[ 47.300786] audit: type=1800 audit(1556892631.948:30): pid=7929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 52.663648] kauditd_printk_skb: 4 callbacks suppressed [ 52.663669] audit: type=1400 audit(1556892637.338:35): avc: denied { map } for pid=8102 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.115' (ECDSA) to the list of known hosts. [ 67.093395] audit: type=1400 audit(1556892651.768:36): avc: denied { map } for pid=8114 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/05/03 14:10:52 parsed 1 programs [ 68.016785] audit: type=1400 audit(1556892652.688:37): avc: denied { map } for pid=8114 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14941 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/05/03 14:10:55 executed programs: 0 [ 70.784293] IPVS: ftp: loaded support on port[0] = 21 [ 70.802522] IPVS: ftp: loaded support on port[0] = 21 [ 70.823725] IPVS: ftp: loaded support on port[0] = 21 [ 70.825951] IPVS: ftp: loaded support on port[0] = 21 [ 70.837236] IPVS: ftp: loaded support on port[0] = 21 [ 70.862336] IPVS: ftp: loaded support on port[0] = 21 [ 71.106154] chnl_net:caif_netlink_parms(): no params data found [ 71.309386] chnl_net:caif_netlink_parms(): no params data found [ 71.319368] chnl_net:caif_netlink_parms(): no params data found [ 71.359323] chnl_net:caif_netlink_parms(): no params data found [ 71.377849] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.385699] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.395633] device bridge_slave_0 entered promiscuous mode [ 71.407542] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.414151] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.423540] device bridge_slave_1 entered promiscuous mode [ 71.431189] chnl_net:caif_netlink_parms(): no params data found [ 71.478345] chnl_net:caif_netlink_parms(): no params data found [ 71.566022] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.576480] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.644967] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.651976] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.659189] device bridge_slave_0 entered promiscuous mode [ 71.674290] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.682541] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.690123] device bridge_slave_0 entered promiscuous mode [ 71.716488] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.724117] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.731837] device bridge_slave_0 entered promiscuous mode [ 71.739835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.749701] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.757859] device bridge_slave_1 entered promiscuous mode [ 71.766155] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.775484] team0: Port device team_slave_0 added [ 71.780727] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.788881] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.796745] device bridge_slave_1 entered promiscuous mode [ 71.803668] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.810620] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.818562] device bridge_slave_0 entered promiscuous mode [ 71.826036] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.833368] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.840697] device bridge_slave_0 entered promiscuous mode [ 71.848612] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.855548] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.863780] device bridge_slave_1 entered promiscuous mode [ 71.884767] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.893383] team0: Port device team_slave_1 added [ 71.906606] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.915387] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.922954] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.930480] device bridge_slave_1 entered promiscuous mode [ 71.937927] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.945288] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.956625] device bridge_slave_1 entered promiscuous mode [ 71.975895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.018329] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.028668] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.046562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.057266] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.072744] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.083117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.096775] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.106123] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.116540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.131877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.183655] device hsr_slave_0 entered promiscuous mode [ 72.222260] device hsr_slave_1 entered promiscuous mode [ 72.300874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.313304] team0: Port device team_slave_0 added [ 72.323725] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 72.345057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.353554] team0: Port device team_slave_0 added [ 72.364674] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.373763] team0: Port device team_slave_1 added [ 72.379338] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 72.386849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.395130] team0: Port device team_slave_0 added [ 72.400694] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.408501] team0: Port device team_slave_0 added [ 72.414573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.423807] team0: Port device team_slave_1 added [ 72.429360] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 72.436722] team0: Port device team_slave_0 added [ 72.443163] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 72.450920] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.459097] team0: Port device team_slave_1 added [ 72.465609] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.475083] team0: Port device team_slave_1 added [ 72.480763] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 72.488789] team0: Port device team_slave_1 added [ 72.494675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 72.505666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.513619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 72.536175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 72.544303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.553914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 72.568333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.577046] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.633655] device hsr_slave_0 entered promiscuous mode [ 72.671888] device hsr_slave_1 entered promiscuous mode [ 72.734754] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 72.744498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.771252] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 72.843555] device hsr_slave_0 entered promiscuous mode [ 72.892209] device hsr_slave_1 entered promiscuous mode [ 72.968568] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 72.985771] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 73.044062] device hsr_slave_0 entered promiscuous mode [ 73.081915] device hsr_slave_1 entered promiscuous mode [ 73.163986] device hsr_slave_0 entered promiscuous mode [ 73.211944] device hsr_slave_1 entered promiscuous mode [ 73.294902] device hsr_slave_0 entered promiscuous mode [ 73.331986] device hsr_slave_1 entered