[ 87.045650][ T27] audit: type=1400 audit(1578755042.816:37): avc: denied { watch } for pid=10816 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 87.091894][ T27] audit: type=1400 audit(1578755042.846:38): avc: denied { watch } for pid=10816 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 87.287773][ T27] audit: type=1800 audit(1578755043.056:39): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 87.312060][ T27] audit: type=1800 audit(1578755043.066:40): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 89.116582][ T27] audit: type=1400 audit(1578755044.886:41): avc: denied { map } for pid=10909 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. [ 545.505560][ T27] audit: type=1400 audit(1578755501.276:42): avc: denied { map } for pid=10921 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2020/01/11 15:11:41 parsed 1 programs [ 547.486161][ T27] audit: type=1400 audit(1578755503.256:43): avc: denied { map } for pid=10921 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22404 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2020/01/11 15:11:44 executed programs: 0 [ 548.463329][T10943] IPVS: ftp: loaded support on port[0] = 21 [ 548.480983][T10950] IPVS: ftp: loaded support on port[0] = 21 [ 548.489597][T10952] IPVS: ftp: loaded support on port[0] = 21 [ 548.503363][T10949] IPVS: ftp: loaded support on port[0] = 21 [ 548.513308][T10945] IPVS: ftp: loaded support on port[0] = 21 [ 548.523389][T10948] IPVS: ftp: loaded support on port[0] = 21 [ 548.889590][T10949] chnl_net:caif_netlink_parms(): no params data found [ 548.906998][T10943] chnl_net:caif_netlink_parms(): no params data found [ 548.954963][T10945] chnl_net:caif_netlink_parms(): no params data found [ 548.991095][T10948] chnl_net:caif_netlink_parms(): no params data found [ 549.004003][T10950] chnl_net:caif_netlink_parms(): no params data found [ 549.044312][T10952] chnl_net:caif_netlink_parms(): no params data found [ 549.101407][T10943] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.110461][T10943] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.119416][T10943] device bridge_slave_0 entered promiscuous mode [ 549.135602][T10949] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.146186][T10949] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.154327][T10949] device bridge_slave_0 entered promiscuous mode [ 549.166071][T10949] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.173291][T10949] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.181343][T10949] device bridge_slave_1 entered promiscuous mode [ 549.211617][T10943] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.219934][T10943] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.228449][T10943] device bridge_slave_1 entered promiscuous mode [ 549.246501][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.253817][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.261719][T10950] device bridge_slave_0 entered promiscuous mode [ 549.306381][T10949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.318536][T10945] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.326039][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.334752][T10945] device bridge_slave_0 entered promiscuous mode [ 549.342289][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.350911][T10950] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.359370][T10950] device bridge_slave_1 entered promiscuous mode [ 549.380153][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.387255][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.395287][T10948] device bridge_slave_0 entered promiscuous mode [ 549.412189][T10949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.421769][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.429109][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.437014][T10945] device bridge_slave_1 entered promiscuous mode [ 549.461653][T10950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.470954][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.479372][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.487190][T10948] device bridge_slave_1 entered promiscuous mode [ 549.495878][T10943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.508549][T10943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.531015][T10952] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.538671][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.546432][T10952] device bridge_slave_0 entered promiscuous mode [ 549.555314][T10950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.599885][T10952] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.607082][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.615002][T10952] device bridge_slave_1 entered promiscuous mode [ 549.643700][T10943] team0: Port device team_slave_0 added [ 549.655866][T10949] team0: Port device team_slave_0 added [ 549.669001][T10945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.685745][T10945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.697477][T10948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.708606][T10943] team0: Port device team_slave_1 added [ 549.715857][T10948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.727141][T10950] team0: Port device team_slave_0 added [ 549.734655][T10949] team0: Port device team_slave_1 added [ 549.753257][T10952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.773235][T10950] team0: Port device team_slave_1 added [ 549.782651][T10952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.809257][T10945] team0: Port device team_slave_0 added [ 549.859593][T10945] team0: Port device team_slave_1 added [ 549.873155][T10948] team0: Port device team_slave_0 added [ 549.920044][T10949] device hsr_slave_0 entered promiscuous mode [ 549.957822][T10949] device hsr_slave_1 entered promiscuous mode [ 550.051072][T10943] device hsr_slave_0 entered promiscuous mode [ 550.087839][T10943] device hsr_slave_1 entered promiscuous mode [ 550.137692][T10943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.137950][T10943] Cannot create hsr debugfs directory [ 550.175309][T10948] team0: Port device team_slave_1 added [ 550.191296][T10952] team0: Port device team_slave_0 added [ 550.261068][T10950] device hsr_slave_0 entered promiscuous mode [ 550.327756][T10950] device hsr_slave_1 entered promiscuous mode [ 550.397644][T10950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.406383][T10950] Cannot create hsr debugfs directory [ 550.461234][T10945] device hsr_slave_0 entered promiscuous mode [ 550.507763][T10945] device hsr_slave_1 entered promiscuous mode [ 550.587537][T10945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.595463][T10945] Cannot create hsr debugfs directory [ 550.612438][T10952] team0: Port device team_slave_1 added [ 550.711111][T10948] device hsr_slave_0 entered promiscuous mode [ 550.748101][T10948] device hsr_slave_1 entered promiscuous mode [ 550.807658][T10948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.815278][T10948] Cannot create hsr debugfs directory [ 550.940307][T10952] device hsr_slave_0 entered promiscuous mode [ 550.987936][T10952] device hsr_slave_1 entered promiscuous mode [ 551.027548][T10952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.035683][T10952] Cannot create hsr debugfs directory [ 551.252310][ T27] audit: type=1400 audit(1578755507.026:44): avc: denied { create } for pid=10949 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 551.279830][ T27] audit: type=1400 audit(1578755507.026:45): avc: denied { write } for pid=10949 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 551.305159][ T27] audit: type=1400 audit(1578755507.026:46): avc: denied { read } for pid=10949 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 551.351125][T10949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 551.404035][T10949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 551.463242][T10949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 551.560871][T10949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 551.609092][T10945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.675081][T10943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 551.734962][T10943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 551.794339][T10945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.855892][T10943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 551.921472][T10943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.989751][T10948] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 552.030430][T10945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 552.100020][T10945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.139086][T10950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 552.205404][T10950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 552.253731][T10948] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 552.301303][T10948] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 552.354298][T10950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 552.410514][T10950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 552.472627][T10948] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 552.552173][T10952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 552.591228][T10952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 552.673595][T10952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 552.729695][T10952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 552.965532][T10949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.019856][T10943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.037287][T10949] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.067051][T10948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.076713][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.085911][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.114652][T10950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.128759][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.142108][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.151170][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.158524][T10953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.168850][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.178630][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.187885][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.194973][T10953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.202707][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.211854][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.220652][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.240409][T10943] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.261606][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.280763][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.301253][T10950] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.318831][T10948] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.333240][T10952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.344032][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.354721][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.362787][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.372468][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.381639][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.388786][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.397619][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.405325][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.413598][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.424294][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.432896][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.441543][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.448775][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.478235][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.487157][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.498407][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.506802][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.514222][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.523270][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.532935][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.544004][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.551740][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.559862][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.569995][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.578005][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.586878][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.598569][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.607090][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.615029][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.623951][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.632937][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.641981][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.651998][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.660157][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.668276][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.690722][T10952] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.705883][T10945] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.728207][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.736073][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.744479][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.753588][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.763318][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.772748][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.779978][T10966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.787949][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.796539][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.805223][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.849034][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.857314][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.866545][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.875116][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.886551][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.896062][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.905243][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.914153][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.921479][T10956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.929656][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.939634][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.948336][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.957090][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.965946][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.974573][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.982152][T10956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.991621][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.000816][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