[ 69.771723][ T25] audit: type=1400 audit(1575169391.790:37): avc: denied { watch } for pid=9558 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 69.810237][ T25] audit: type=1400 audit(1575169391.790:38): avc: denied { watch } for pid=9558 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c[ 70.018489][ T25] audit: type=1800 audit(1575169392.040:39): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 . [ 70.040633][ T25] audit: type=1800 audit(1575169392.040:40): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 74.754988][ T25] audit: type=1400 audit(1575169396.780:41): avc: denied { map } for pid=9639 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.104' (ECDSA) to the list of known hosts. [ 81.350200][ T25] audit: type=1400 audit(1575169403.370:42): avc: denied { map } for pid=9651 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/12/01 03:03:23 parsed 1 programs [ 82.873590][ T25] audit: type=1400 audit(1575169404.900:43): avc: denied { map } for pid=9651 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=19195 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/12/01 03:03:25 executed programs: 0 [ 83.717538][ T9677] IPVS: ftp: loaded support on port[0] = 21 [ 83.718303][ T9680] IPVS: ftp: loaded support on port[0] = 21 [ 83.736505][ T9673] IPVS: ftp: loaded support on port[0] = 21 [ 83.763204][ T9678] IPVS: ftp: loaded support on port[0] = 21 [ 83.774345][ T9672] IPVS: ftp: loaded support on port[0] = 21 [ 83.783256][ T9681] IPVS: ftp: loaded support on port[0] = 21 [ 84.043451][ T9678] chnl_net:caif_netlink_parms(): no params data found [ 84.119049][ T9677] chnl_net:caif_netlink_parms(): no params data found [ 84.148450][ T9680] chnl_net:caif_netlink_parms(): no params data found [ 84.175225][ T9678] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.183191][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.191088][ T9678] device bridge_slave_0 entered promiscuous mode [ 84.220238][ T9672] chnl_net:caif_netlink_parms(): no params data found [ 84.230651][ T9678] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.238585][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.246588][ T9678] device bridge_slave_1 entered promiscuous mode [ 84.304816][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.312649][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.320416][ T9677] device bridge_slave_0 entered promiscuous mode [ 84.360616][ T9678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.370161][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.379785][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.387984][ T9677] device bridge_slave_1 entered promiscuous mode [ 84.395701][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.402986][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.410650][ T9680] device bridge_slave_0 entered promiscuous mode [ 84.445457][ T9678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.460560][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.468132][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.476879][ T9680] device bridge_slave_1 entered promiscuous mode [ 84.500040][ T9681] chnl_net:caif_netlink_parms(): no params data found [ 84.528349][ T9673] chnl_net:caif_netlink_parms(): no params data found [ 84.536973][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.544361][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.552449][ T9672] device bridge_slave_0 entered promiscuous mode [ 84.565286][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.581363][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.592377][ T9680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.605341][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.612557][ T9672] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.620270][ T9672] device bridge_slave_1 entered promiscuous mode [ 84.639119][ T9678] team0: Port device team_slave_0 added [ 84.651719][ T9680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.684156][ T9678] team0: Port device team_slave_1 added [ 84.696438][ T9672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.720494][ T9672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.732567][ T9677] team0: Port device team_slave_0 added [ 84.745651][ T9680] team0: Port device team_slave_0 added [ 84.777678][ T9677] team0: Port device team_slave_1 added [ 84.786166][ T9680] team0: Port device team_slave_1 added [ 84.798515][ T9681] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.805925][ T9681] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.814260][ T9681] device bridge_slave_0 entered promiscuous mode [ 84.821695][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.828786][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.837642][ T9673] device bridge_slave_0 entered promiscuous mode [ 84.851044][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.858861][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.867223][ T9673] device bridge_slave_1 entered promiscuous mode [ 84.890480][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.907779][ T9681] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.915707][ T9681] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.923930][ T9681] device bridge_slave_1 entered promiscuous mode [ 84.932781][ T9672] team0: Port device team_slave_0 added [ 85.003844][ T9678] device hsr_slave_0 entered promiscuous mode [ 85.065279][ T9678] device hsr_slave_1 entered promiscuous mode [ 85.123785][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.139365][ T9672] team0: Port device team_slave_1 added [ 85.205023][ T9677] device hsr_slave_0 entered promiscuous mode [ 85.242001][ T9677] device hsr_slave_1 entered promiscuous mode [ 85.281743][ T9677] debugfs: Directory 'hsr0' with parent '/' already present! [ 85.318892][ T9681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.364953][ T9680] device hsr_slave_0 entered promiscuous mode [ 85.402007][ T9680] device hsr_slave_1 entered promiscuous mode [ 85.441675][ T9680] debugfs: Directory 'hsr0' with parent '/' already present! [ 85.460418][ T9673] team0: Port device team_slave_0 added [ 85.523670][ T9672] device hsr_slave_0 entered promiscuous mode [ 85.572082][ T9672] device hsr_slave_1 entered promiscuous mode [ 85.611685][ T9672] debugfs: Directory 'hsr0' with parent '/' already present! [ 85.620879][ T9681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.644490][ T9673] team0: Port device team_slave_1 added [ 85.678949][ T9681] team0: Port device team_slave_0 added [ 85.687993][ T9681] team0: Port device team_slave_1 added [ 85.726681][ T25] audit: type=1400 audit(1575169407.750:44): avc: denied { create } for pid=9678 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 85.764215][ T25] audit: type=1400 audit(1575169407.780:45): avc: denied { write } for pid=9678 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 85.789772][ T25] audit: type=1400 audit(1575169407.780:46): avc: denied { read } for pid=9678 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 85.836292][ T9678] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.888350][ T9678] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.994931][ T9673] device hsr_slave_0 entered promiscuous mode [ 86.041894][ T9673] device hsr_slave_1 entered promiscuous mode [ 86.101716][ T9673] debugfs: Directory 'hsr0' with parent '/' already present! [ 86.109374][ T9680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.159366][ T9678] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.255601][ T9681] device hsr_slave_0 entered promiscuous mode [ 86.311986][ T9681] device hsr_slave_1 entered promiscuous mode [ 86.371681][ T9681] debugfs: Directory 'hsr0' with parent '/' already present! [ 86.379451][ T9677] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.444784][ T9680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.483801][ T9672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.523828][ T9672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.573906][ T9678] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.624344][ T9677] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.667107][ T9677] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.723153][ T9680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.774285][ T9680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.813184][ T9672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.868637][ T9672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.930866][ T9677] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.007412][ T9673] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.066433][ T9673] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.129856][ T9673] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.205102][ T9673] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.250114][ T9681] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.326209][ T9681] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.383533][ T9681] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.435096][ T9681] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.613836][ T9680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.656244][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.674410][ T9678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.687817][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.696613][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.727977][ T9680] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.744992][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.753916][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.761796][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.770298][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.778878][ T2705] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.786095][ T2705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.794342][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.803980][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.812454][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.819499][ T2705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.830430][ T9678] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.842913][ T9672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.862314][ T9672] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.882125][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.889455][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.898117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.907192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.915827][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.925052][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.933595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.943447][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.973003][ T9681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.981836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.990511][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.999687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.008706][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.016146][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.023921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.033084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.041433][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.048545][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.056173][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.065204][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.073570][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.080916][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.088926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.097512][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.106021][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.113130][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.120674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.129351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.138719][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.147339][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.155908][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.164897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.172795][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.182137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.190100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.198087][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.219188][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.228625][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.237612][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.247594][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.269785][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.293026][ T9681] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.308996][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.318917][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.328263][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.337767][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.346355][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.354875][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.364323][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.372788][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.380438][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.388282][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.396767][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.405404][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.414415][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.423261][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.430396][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.440580][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.448430][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.456828][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.466159][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.477179][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.508143][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.517517][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.526691][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.537314][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.546011][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.554939][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.582125][ T9672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.594472][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.613063][ T9673] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.622848][ T9678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.637474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.646970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.655812][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.662937][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.670443][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.679473][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.688328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.697140][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.706227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.715139][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.723916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.732975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.741340][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.748564][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.756503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.764585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.778100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.786624][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.795636][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.804857][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.814022][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.821056][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.829201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.837895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