promiscuous mode [ 73.373284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.380355] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 73.390129] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 73.400950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.408846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 73.417519] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 73.443822] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 73.453090] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.459928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 73.469614] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.522081] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.543851] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.651245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.669202] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.679298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.691084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.702554] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.713634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.723051] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.732833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.740034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.750989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.758693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.765950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.778757] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 73.785028] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.795964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 73.807757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.819585] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.826878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.835544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.843808] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.850652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.857951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.866506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.876339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 73.885949] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 73.893282] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.906310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.915363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.925588] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.935009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.946085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.955329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.964108] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.970766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.985399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.996739] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 74.004193] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.015598] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.026333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.034876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.042718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.052148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.060656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.069138] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.082053] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 74.088628] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.097306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.106350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.114989] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.121806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.129374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.138171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.145936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.155979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.166021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.174699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.184954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.195175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.203089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.212399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.220248] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.227070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.235095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.243536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.253602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.262164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.269999] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.276746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.283965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.291350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.302165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.310859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.323604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.334613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.343573] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 74.350616] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.364585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.372006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.380243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.390589] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.397484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.404903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.413517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.422289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.430522] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.437148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.444755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.453558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.461778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.470395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.479935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.489908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 74.500939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.512054] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.522585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.530897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.539510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.549355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.558245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.566598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.575307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.583738] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.590099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.597296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.605731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.613889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.621778] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.628187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.638298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.649137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.657730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.667273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 