.010271][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.020021][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.028607][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.038106][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.047077][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.055872][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.065039][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.073148][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.080886][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.089652][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.103527][T10949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.158249][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.166934][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.178585][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.187181][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.196654][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.205466][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.213961][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.222912][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.231859][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.241341][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.251359][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.260655][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.270403][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.279643][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.286723][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.294610][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.304470][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.312580][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.331058][T10943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.343946][T10943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.370818][T10949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.379310][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.386824][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.394507][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.404880][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.414464][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.423424][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.431916][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.441285][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.450173][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.459656][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.469099][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.477962][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.487104][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.496398][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.505092][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.514854][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.522885][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.539349][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.550131][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.562594][T10950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.584865][T10948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.604413][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.613604][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.624094][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.632155][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.640180][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.649575][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.680397][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.688353][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.696757][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.707133][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.715832][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.724391][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.741182][T10943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.751873][T10952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.768184][T10965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.777267][T10965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.798175][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.806824][T10966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.834116][T10945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.851178][T10950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.870005][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.878292][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.931503][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.940578][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 554.950880][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.960465][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.969580][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.979226][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.988961][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 554.996973][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.009874][T10948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.052204][T10952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.062447][T10949] device veth0_vlan entered promiscuous mode [ 555.082341][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 555.090695][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 555.100343][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.109777][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.129704][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.138417][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.149037][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.156802][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.180240][T10949] device veth1_vlan entered promiscuous mode [ 555.188128][T10943] device veth0_vlan entered promiscuous mode [ 555.203941][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.231380][T10950] device veth0_vlan entered promiscuous mode [ 555.275255][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.284692][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.294832][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.303549][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.312786][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.322207][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.332533][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.340863][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.384252][T10943] device veth1_vlan entered promiscuous mode [ 555.392856][T10950] device veth1_vlan entered promiscuous mode [ 555.406015][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.414667][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.423190][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.432565][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.443055][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.451741][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.463914][ T27] audit: type=1400 audit(1578755511.236:47): avc: denied { associate } for pid=10949 comm="syz-executor.5" name="syz5" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 555.481861][T10952] device veth0_vlan entered promiscuous mode [ 555.518333][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.529323][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.585205][T10952] device