[ 74.895723][ T27] audit: type=1400 audit(1575995798.029:38): avc: denied { watch } for pid=9755 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 75.165394][ T27] audit: type=1800 audit(1575995798.359:39): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 75.188713][ T27] audit: type=1800 audit(1575995798.359:40): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 76.127184][ T27] audit: type=1400 audit(1575995799.319:41): avc: denied { map } for pid=9839 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.17' (ECDSA) to the list of known hosts. syzkaller login: [ 82.769657][ T27] audit: type=1400 audit(1575995805.959:42): avc: denied { map } for pid=9851 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/12/10 16:36:46 parsed 1 programs [ 84.959644][ T27] audit: type=1400 audit(1575995808.149:43): avc: denied { map } for pid=9851 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22227 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/12/10 16:36:48 executed programs: 0 [ 85.820739][ T9874] IPVS: ftp: loaded support on port[0] = 21 [ 85.833713][ T9876] IPVS: ftp: loaded support on port[0] = 21 [ 85.844204][ T9873] IPVS: ftp: loaded support on port[0] = 21 [ 85.851464][ T9879] IPVS: ftp: loaded support on port[0] = 21 [ 85.861574][ T9881] IPVS: ftp: loaded support on port[0] = 21 [ 85.976966][ T9882] IPVS: ftp: loaded support on port[0] = 21 [ 86.255838][ T9873] chnl_net:caif_netlink_parms(): no params data found [ 86.273540][ T9874] chnl_net:caif_netlink_parms(): no params data found [ 86.303191][ T9879] chnl_net:caif_netlink_parms(): no params data found [ 86.361053][ T9876] chnl_net:caif_netlink_parms(): no params data found [ 86.402193][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.412005][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.420083][ T9873] device bridge_slave_0 entered promiscuous mode [ 86.452573][ T9881] chnl_net:caif_netlink_parms(): no params data found [ 86.462710][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.470709][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.478649][ T9873] device bridge_slave_1 entered promiscuous mode [ 86.494510][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.502294][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.511782][ T9874] device bridge_slave_0 entered promiscuous mode [ 86.537948][ T9882] chnl_net:caif_netlink_parms(): no params data found [ 86.549090][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.556516][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.564230][ T9874] device bridge_slave_1 entered promiscuous mode [ 86.637501][ T9876] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.644562][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.652665][ T9876] device bridge_slave_0 entered promiscuous mode [ 86.663276][ T9873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.675248][ T9873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.695238][ T9874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.710207][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.717412][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.725458][ T9879] device bridge_slave_0 entered promiscuous mode [ 86.740298][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.747484][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.755820][ T9876] device bridge_slave_1 entered promiscuous mode [ 86.764307][ T9874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.781903][ T9873] team0: Port device team_slave_0 added [ 86.789311][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.796454][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.804191][ T9879] device bridge_slave_1 entered promiscuous mode [ 86.812747][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.819922][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.827759][ T9881] device bridge_slave_0 entered promiscuous mode [ 86.841017][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.849537][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.857417][ T9881] device bridge_slave_1 entered promiscuous mode [ 86.878274][ T9873] team0: Port device team_slave_1 added [ 86.914510][ T9874] team0: Port device team_slave_0 added [ 86.929659][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.936931][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.945085][ T9882] device bridge_slave_0 entered promiscuous mode [ 86.960956][ T9876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.973232][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.983977][ T9874] team0: Port device team_slave_1 added [ 86.990827][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.998329][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.006197][ T9882] device bridge_slave_1 entered promiscuous mode [ 87.014856][ T9881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.031954][ T9876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.043616][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.071631][ T9881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.138683][ T9873] device hsr_slave_0 entered promiscuous mode [ 87.204993][ T9873] device hsr_slave_1 entered promiscuous mode [ 87.267432][ T9879] team0: Port device team_slave_0 added [ 87.301765][ T9882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.322520][ T9879] team0: Port device team_slave_1 added [ 87.335121][ T9876] team0: Port device team_slave_0 added [ 87.342716][ T9881] team0: Port device team_slave_0 added [ 87.349973][ T9882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.418545][ T9874] device hsr_slave_0 entered promiscuous mode [ 87.455204][ T9874] device hsr_slave_1 