[ 38.493113] audit: type=1800 audit(1574642828.729:32): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.352223] audit: type=1800 audit(1574642829.669:33): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts. 2019/11/25 01:04:05 parsed 1 programs syzkaller login: [ 1055.397831] kauditd_printk_skb: 2 callbacks suppressed [ 1055.397846] audit: type=1400 audit(1574643845.719:36): avc: denied { map } for pid=7573 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 1057.036118] audit: type=1400 audit(1574643847.359:37): avc: denied { map } for pid=7573 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5717 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/11/25 01:04:07 executed programs: 0 [ 1057.725019] IPVS: ftp: loaded support on port[0] = 21 [ 1057.740313] IPVS: ftp: loaded support on port[0] = 21 [ 1057.746706] IPVS: ftp: loaded support on port[0] = 21 [ 1057.754993] IPVS: ftp: loaded support on port[0] = 21 [ 1057.789930] IPVS: ftp: loaded support on port[0] = 21 [ 1057.813905] IPVS: ftp: loaded support on port[0] = 21 [ 1058.015585] chnl_net:caif_netlink_parms(): no params data found [ 1058.047004] chnl_net:caif_netlink_parms(): no params data found [ 1058.159692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.167877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.175196] device bridge_slave_0 entered promiscuous mode [ 1058.184831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.191244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.198711] device bridge_slave_1 entered promiscuous mode [ 1058.237109] chnl_net:caif_netlink_parms(): no params data found [ 1058.275573] chnl_net:caif_netlink_parms(): no params data found [ 1058.285499] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1058.296836] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1058.307456] chnl_net:caif_netlink_parms(): no params data found [ 1058.315765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.322168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.329424] device bridge_slave_0 entered promiscuous mode [ 1058.339057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.346585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.354299] device bridge_slave_1 entered promiscuous mode [ 1058.380201] chnl_net:caif_netlink_parms(): no params data found [ 1058.439252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1058.453535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1058.462002] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1058.470891] team0: Port device team_slave_0 added [ 1058.479529] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1058.487656] team0: Port device team_slave_1 added [ 1058.497976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1058.536180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1058.548185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.555825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.563157] device bridge_slave_0 entered promiscuous mode [ 1058.575088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.581490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.590094] device bridge_slave_0 entered promiscuous mode [ 1058.611549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.618023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.625608] device bridge_slave_0 entered promiscuous mode [ 1058.632077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.639156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.646797] device bridge_slave_1 entered promiscuous mode [ 1058.658687] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1058.667102] team0: Port device team_slave_0 added [ 1058.672175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.678802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.686636] device bridge_slave_1 entered promiscuous mode [ 1058.744692] device hsr_slave_0 entered promiscuous mode [ 1058.793030] device hsr_slave_1 entered promiscuous mode [ 1058.842847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.849250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.856964] device bridge_slave_1 entered promiscuous mode [ 1058.873592] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1058.880909] team0: Port device team_slave_1 added [ 1058.886298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.892913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.899999] device bridge_slave_0 entered promiscuous mode [ 1058.908699] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1058.917370] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1058.931188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1058.939243] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1058.946509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.953361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.960305] device bridge_slave_1 entered promiscuous mode [ 1058.967543] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1058.981323] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1058.989421] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1058.992756] audit: type=1400 audit(1574643849.309:38): avc: denied { create } for pid=7595 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1059.021313] audit: type=1400 audit(1574643849.309:39): avc: denied { write } for pid=7595 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1059.026569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1059.045431] audit: type=1400 audit(1574643849.309:40): avc: denied { read } for pid=7595 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1059.077671] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1059.085713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1059.154902] device hsr_slave_0 entered promiscuous mode [ 1059.212846] device hsr_slave_1 entered promiscuous mode [ 1059.314973] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1059.322291] team0: Port device team_slave_0 added [ 1059.329721] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1059.337338] team0: Port device team_slave_1 added [ 1059.342712] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1059.349570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1059.361736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1059.369066] team0: Port device team_slave_0 added [ 1059.375652] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1059.390110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1059.401888] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1059.409072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1059.422153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1059.429510] team0: Port device team_slave_0 added [ 1059.434913] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1059.442192] team0: Port device team_slave_1 added [ 1059.448419] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1059.466053] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1059.473464] team0: Port device team_slave_0 added [ 1059.484953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1059.492250] team0: Port device team_slave_1 added [ 1059.497746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1059.505649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1059.513686] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1059.520929] team0: Port device team_slave_1 added [ 1059.529608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1059.574749] device hsr_slave_0 entered promiscuous mode [ 1059.612970] device hsr_slave_1 entered promiscuous mode [ 1059.653114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1059.660444] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1059.671866] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1059.686367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1059.700626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1059.734660] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1059.764488] device hsr_slave_0 entered promiscuous mode [ 1059.802855] device hsr_slave_1 entered promiscuous mode [ 1059.885479] device hsr_slave_0 entered promiscuous mode [ 1059.923029] device hsr_slave_1 entered promiscuous mode [ 1059.983604] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1060.024397] device hsr_slave_0 entered promiscuous mode [ 1060.073027] device hsr_slave_1 entered promiscuous mode [ 1060.143106] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1060.149977] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1060.168256] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1060.177766] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1060.189522] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1060.197689] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1060.237979] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1060.252109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.263751] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1060.278605] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1060.289829] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1060.296408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.305977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1060.328167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.335858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1060.343593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1060.351315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1060.358977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.365451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.373050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1060.381872] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1060.391483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1060.400722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1060.408606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1060.418511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.424936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.443662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.454216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1060.461331] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1060.472717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1060.481251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1060.501713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1060.508076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1060.520315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1060.528196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.535498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1060.555356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1060.567652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1060.580608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1060.592718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1060.601300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1060.612710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1060.620371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1060.628576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1060.636232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1060.644218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1060.654150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.665726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1060.673751] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1060.679856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.695093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1060.712250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1060.720381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1060.729490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1060.738076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.745174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1060.755026] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1060.761086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1060.780597] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1060.786801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.798996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1060.809344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.816390] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1060.824769] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1060.832824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1060.840700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1060.848810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.855209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.862189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1060.869482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1060.876357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1060.889805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1060.903176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.911581] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1060.919123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1060.928114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1060.936866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1060.946272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.952673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.959464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1060.967716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1060.975540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.981884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.988827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1060.999885] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1061.008713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