[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.991587] random: sshd: uninitialized urandom read (32 bytes read) [ 33.201108] kauditd_printk_skb: 9 callbacks suppressed [ 33.201123] audit: type=1400 audit(1574269701.492:35): avc: denied { map } for pid=6900 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.284055] random: sshd: uninitialized urandom read (32 bytes read) [ 33.871931] random: sshd: uninitialized urandom read (32 bytes read) [ 34.093419] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts. [ 39.664053] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/20 17:08:28 parsed 1 programs [ 39.843875] audit: type=1400 audit(1574269708.132:36): avc: denied { map } for pid=6913 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.339584] random: cc1: uninitialized urandom read (8 bytes read) [ 41.109537] audit: type=1400 audit(1574269709.392:37): avc: denied { map } for pid=6913 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13827 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/11/20 17:08:29 executed programs: 0 [ 41.153390] audit: type=1400 audit(1574269709.442:38): avc: denied { map } for pid=6913 comm="syz-execprog" path="/root/syzkaller-shm193150114" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.431326] IPVS: ftp: loaded support on port[0] = 21 [ 42.266257] chnl_net:caif_netlink_parms(): no params data found [ 42.274434] IPVS: ftp: loaded support on port[0] = 21 [ 42.322292] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.328925] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.336043] device bridge_slave_0 entered promiscuous mode [ 42.344502] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.351266] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.358113] device bridge_slave_1 entered promiscuous mode [ 42.368391] IPVS: ftp: loaded support on port[0] = 21 [ 42.395485] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.436755] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.464389] chnl_net:caif_netlink_parms(): no params data found [ 42.473053] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.481203] team0: Port device team_slave_0 added [ 42.488381] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.495628] team0: Port device team_slave_1 added [ 42.508671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.517843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.534351] IPVS: ftp: loaded support on port[0] = 21 [ 42.602042] device hsr_slave_0 entered promiscuous mode [ 42.650413] device hsr_slave_1 entered promiscuous mode [ 42.692797] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.704694] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.711395] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.718308] device bridge_slave_0 entered promiscuous mode [ 42.726584] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.732988] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.739864] device bridge_slave_1 entered promiscuous mode [ 42.746143] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.753910] audit: type=1400 audit(1574269711.042:39): avc: denied { create } for pid=6932 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.779570] audit: type=1400 audit(1574269711.062:40): avc: denied { write } for pid=6932 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.805756] audit: type=1400 audit(1574269711.062:41): avc: denied { read } for pid=6932 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 42.885489] chnl_net:caif_netlink_parms(): no params data found [ 42.898050] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.919507] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.926043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.932945] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.939278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.948656] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.979369] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.986554] team0: Port device team_slave_0 added [ 42.993407] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.000562] team0: Port device team_slave_1 added [ 43.022475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.029849] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.036599] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.043615] device bridge_slave_0 entered promiscuous mode [ 43.050710] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.057074] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.064000] device bridge_slave_1 entered promiscuous mode [ 43.070547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.081618] IPVS: ftp: loaded support on port[0] = 21 [ 43.109455] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.162376] device hsr_slave_0 entered promiscuous mode [ 43.200420] device hsr_slave_1 entered promiscuous mode [ 43.241957] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.249919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.257977] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.285613] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.302904] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.318417] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.325888] team0: Port device team_slave_0 added [ 43.333097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.340175] team0: Port device team_slave_1 added [ 43.345767] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.355766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.401572] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.463013] device hsr_slave_0 entered promiscuous mode [ 43.521986] device hsr_slave_1 entered promiscuous mode [ 43.569891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.577717] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.586256] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.593226] chnl_net:caif_netlink_parms(): no params data found [ 43.611902] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.619889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.629742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.637252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.646541] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.653107] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.664241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.675243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.682601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.691494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.699078] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.705470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.713011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.720831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.728312] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.734682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.744514] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.772676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.788703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.806835] IPVS: ftp: loaded support on port[0] = 21 [ 43.813479] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.819824] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.827358] device bridge_slave_0 entered promiscuous