[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 33.402616] kauditd_printk_skb: 9 callbacks suppressed [ 33.402627] audit: type=1800 audit(1545508977.301:33): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 33.430676] audit: type=1800 audit(1545508977.311:34): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.206894] audit: type=1400 audit(1545508981.111:35): avc: denied { map } for pid=6232 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.23' (ECDSA) to the list of known hosts. [ 99.996565] audit: type=1400 audit(1545509043.901:36): avc: denied { map } for pid=6246 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/12/22 20:04:04 parsed 1 programs [ 100.656865] audit: type=1400 audit(1545509044.561:37): avc: denied { map } for pid=6246 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=3324 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 101.464283] cc1 (6253) used greatest stack depth: 15288 bytes left 2018/12/22 20:04:06 executed programs: 0 [ 102.915606] IPVS: ftp: loaded support on port[0] = 21 [ 102.920194] IPVS: ftp: loaded support on port[0] = 21 [ 102.937304] IPVS: ftp: loaded support on port[0] = 21 [ 102.941717] IPVS: ftp: loaded support on port[0] = 21 [ 102.952830] IPVS: ftp: loaded support on port[0] = 21 [ 102.978880] IPVS: ftp: loaded support on port[0] = 21 [ 104.229289] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.240152] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.250262] device bridge_slave_0 entered promiscuous mode [ 104.266421] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.272905] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.284269] device bridge_slave_0 entered promiscuous mode [ 104.292436] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.302711] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.311248] device bridge_slave_0 entered promiscuous mode [ 104.320194] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.327084] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.334242] device bridge_slave_0 entered promiscuous mode [ 104.346341] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.352707] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.360930] device bridge_slave_0 entered promiscuous mode [ 104.370960] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.377689] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.384925] device bridge_slave_1 entered promiscuous mode [ 104.393020] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.399378] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.406845] device bridge_slave_1 entered promiscuous mode [ 104.414331] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.420725] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.428535] device bridge_slave_0 entered promiscuous mode [ 104.438070] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.446589] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.456652] device bridge_slave_1 entered promiscuous mode [ 104.463257] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.469607] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.482833] device bridge_slave_1 entered promiscuous mode [ 104.489984] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.501001] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.508199] device bridge_slave_1 entered promiscuous mode [ 104.516000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 104.528538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 104.538298] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.545249] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.553129] device bridge_slave_1 entered promiscuous mode [ 104.563948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 104.572644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 104.588281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 104.597750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 104.610432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 104.633654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 104.653966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 104.662668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 104.685070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 104.705841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 104.797230] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.865458] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.895561] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.917461] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.936607] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 104.949116] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.964560] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.975686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 104.999144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 105.017419] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 105.036855] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 105.049116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 105.063433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.077637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 105.087817] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 105.098725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.114892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 105.123704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 105.131210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 105.146549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.159219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.173748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.183819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 105.194782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 105.203530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 105.217163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 105.224558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.245559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.254458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.262198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.271992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 105.290110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.410777] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 105.426573] team0: Port device team_slave_0 added [ 105.445838] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 