1061.019544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1061.027653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1061.035226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1061.042928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.053252] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1061.059331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.067575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1061.076806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.085812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.095548] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1061.103157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1061.110914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.119821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.127538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.133902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.140732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1061.148180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1061.155405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.165987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1061.174834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1061.183955] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1061.190036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.199029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1061.206905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.215505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1061.223490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1061.231080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.237480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.244551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.252216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.260558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1061.268331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.279791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1061.287237] audit: type=1400 audit(1574643851.609:41): avc: denied { associate } for pid=7595 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 1061.317871] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1061.326167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1061.337240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1061.346302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.356105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.363956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.370298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.377956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1061.385860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1061.393597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.399932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.406932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.414816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.425324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1061.436549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1061.445904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1061.453815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1061.461007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.470767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1061.479848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1061.488239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.494661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.501323] audit: type=1400 audit(1574643851.819:42): avc: denied { map_create } for pid=7620 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1061.525093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.532930] audit: type=1400 audit(1574643851.819:43): avc: denied { map_read map_write } for pid=7620 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 1061.565346] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1061.578541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1061.595209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1061.603083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1061.611607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1061.631667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1061.650394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1061.658375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1061.666539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1061.674885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.687319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.703298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.711265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1061.719556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1061.727474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.736098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1061.752356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1061.761583] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1061.768586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1061.776823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.785248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.793151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.800721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.809349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1061.819053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1061.827884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1061.838378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.847123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.855649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.863757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.871433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.880431] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1061.886605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.895246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1061.908856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1061.917633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.925553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.933690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1061.941236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1061.949461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.958754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1061.967342] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1061.976027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1061.984303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.992198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1062.000511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1062.008329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