[ 42.835090] audit: type=1800 audit(1556014395.840:30): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.577157] kauditd_printk_skb: 4 callbacks suppressed [ 47.577173] audit: type=1400 audit(1556014400.630:35): avc: denied { map } for pid=7894 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts. [ 54.320441] audit: type=1400 audit(1556014407.380:36): avc: denied { map } for pid=7906 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/04/23 10:13:28 parsed 1 programs [ 55.162307] audit: type=1400 audit(1556014408.220:37): avc: denied { map } for pid=7906 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=4173 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/04/23 10:13:30 executed programs: 0 [ 57.875530] IPVS: ftp: loaded support on port[0] = 21 [ 57.880159] IPVS: ftp: loaded support on port[0] = 21 [ 57.902271] IPVS: ftp: loaded support on port[0] = 21 [ 57.913821] IPVS: ftp: loaded support on port[0] = 21 [ 57.985966] IPVS: ftp: loaded support on port[0] = 21 [ 58.005513] IPVS: ftp: loaded support on port[0] = 21 [ 58.215772] chnl_net:caif_netlink_parms(): no params data found [ 58.392335] chnl_net:caif_netlink_parms(): no params data found [ 58.400923] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.407284] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.415327] device bridge_slave_0 entered promiscuous mode [ 58.425451] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.431932] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.439107] device bridge_slave_1 entered promiscuous mode [ 58.449025] chnl_net:caif_netlink_parms(): no params data found [ 58.458614] chnl_net:caif_netlink_parms(): no params data found [ 58.482144] chnl_net:caif_netlink_parms(): no params data found [ 58.500839] chnl_net:caif_netlink_parms(): no params data found [ 58.586083] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.632412] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.669660] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.676052] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.683880] device bridge_slave_0 entered promiscuous mode [ 58.696864] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.703387] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.711019] device bridge_slave_1 entered promiscuous mode [ 58.722969] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.729687] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.744765] device bridge_slave_0 entered promiscuous mode [ 58.751406] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.761062] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.768297] device bridge_slave_0 entered promiscuous mode [ 58.794153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 58.802989] team0: Port device team_slave_0 added [ 58.808217] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.814577] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.822732] device bridge_slave_0 entered promiscuous mode [ 58.829365] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.835829] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.843916] device bridge_slave_1 entered promiscuous mode [ 58.850363] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.856763] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.864652] device bridge_slave_1 entered promiscuous mode [ 58.871127] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.877937] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.885001] device bridge_slave_0 entered promiscuous mode [ 58.901477] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.909819] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.920662] team0: Port device team_slave_1 added [ 58.926075] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.932503] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.940155] device bridge_slave_1 entered promiscuous mode [ 58.966758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.974824] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.981577] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.989498] device bridge_slave_1 entered promiscuous mode [ 58.996019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.017787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.043127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.051951] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.061105] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.071550] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.105920] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.115228] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.127217] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.135013] team0: Port device team_slave_0 added [ 59.141760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.209384] device hsr_slave_0 entered promiscuous mode [ 59.258090] device hsr_slave_1 entered promiscuous mode [ 59.321679] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.330823] team0: Port device team_slave_1 added [ 59.337562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.345415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.353738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.362146] team0: Port device team_slave_0 added [ 59.374880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 59.396666] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.405126] team0: Port device team_slave_0 added [ 59.411259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.423474] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.430982] team0: Port device team_slave_1 added [ 59.436273] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 59.447723] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.455275] team0: Port device team_slave_1 added [ 59.461527] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.469574] team0: Port device team_slave_0 added [ 59.490031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.498343] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.505789] team0: Port device team_slave_0 added [ 59.511968] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.519794] team0: Port device team_slave_1 added [ 59.525160] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.533272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.541752] team0: Port device team_slave_1 added [ 59.552044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.566928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.574961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.584505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.598427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.640966] device hsr_slave_0 entered promiscuous mode [ 59.697738] device hsr_slave_1 entered promiscuous mode [ 59.762149] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 59.772774] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 59.795166] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.812100] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.859504] device hsr_slave_0 entered promiscuous mode [ 59.897726] device hsr_slave_1 entered promiscuous mode [ 59.943867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 59.989459] device hsr_slave_0 entered promiscuous mode [ 60.027815] device hsr_slave_1 entered promiscuous mode [ 60.084007] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 60.099904] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 60.150840] device hsr_slave_0 entered promiscuous mode [ 60.197681] device hsr_slave_1 entered promiscuous mode [ 60.277970] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 