105.454407] team0: Port device team_slave_0 added [ 105.465555] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 105.477473] team0: Port device team_slave_0 added [ 105.497440] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 105.512333] team0: Port device team_slave_0 added [ 105.529167] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 105.540408] team0: Port device team_slave_1 added [ 105.546535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 105.558180] team0: Port device team_slave_1 added [ 105.567553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 105.576446] team0: Port device team_slave_1 added [ 105.582537] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 105.591453] team0: Port device team_slave_0 added [ 105.602017] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 105.615660] team0: Port device team_slave_0 added [ 105.622508] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 105.632027] team0: Port device team_slave_1 added [ 105.645548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.676667] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 105.686075] team0: Port device team_slave_1 added [ 105.712180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.722772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.740708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.749638] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 105.757090] team0: Port device team_slave_1 added [ 105.767827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 105.783811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.797940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.814738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.822879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.835108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.842849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.855897] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 105.870256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.881400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.896895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.912510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.922404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 105.932306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 105.946935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 105.954746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.962629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.972953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.982564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.991010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.999804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.008048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 106.020820] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 106.032756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 106.044981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 106.053185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.061197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.089229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.100894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.108944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.117107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.124950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.132727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.140826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 106.154374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 106.168484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.179154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.193562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.204245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.213197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 106.224354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.232238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.250481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 106.262838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 106.278841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.293774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.321390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.329420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.837068] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.843568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.850541] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.856965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.869646] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 106.887009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.902061] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.908534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.915279] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.921634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.936911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.010033] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.016455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.023271] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.029649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.041704] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.057832] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.064255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.070933] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.077361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.085424] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.108829] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.115271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.121960] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.128412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.144994] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.208887] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.215352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.221980] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.228426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.236600] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.964058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.971724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.981