mode [ 43.834796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.848225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.857821] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.864330] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.871692] device bridge_slave_1 entered promiscuous mode [ 43.918430] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.951043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.959815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.967539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.975578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.983437] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.992938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.010890] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.019698] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.026878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.034520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.042368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.049103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.056885] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.071424] chnl_net:caif_netlink_parms(): no params data found [ 44.095017] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.101386] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.116413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.124933] team0: Port device team_slave_0 added [ 44.130771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.137640] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.144850] team0: Port device team_slave_1 added [ 44.151496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.160750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.179522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.187402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.195027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.202954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.210684] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.217127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.224554] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.235234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.243360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.251329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.263153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.271885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.279279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.286788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.294830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.302679] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.309010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.316141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.382092] device hsr_slave_0 entered promiscuous mode [ 44.460484] device hsr_slave_1 entered promiscuous mode [ 44.531760] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.548526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.560663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.567662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.574633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.588250] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.597805] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.632667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.651990] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.659065] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.665352] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.671769] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.678809] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.685497] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.692891] device bridge_slave_0 entered promiscuous mode [ 44.699088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.707207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.713954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.724808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.735969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.743633] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.749968] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.757094] device bridge_slave_1 entered promiscuous mode [ 44.769963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.777632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.785192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.792945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.800659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.812276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.820917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.828266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.836716] chnl_net:caif_netlink_parms(): no params data found [ 44.852781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.860747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.868027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.875848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.883539] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.889882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.899294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.912774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.924485] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.933538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.941484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.949016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.957171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.964989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.972921] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.979271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.987937] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.996601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.004554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.025302] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.039856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.052095] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.059150] team0: Port device team_slave_0 added [ 45.069473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.098535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.106830] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.119261] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.127133] device bridge_slave_0 entered promiscuous mode [ 45.138090] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.146497] team0: Port device team_slave_1 added [ 45.155019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.165204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.174051] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.181347] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.188453] device bridge_slave_1 entered promiscuous mode [ 