Starting mcstransd: [ 88.105783][ T27] audit: type=1400 audit(1582858455.995:37): avc: denied { watch } for pid=10783 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 91.590053][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 91.590068][ T27] audit: type=1400 audit(1582858459.475:41): avc: denied { map } for pid=10873 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. [ 98.539128][ T27] audit: type=1400 audit(1582858466.425:42): avc: denied { map } for pid=10885 comm="syz-executor679" path="/root/syz-executor679098143" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 98.568404][T10886] IPVS: ftp: loaded support on port[0] = 21 [ 98.596406][ T27] audit: type=1400 audit(1582858466.485:43): avc: denied { create } for pid=10886 comm="syz-executor679" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 98.621910][ T27] audit: type=1400 audit(1582858466.485:44): avc: denied { write } for pid=10886 comm="syz-executor679" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 98.647710][ T27] audit: type=1400 audit(1582858466.485:45): avc: denied { read } for pid=10886 comm="syz-executor679" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 98.682504][T10886] chnl_net:caif_netlink_parms(): no params data found [ 98.720952][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.729528][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.737964][T10886] device bridge_slave_0 entered promiscuous mode [ 98.747329][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.755215][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.763370][T10886] device bridge_slave_1 entered promiscuous mode [ 98.782028][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.794457][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.815198][T10886] team0: Port device team_slave_0 added [ 98.823452][T10886] team0: Port device team_slave_1 added [ 98.839039][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.846369][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.872291][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.885947][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.892954][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.918889][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.993604][T10886] device hsr_slave_0 entered promiscuous mode [ 99.031496][T10886] device hsr_slave_1 entered promiscuous mode [ 99.140781][T10886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.184526][T10886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.243510][T10886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.283711][T10886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.379944][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.388098][T10886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.396488][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.404427][T10886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.459256][T10886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.475921][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.487483][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.496009][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.504293][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 99.519061][T10886] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.531420][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.539893][ T2814] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.547058][ T2814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.560130][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.570114][ T2769] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.577291][ T2769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.599648][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.608670][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.620717][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.640737][T10886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.653593][T10886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.666309][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.675206][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.683900][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.711797][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.719835][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.730687][T10886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.757494][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.767000][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.791185][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.799388][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.808942][T10886] device veth0_vlan entered promiscuous mode [ 99.816450][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.825322][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.842533][T10886] device veth1_vlan entered promiscuous mode [ 99.868583][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.877966][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.886391][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.895181][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.907894][T10886] device veth0_macvtap entered promiscuous mode [ 99.918950][T10886] device veth1_macvtap entered promiscuous mode [ 99.939456][T10886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.947144][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.957734][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.966903][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.975584][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.992525][T10886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.002283][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.010900][ T2814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 100.177697][T10886] BUG: unable to handle page fault for address: ffffed1018f0bb07 [ 100.185434][T10886] #PF: supervisor read access in kernel mode [ 100.191399][T10886] #PF: error_code(0x0000) - not-present page [ 100.197399][T10886] PGD 21ffef067 P4D 21ffef067 PUD 12fff6067 PMD 0 [ 100.203886][T10886] Oops: 0000 [#1] PREEMPT SMP KASAN [ 100.209078][T10886] CPU: 1 PID: 10886 Comm: syz-executor679 Not tainted 5.6.0-rc3-syzkaller #0 [ 100.217866][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.227960][T10886] RIP: 0010:ethnl_update_bitset32.part.0+0x8be/0x1820 [ 100.234714][T10886] Code: 45 85 e4 0f 84 aa 03 00 00 e8 6e 31 05 fb 48 8b 85 c8 fe ff ff 4e 8d 2c a8 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c [ 100.255132][T10886] RSP: 0018:ffffc90002047248 EFLAGS: 00010a03 [ 100.261184][T10886] RAX: dffffc0000000000 