108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.988814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.997121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.641923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.683838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.700375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.764440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.846275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.867094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.896073] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.943703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.960469] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.018289] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.131823] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.144512] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.160502] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.178158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.189053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.215556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.224001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.231591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.251648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.263677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.273886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.354301] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.374320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.382338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.406257] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.418448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.430663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.444381] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.452538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.475196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.507779] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.534086] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.546068] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.648814] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.660446] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.691077] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.873719] audit: type=1400 audit(1545509055.781:38): avc: denied { associate } for pid=6274 comm="syz-executor5" name="syz5" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2018/12/22 20:04:15 executed programs: 6 2018/12/22 20:04:20 executed programs: 290 2018/12/22 20:04:25 executed programs: 578 2018/12/22 20:04:30 executed programs: 864 2018/12/22 20:04:36 executed programs: 1150 2018/12/22 20:04:41 executed programs: 1438 2018/12/22 20:04:46 executed programs: 1720 2018/12/22 20:04:51 executed programs: 1995 2018/12/22 20:04:56 executed programs: 2262 2018/12/22 20:05:01 executed programs: 2533 2018/12/22 20:05:06 executed programs: 2784 2018/12/22 20:05:11 executed programs: 3040 2018/12/22 20:05:16 executed programs: 3292 2018/12/22 20:05:21 executed programs: 3546 2018/12/22 20:05:26 executed programs: 3790 2018/12/22 20:05:31 executed programs: 4042 2018/12/22 20:05:36 executed programs: 4287 2018/12/22 20:05:41 executed programs: 4533 2018/12/22 20:05:46 executed programs: 4770 2018/12/22 20:05:51 executed programs: 5012 2018/12/22 20:05:56 executed programs: 5245 2018/12/22 20:06:01 executed programs: 5497 2018/12/22 20:06:06 executed programs: 5774 2018/12/22 20:06:11 executed programs: 6017 2018/12/22 20:06:16 executed programs: 6249 2018/12/22 20:06:21 executed programs: 6479 2018/12/22 20:06:26 executed programs: 6709 2018/12/22 20:06:31 executed programs: 6955 2018/12/22 20:06:36 executed programs: 7225 2018/12/22 20:06:41 executed programs: 7463 2018/12/22 20:06:46 executed programs: 7693 2018/12/22 20:06:51 executed programs: 7921 2018/12/22 20:06:56 executed programs: 8134 2018/12/22 20:07:01 executed programs: 8375 2018/12/22 20:07:06 executed programs: 8624 2018/12/22 20:07:11 executed programs: 8842 2018/12/22 20:07:16 executed programs: 9056 2018/12/22 20:07:21 executed programs: 9274 2018/12/22 20:07:26 executed programs: 9486 2018/12/22 20:07:31 executed programs: 9718 2018/12/22 20:07:36 executed programs: 9973 2018/12/22 20:07:41 executed programs: 10202 2018/12/22 20:07:46 executed programs: 10422 2018/12/22 20:07:51 executed programs: 10635 [ 331.961524] ------------[ cut here ]------------ [ 331.966592] refcount_t: increment on 0; use-after-free. [ 331.972333] WARNING: CPU: 0 PID: 17967 at lib/refcount.c:153 refcount_inc_checked+0x5d/0x70 [ 331.980842] Kernel panic - not syncing: panic_on_warn set ... [ 331.986743] CPU: 0 PID: 17967 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #163 [ 331.994117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.003481] Call Trace: [ 332.006207] dump_stack+0x1d3/0x2c6 [ 332.009862] ? dump_stack_print_info.cold.1+0x20/0x20 [ 332.015162] panic+0x2ad/0x55c [ 332.016743] kobject: 'loop1' (000000007792feef): kobject_uevent_env [ 332.018370] ? add_taint.cold.5+0x16/0x16 [ 332.018407] ? __warn.cold.8+0x5/0x45 [ 332.018417] ? __warn+0xe8/0x1d0 [ 332.018432] ? refcount_inc_checked+0x5d/0x70 [ 332.018444] __warn.cold.8+0x20/0x45 [ 332.018514] ? rcu_softirq_qs+0x20/0x20 [ 332.028390] kobject: 'loop1' (000000007792feef): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 332.029096] ? refcount_inc_checked+0x5d/0x70 [ 332.062434] report_bug+0x254/0x2d0 [ 332.066152] do_error_trap+0x11b/0x200 [ 332.070063] do_invalid_op+0x36/0x40 [ 332.073809] ? refcount_inc_checked+0x5d/0x70 [ 332.074460] kobject: 'loop1' (000000007792feef): kobject_uevent_env [ 332.078380] invalid_op+0x14/0x20 [ 332.078400] RIP: 0010:refcount_inc_checked+0x5d/0x70 [ 332.090461] kobject: 'loop1' (000000007792feef): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 332.093448] Code: 1d 73 dd 83 06 31 ff 89 de e8 2f b1 ef fd 84 db 75 df e8 56 b0 ef fd 48 c7 c7 20 c0 60 88 c6 05 53 dd 83 06 01 e8 03 63 b9 fd <0f> 0b eb c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 [ 332.093456] RSP: 0018:ffff8881c6ae6ce0 EFLAGS: 00010286 [ 332.093468] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 332.093476] RDX: 0000000000000000 RSI: ffffffff81653f85 RDI: 0000000000000005 [ 332.093485] RBP: ffff8881c6ae6ce8 R08: ffff8881d8980440 R09: ffffed103b5c3ef8 [ 332.093492] R10: ffffed103b5c3ef8 