1062.017886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1062.026914] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1062.035290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1062.049400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1062.058301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1062.065724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1062.077910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1062.085541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.092365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1062.099273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1062.108102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1062.116014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1062.123674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1062.131061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1062.138939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1062.146556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.152957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.159903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1062.176842] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1062.183185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1062.199221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.207870] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1062.214588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1062.227765] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1062.239532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1062.247903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1062.260111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1062.271505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1062.279214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1062.287532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1062.295408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.301741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.311562] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1062.318156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1062.329999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1062.340301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1062.368368] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1062.378232] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1062.394289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1062.402078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1062.410567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.418881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1062.429688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1062.438867] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1062.452003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1062.461875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1062.470026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.477030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1062.484254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1062.496554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.508720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1062.521349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1062.533613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1062.540575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1062.549305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1062.557526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1062.565708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1062.573811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1062.581265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1062.591292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.599681] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1062.609253] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1062.616068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1062.644167] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1062.655059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.661814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 2019/11/25 01:04:13 executed programs: 15 [ 1062.691540] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1062.717165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.738633] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1062.752991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.773003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1062.790891] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/11/25 01:04:18 executed programs: 332 2019/11/25 01:04:23 executed programs: 659 2019/11/25 01:04:28 executed programs: 993 2019/11/25 01:04:33 executed programs: 1338 2019/11/25 01:04:38 executed programs: 1667 2019/11/25 01:04:43 executed programs: 1978 2019/11/25 01:04:48 executed programs: 2285 2019/11/25 01:04:53 executed programs: 2591 2019/11/25 01:04:58 executed programs: 2896 2019/11/25 01:05:03 executed programs: 3207 [ 1115.707032] ================================================================== [ 1115.714589] BUG: KASAN: use-after-free in __lock_acquire+0x34ac/0x49c0 [ 1115.721963] Read of size 8 at addr ffff8880a7826b88 by task syz-executor.5/13364 [ 1115.729495] [ 1115.731138] CPU: 1 PID: 13364 Comm: syz-executor.5 Not tainted 4.19.86-syzkaller #0 [ 1115.738934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.748295] Call Trace: [ 1115.750946] dump_stack+0x197/0x210 [ 1115.754586] ? __lock_acquire+0x34ac/0x49c0 [ 1115.754672] print_address_description.cold+0x7c/0x20d [ 1115.754687] ? __lock_acquire+0x34ac/0x49c0 [ 1115.754698] kasan_report.cold+0x8c/0x2ba [ 1115.754713] __asan_report_load8_noabort+0x14/0x20 [ 1115.754723] __lock_acquire+0x34ac/0x49c0 [ 1115.754732] ? save_stack+0xa9/0xd0 [ 1115.754746] ? save_stack+0x45/0xd0 [ 1115.754755] ? __kasan_slab_free+0x102/0x150 [ 1115.754764] ? kasan_slab_free+0xe/0x10 [ 1115.754770] ? kfree+0xcf/0x220 [ 1115.754829] ? bpf_tcp_remove+0x478/0xa20 [ 1115.764587] ? bpf_tcp_close+0x130/0x390 [ 1115.764687] ? inet_release+0xff/0x1e0 [ 1115.764766] ? inet6_release+0x53/0x80 [ 1115.813515] ? __sock_release+0xce/0x2a0 [ 1115.821376] ? sock_close+0x1b/0x30 [ 1115.821448] ? __fput+0x2dd/0x8b0 [ 1115.828466] ? mark_held_locks+0x100/0x100 [ 1115.832723] ? find_held_lock+0x35/0x130 [ 1115.836885] ? debug_check_no_obj_freed+0x200/0x464 [ 1115.841927] ? lock_downgrade+0x880/0x880 [ 1115.846084] lock_acquire+0x16f/0x3f0 [ 1115.849899] ? psock_map_pop.isra.0+0x2d/0x1f0 [ 1115.854491] ? kfree+0x170/0x220 [ 1115.857902] _raw_spin_lock_bh+0x33/0x50 [ 1115.861984] ? psock_map_pop.isra.0+0x2d/0x1f0 [ 1115.866575] psock_map_pop.isra.0+0x2d/0x1f0 [ 1115.871087] bpf_tcp_remove+0x481/0xa20 [ 1115.875134] ? tcp_check_oom+0x560/0x560 [ 