veth1_vlan entered promiscuous mode [ 555.599184][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.625184][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.633690][ T27] audit: type=1400 audit(1578755511.406:48): avc: denied { open } for pid=10981 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 555.646873][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.666986][ T27] audit: type=1400 audit(1578755511.436:49): avc: denied { kernel } for pid=10981 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 555.678528][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.700656][T10983] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 555.702224][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.725531][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.738930][T10948] device veth0_vlan entered promiscuous mode [ 555.811124][T10948] device veth1_vlan entered promiscuous mode [ 555.892771][T10945] device veth0_vlan entered promiscuous mode [ 555.917390][ C1] hrtimer: interrupt took 52032 ns 2020/01/11 15:11:51 executed programs: 6 [ 555.988086][T10965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.996840][T10965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 556.023602][T10965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 556.125829][T10945] device veth1_vlan entered promiscuous mode [ 556.323365][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 556.334917][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 556.353531][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 556.377282][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 556.417024][T10953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 2020/01/11 15:11:56 executed programs: 46 2020/01/11 15:12:01 executed programs: 94 2020/01/11 15:12:06 executed programs: 141 2020/01/11 15:12:11 executed programs: 187 2020/01/11 15:12:17 executed programs: 236 2020/01/11 15:12:22 executed programs: 285 2020/01/11 15:12:27 executed programs: 332 2020/01/11 15:12:32 executed programs: 379 2020/01/11 15:12:37 executed programs: 427 2020/01/11 15:12:42 executed programs: 474 2020/01/11 15:12:47 executed programs: 522 2020/01/11 15:12:52 executed programs: 568 2020/01/11 15:12:57 executed programs: 613 2020/01/11 15:13:02 executed programs: 658 2020/01/11 15:13:07 executed programs: 706 2020/01/11 15:13:13 executed programs: 754 2020/01/11 15:13:18 executed programs: 804 2020/01/11 15:13:23 executed programs: 852 2020/01/11 15:13:28 executed programs: 900 2020/01/11 15:13:33 executed programs: 947 2020/01/11 15:13:38 executed programs: 997 2020/01/11 15:13:44 executed programs: 1046 2020/01/11 15:13:49 executed programs: 1093 2020/01/11 15:13:54 executed programs: 1139 2020/01/11 15:13:59 executed programs: 1185 2020/01/11 15:14:04 executed programs: 1229 2020/01/11 15:14:09 executed programs: 1277 2020/01/11 15:14:14 executed programs: 1324 2020/01/11 15:14:19 executed programs: 1373 2020/01/11 15:14:24 executed programs: 1421 2020/01/11 15:14:29 executed programs: 1469 2020/01/11 15:14:34 executed programs: 1517 2020/01/11 15:14:39 executed programs: 1563 2020/01/11 15:14:44 executed programs: 1611 [ 732.026087][T10956] ================================================================== [ 732.034615][T10956] BUG: KASAN: vmalloc-out-of-bounds in srcu_invoke_callbacks+0x338/0x360 [ 732.043041][T10956] Read of size 8 at addr ffffc90003822c78 by task kworker/0:0/10956 [ 732.051016][T10956] [ 732.053348][T10956] CPU: 0 PID: 10956 Comm: kworker/0:0 Not tainted 5.5.0-rc5-syzkaller #0 [ 732.061866][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.061924][T10956] Workqueue: rcu_gp srcu_invoke_callbacks [ 732.061932][T10956] Call Trace: [ 732.062014][T10956] dump_stack+0x197/0x210 [ 732.062035][T10956] ? srcu_invoke_callbacks+0x338/0x360 [ 732.062106][T10956] print_address_description.constprop.0.cold+0x5/0x30b [ 732.099575][T10956] ? srcu_invoke_callbacks+0x338/0x360 [ 732.105061][T10956] ? srcu_invoke_callbacks+0x338/0x360 [ 732.110541][T10956] __kasan_report.cold+0x1b/0x41 [ 732.115505][T10956] ? srcu_invoke_callbacks+0x338/0x360 [ 732.120983][T10956] kasan_report+0x12/0x20 [ 732.125329][T10956] __asan_report_load8_noabort+0x14/0x20 [ 732.130982][T10956] srcu_invoke_callbacks+0x338/0x360 [ 732.136307][T10956] ? srcu_barrier+0x4e0/0x4e0 [ 732.141026][T10956] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 732.147145][T10956] ? trace_hardirqs_on+0x67/0x240 [ 732.152365][T10956] process_one_work+0x9af/0x1740 [ 732.152391][T10956] ? pwq_dec_nr_in_flight+0x320/0x320 [ 732.163746][T10956] ? lock_acquire+0x190/0x410 [ 732.168454][T10956] worker_thread+0x98/0xe40 [ 732.172971][T10956] ? trace_hardirqs_on+0x67/0x240 [ 732.178088][T10956] kthread+0x361/0x430 [ 732.182175][T10956] ? process_one_work+0x1740/0x1740 [ 732.182190][T10956] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 732.182247][T10956] ret_from_fork+0x24/0x30 [ 732.182267][T10956] [ 732.199998][T10956] [ 732.202334][T10956] Memory state around the buggy address: [ 732.207976][T10956] ffffc90003822b00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 732.217349][T10956] ffffc90003822b80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 732.225455][T10956] >ffffc90003822c00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 732.233529][T10956] ^ [ 732.241611][T10956] ffffc90003822c80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 732.249790][T10956] ffffc90003822d00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 732.257888][T10956] ================================================================== [ 732.266413][T10956] Disabling lock debugging due to kernel taint [ 732.272594][T10956] Kernel panic - not syncing: panic_on_warn set ... [ 732.279288][T10956] CPU: 0 PID: 10956 Comm: kworker/0:0 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 732.289095][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.299173][T10956] Workqueue: rcu_gp srcu_invoke_callbacks [ 732.304897][T10956] Call Trace: [ 732.308198][T10956] dump_stack+0x197/0x210 [ 732.312637][T10956] panic+0x2e3/0x75c [ 732.317076][T10956] ? add_taint.cold+0x16/0x16 [ 732.321898][T10956] ? srcu_invoke_callbacks+0x338/0x360 [ 732.327377][T10956] ? trace_hardirqs_off+0x62/0x240 [ 732.332509][T10956] ? trace_hardirqs_off+0x59/0x240 [ 732.337635][T10956] ? srcu_invoke_callbacks+0x338/0x360 [ 732.343142][T10956] end_report+0x47/0x4f [ 732.347314][T10956] ? srcu_invoke_callbacks+0x338/0x360 [ 732.352786][T10956] __kasan_report.cold+0xe/0x41 [ 732.357651][T10956] ? srcu_invoke_callbacks+0x338/0x360 [ 732.364079][T10956] kasan_report+0x12/0x20 [ 732.368466][T10956] __asan_report_load8_noabort+0x14/0x20 [ 732.374208][T10956] srcu_invoke_callbacks+0x338/0x360 [ 732.379515][T10956] ? srcu_barrier+0x4e0/0x4e0 [ 732.384216][T10956] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 732.390246][T10956] ? trace_hardirqs_on+0x67/0x240 [ 732.395421][T10956] process_one_work+0x9af/0x1740 [ 732.401684][T10956] ? pwq_dec_nr_in_flight+0x320/0x320 [ 732.407072][T10956] ? lock_acquire+0x190/0x410 [ 732.411771][T10956] worker_thread+0x98/0xe40 [ 732.417350][T10956] ? trace_hardirqs_on+0x67/0x240 [ 732.422421][T10956] kthread+0x361/0x430 [ 732.426501][T10956] ? process_one_work+0x1740/0x1740 [ 732.432186][T10956] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 732.438914][T10956] ret_from_fork+0x24/0x30 [ 732.445346][T10956] Kernel Offset: disabled [ 732.449899][T10956] Rebooting in 86400 seconds..