locks+0xf0/0xf0 [ 83.996996][ C0] ? trace_hardirqs_off+0x62/0x240 [ 84.002096][ C0] lock_acquire+0x190/0x410 [ 84.006573][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 84.012178][ C0] _raw_spin_lock_bh+0x33/0x50 [ 84.016937][ C0] ? j1939_session_get_by_addr+0x2d/0x60 [ 84.022665][ C0] j1939_session_get_by_addr+0x2d/0x60 [ 84.028122][ C0] j1939_xtp_rx_abort_one+0x8d/0x100 [ 84.033430][ C0] ? j1939_ecu_get_by_addr_locked+0xc3/0xf0 [ 84.039297][ C0] j1939_tp_recv+0x513/0x9b0 [ 84.043861][ C0] j1939_can_recv+0x4bb/0x620 [ 84.048513][ C0] can_rcv_filter+0x292/0x8e0 [ 84.053164][ C0] can_receive+0x2e7/0x530 [ 84.057558][ C0] can_rcv+0x133/0x1b0 [ 84.061601][ C0] ? can_receive+0x530/0x530 [ 84.066176][ C0] __netif_receive_skb_one_core+0x113/0x1a0 [ 84.072062][ C0] ? __netif_receive_skb_core+0x3450/0x3450 [ 84.077938][ C0] ? lock_acquire+0x190/0x410 [ 84.082588][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.088815][ C0] __netif_receive_skb+0x2c/0x1d0 [ 84.093829][ C0] process_backlog+0x206/0x750 [ 84.098567][ C0] ? net_rx_action+0x27b/0x1120 [ 84.103392][ C0] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 84.108665][ C0] net_rx_action+0x508/0x1120 [ 84.113316][ C0] ? napi_busy_loop+0x970/0x970 [ 84.118142][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 84.123684][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 84.129636][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.135850][ C0] __do_softirq+0x262/0x98c [ 84.140330][ C0] ? takeover_tasklets+0x820/0x820 [ 84.145413][ C0] run_ksoftirqd+0x8e/0x110 [ 84.150017][ C0] smpboot_thread_fn+0x6a3/0xa40 [ 84.154948][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 84.161192][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.167426][ C0] ? __kthread_parkme+0x108/0x1c0 [ 84.172457][ C0] ? __kasan_check_read+0x11/0x20 [ 84.177475][ C0] kthread+0x361/0x430 [ 84.178258][ T3905] kobject: 'loop1' (00000000e5e99760): kobject_uevent_env [ 84.181533][ C0] ? smpboot_register_percpu_thread+0x390/0x390 [ 84.181544][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 84.181563][ C0] ret_from_fork+0x24/0x30 [ 84.192879][ T3905] kobject: 'loop1' (00000000e5e99760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 84.196279][ C0] Kernel Offset: disabled [ 84.220782][ C0] Rebooting in 86400 seconds..