1115.879213] bpf_tcp_close+0x130/0x390 [ 1115.883290] inet_release+0xff/0x1e0 [ 1115.887012] inet6_release+0x53/0x80 [ 1115.890733] __sock_release+0xce/0x2a0 [ 1115.894633] ? __sock_release+0x2a0/0x2a0 [ 1115.898824] sock_close+0x1b/0x30 [ 1115.902283] __fput+0x2dd/0x8b0 [ 1115.905582] ____fput+0x16/0x20 [ 1115.908933] task_work_run+0x145/0x1c0 [ 1115.912890] exit_to_usermode_loop+0x273/0x2c0 [ 1115.917489] do_syscall_64+0x53d/0x620 [ 1115.921397] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1115.926589] RIP: 0033:0x4141b0 [ 1115.929782] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d bd 42 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1115.948686] RSP: 002b:00007ffc37daad48 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1115.948698] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004141b0 [ 1115.948704] RDX: 0000001b2ec20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1115.948711] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1115.948716] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 1115.948723] R13: 0000000000000003 R14: 00000000007610a8 R15: 000000000075bf2c [ 1115.948733] [ 1115.948739] Allocated by task 13364: [ 1115.948756] save_stack+0x45/0xd0 [ 1115.948767] kasan_kmalloc+0xce/0xf0 [ 1115.948777] kmem_cache_alloc_node_trace+0x153/0x720 [ 1115.948791] __sock_map_ctx_update_elem.isra.0+0x675/0xdc0 [ 1115.948803] sock_hash_ctx_update_elem.isra.0+0x6c2/0x10d0 [ 1115.948813] sock_hash_update_elem+0x246/0x4b0 [ 1115.948880] map_update_elem+0x791/0xda0 [ 1115.978330] __x64_sys_bpf+0x2ec/0x4c0 [ 1115.978343] do_syscall_64+0xfd/0x620 [ 1115.978357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1115.978359] [ 1115.978364] Freed by task 7643: [ 1115.978377] save_stack+0x45/0xd0 [ 1115.978387] __kasan_slab_free+0x102/0x150 [ 1115.978398] kasan_slab_free+0xe/0x10 [ 1115.978406] kfree+0xcf/0x220 [ 1115.978416] smap_gc_work+0x7e5/0xab0 [ 1115.978482] process_one_work+0x989/0x1750 [ 1115.978498] worker_thread+0x98/0xe40 [ 1116.074535] kthread+0x354/0x420 [ 1116.077915] ret_from_fork+0x24/0x30 [ 1116.081622] [ 1116.081657] kobject: 'loop1' (00000000a9b10921): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1116.083241] The buggy address belongs to the object at ffff8880a7826940 [ 1116.083241] which belongs to the cache kmalloc-1024 of size 1024 [ 1116.083250] The buggy address is located 584 bytes inside of [ 1116.083250] 1024-byte region [ffff8880a7826940, ffff8880a7826d40) [ 1116.083252] The buggy address belongs to the page: [ 1116.083262] page:ffffea00029e0980 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0x0 compound_mapcount: 0 [ 1116.083275] flags: 0x1fffc0000008100(slab|head) [ 1116.083290] raw: 01fffc0000008100 ffffea00022fb588 ffffea0002848488 ffff88812c3f0ac0 [ 1116.083303] raw: 0000000000000000 ffff8880a7826040 0000000100000007 0000000000000000 [ 1116.083306] page dumped because: kasan: bad access detected [ 1116.083308] [ 1116.083311] Memory state around the buggy address: [ 1116.083320] ffff8880a7826a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.083329] ffff8880a7826b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.083337] >ffff8880a7826b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.083341] ^ [ 1116.083349] ffff8880a7826c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.083358] ffff8880a7826c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.083362] ================================================================== [ 1116.083365] Disabling lock debugging due to kernel taint [ 1116.083372] Kernel panic - not syncing: panic_on_warn set ... [ 1116.083372] [ 1116.083388] CPU: 1 PID: 13364 Comm: syz-executor.5 Tainted: G B 4.19.86-syzkaller #0 [ 1116.110605] kobject: 'loop4' (00000000cd367724): kobject_uevent_env [ 1116.117614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.117618] Call Trace: [ 1116.117638] dump_stack+0x197/0x210 [ 1116.117652] ? __lock_acquire+0x34ac/0x49c0 [ 1116.117719] panic+0x26a/0x50e [ 1116.117734] ? __warn_printk+0xf3/0xf3 [ 1116.125704] kobject: 'loop4' (00000000cd367724): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1116.132729] ? lock_downgrade+0x880/0x880 [ 1116.132770] ? trace_hardirqs_off+0x62/0x220 [ 1116.132780] ? trace_hardirqs_off+0x59/0x220 [ 1116.132796] ? __lock_acquire+0x34ac/0x49c0 [ 1116.144881] kobject: 'loop3' (00000000266d0bd9): kobject_uevent_env [ 1116.145331] kasan_end_report+0x47/0x4f [ 1116.158226] kobject: 'loop3' (00000000266d0bd9): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1116.158901] kasan_report.cold+0xa9/0x2ba [ 1116.318727] __asan_report_load8_noabort+0x14/0x20 [ 1116.323652] __lock_acquire+0x34ac/0x49c0 [ 1116.327815] ? save_stack+0xa9/0xd0 [ 1116.331431] ? save_stack+0x45/0xd0 [ 1116.335051] ? __kasan_slab_free+0x102/0x150 [ 1116.339439] ? kasan_slab_free+0xe/0x10 [ 1116.343400] ? kfree+0xcf/0x220 [ 1116.346699] ? bpf_tcp_remove+0x478/0xa20 [ 1116.350830] ? bpf_tcp_close+0x130/0x390 [ 1116.354873] ? inet_release+0xff/0x1e0 [ 1116.358740] ? inet6_release+0x53/0x80 [ 1116.362612] ? __sock_release+0xce/0x2a0 [ 1116.366680] ? sock_close+0x1b/0x30 [ 1116.370295] ? __fput+0x2dd/0x8b0 [ 1116.373741] ? mark_held_locks+0x100/0x100 [ 1116.377960] ? find_held_lock+0x35/0x130 [ 1116.382007] ? debug_check_no_obj_freed+0x200/0x464 [ 1116.387030] ? lock_downgrade+0x880/0x880 [ 1116.391161] lock_acquire+0x16f/0x3f0 [ 1116.394943] ? psock_map_pop.isra.0+0x2d/0x1f0 [ 1116.399521] ? kfree+0x170/0x220 [ 1116.402882] _raw_spin_lock_bh+0x33/0x50 [ 1116.406938] ? psock_map_pop.isra.0+0x2d/0x1f0 [ 1116.411501] psock_map_pop.isra.0+0x2d/0x1f0 [ 1116.415892] bpf_tcp_remove+0x481/0xa20 [ 1116.419871] ? tcp_check_oom+0x560/0x560 [ 1116.423924] bpf_tcp_close+0x130/0x390 [ 1116.427805] inet_release+0xff/0x1e0 [ 1116.432299] inet6_release+0x53/0x80 [ 1116.435995] __sock_release+0xce/0x2a0 [ 1116.439865] ? __sock_release+0x2a0/0x2a0 [ 1116.444001] sock_close+0x1b/0x30 [ 1116.447445] __fput+0x2dd/0x8b0 [ 1116.450707] ____fput+0x16/0x20 [ 1116.453983] task_work_run+0x145/0x1c0 [ 1116.457888] exit_to_usermode_loop+0x273/0x2c0 [ 1116.462450] do_syscall_64+0x53d/0x620 [ 1116.466324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1116.471493] RIP: 0033:0x4141b0 [ 1116.474667] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d bd 42 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1116.493558] RSP: 002b:00007ffc37daad48 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1116.501272] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004141b0 [ 1116.508534] RDX: 0000001b2ec20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1116.515794] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1116.523589] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 1116.530863] R13: 0000000000000003 R14: 00000000007610a8 R15: 000000000075bf2c [ 1116.539628] Kernel Offset: disabled [ 1116.543269] Rebooting in 86400 seconds..