[ 62.263216][ T26] audit: type=1800 audit(1559883053.295:30): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 66.109484][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 66.109498][ T26] audit: type=1400 audit(1559883057.185:35): avc: denied { map } for pid=9169 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. [ 85.126032][ T26] audit: type=1400 audit(1559883076.195:36): avc: denied { map } for pid=9181 comm="syz-executor895" path="/root/syz-executor895871725" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 85.182554][ T9188] IPVS: ftp: loaded support on port[0] = 21 [ 85.198168][ T9193] IPVS: ftp: loaded support on port[0] = 21 [ 85.201005][ T9191] IPVS: ftp: loaded support on port[0] = 21 [ 85.211251][ T9190] IPVS: ftp: loaded support on port[0] = 21 [ 85.215877][ T9192] IPVS: ftp: loaded support on port[0] = 21 [ 85.235132][ T9189] IPVS: ftp: loaded support on port[0] = 21 [ 85.480906][ T9191] chnl_net:caif_netlink_parms(): no params data found [ 85.545804][ T9189] chnl_net:caif_netlink_parms(): no params data found [ 85.572370][ T9192] chnl_net:caif_netlink_parms(): no params data found [ 85.611999][ T9190] chnl_net:caif_netlink_parms(): no params data found [ 85.664964][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 85.707309][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.714981][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.723330][ T9191] device bridge_slave_0 entered promiscuous mode [ 85.731138][ T9189] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.738807][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.746470][ T9189] device bridge_slave_0 entered promiscuous mode [ 85.755873][ T9189] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.762996][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.771619][ T9189] device bridge_slave_1 entered promiscuous mode [ 85.782885][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.790175][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.798203][ T9192] device bridge_slave_0 entered promiscuous mode [ 85.806001][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.813141][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.820985][ T9192] device bridge_slave_1 entered promiscuous mode [ 85.836737][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.844065][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.852237][ T9191] device bridge_slave_1 entered promiscuous mode [ 85.859929][ T9193] chnl_net:caif_netlink_parms(): no params data found [ 85.903026][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.911608][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.919491][ T9190] device bridge_slave_0 entered promiscuous mode [ 85.934107][ T9192] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.944339][ T9192] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.961536][ T9189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.970853][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.978775][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.986395][ T9190] device bridge_slave_1 entered promiscuous mode [ 86.002693][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.010519][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.019214][ T9188] device bridge_slave_0 entered promiscuous mode [ 86.027695][ T9191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 86.042737][ T9191] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.052426][ T9189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.080494][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.098352][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.106005][ T9188] device bridge_slave_1 entered promiscuous mode [ 86.126532][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.133900][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.141692][ T9193] device bridge_slave_0 entered promiscuous mode [ 86.153609][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.160836][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.168860][ T9193] device bridge_slave_1 entered promiscuous mode [ 86.176870][ T9190] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 86.187522][ T9190] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.198317][ T9192] team0: Port device team_slave_0 added [ 86.218571][ T9191] team0: Port device team_slave_0 added [ 86.240951][ T9192] team0: Port device team_slave_1 added [ 86.247768][ T9189] team0: Port device team_slave_0 added [ 86.254675][ T9188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 86.264457][ T9191] team0: Port device team_slave_1 added [ 86.271891][ T9193] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 86.286095][ T9193] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.296257][ T9189] team0: Port device team_slave_1 added [ 86.303126][ T9188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.319802][ T9190] team0: Port device team_slave_0 added [ 86.389229][ T9192] device hsr_slave_0 entered promiscuous mode [ 86.437964][ T9192] device hsr_slave_1 entered promiscuous mode [ 86.502695][ T9190] team0: Port device team_slave_1 added [ 86.510296][ T9193] team0: Port device team_slave_0 added [ 86.544446][ T9193] team0: Port device team_slave_1 added [ 86.551266][ T9188] team0: Port device team_slave_0 added [ 86.620245][ T9191] device hsr_slave_0 entered promiscuous mode [ 86.687720][ T9191] device hsr_slave_1 entered promiscuous mode [ 86.790333][ T9189] device hsr_slave_0 entered promiscuous mode [ 86.857562][ T9189] device hsr_slave_1 entered promiscuous mode [ 86.939733][ T9188] team0: Port device team_slave_1 added [ 86.980398][ T9193] device hsr_slave_0 entered promiscuous mode [ 87.047648][ T9193] device hsr_slave_1 entered promiscuous mode [ 87.160384][ T9190] device hsr_slave_0 entered promiscuous mode [ 87.227664][ T9190] device hsr_slave_1 entered promiscuous mode [ 87.360258][ T9188] device hsr_slave_0 entered promiscuous mode [ 87.397745][ T9188] device hsr_slave_1 entered promiscuous mode [ 87.565561][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.601669][ T9189] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.616224][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.624849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.637105][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.647746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.656262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.666011][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.673248][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.690445][ T9191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.719607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.730093][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.738997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.747270][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.754386][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.762929][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.770690][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.778444][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.796579][ T9191] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.806130][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.819309][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.828491][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.836187][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.843904][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.852648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.861135][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.868210][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.876030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.888171][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.896741][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.913527][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.923592][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.932672][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.940399][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.948592][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.956953][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.965544][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.972598][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.003564][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.011421][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.021292][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.029688][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.036711][ T9201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.044656][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.053485][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.062000][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.069240][ T9201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.076863][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.087158][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.094781][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.103450][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.112213][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.120290][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.128068][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.136460][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.144892][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.153346][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.162066][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.170828][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.179223][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.186256][ T9201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.193857][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.202298][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.211814][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.219659][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.227372][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.235050][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.243776][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.252653][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.259753][ T9201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.270299][ T9188] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.298347][ T9192] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.305173][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.315066][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.324860][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.334563][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.342951][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.351454][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.359898][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.368652][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.376843][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.385312][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.393781][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.402088][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.411440][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.426422][ T9191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.439118][ T9191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.459460][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.475382][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.483779][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.493149][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.501627][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.509969][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.518299][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.526406][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.535248][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.543489][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.552627][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.561243][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.569705][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.576736][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.584841][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.593390][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.602083][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.609339][ T9197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.616993][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.625673][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.633989][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.641064][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.648737][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.657577][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.665886][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.672965][ T9197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.680481][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.690397][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.731705][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.740256][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.748750][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.756476][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.765238][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.774636][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.784807][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.793330][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.801820][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.810285][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.819002][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.827182][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.835684][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.843968][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.852584][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.861064][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.869397][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.877847][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.885576][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.899065][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.908585][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.916866][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.926497][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.938684][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.953964][ T9192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.965785][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.975692][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.987149][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.995855][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.004663][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.013501][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.021806][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.030137][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.041487][ T9191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.054431][ T9193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.065415][ T9193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.084655][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.109010][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.120660][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.129423][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.137891][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.146414][ T9197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.189875][ T9189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.203556][ T9192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.229230][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.240807][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.249400][ T26] audit: type=1400 audit(1559883080.315:37): avc: denied { associate } for pid=9191 comm="syz-executor895" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 executing program executing program executing program executing program executing program executing program executing program [ 89.482291][ T22] ================================================================== [ 89.490533][ T22] BUG: KASAN: use-after-free in blk_mq_free_rqs+0x49f/0x4b0 [ 89.497826][ T22] Read of size 8 at addr ffff8880a3915d50 by task kworker/1:1/22 [ 89.505539][ T22] [ 89.507878][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.2.0-rc3+ #14 [ 89.515332][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.525405][ T22] Workqueue: events __blk_release_queue executing program executing program executing program executing program [ 89.530954][ T22] Call Trace: [ 89.534259][ T22] dump_stack+0x172/0x1f0 [ 89.538597][ T22] ? blk_mq_free_rqs+0x49f/0x4b0 [ 89.543554][ T22] print_address_description.cold+0x7c/0x20d [ 89.549540][ T22] ? blk_mq_free_rqs+0x49f/0x4b0 [ 89.554486][ T22] ? blk_mq_free_rqs+0x49f/0x4b0 [ 89.559619][ T22] __kasan_report.cold+0x1b/0x40 [ 89.564573][ T22] ? blk_mq_free_rqs+0x49f/0x4b0 [ 89.569515][ T22] kasan_report+0x12/0x20 [ 89.573857][ T22] __asan_report_load8_noabort+0x14/0x20 executing program executing program executing program [ 89.579495][ T22] blk_mq_free_rqs+0x49f/0x4b0 [ 89.584260][ T22] ? dd_exit_queue+0x92/0xd0 [ 89.588854][ T22] ? kfree+0x170/0x220 [ 89.592939][ T22] blk_mq_sched_tags_teardown+0x126/0x210 [ 89.598669][ T22] ? dd_request_merge+0x230/0x230 [ 89.603703][ T22] blk_mq_exit_sched+0x1fa/0x2d0 [ 89.608669][ T22] elevator_exit+0x70/0xa0 [ 89.613099][ T22] __blk_release_queue+0x127/0x330 [ 89.618242][ T22] process_one_work+0x989/0x1790 [ 89.623199][ T22] ? pwq_dec_nr_in_flight+0x320/0x320 executing program executing program executing program executing program executing program [ 89.628575][ T22] ? lock_acquire+0x16f/0x3f0 [ 89.633267][ T22] worker_thread+0x98/0xe40 [ 89.637795][ T22] kthread+0x354/0x420 [ 89.641873][ T22] ? process_one_work+0x1790/0x1790 [ 89.647083][ T22] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 89.653330][ T22] ret_from_fork+0x24/0x30 [ 89.657752][ T22] [ 89.660081][ T22] Allocated by task 1: [ 89.664151][ T22] save_stack+0x23/0x90 [ 89.668320][ T22] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 89.673959][ T22] kasan_kmalloc+0x9/0x10 executing program executing program [ 89.678297][ T22] kmem_cache_alloc_trace+0x151/0x750 [ 89.683670][ T22] loop_add+0x51/0x8d0 [ 89.687744][ T22] loop_init+0x1fe/0x25a [ 89.691986][ T22] do_one_initcall+0x107/0x7ba [ 89.696750][ T22] kernel_init_freeable+0x4d4/0x5c3 [ 89.701962][ T22] kernel_init+0x12/0x1c5 [ 89.706296][ T22] ret_from_fork+0x24/0x30 [ 89.710702][ T22] [ 89.713031][ T22] Freed by task 9228: [ 89.717012][ T22] save_stack+0x23/0x90 [ 89.721176][ T22] __kasan_slab_free+0x102/0x150 [ 89.726116][ T22] kasan_slab_free+0xe/0x10 executing program executing program [ 89.730617][ T22] kfree+0xcf/0x220 [ 89.734429][ T22] loop_remove+0xa1/0xd0 [ 89.738673][ T22] loop_control_ioctl+0x320/0x360 [ 89.743702][ T22] do_vfs_ioctl+0xd5f/0x1380 [ 89.748293][ T22] ksys_ioctl+0xab/0xd0 [ 89.752451][ T22] __x64_sys_ioctl+0x73/0xb0 [ 89.757043][ T22] do_syscall_64+0xfd/0x680 [ 89.761549][ T22] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.767434][ T22] [ 89.769764][ T22] The buggy address belongs to the object at ffff8880a3915b40 [ 89.769764][ T22] which belongs to the cache kmalloc-1k of size 1024 executing program executing program executing program executing program [ 89.783823][ T22] The buggy address is located 528 bytes inside of [ 89.783823][ T22] 1024-byte region [ffff8880a3915b40, ffff8880a3915f40) [ 89.797178][ T22] The buggy address belongs to the page: [ 89.802820][ T22] page:ffffea00028e4500 refcount:1 mapcount:0 mapping:ffff8880aa400ac0 index:0x0 compound_mapcount: 0 [ 89.813753][ T22] flags: 0x1fffc0000010200(slab|head) [ 89.819144][ T22] raw: 01fffc0000010200 ffffea0002968408 ffffea00028e5a08 ffff8880aa400ac0 executing program executing program executing program [ 89.827735][ T22] raw: 0000000000000000 ffff8880a3914040 0000000100000007 0000000000000000 [ 89.836318][ T22] page dumped because: kasan: bad access detected [ 89.842897][ T22] [ 89.845221][ T22] Memory state around the buggy address: [ 89.850854][ T22] ffff8880a3915c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.858921][ T22] ffff8880a3915c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.866989][ T22] >ffff8880a3915d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.875054][ T22] ^ executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 89.881731][ T22] ffff8880a3915d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.889799][ T22] ffff8880a3915e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.897866][ T22] ================================================================== [ 89.905925][ T22] Disabling lock debugging due to kernel taint executing program [ 89.975458][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 89.982093][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Tainted: G B 5.2.0-rc3+ #14 [ 89.990931][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.000993][ T22] Workqueue: events __blk_release_queue [ 90.006535][ T22] Call Trace: [ 90.009835][ T22] dump_stack+0x172/0x1f0 [ 90.014174][ T22] panic+0x2cb/0x744 [ 90.018079][ T22] ? __warn_printk+0xf3/0xf3 [ 90.022673][ T22] ? blk_mq_free_rqs+0x49f/0x4b0 [ 90.027618][ T22] ? preempt_schedule+0x4b/0x60 [ 90.032473][ T22] ? ___preempt_schedule+0x16/0x18 [ 90.037587][ T22] ? trace_hardirqs_on+0x5e/0x220 [ 90.042618][ T22] ? blk_mq_free_rqs+0x49f/0x4b0 [ 90.047558][ T22] end_report+0x47/0x4f [ 90.051716][ T22] ? blk_mq_free_rqs+0x49f/0x4b0 [ 90.056662][ T22] __kasan_report.cold+0xe/0x40 [ 90.061517][ T22] ? blk_mq_free_rqs+0x49f/0x4b0 [ 90.066459][ T22] kasan_report+0x12/0x20 [ 90.070800][ T22] __asan_report_load8_noabort+0x14/0x20 [ 90.076431][ T22] blk_mq_free_rqs+0x49f/0x4b0 [ 90.081196][ T22] ? dd_exit_queue+0x92/0xd0 [ 90.085790][ T22] ? kfree+0x170/0x220 [ 90.089880][ T22] blk_mq_sched_tags_teardown+0x126/0x210 [ 90.095611][ T22] ? dd_request_merge+0x230/0x230 [ 90.100643][ T22] blk_mq_exit_sched+0x1fa/0x2d0 [ 90.105583][ T22] elevator_exit+0x70/0xa0 [ 90.110000][ T22] __blk_release_queue+0x127/0x330 [ 90.115116][ T22] process_one_work+0x989/0x1790 [ 90.120071][ T22] ? pwq_dec_nr_in_flight+0x320/0x320 [ 90.125445][ T22] ? lock_acquire+0x16f/0x3f0 [ 90.130135][ T22] worker_thread+0x98/0xe40 [ 90.134734][ T22] kthread+0x354/0x420 [ 90.138813][ T22] ? process_one_work+0x1790/0x1790 [ 90.144012][ T22] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 90.150249][ T22] ret_from_fork+0x24/0x30 [ 90.156008][ T22] Kernel Offset: disabled [ 90.160363][ T22] Rebooting in 86400 seconds..