60.285065] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 60.350818] device hsr_slave_0 entered promiscuous mode [ 60.387800] device hsr_slave_1 entered promiscuous mode [ 60.458448] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 60.466055] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 60.478532] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 60.518284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.527911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.538801] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.560423] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.576287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.646833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.679205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.695656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.726945] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.738513] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.759193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.767247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.779670] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.792508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.804046] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 60.811482] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.819724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.827062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.836672] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 60.844326] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.852360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.865364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.878894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.891059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.900988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.913016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.921317] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.927909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.936147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.950029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.960083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.972190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.983419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.991994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.004881] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.011608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.019992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.027221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.034474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.043426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.052125] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.058646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.068506] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.076882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.088433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.098094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.104663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.112648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.121056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.132588] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 61.139428] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.148825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.160819] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.171963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.179496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.190583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.198549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.205538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.213339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.221008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.228622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.236646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.247044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.257971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.265072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.273502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.281749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.290049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.298712] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.305090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.314250] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 61.323648] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.331937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 61.343175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 61.353354] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 61.360034] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.367620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.376615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.384736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.392790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.400656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.408486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.417812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.425460] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.431896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.440588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.450307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 61.457284] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 61.463657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.473302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.481855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.490752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.501074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.509333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.517297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.525211] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.531631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.540596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.548835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.556503] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.563025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.570328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.579164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.589236] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 61.598548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.605643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.621641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.631167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.639919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.650321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.661202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.668432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.676387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.684583] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.690993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.698741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.706586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.714749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.725023] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.736007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.749481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.757473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.765318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.773800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.786227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.800216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.811191] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 