74.675013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.683174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.691790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.699864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.708523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.717462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.725735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.733977] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.740514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.748204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.756069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.764302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.771637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.781339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.793847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.804768] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.828718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.836034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.848380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.858005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.865564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.873918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.883234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.892975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.902144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 74.919161] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 74.925921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.935697] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 74.942375] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.949990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.959156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.967486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.980535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.991079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.003513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.013196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.022372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.030337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.039046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.048740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.057767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.065248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.074112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 75.083907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.092647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.101661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 75.109136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.117297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.127033] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.135709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.147151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 75.156608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.167369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 75.175713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.183972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.192021] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.198363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.205599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.213443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.221088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.228822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.236313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.244359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.252215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.259777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.268114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.279149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.292149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 75.303686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.313915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 75.325392] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 75.333383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.341266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.349448] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.355851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.362906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.370441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.378058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.386200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.393912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.402878] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 75.408935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.417775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 75.426095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.437670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.446276] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 75.455496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.470025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.477270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.486037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.494217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.502625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.510814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.518907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.530318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.547557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 75.562285] audit: type=1400 audit(1556892660.238:38): avc: denied { associate } for pid=8138 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 75.565882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 75.594305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.603273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.611101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.619502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.633519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.646333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.658528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 75.668159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.679414] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 75.685747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.695548] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 75.703466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.711933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.734233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.747691] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 75.760091] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 75.785969] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 75.807770] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 75.816678] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 75.828856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.839580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.863721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.886588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.897580] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/05/03 14:11:00 executed programs: 6 [ 