RBX: ffff8880a785d83c RCX: ffffffff867055d4 [ 100.269149][T10886] RDX: 1ffff11018f0bb07 RSI: ffffffff867055e2 RDI: 0000000000000005 [ 100.277113][T10886] RBP: ffffc900020473b0 R08: ffff8880a2cc2440 R09: ffffc90002047318 [ 100.285152][T10886] R10: fffff52000408e68 R11: ffffc90002047347 R12: 0000000000000010 [ 100.293310][T10886] R13: ffff8880c785d83c R14: ffff8880a785d84c R15: ffffc90002047388 [ 100.301374][T10886] FS: 0000000001a7c880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 100.310310][T10886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.316885][T10886] CR2: ffffed1018f0bb07 CR3: 00000000972a6000 CR4: 00000000001406e0 [ 100.325027][T10886] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.333031][T10886] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.341005][T10886] Call Trace: [ 100.344327][T10886] ? __mutex_lock+0x458/0x13c0 [ 100.349405][T10886] ? lock_downgrade+0x920/0x920 [ 100.354254][T10886] ? ethnl_bitmap32_clear+0x390/0x390 [ 100.359626][T10886] ? mutex_trylock+0x2d0/0x2d0 [ 100.364420][T10886] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 100.370660][T10886] ? ethnl_default_notify+0x6b0/0x6b0 [ 100.376026][T10886] ? sock_sendmsg+0xd7/0x130 [ 100.380607][T10886] ethnl_update_bitset+0x4d/0x67 [ 100.385531][T10886] ethnl_set_linkmodes+0x461/0xc30 [ 100.390692][T10886] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 100.396320][T10886] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 100.401946][T10886] ? linkmodes_prepare_data+0x2a0/0x2a0 [ 100.407493][T10886] ? kfree_skbmem+0xfb/0x1c0 [ 100.412078][T10886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.418392][T10886] ? security_capable+0x95/0xc0 [ 100.423251][T10886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.429488][T10886] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x300 [ 100.435844][T10886] genl_rcv_msg+0x67d/0xea0 [ 100.440331][T10886] ? genl_rcv_msg+0x67d/0xea0 [ 100.445002][T10886] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 100.451322][T10886] ? __kasan_check_read+0x11/0x20 [ 100.456349][T10886] ? find_held_lock+0x35/0x130 [ 100.461130][T10886] netlink_rcv_skb+0x177/0x450 [ 100.465907][T10886] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 100.472238][T10886] ? netlink_ack+0xb50/0xb50 [ 100.476906][T10886] ? __kasan_check_write+0x14/0x20 [ 100.482022][T10886] ? netlink_deliver_tap+0x248/0xbf0 [ 100.487320][T10886] genl_rcv+0x29/0x40 [ 100.491293][T10886] netlink_unicast+0x59e/0x7e0 [ 100.496047][T10886] ? netlink_attachskb+0x870/0x870 [ 100.501169][T10886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.507406][T10886] netlink_sendmsg+0x91c/0xea0 [ 100.512167][T10886] ? netlink_unicast+0x7e0/0x7e0 [ 100.517090][T10886] ? tomoyo_socket_sendmsg+0x26/0x30 [ 100.522416][T10886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.528646][T10886] ? security_socket_sendmsg+0x8d/0xc0 [ 100.534110][T10886] ? netlink_unicast+0x7e0/0x7e0 [ 100.539031][T10886] sock_sendmsg+0xd7/0x130 [ 100.543433][T10886] ____sys_sendmsg+0x753/0x880 [ 100.548189][T10886] ? kernel_sendmsg+0x50/0x50 [ 100.552857][T10886] ? debug_object_active_state+0x28a/0x350 [ 100.558649][T10886] ? find_held_lock+0x35/0x130 [ 100.563443][T10886] ___sys_sendmsg+0x100/0x170 [ 100.568122][T10886] ? sendmsg_copy_msghdr+0x70/0x70 [ 100.573243][T10886] ? lockdep_hardirqs_on+0x421/0x5e0 [ 100.578522][T10886] ? __kasan_check_read+0x11/0x20 [ 100.583556][T10886] ? mark_lock+0xc2/0x1220 [ 100.587974][T10886] ? __kasan_check_read+0x11/0x20 [ 100.592992][T10886] ? __lock_acquire+0x16f2/0x4a00 [ 100.598004][T10886] ? debug_object_deactivate+0x320/0x320 [ 100.603628][T10886] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 100.609786][T10886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.616016][T10886] ? __fget_light+0x1ad/0x270 [ 100.620682][T10886] ? __fdget+0x1b/0x20 [ 100.624753][T10886] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 100.630981][T10886] __sys_sendmsg+0x105/0x1d0 [ 100.635576][T10886] ? __sys_sendmsg_sock+0xc0/0xc0 [ 100.640593][T10886] ? lockdep_hardirqs_on+0x421/0x5e0 [ 100.645872][T10886] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 100.651315][T10886] ? do_syscall_64+0x26/0x790 [ 100.655995][T10886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.662079][T10886] ? do_syscall_64+0x26/0x790 [ 100.666756][T10886] __x64_sys_sendmsg+0x78/0xb0 [ 100.671512][T10886] do_syscall_64+0xfa/0x790 [ 100.676121][T10886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.682000][T10886] RIP: 0033:0x447b09 [ 100.685885][T10886] Code: 45 02 00 85 c0 b8 00 00 00 00 48 0f 44 c3 5b c3 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b d2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 100.705495][T10886] RSP: 002b:00007fffbc53a818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.713897][T10886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000447b09 [ 100.721870][T10886] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 100.729842][T10886] RBP: 00007fffbc53a860 R08: 0000000000000000 R09: 00000000bb1414ac [ 100.737818][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 100.745796][T10886] R13: 0000000000405250 R14: 0000000000000000 R15: 0000000000000000 [ 100.753794][T10886] Modules linked in: [ 100.757697][T10886] CR2: ffffed1018f0bb07 [ 100.761849][T10886] ---[ end trace 19d0f474ee335655 ]--- [ 100.767328][T10886] RIP: 0010:ethnl_update_bitset32.part.0+0x8be/0x1820 [ 100.774087][T10886] Code: 45 85 e4 0f 84 aa 03 00 00 e8 6e 31 05 fb 48 8b 85 c8 fe ff ff 4e 8d 2c a8 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c [ 100.793697][T10886] RSP: 0018:ffffc90002047248 EFLAGS: 00010a03 [ 100.799774][T10886] RAX: dffffc0000000000 RBX: ffff8880a785d83c RCX: ffffffff867055d4 [ 100.810092][T10886] RDX: 1ffff11018f0bb07 RSI: ffffffff867055e2 RDI: 0000000000000005 [ 100.818101][T10886] RBP: ffffc900020473b0 R08: ffff8880a2cc2440 R09: ffffc90002047318 [ 100.826082][T10886] R10: fffff52000408e68 R11: ffffc90002047347 R12: 0000000000000010 [ 100.834055][T10886] R13: ffff8880c785d83c R14: ffff8880a785d84c R15: ffffc90002047388 [ 100.842030][T10886] FS: 0000000001a7c880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 100.850956][T10886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.857531][T10886] CR2: ffffed1018f0bb07 CR3: 00000000972a6000 CR4: 00000000001406e0 [ 100.865499][T10886] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.873458][T10886] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.881427][T10886] Kernel panic - not syncing: Fatal exception [ 100.888770][T10886] Kernel Offset: disabled [ 100.893111][T10886] Rebooting in 86400 seconds..