61.820757] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.829874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.840822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 61.849819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.859474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.867497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.875159] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.881602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.889190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.896775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.909262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.919950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.931501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.940004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.949528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 61.958791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.966994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.978280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.987186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.994233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.002880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.011264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.019682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.027319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.035488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.043761] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 62.053353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.062493] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 62.072734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.085171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.095260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.104201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.113131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.122214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.130627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.138568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.146287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.154417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.162101] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.168546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.175577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.185884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.204719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.215428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.226057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.234615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.242663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.251363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.259311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.267144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.275221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.282615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.293763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.301982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.312309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.323580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.339259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.347035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.355186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.364233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.372173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.382883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 62.392140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 62.400830] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 62.414578] audit: type=1400 audit(1556014415.470:38): avc: denied { associate } for pid=7928 comm="syz-executor.4" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 62.438412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.453534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.461455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.475006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.483726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 62.494464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 62.503988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 62.526413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.541654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.554631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.565617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.580051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.589846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.598748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 62.605625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.613931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.624103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.636074] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 62.643290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.658389] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 62.664496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.677268] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 62.683871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.695499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.708538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.719138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.732982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.746628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.765059] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 2019/04/23 10:13:35 executed programs: 7 [ 62.804015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.831195] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 62.839439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.853464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.868469] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 62.880256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 62.902823] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 62.935445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.949526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.960479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 62.971328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.993230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.014792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.031317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.055907] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 63.071620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.096080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.203330] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 