76.391377] ================================================================== [ 76.399011] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x105d/0x1140 [ 76.406234] Read of size 4 at addr ffff88808be58c5c by task syz-executor.3/8224 [ 76.413683] [ 76.415338] CPU: 1 PID: 8224 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 76.422193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.431649] Call Trace: [ 76.431674] dump_stack+0x172/0x1f0 [ 76.431693] ? __vb2_perform_fileio+0x105d/0x1140 [ 76.431710] print_address_description.cold+0x7c/0x20d [ 76.431725] ? __vb2_perform_fileio+0x105d/0x1140 [ 76.431738] kasan_report.cold+0xae/0x2fa [ 76.431757] __asan_report_load4_noabort+0x14/0x20 [ 76.431770] __vb2_perform_fileio+0x105d/0x1140 [ 76.431793] ? vb2_thread_start+0x370/0x370 [ 76.431813] ? mark_held_locks+0x100/0x100 [ 76.431828] vb2_read+0x3b/0x50 [ 76.431847] vb2_fop_read+0x212/0x410 [ 76.431864] ? vb2_fop_write+0x410/0x410 [ 76.431876] v4l2_read+0x1ce/0x230 [ 76.431892] __vfs_read+0x116/0x800 [ 76.438246] ? v4l2_write+0x230/0x230 [ 76.438263] ? vfs_copy_file_range+0xba0/0xba0 [ 76.438283] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 76.438300] ? __inode_security_revalidate+0xda/0x120 [ 76.438317] ? avc_policy_seqno+0xd/0x70 [ 76.517771] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 76.522819] ? security_file_permission+0x1ce/0x230 [ 76.527851] ? security_file_permission+0x8f/0x230 [ 76.532794] ? rw_verify_area+0x118/0x360 [ 76.536933] vfs_read+0x194/0x3d0 [ 76.540389] ksys_read+0xea/0x1f0 [ 76.543868] ? kernel_write+0x120/0x120 [ 76.547844] ? do_syscall_64+0x26/0x610 [ 76.551819] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.557200] ? do_syscall_64+0x26/0x610 [ 76.561180] __x64_sys_read+0x73/0xb0 [ 76.564987] do_syscall_64+0x103/0x610 [ 76.568950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.574149] RIP: 0033:0x458da9 [ 76.577351] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.596266] RSP: 002b:00007fe083abac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.603997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 76.611272] RDX: 00000000000000f8 RSI: 0000000020000100 RDI: 0000000000000004 [ 76.618573] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 76.625882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe083abb6d4 [ 76.633159] R13: 00000000004c5c21 R14: 00000000004da0b8 R15: 00000000ffffffff [ 76.640446] [ 76.642135] Allocated by task 8219: [ 76.645773] save_stack+0x45/0xd0 [ 76.649223] kasan_kmalloc+0xce/0xf0 [ 76.653034] kmem_cache_alloc_trace+0x152/0x760 [ 76.657735] __vb2_init_fileio+0x1cb/0xbe0 [ 76.661974] __vb2_perform_fileio+0xbff/0x1140 [ 76.666560] vb2_read+0x3b/0x50 [ 76.669839] vb2_fop_read+0x212/0x410 [ 76.673662] v4l2_read+0x1ce/0x230 [ 76.677212] __vfs_read+0x116/0x800 [ 76.680826] vfs_read+0x194/0x3d0 [ 76.684282] ksys_read+0xea/0x1f0 [ 76.687758] __x64_sys_read+0x73/0xb0 [ 76.691564] do_syscall_64+0x103/0x610 [ 76.695467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.700669] [ 76.702298] Freed by task 8218: [ 76.705684] save_stack+0x45/0xd0 [ 76.709145] __kasan_slab_free+0x102/0x150 [ 76.713473] kasan_slab_free+0xe/0x10 [ 76.717291] kfree+0xcf/0x230 [ 76.720807] __vb2_cleanup_fileio+0x100/0x170 [ 76.725490] vb2_core_queue_release+0x20/0x80 [ 76.729987] _vb2_fop_release+0x1cf/0x2a0 [ 76.734149] vb2_fop_release+0x75/0xc0 [ 76.738044] vivid_fop_release+0x18e/0x430 [ 76.742298] v4l2_release+0xfb/0x1a0 [ 76.746070] __fput+0x2df/0x8b0 [ 76.749362] ____fput+0x16/0x20 [ 76.752670] task_work_run+0x14a/0x1c0 [ 76.756560] exit_to_usermode_loop+0x273/0x2c0 [ 76.761168] do_syscall_64+0x52d/0x610 [ 76.765075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.770349] [ 76.771977] The buggy address belongs to the object at ffff88808be58940 [ 76.771977] which belongs to the cache kmalloc-1024 of size 1024 [ 76.784852] The buggy address is located 796 bytes inside of [ 76.784852] 1024-byte region [ffff88808be58940, ffff88808be58d40) [ 76.796820] The buggy address belongs to the page: [ 76.801785] page:ffffea00022f9600 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0x0 compound_mapcount: 0 [ 76.811874] flags: 0x1fffc0000008100(slab|head) [ 76.816572] raw: 01fffc0000008100 ffffea00023ad488 ffffea000263d908 ffff88812c3f0ac0 [ 76.824505] raw: 0000000000000000 ffff88808be58040 0000000100000007 0000000000000000 [ 76.832452] page dumped because: kasan: bad access detected [ 76.838163] [ 76.839796] Memory state around the buggy address: [ 76.844751] ffff88808be58b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.852118] ffff88808be58b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.859469] >ffff88808be58c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.866826] ^ [ 76.873077] ffff88808be58c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.881010] ffff88808be58d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 76.888377] ================================================================== [ 76.897218] Disabling lock debugging due to kernel taint [ 76.916742] Kernel panic - not syncing: panic_on_warn set ... [ 76.916742] [ 76.924172] CPU: 0 PID: 8224 Comm: syz-executor.3 Tainted: G B 4.19.38 #6 [ 76.932405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.941782] Call Trace: [ 76.944405] dump_stack+0x172/0x1f0 [ 76.948059] ? __vb2_perform_fileio+0x105d/0x1140 [ 76.952918] panic+0x263/0x51d [ 76.956128] ? __warn_printk+0xf3/0xf3 [ 76.960056] ? __vb2_perform_fileio+0x105d/0x1140 [ 76.964916] ? preempt_schedule+0x4b/0x60 [ 76.969087] ? ___preempt_schedule+0x16/0x18 [ 76.973513] ? trace_hardirqs_on+0x5e/0x230 [ 76.977849] ? __vb2_perform_fileio+0x105d/0x1140 [ 76.982713] kasan_end_report+0x47/0x4f [ 76.986734] kasan_report.cold+0xcb/0x2fa [ 76.990897] __asan_report_load4_noabort+0x14/0x20 [ 76.995842] __vb2_perform_fileio+0x105d/0x1140 [ 77.000545] ? vb2_thread_start+0x370/0x370 [ 77.004898] ? mark_held_locks+0x100/0x100 [ 77.009155] vb2_read+0x3b/0x50 [ 77.013642] vb2_fop_read+0x212/0x410 [ 77.017472] ? vb2_fop_write+0x410/0x410 [ 77.021569] v4l2_read+0x1ce/0x230 [ 77.025126] __vfs_read+0x116/0x800 [ 77.028775] ? v4l2_write+0x230/0x230 [ 77.032595] ? vfs_copy_file_range+0xba0/0xba0 [ 77.037292] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 77.042852] ? __inode_security_revalidate+0xda/0x120 [ 77.048067] ? avc_policy_seqno+0xd/0x70 [ 77.052157] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 77.057298] ? security_file_permission+0x1ce/0x230 [ 77.062414] ? security_file_permission+0x8f/0x230 [ 77.067364] ? rw_verify_area+0x118/0x360 [ 77.071553] vfs_read+0x194/0x3d0 [ 77.075033] ksys_read+0xea/0x1f0 [ 77.078501] ? kernel_write+0x120/0x120 [ 77.082587] ? do_syscall_64+0x26/0x610 [ 77.086573] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.091951] ? do_syscall_64+0x26/0x610 [ 77.095930] __x64_sys_read+0x73/0xb0 [ 77.099735] do_syscall_64+0x103/0x610 [ 77.103634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.108852] RIP: 0033:0x458da9 [ 77.112055] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 77.131061] RSP: 002b:00007fe083abac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.138888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 77.146172] RDX: 00000000000000f8 RSI: 0000000020000100 RDI: 0000000000000004 [ 77.153451] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 77.160722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe083abb6d4 [ 77.168002] R13: 00000000004c5c21 R14: 00000000004da0b8 R15: 00000000ffffffff [ 77.176332] Kernel Offset: disabled [ 77.180150] Rebooting in 86400 seconds..