R11: ffff8881dae1f7c7 R12: 0000000000000000 [ 332.093501] R13: 0000000100000fc7 R14: ffff8881c1e12800 R15: dffffc0000000000 [ 332.093583] ? vprintk_func+0x85/0x181 [ 332.167512] igmp_start_timer+0xaf/0xe0 [ 332.171511] igmp_rcv+0x1a62/0x3220 [ 332.171681] kobject: 'loop1' (000000007792feef): kobject_uevent_env [ 332.175214] ? nf_ct_deliver_cached_events+0x264/0x7d0 [ 332.175237] ? ip_mc_leave_group+0x4b0/0x4b0 [ 332.181648] kobject: 'loop1' (000000007792feef): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 332.186887] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 332.186929] ? kasan_check_read+0x11/0x20 [ 332.186946] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 332.207362] kobject: 'loop0' (0000000084235d76): kobject_uevent_env [ 332.209838] ? rcu_softirq_qs+0x20/0x20 [ 332.223043] kobject: 'loop0' (0000000084235d76): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 332.225558] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 332.240560] ? raw_local_deliver+0x2ca/0xc3a [ 332.245239] ? graph_lock+0x270/0x270 [ 332.249071] ? graph_lock+0x270/0x270 [ 332.252885] ? lock_acquire+0x1ed/0x520 [ 332.256876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.262489] ? check_preemption_disabled+0x48/0x280 [ 332.263033] kobject: 'loop2' (000000008d10b225): kobject_uevent_env [ 332.267523] ? __lock_is_held+0xb5/0x140 [ 332.278043] ip_local_deliver_finish+0x2e9/0xda0 [ 332.282826] ? ip_sublist_rcv_finish+0x3a0/0x3a0 [ 332.283026] kobject: 'loop2' (000000008d10b225): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 332.287590] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 332.287645] ? nf_hook_slow+0x11e/0x1c0 [ 332.287665] ip_local_deliver+0x1e9/0x750 [ 332.310234] ? ip_call_ra_chain+0x730/0x730 [ 332.314577] ? ip_sublist_rcv_finish+0x3a0/0x3a0 [ 332.319351] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 332.324294] ? kasan_check_read+0x11/0x20 [ 332.328458] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 332.333488] ? rcu_softirq_qs+0x20/0x20 [ 332.336314] kobject: 'loop4' (000000009b3000f6): kobject_uevent_env [ 332.337478] ip_rcv_finish+0x1f9/0x300 [ 332.343975] kobject: 'loop4' (000000009b3000f6): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 332.347749] ip_rcv+0xed/0x600 [ 332.360361] ? ip_local_deliver+0x750/0x750 [ 332.364752] ? pvclock_read_flags+0x160/0x160 [ 332.369266] ? ip_rcv_finish_core.isra.16+0x1f40/0x1f40 [ 332.374646] ? lock_acquire+0x1ed/0x520 [ 332.378705] __netif_receive_skb_one_core+0x14d/0x200 [ 332.383302] kobject: 'loop3' (00000000df02957e): kobject_uevent_env [ 332.383911] ? __netif_receive_skb_core+0x3b30/0x3b30 [ 332.383928] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 332.383945] ? rcu_softirq_qs+0x20/0x20 [ 332.390359] kobject: 'loop3' (00000000df02957e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 332.395520] __netif_receive_skb+0x2c/0x1e0 [ 332.395536] netif_receive_skb_internal+0x12c/0x620 [ 332.395555] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.429097] ? dev_cpu_dead+0xa80/0xa80 [ 332.433095] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 332.438727] ? eth_type_trans+0x2ea/0x760 [ 332.442895] ? eth_gro_receive+0x920/0x920 [ 332.447156] napi_gro_frags+0x75a/0xc90 [ 332.451139] ? napi_gro_receive+0x5f0/0x5f0 [ 332.455456] ? eth_get_headlen+0x173/0x1f0 [ 332.459684] ? eth_type_trans+0x760/0x760 [ 332.463910] ? tun_get_user+0x3160/0x4250 [ 332.468069] tun_get_user+0x3189/0x4250 [ 332.472049] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 332.477284] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 332.482410] ? tun_net_xmit+0x1c90/0x1c90 [ 332.486559] ? graph_lock+0x270/0x270 [ 332.490356] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 332.495450] ? futex_wake+0x304/0x760 [ 332.499244] ? find_held_lock+0x36/0x1c0 [ 332.503300] ? tun_get+0x206/0x370 [ 332.506832] ? lock_downgrade+0x900/0x900 [ 332.510998] ? check_preemption_disabled+0x48/0x280 [ 332.516013] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 332.520941] ? kasan_check_read+0x11/0x20 [ 332.525082] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 332.530435] ? rcu_softirq_qs+0x20/0x20 [ 332.534421] ? tun_get+0x22d/0x370 [ 332.537952] ? tun_chr_close+0x180/0x180 [ 332.542010] tun_chr_write_iter+0xb9/0x160 [ 332.546300] do_iter_readv_writev+0x8b0/0xa80 [ 332.550792] ? vfs_dedupe_file_range+0x700/0x700 [ 332.555550] ? rw_verify_area+0x118/0x360 [ 332.559711] do_iter_write+0x185/0x5f0 [ 332.563635] ? dup_iter+0x260/0x260 [ 332.567272] vfs_writev+0x1f1/0x360 [ 332.570893] ? vfs_iter_write+0xb0/0xb0 [ 332.574857] ? lock_release+0xa00/0xa00 [ 332.578885] ? arch_local_save_flags+0x40/0x40 [ 332.583483] ? posix_ktime_get_ts+0x15/0x20 [ 332.587814] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 332.593265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.598822] ? __fdget_pos+0xde/0x200 [ 332.602623] ? __fdget_raw+0x20/0x20 [ 332.606331] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 332.611858] ? put_timespec64+0x10f/0x1b0 [ 332.615997] do_writev+0x11a/0x310 [ 332.619552] ? vfs_writev+0x360/0x360 [ 332.623346] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 332.628791] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 332.634340] __x64_sys_writev+0x75/0xb0 [ 332.638343] do_syscall_64+0x1b9/0x820 [ 332.642221] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 332.647575] ? syscall_return_slowpath+0x5e0/0x5e0 [ 332.652491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.657321] ? trace_hardirqs_on_caller+0x310/0x310 [ 332.662327] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 332.667338] ? prepare_exit_to_usermode+0x291/0x3b0 [ 332.672345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.677187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.682367] RIP: 0033:0x457521 [ 332.685569] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 332.704473] RSP: 002b:00007f2da89ceba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 332.712174] RAX: ffffffffffffffda RBX: 000000000000002a RCX: 0000000000457521 [ 332.719435] RDX: 0000000000000001 RSI: 00007f2da89cebf0 RDI: 00000000000000f0 [ 332.726708] RBP: 0000000020000640 R08: 00000000000000f0 R09: 0000000000000000 [ 332.733967] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f2da89cf6d4 [ 332.741246] R13: 00000000004c53b4 R14: 00000000004d9900 R15: 00000000ffffffff [ 332.750037] Kernel Offset: disabled [ 332.753739] Rebooting in 86400 seconds..