63.304316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.067887] ================================================================== [ 64.075435] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x105d/0x1140 [ 64.082636] Read of size 4 at addr ffff888090175e1c by task syz-executor.4/8108 [ 64.090081] [ 64.091736] CPU: 0 PID: 8108 Comm: syz-executor.4 Not tainted 4.19.36 #4 [ 64.098590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.107958] Call Trace: [ 64.110563] dump_stack+0x172/0x1f0 [ 64.114202] ? __vb2_perform_fileio+0x105d/0x1140 [ 64.120879] print_address_description.cold+0x7c/0x20d [ 64.126189] ? __vb2_perform_fileio+0x105d/0x1140 [ 64.131302] kasan_report.cold+0x8c/0x2ba [ 64.135475] __asan_report_load4_noabort+0x14/0x20 [ 64.140428] __vb2_perform_fileio+0x105d/0x1140 [ 64.145133] ? vb2_thread_start+0x370/0x370 [ 64.149480] ? mark_held_locks+0x100/0x100 [ 64.153731] vb2_read+0x3b/0x50 [ 64.157023] vb2_fop_read+0x212/0x410 [ 64.160925] ? vb2_fop_write+0x410/0x410 [ 64.165000] v4l2_read+0x1ce/0x230 [ 64.168580] __vfs_read+0x116/0x800 [ 64.172222] ? v4l2_write+0x230/0x230 [ 64.176297] ? vfs_copy_file_range+0xba0/0xba0 [ 64.180892] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 64.186443] ? __inode_security_revalidate+0xda/0x120 [ 64.191738] ? avc_policy_seqno+0xd/0x70 [ 64.195811] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 64.200859] ? security_file_permission+0x1ce/0x230 [ 64.205891] ? security_file_permission+0x8f/0x230 [ 64.210845] ? rw_verify_area+0x118/0x360 [ 64.215013] vfs_read+0x194/0x3d0 [ 64.218485] ksys_read+0xea/0x1f0 [ 64.221953] ? kernel_write+0x120/0x120 [ 64.227024] ? do_syscall_64+0x26/0x610 [ 64.231041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.236688] ? do_syscall_64+0x26/0x610 [ 64.240706] __x64_sys_read+0x73/0xb0 [ 64.245493] do_syscall_64+0x103/0x610 [ 64.259165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.264397] RIP: 0033:0x458c29 [ 64.267599] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.286515] RSP: 002b:00007fddc9e16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.294249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 64.301530] RDX: 000000000000004b RSI: 0000000020000280 RDI: 0000000000000003 [ 64.308805] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 64.316085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fddc9e176d4 [ 64.323373] R13: 00000000004c4935 R14: 00000000004d9f08 R15: 00000000ffffffff [ 64.330676] [ 64.332303] Allocated by task 8106: [ 64.335942] save_stack+0x45/0xd0 [ 64.339418] kasan_kmalloc+0xce/0xf0 [ 64.343142] kmem_cache_alloc_trace+0x152/0x760 [ 64.347820] __vb2_init_fileio+0x1cb/0xbe0 [ 64.352059] __vb2_perform_fileio+0xbff/0x1140 [ 64.356647] vb2_read+0x3b/0x50 [ 64.359932] vb2_fop_read+0x212/0x410 [ 64.363733] v4l2_read+0x1ce/0x230 [ 64.367276] __vfs_read+0x116/0x800 [ 64.370913] vfs_read+0x194/0x3d0 [ 64.374382] ksys_read+0xea/0x1f0 [ 64.377839] __x64_sys_read+0x73/0xb0 [ 64.381643] do_syscall_64+0x103/0x610 [ 64.385539] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.390719] [ 64.392345] Freed by task 8099: [ 64.395640] save_stack+0x45/0xd0 [ 64.399106] __kasan_slab_free+0x102/0x150 [ 64.403373] kasan_slab_free+0xe/0x10 [ 64.407206] kfree+0xcf/0x230 [ 64.410339] __vb2_cleanup_fileio+0x100/0x170 [ 64.414871] vb2_core_queue_release+0x20/0x80 [ 64.419657] _vb2_fop_release+0x1cf/0x2a0 [ 64.424070] vb2_fop_release+0x75/0xc0 [ 64.427982] vivid_fop_release+0x18e/0x430 [ 64.432311] v4l2_release+0xfb/0x1a0 [ 64.436040] __fput+0x2df/0x8b0 [ 64.439319] ____fput+0x16/0x20 [ 64.442601] task_work_run+0x14a/0x1c0 [ 64.446530] exit_to_usermode_loop+0x273/0x2c0 [ 64.451144] do_syscall_64+0x52d/0x610 [ 64.455055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.460239] [ 64.461875] The buggy address belongs to the object at ffff888090175b00 [ 64.461875] which belongs to the cache kmalloc-1024 of size 1024 [ 64.474718] The buggy address is located 796 bytes inside of [ 64.474718] 1024-byte region [ffff888090175b00, ffff888090175f00) [ 64.486687] The buggy address belongs to the page: [ 64.491647] page:ffffea0002405d00 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0x0 compound_mapcount: 0 [ 64.501642] flags: 0x1fffc0000008100(slab|head) [ 64.506356] raw: 01fffc0000008100 ffffea00024f9108 ffffea0002402708 ffff88812c3f0ac0 [ 64.514434] raw: 0000000000000000 ffff888090174000 0000000100000007 0000000000000000 [ 64.522436] page dumped because: kasan: bad access detected [ 64.528170] [ 64.529796] Memory state around the buggy address: [ 64.534730] ffff888090175d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.542096] ffff888090175d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.549480] >ffff888090175e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.557412] ^ [ 64.561755] ffff888090175e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.569144] ffff888090175f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.576632] ================================================================== [ 64.584007] Disabling lock debugging due to kernel taint [ 64.635508] Kernel panic - not syncing: panic_on_warn set ... [ 64.635508] [ 64.642935] CPU: 0 PID: 8108 Comm: syz-executor.4 Tainted: G B 4.19.36 #4 [ 64.651166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.660507] Call Trace: [ 64.663106] dump_stack+0x172/0x1f0 [ 64.666736] ? __vb2_perform_fileio+0x105d/0x1140 [ 64.671666] panic+0x263/0x51d [ 64.674875] ? __warn_printk+0xf3/0xf3 [ 64.678763] ? __vb2_perform_fileio+0x105d/0x1140 [ 64.683619] ? preempt_schedule+0x4b/0x60 [ 64.687774] ? ___preempt_schedule+0x16/0x18 [ 64.692256] ? trace_hardirqs_on+0x5e/0x230 [ 64.696674] ? __vb2_perform_fileio+0x105d/0x1140 [ 64.701516] kasan_end_report+0x47/0x4f [ 64.705486] kasan_report.cold+0xa9/0x2ba [ 64.709646] __asan_report_load4_noabort+0x14/0x20 [ 64.714603] __vb2_perform_fileio+0x105d/0x1140 [ 64.719274] ? vb2_thread_start+0x370/0x370 [ 64.723769] ? mark_held_locks+0x100/0x100 [ 64.728019] vb2_read+0x3b/0x50 [ 64.731306] vb2_fop_read+0x212/0x410 [ 64.735101] ? vb2_fop_write+0x410/0x410 [ 64.739156] v4l2_read+0x1ce/0x230 [ 64.742693] __vfs_read+0x116/0x800 [ 64.746361] ? v4l2_write+0x230/0x230 [ 64.750171] ? vfs_copy_file_range+0xba0/0xba0 [ 64.754781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 64.760409] ? __inode_security_revalidate+0xda/0x120 [ 64.765593] ? avc_policy_seqno+0xd/0x70 [ 64.769651] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 64.774672] ? security_file_permission+0x1ce/0x230 [ 64.779690] ? security_file_permission+0x8f/0x230 [ 64.784623] ? rw_verify_area+0x118/0x360 [ 64.788786] vfs_read+0x194/0x3d0 [ 64.792255] ksys_read+0xea/0x1f0 [ 64.795715] ? kernel_write+0x120/0x120 [ 64.799701] ? do_syscall_64+0x26/0x610 [ 64.803869] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.809236] ? do_syscall_64+0x26/0x610 [ 64.813204] __x64_sys_read+0x73/0xb0 [ 64.817003] do_syscall_64+0x103/0x610 [ 64.820894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.826893] RIP: 0033:0x458c29 [ 64.830125] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.849036] RSP: 002b:00007fddc9e16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.856762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 64.864046] RDX: 000000000000004b RSI: 0000000020000280 RDI: 0000000000000003 [ 64.871689] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 64.879131] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fddc9e176d4 [ 64.886401] R13: 00000000004c4935 R14: 00000000004d9f08 R15: 00000000ffffffff [ 64.894572] Kernel Offset: disabled [ 64.898459] Rebooting in 86400 seconds..