entered promiscuous mode [ 87.504801][ T9874] debugfs: Directory 'hsr0' with parent '/' already present! [ 87.513887][ T9876] team0: Port device team_slave_1 added [ 87.521435][ T9881] team0: Port device team_slave_1 added [ 87.542270][ T9882] team0: Port device team_slave_0 added [ 87.552606][ T9882] team0: Port device team_slave_1 added [ 87.638640][ T9879] device hsr_slave_0 entered promiscuous mode [ 87.685081][ T9879] device hsr_slave_1 entered promiscuous mode [ 87.714841][ T9879] debugfs: Directory 'hsr0' with parent '/' already present! [ 87.734209][ T27] audit: type=1400 audit(1575995810.919:44): avc: denied { create } for pid=9873 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 87.762291][ T27] audit: type=1400 audit(1575995810.919:45): avc: denied { write } for pid=9873 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 87.790265][ T27] audit: type=1400 audit(1575995810.919:46): avc: denied { read } for pid=9873 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 87.826895][ T9876] device hsr_slave_0 entered promiscuous mode [ 87.865098][ T9876] device hsr_slave_1 entered promiscuous mode [ 87.904879][ T9876] debugfs: Directory 'hsr0' with parent '/' already present! [ 87.933433][ T9873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.006850][ T9873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.086873][ T9882] device hsr_slave_0 entered promiscuous mode [ 88.135157][ T9882] device hsr_slave_1 entered promiscuous mode [ 88.174842][ T9882] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.218238][ T9881] device hsr_slave_0 entered promiscuous mode [ 88.255172][ T9881] device hsr_slave_1 entered promiscuous mode [ 88.294848][ T9881] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.310947][ T9874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.368950][ T9873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.463508][ T9874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.520414][ T9874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.577744][ T9873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.651936][ T9874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.700585][ T9882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.761602][ T9882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.809558][ T9882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.866223][ T9876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.936079][ T9882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.995940][ T9876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.038666][ T9876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.087427][ T9879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.126920][ T9881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.177785][ T9881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.238314][ T9881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.282209][ T9881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.338038][ T9876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.377551][ T9879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.429205][ T9879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.497971][ T9879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.762290][ T9879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.772200][ T9876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.783025][ T9881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.814140][ T9874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.826450][ T9873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.833343][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.843513][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.859990][ T9882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.869320][ T9879] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.894402][ T9876] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.902129][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.911477][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.920467][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.927713][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.937242][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.945123][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.952768][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.960888][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.969015][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.977158][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.985915][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.995945][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.009933][ T9873] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.041221][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.049699][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.060563][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.068914][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.077457][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.086429][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.095167][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.102214][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.110315][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.120042][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.128527][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.135612][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.143146][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.152107][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.161235][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.168303][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.176277][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.185023][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.193359][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.200469][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.210729][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.220353][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.229104][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.236212][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.243758][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.252405][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.262756][ T9874] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.287773][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.297355][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.309333][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.319463][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.328498][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.335626][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.343825][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.353057][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.361997][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.371030][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.379720][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.388639][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.403902][ T9882] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.428061][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.436710][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.444428][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.453506][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.462181][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.469297][ T9889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.478015][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.486814][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.495205][ T9889] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.502244][ T9889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.509900][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.519273][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.528275][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.536722][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.543764][ T9889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.551410][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.560063][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.568672][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.577353][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.585963][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.594149][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.602837][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.611903][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.620396][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.639451][ T9879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.651800][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.680811][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.689836][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.699154][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.707810][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.716702][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.725157][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.734053][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.742706][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.751600][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.760229][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.768780][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.777474][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.786178][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.808177][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.816446][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.825842][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.834258][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.843113][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.851968][ T3185] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.859104][ T3185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.867128][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.876397][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.885077][ T3185] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.892139][ T3185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.899811][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.908433][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.918046][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.925939][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.942968][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.951955][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.961473][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.971407][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.980214][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.988636][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.997800][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.010515][ T9881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.029858][ T9874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.040782][ T9874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.063093][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.072247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.080922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.090213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.098750][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.108035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.116674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.125264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.133563][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.141932][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.149448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.156936][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.165564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.174357][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.198547][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.213958][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.222576][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.231396][ T3185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.247968][ T9876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.265665][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.274312][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.284430][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.297709][ T27] audit: type=1400 audit(1575995814.489:47): avc: denied { associate } for pid=9879 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 91.326092][ T9881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.382787][ T9882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.393798][ T9882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.413588][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.421730][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.430283][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.438293][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.446286][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.454945][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.463338][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.472137][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.480738][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.489553][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.502430][ T9874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.525353][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.592764][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.603279][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.625080][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 2019/12/10 16:36:54 executed programs: 6 [ 91.625222][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.634357][ T9876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.665437][ T9873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.711297][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.741715][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.770865][ T9882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.350373][ T9954] ================================================================== [ 92.350452][ T9954] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x2b2/0x5e0 [ 92.350465][ T9954] Read of size 32 at addr ffffffff88729980 by task syz-executor.1/9954 [ 92.350469][ T9954] [ 92.350485][ T9954] CPU: 1 PID: 9954 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 92.350493][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.350498][ T9954] Call Trace: [ 92.350517][ T9954] dump_stack+0x197/0x210 [ 92.350533][ T9954] ? fbcon_get_font+0x2b2/0x5e0 [ 92.350555][ T9954] print_address_description.constprop.0.cold+0x5/0x30b [ 92.350568][ T9954] ? fbcon_get_font+0x2b2/0x5e0 [ 92.350582][ T9954] ? fbcon_get_font+0x2b2/0x5e0 [ 92.350596][ T9954] __kasan_report.cold+0x1b/0x41 [ 92.350614][ T9954] ? fbcon_get_font+0x2b2/0x5e0 [ 92.350630][ T9954] kasan_report+0x12/0x20 [ 92.350652][ T9954] check_memory_region+0x134/0x1a0 [ 92.350667][ T9954] memcpy+0x24/0x50 [ 92.350683][ T9954] fbcon_get_font+0x2b2/0x5e0 [ 92.350700][ T9954] ? display_to_var+0x7e0/0x7e0 [ 92.350717][ T9954] con_font_op+0x20b/0x1270 [ 92.350730][ T9954] ? mark_lock+0xc2/0x1220 [ 92.350749][ T9954] ? con_write+0xd0/0xd0 [ 92.350770][ T9954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.350786][ T9954] ? security_capable+0x95/0xc0 [ 92.350811][ T9954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.350827][ T9954] ? ns_capable_common+0x93/0x100 [ 92.350847][ T9954] vt_ioctl+0xd2e/0x26d0 [ 92.350864][ T9954] ? complete_change_console+0x3a0/0x3a0 [ 92.350877][ T9954] ? lock_downgrade+0x920/0x920 [ 92.350897][ T9954] ? rwlock_bug.part.0+0x90/0x90 [ 92.350913][ T9954] ? tomoyo_path_number_perm+0x214/0x520 [ 92.350927][ T9954] ? find_held_lock+0x35/0x130 [ 92.350944][ T9954] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 92.350959][ T9954] ? tty_jobctrl_ioctl+0x50/0xd40 [ 92.350974][ T9954] ? complete_change_console+0x3a0/0x3a0 [ 92.350998][ T9954] tty_ioctl+0xa37/0x14f0 [ 92.351015][ T9954] ? tty_vhangup+0x30/0x30 [ 92.351069][ T9954] ? tomoyo_path_number_perm+0x454/0x520 [ 92.351088][ T9954] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 92.351101][ T9954] ? tomoyo_path_number_perm+0x25e/0x520 [ 92.351119][ T9954] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 92.351147][ T9954] ? ___might_sleep+0x163/0x2c0 [ 92.351168][ T9954] ? tty_vhangup+0x30/0x30 [ 92.351191][ T9954] do_vfs_ioctl+0x977/0x14e0 [ 92.351210][ T9954] ? compat_ioctl_preallocate+0x220/0x220 [ 92.351224][ T9954] ? selinux_file_mprotect+0x620/0x620 [ 92.351235][ T9954] ? __fget+0x37f/0x550 [ 92.351256][ T9954] ? ksys_dup3+0x3e0/0x3e0 [ 92.351272][ T9954] ? ns_to_kernel_old_timeval+0x100/0x100 [ 92.351291][ T9954] ? tomoyo_file_ioctl+0x23/0x30 [ 92.351306][ T9954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.351317][ T9954] ? security_file_ioctl+0x8d/0xc0 [ 92.351333][ T9954] ksys_ioctl+0xab/0xd0 [ 92.351351][ T9954] __x64_sys_ioctl+0x73/0xb0 [ 92.351370][ T9954] do_syscall_64+0xfa/0x790 [ 92.351389][ T9954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.351400][ T9954] RIP: 0033:0x45a6f9 [ 92.351414][ T9954] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 92.351422][ T9954] RSP: 002b:00007fa1b5f92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.351460][ T9954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 92.351468][ T9954] RDX: 0000000000713000 RSI: 0000000000004b60 RDI: 0000000000000004 [ 92.351475][ T9954] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 92.351483][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1b5f936d4 [ 92.351492][ T9954] R13: 00000000004c6d87 R14: 00000000004dd3e0 R15: 00000000ffffffff [ 92.351510][ T9954] [ 92.351514][ T9954] The buggy address belongs to the variable: [ 92.351525][ T9954] fontdata_8x16+0x1000/0x1120 [ 92.351529][ T9954] [ 92.351532][ T9954] Memory state around the buggy address: [ 92.351543][ T9954] ffffffff88729880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.351554][ T9954] ffffffff88729900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.351564][ T9954] >ffffffff88729980: fa fa fa fa 06 fa fa fa fa fa fa fa 05 fa fa fa [ 92.351570][ T9954] ^ [ 92.351580][ T9954] ffffffff88729a00: fa fa fa fa 06 fa fa fa fa fa fa fa 00 00 03 fa [ 92.351591][ T9954] ffffffff88729a80: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.351596][ T9954] ================================================================== [ 92.351602][ T9954] Disabling lock debugging due to kernel taint [ 92.364871][ T9954] Kernel panic - not syncing: panic_on_warn set ... [ 92.364889][ T9954] CPU: 1 PID: 9954 Comm: syz-executor.1 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 92.364896][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.364900][ T9954] Call Trace: [ 92.364920][ T9954] dump_stack+0x197/0x210 [ 92.364936][ T9954] panic+0x2e3/0x75c [ 92.364946][ T9954] ? add_taint.cold+0x16/0x16 [ 92.364962][ T9954] ? fbcon_get_font+0x2b2/0x5e0 [ 92.364975][ T9954] ? preempt_schedule+0x4b/0x60 [ 92.364990][ T9954] ? ___preempt_schedule+0x16/0x18 [ 92.365006][ T9954] ? trace_hardirqs_on+0x5e/0x240 [ 92.365021][ T9954] ? fbcon_get_font+0x2b2/0x5e0 [ 92.365034][ T9954] end_report+0x47/0x4f [ 92.365047][ T9954] ? fbcon_get_font+0x2b2/0x5e0 [ 92.365059][ T9954] __kasan_report.cold+0xe/0x41 [ 92.365073][ T9954] ? fbcon_get_font+0x2b2/0x5e0 [ 92.365086][ T9954] kasan_report+0x12/0x20 [ 92.365099][ T9954] check_memory_region+0x134/0x1a0 [ 92.365110][ T9954] memcpy+0x24/0x50 [ 92.365124][ T9954] fbcon_get_font+0x2b2/0x5e0 [ 92.365140][ T9954] ? display_to_var+0x7e0/0x7e0 [ 92.365155][ T9954] con_font_op+0x20b/0x1270 [ 92.365166][ T9954] ? mark_lock+0xc2/0x1220 [ 92.365181][ T9954] ? con_write+0xd0/0xd0 [ 92.365198][ T9954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.365212][ T9954] ? security_capable+0x95/0xc0 [ 92.365227][ T9954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.365241][ T9954] ? ns_capable_common+0x93/0x100 [ 92.365257][ T9954] vt_ioctl+0xd2e/0x26d0 [ 92.365273][ T9954] ? complete_change_console+0x3a0/0x3a0 [ 92.365284][ T9954] ? lock_downgrade+0x920/0x920 [ 92.365298][ T9954] ? rwlock_bug.part.0+0x90/0x90 [ 92.365312][ T9954] ? tomoyo_path_number_perm+0x214/0x520 [ 92.365323][ T9954] ? find_held_lock+0x35/0x130 [ 92.365338][ T9954] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 92.365351][ T9954] ? tty_jobctrl_ioctl+0x50/0xd40 [ 92.365363][ T9954] ? complete_change_console+0x3a0/0x3a0 [ 92.365377][ T9954] tty_ioctl+0xa37/0x14f0 [ 92.365391][ T9954] ? tty_vhangup+0x30/0x30 [ 92.365403][ T9954] ? tomoyo_path_number_perm+0x454/0x520 [ 92.365425][ T9954] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 92.365442][ T9954] ? tomoyo_path_number_perm+0x25e/0x520 [ 92.365456][ T9954] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 92.365474][ T9954] ? ___might_sleep+0x163/0x2c0 [ 92.365490][ T9954] ? tty_vhangup+0x30/0x30 [ 92.365504][ T9954] do_vfs_ioctl+0x977/0x14e0 [ 92.365523][ T9954] ? compat_ioctl_preallocate+0x220/0x220 [ 92.365537][ T9954] ? selinux_file_mprotect+0x620/0x620 [ 92.365548][ T9954] ? __fget+0x37f/0x550 [ 92.365562][ T9954] ? ksys_dup3+0x3e0/0x3e0 [ 92.365576][ T9954] ? ns_to_kernel_old_timeval+0x100/0x100 [ 92.365592][ T9954] ? tomoyo_file_ioctl+0x23/0x30 [ 92.365605][ T9954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.365617][ T9954] ? security_file_ioctl+0x8d/0xc0 [ 92.365629][ T9954] ksys_ioctl+0xab/0xd0 [ 92.365643][ T9954] __x64_sys_ioctl+0x73/0xb0 [ 92.365657][ T9954] do_syscall_64+0xfa/0x790 [ 92.365673][ T9954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.365682][ T9954] RIP: 0033:0x45a6f9 [ 92.365696][ T9954] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 92.365703][ T9954] RSP: 002b:00007fa1b5f92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.365715][ T9954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 92.365723][ T9954] RDX: 0000000000713000 RSI: 0000000000004b60 RDI: 0000000000000004 [ 92.365740][ T9954] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 92.365747][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1b5f936d4 [ 92.365758][ T9954] R13: 00000000004c6d87 R14: 00000000004dd3e0 R15: 00000000ffffffff [ 92.367137][ T9954] Kernel Offset: disabled