45.195984] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.202970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.210855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.218962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.227093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.236918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.247953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.260770] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.279047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.287886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.295678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.303385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.311888] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.337115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.344365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.355280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.365266] md: could not open unknown-block(254,389). [ 45.371222] md: md_import_device returned -6 [ 45.399006] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.442478] device hsr_slave_0 entered promiscuous mode [ 45.494046] device hsr_slave_1 entered promiscuous mode [ 45.530579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.538050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.547554] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.553939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.565954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.574097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.594750] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.633668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.647509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.656116] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.666958] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.675244] team0: Port device team_slave_0 added [ 45.686866] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.696079] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.704387] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.715707] team0: Port device team_slave_1 added [ 45.724198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.733335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.744847] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.758225] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.768286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.779631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.788751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.795912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.805800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.812874] md: could not open unknown-block(254,389). [ 45.833660] md: md_import_device returned -6 [ 45.843564] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.849660] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.923837] device hsr_slave_0 entered promiscuous mode [ 45.938895] md: could not open unknown-block(254,389). [ 45.948311] md: md_import_device returned -6 [ 45.960404] device hsr_slave_1 entered promiscuous mode [ 46.001207] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.008590] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.019458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.034844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.057588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.073321] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.079735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.091688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.098700] md: could not open unknown-block(254,389). [ 46.109011] md: md_import_device returned -6 [ 46.130219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.145901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.154697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.165583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.175264] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.182029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.190806] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.199185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.208361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.218922] md: could not open unknown-block(254,389). [ 46.225501] md: md_import_device returned -6 2019/11/20 17:08:34 executed programs: 8 [ 46.231472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.243100] md: could not open unknown-block(254,389). [ 46.248814] md: md_import_device returned -6 [ 46.259807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.278993] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.286518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.304730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.318253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.328445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.349814] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.357638] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.371880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.379651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.392311] md: could not open unknown-block(254,389). [ 46.393247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.397769] md: md_import_device returned -6 [ 46.425597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.450415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.457421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.467764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.479892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.487898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.500508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.509607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.519972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.529408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.538616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.546486] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.547837] md: could not open unknown-block(254,389). [ 46.552879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.553664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.574236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.581771] md: md_import_device returned -6 [ 46.584418] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.592598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.599958] md: could not open unknown-block(254,389). [ 46.609255] md: md_import_device returned -6 [ 46.614703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.627814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.636271] md: could not open unknown-block(254,389). [ 46.646055] md: md_import_device returned -6 [ 46.653545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.671630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.679213] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.687918] md: could not open unknown-block(254,389). [ 46.688082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.694624] md: md_import_device returned -6 [ 46.708001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.715945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.727038] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.735954] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.744237] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.751158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.762668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.769559] md: could not open unknown-block(254,389). [ 46.777760] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.786971] md: md_import_device returned -6 [ 46.798520] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.809164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.817139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.825895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.834055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.844793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.855584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.860481] md: could not open unknown-block(254,389). [ 46.864291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.867711] md: md_import_device returned -6 [ 46.876018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.893043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.906559] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.913145] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.926095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.935314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.945192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.961305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.977305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.986015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.002562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.016159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.029220] md: could not open unknown-block(254,389). [ 47.036551] md: md_import_device returned -6 [ 47.049757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.058152] md: could not open unknown-block(254,389). [ 47.064103] md: md_import_device returned -6 [ 47.069062] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.075517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.084087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.092182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.102709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.111401] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.117406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.129455] md: could not open unknown-block(254,389). [ 47.135467] md: md_import_device returned -6 [ 47.142449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.149513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.164129] md: could not open unknown-block(254,389). [ 47.164661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.179683] md: md_import_device returned -6 [ 47.180382] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.190519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.206689] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 47.217615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.227345] md: could not open unknown-block(254,389). [ 47.235453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.245922] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.253092] md: md_import_device returned -6 [ 47.268743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.277482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.290303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.297127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.314377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.323525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.332982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.343691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.354101] audit: type=1400 audit(1574269715.642:42): avc: denied { ioctl } for pid=7036 comm="syz-executor.5" path="socket:[27661]" dev="sockfs" ino=27661 ioctlcmd=0x8912 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 47.357340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.406097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.415392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.424023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.442132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.465866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.474322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.485037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.492481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.499921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.509010] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.515980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.540794] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 47.547937] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.554433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.561203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.571792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.023580] md: could not open unknown-block(254,389). [ 48.028903] md: md_import_device returned -6 [ 48.344840] md: could not open unknown-block(254,389). [ 48.350367] md: md_import_device returned -6 [ 48.568891] md: could not open unknown-block(254,389). [ 48.575708] md: md_import_device returned -6 [ 48.585306] md: could not open unknown-block(254,389). [ 48.591924] md: md_import_device returned -6 [ 48.596655] md: could not open unknown-block(254,389). [ 48.605449] md: md_import_device returned -6 [ 48.611026] md: could not open unknown-block(254,389). [ 48.616454] md: md_import_device returned -6 [ 48.671923] md: could not open unknown-block(254,389). [ 48.677614] md: md_import_device returned -6 [ 48.734349] md: could not open unknown-block(254,389). [ 48.739753] md: md_import_device returned -6 [ 48.751207] md: could not open unknown-block(254,389). [ 48.756799] md: md_import_device returned -6 [ 48.767011] md: could not open unknown-block(254,389). [ 48.782186] md: md_import_device returned -6 [ 48.882591] md: could not open unknown-block(254,389). [ 48.887940] md: md_import_device returned -6 [ 48.969712] md: could not open unknown-block(254,389). [ 48.976543] md: md_import_device returned -6 [ 49.038799] ================================================================== [ 49.046343] BUG: KASAN: use-after-free in disk_unblock_events+0x55/0x60 [ 49.053094] Read of size 8 at addr ffff888096789788 by task syz-executor.1/7135 [ 49.060530] [ 49.062146] CPU: 0 PID: 7135 Comm: syz-executor.1 Not tainted 4.14.154 #0 [ 49.069087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.078429] Call Trace: [ 49.081005] dump_stack+0x142/0x197 [ 49.084621] ? disk_unblock_events+0x55/0x60 [ 49.089019] print_address_description.cold+0x7c/0x1dc [ 49.094385] ? disk_unblock_events+0x55/0x60 [ 49.098797] kasan_report.cold+0xa9/0x2af [ 49.102964] __asan_report_load8_noabort+0x14/0x20 [ 49.107900] disk_unblock_events+0x55/0x60 [ 49.112122] __blkdev_get+0x7d6/0x1120 [ 49.115998] ? __blkdev_put+0x7f0/0x7f0 [ 49.117721] md: could not open unknown-block(254,389). [ 49.119960] ? bd_acquire+0x178/0x2c0 [ 49.119976] ? find_held_lock+0x35/0x130 [ 49.119984] blkdev_get+0xa8/0x8e0 [ 49.119994] ? bd_may_claim+0xd0/0xd0 [ 49.125633] md: md_import_device returned -6 [ 49.129047] ? do_raw_spin_unlock+0x16b/0x260 [ 49.129059] ? _raw_spin_unlock+0x2d/0x50 [ 49.129069] blkdev_open+0x1d1/0x260 [ 49.129078] ? security_file_open+0x89/0x190 [ 49.162033] do_dentry_open+0x73b/0xeb0 [ 49.165997] ? bd_acquire+0x2c0/0x2c0 [ 49.169808] vfs_open+0x105/0x220 [ 49.172244] md: could not open unknown-block(254,389). [ 49.173268] path_openat+0x8bd/0x3f70 [ 49.173278] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.173292] ? trace_hardirqs_on+0x10/0x10 [ 49.173306] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 49.178662] md: md_import_device returned -6 [ 49.182356] ? __lock_is_held+0xb6/0x140 [ 49.182365] ? save_trace+0x290/0x290 [ 49.182376] ? __alloc_fd+0x1d4/0x4a0 [ 49.182386] do_filp_open+0x18e/0x250 [ 49.182392] ? __alloc_fd+0x1d4/0x4a0 [ 49.182397] ? may_open_dev+0xe0/0xe0 [ 49.182412] ? do_raw_spin_unlock+0x16b/0x260 [ 49.182421] ? _raw_spin_unlock+0x2d/0x50 [ 49.182428] ? __alloc_fd+0x1d4/0x4a0 [ 49.236324] do_sys_open+0x2c5/0x430 [ 49.240027] ? filp_open+0x70/0x70 [ 49.243560] ? SyS_clock_gettime+0xf8/0x180 [ 49.247864] SyS_openat+0x30/0x40 [ 49.251303] ? SyS_open+0x40/0x40 [ 49.254739] do_syscall_64+0x1e8/0x640 [ 49.258602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.263428] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.268597] RIP: 0033:0x45a639 [ 49.271769] RSP: 002b:00007fab631b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.279457] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a639 [ 49.286709] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 49.293964] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 49.301215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab631b36d4 [ 49.308472] R13: 00000000004c7527 R14: 00000000004dd080 R15: 00000000ffffffff [ 49.315744] [ 49.317371] Allocated by task 7113: [ 49.320981] save_stack_trace+0x16/0x20 [ 49.324934] save_stack+0x45/0xd0 [ 49.328376] kasan_kmalloc+0xce/0xf0 [ 49.332068] kmem_cache_alloc_node_trace+0x153/0x770 [ 49.337150] alloc_disk_node+0x64/0x3e0 [ 49.341109] alloc_disk+0x1b/0x20 [ 49.344549] md_alloc+0x219/0x840 [ 49.347981] md_probe+0x31/0x40 [ 49.352283] kobj_lookup+0x21c/0x400 [ 49.355989] get_gendisk+0x3b/0x240 [ 49.359598] __blkdev_get+0x3af/0x1120 [ 49.363464] blkdev_get+0xa8/0x8e0 [ 49.366993] blkdev_open+0x1d1/0x260 [ 49.370685] do_dentry_open+0x73b/0xeb0 [ 49.374649] vfs_open+0x105/0x220 [ 49.378081] path_openat+0x8bd/0x3f70 [ 49.381873] do_filp_open+0x18e/0x250 [ 49.385705] do_sys_open+0x2c5/0x430 [ 49.389405] SyS_openat+0x30/0x40 [ 49.392842] do_syscall_64+0x1e8/0x640 [ 49.396713] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.401879] [ 49.403484] Freed by task 7135: [ 49.406754] save_stack_trace+0x16/0x20 [ 49.410705] save_stack+0x45/0xd0 [ 49.414138] kasan_slab_free+0x75/0xc0 [ 49.418002] kfree+0xcc/0x270 [ 49.421087] disk_release+0x24b/0x2d0 [ 49.424865] device_release+0xf6/0x1a0 [ 49.428735] kobject_put.cold+0x269/0x2f9 [ 49.432861] put_disk+0x23/0x30 [ 49.436117] __blkdev_get+0x73c/0x1120 [ 49.439985] blkdev_get+0xa8/0x8e0 [ 49.443507] blkdev_open+0x1d1/0x260 [ 49.447198] do_dentry_open+0x73b/0xeb0 [ 49.451150] vfs_open+0x105/0x220 [ 49.454580] path_openat+0x8bd/0x3f70 [ 49.458359] do_filp_open+0x18e/0x250 [ 49.462135] do_sys_open+0x2c5/0x430 [ 49.465825] SyS_openat+0x30/0x40 [ 49.469258] do_syscall_64+0x1e8/0x640 [ 49.473124] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.478298] [ 49.479908] The buggy address belongs to the object at ffff888096789200 [ 49.479908] which belongs to the cache kmalloc-2048 of size 2048 [ 49.492720] The buggy address is located 1416 bytes inside of [ 49.492720] 2048-byte region [ffff888096789200, ffff888096789a00) [ 49.504749] The buggy address belongs to the page: [ 49.509660] page:ffffea000259e200 count:1 mapcount:0 mapping:ffff888096788100 index:0x0 compound_mapcount: 0 [ 49.519621] flags: 0x1fffc0000008100(slab|head) [ 49.524287] raw: 01fffc0000008100 ffff888096788100 0000000000000000 0000000100000003 [ 49.532157] raw: ffffea000254b5a0 ffffea0001fda7a0 ffff8880aa800c40 0000000000000000 [ 49.540040] page dumped because: kasan: bad access detected [ 49.545782] [ 49.547427] Memory state around the buggy address: [ 49.552341] ffff888096789680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.559689] ffff888096789700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.567037] >ffff888096789780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.574376] ^ [ 49.577983] ffff888096789800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.585366] ffff888096789880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.592709] ================================================================== [ 49.600051] Disabling lock debugging due to kernel taint [ 49.617927] Kernel panic - not syncing: panic_on_warn set ... [ 49.617927] [ 49.625343] CPU: 0 PID: 7135 Comm: syz-executor.1 Tainted: G B 4.14.154 #0 [ 49.633466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.642910] Call Trace: [ 49.645491] dump_stack+0x142/0x197 [ 49.649101] ? disk_unblock_events+0x55/0x60 [ 49.653486] panic+0x1f9/0x42d [ 49.656652] ? add_taint.cold+0x16/0x16 [ 49.660605] ? ___preempt_schedule+0x16/0x18 [ 49.664759] md: could not open unknown-block(254,389). [ 49.665005] kasan_end_report+0x47/0x4f [ 49.670571] md: md_import_device returned -6 [ 49.674222] kasan_report.cold+0x130/0x2af [ 49.674232] __asan_report_load8_noabort+0x14/0x20 [ 49.674239] disk_unblock_events+0x55/0x60 [ 49.674248] __blkdev_get+0x7d6/0x1120 [ 49.678772] md: could not open unknown-block(254,389). [ 49.682850] ? __blkdev_put+0x7f0/0x7f0 [ 49.682856] ? bd_acquire+0x178/0x2c0 [ 49.682865] ? find_held_lock+0x35/0x130 [ 49.682871] blkdev_get+0xa8/0x8e0 [ 49.682878] ? bd_may_claim+0xd0/0xd0 [ 49.682885] ? do_raw_spin_unlock+0x16b/0x260 [ 49.682894] ? _raw_spin_unlock+0x2d/0x50 [ 49.689786] md: md_import_device returned -6 [ 49.692020] blkdev_open+0x1d1/0x260 [ 49.692029] ? security_file_open+0x89/0x190 [ 49.692037] do_dentry_open+0x73b/0xeb0 [ 49.692043] ? bd_acquire+0x2c0/0x2c0 [ 49.692051] vfs_open+0x105/0x220 [ 49.752505] path_openat+0x8bd/0x3f70 [ 49.756288] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.761630] ? trace_hardirqs_on+0x10/0x10 [ 49.765852] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 49.770510] ? __lock_is_held+0xb6/0x140 [ 49.774550] ? save_trace+0x290/0x290 [ 49.778330] ? __alloc_fd+0x1d4/0x4a0 [ 49.782111] do_filp_open+0x18e/0x250 [ 49.785897] ? __alloc_fd+0x1d4/0x4a0 [ 49.789674] ? may_open_dev+0xe0/0xe0 [ 49.793454] ? do_raw_spin_unlock+0x16b/0x260 [ 49.797925] ? _raw_spin_unlock+0x2d/0x50 [ 49.802050] ? __alloc_fd+0x1d4/0x4a0 [ 49.805830] do_sys_open+0x2c5/0x430 [ 49.809549] ? filp_open+0x70/0x70 [ 49.813068] ? SyS_clock_gettime+0xf8/0x180 [ 49.817368] SyS_openat+0x30/0x40 [ 49.820798] ? SyS_open+0x40/0x40 [ 49.824232] do_syscall_64+0x1e8/0x640 [ 49.828094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.832915] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.838081] RIP: 0033:0x45a639 [ 49.841250] RSP: 002b:00007fab631b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.848945] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a639 [ 49.856210] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 49.863463] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 49.870717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab631b36d4 [ 49.877971] R13: 00000000004c7527 R14: 00000000004dd080 R15: 00000000ffffffff [ 49.886792] Kernel Offset: disabled [ 49.890416] Rebooting in 86400 seconds..