.869794][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.878879][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.888394][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.895531][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.905279][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.914565][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.923452][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.930589][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.938335][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.947040][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.955914][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.997754][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.005542][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.013600][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.022873][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.031121][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.040390][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.049276][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.058092][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.066550][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.075444][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.084231][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.092985][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.103492][ T9678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.110634][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.125479][ T9680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.145344][ T9677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.159897][ T9677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.175005][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.184736][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.193517][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.200970][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.210837][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.219456][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.231162][ T9672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.253200][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.293192][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.303557][ T25] audit: type=1400 audit(1575169411.330:47): avc: denied { associate } for pid=9678 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 89.320027][ T9673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.349844][ T9673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.370081][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.386116][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.400961][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.409806][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.421136][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.436003][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.444647][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.452900][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.461132][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.469752][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.478996][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.487330][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.538163][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.549476][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.557242][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.565325][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.582920][ T9700] input: s as /devices/virtual/input/input5 [ 89.590219][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.607275][ T9681] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/01 03:03:31 executed programs: 6 [ 89.758562][ T9715] input: s as /devices/virtual/input/input6 [ 89.871439][ T9723] input: s as /devices/virtual/input/input8 [ 89.901276][ T9729] input: s as /devices/virtual/input/input9 [ 89.934333][ T9730] input: s as /devices/virtual/input/input10 [ 89.941202][ T9724] input: s as /devices/virtual/input/input7 [ 90.171975][ T9715] input: s as /devices/virtual/input/input11 [ 90.239247][ T9756] input: s as /devices/virtual/input/input12 [ 90.298432][ T9740] input: s as /devices/virtual/input/input14 [ 90.329769][ T9768] input: s as /devices/virtual/input/input15 [ 90.406026][ T9774] input: s as /devices/virtual/input/input16 [ 90.526212][ T9751] input: s as /devices/virtual/input/input18 [ 90.556471][ T9784] input: s as /devices/virtual/input/input19 [ 90.595529][ T9783] input: s as /devices/virtual/input/input17 [ 90.807261][ T9786] input: s as /devices/virtual/input/input22 [ 90.821852][ T9802] input: s as /devices/virtual/input/input23 [ 90.868570][ T9808] input: s as /devices/virtual/input/input24 [ 90.876387][ T9809] input: s as /devices/virtual/input/input25 [ 90.893291][ T9811] input: s as /devices/virtual/input/input26 [ 91.019182][ T9825] input: s as /devices/virtual/input/input28 [ 91.064861][ T9811] input: s as /devices/virtual/input/input29 [ 91.113376][ T9831] input: s as /devices/virtual/input/input30 [ 91.151270][ T9802] input: s as /devices/virtual/input/input31 [ 91.325052][ T9851] input: s as /devices/virtual/input/input35 [ 91.364444][ T9857] input: s as /devices/virtual/input/input37 [ 91.394302][ T9860] input: s as /devices/virtual/input/input38 [ 91.466865][ T9866] input: s as /devices/virtual/input/input39 [ 91.722866][ T9857] input: s as /devices/virtual/input/input41 [ 91.763820][ T9895] input: s as /devices/virtual/input/input42 [ 91.817998][ T9896] input: s as /devices/virtual/input/input43 [ 91.824506][ T9897] input: s as /devices/virtual/input/input44 [ 91.864792][ T9906] input: s as /devices/virtual/input/input46 [ 91.969325][ T9916] input: s as /devices/virtual/input/input47 [ 91.994289][ T9901] input: s as /devices/virtual/input/input48 [ 92.004004][ T9917] input: s as /devices/virtual/input/input49 [ 92.079719][ T9889] input: s as /devices/virtual/input/input50 [ 92.114193][ T9885] input: s as /devices/virtual/input/input51 [ 92.435937][ T9953] input: s as /devices/virtual/input/input55 [ 92.452295][ T9954] input: s as /devices/virtual/input/input56 [ 92.459103][ T9955] input: s as /devices/virtual/input/input57 [ 92.466998][ T9956] input: s as /devices/virtual/input/input58 [ 92.475550][ T9957] input: s as /devices/virtual/input/input59 [ 92.484186][ T9958] input: s as /devices/virtual/input/input60 [ 92.699548][ T9953] input: s as /devices/virtual/input/input61 [ 92.799409][ T9956] input: s as /devices/virtual/input/input62 [ 92.871855][ T9994] input: s as /devices/virtual/input/input64 [ 92.886939][ T9996] input: s as /devices/virtual/input/input66 [ 93.010035][T10009] input: s as /devices/virtual/input/input67 [ 93.028165][T10010] input: s as /devices/virtual/input/input69 [ 93.044488][T10012] input: s as /devices/virtual/input/input68 [ 93.197887][T10024] input: s as /devices/virtual/input/input72 [ 93.285462][T10016] input: s as /devices/virtual/input/input73 [ 93.295301][T10033] input: s as /devices/virtual/input/input74 [ 93.323081][T10031] input: s as /devices/virtual/input/input75 [ 93.340590][T10024] input: s as /devices/virtual/input/input76 [ 93.402750][T10042] input: s as /devices/virtual/input/input77 [ 93.418794][T10044] input: s as /devices/virtual/input/input78 [ 93.574856][T10051] input: s as /devices/virtual/input/input80 [ 93.583640][T10055] input: s as /devices/virtual/input/input81 [ 93.655059][T10064] input: s as /devices/virtual/input/input83 [ 93.672010][T10048] input: s as /devices/virtual/input/input84 [ 93.701453][T10067] input: s as /devices/virtual/input/input85 [ 93.754511][T10055] input: s as /devices/virtual/input/input86 [ 93.831141][T10082] input: s as /devices/virtual/input/input88 [ 93.949696][T10067] input: s as /devices/virtual/input/input90 [ 93.964506][T10093] input: s as /devices/virtual/input/input91 [ 93.996788][T10095] input: s as /devices/virtual/input/input93 [ 94.054625][T10094] input: s as /devices/virtual/input/input92 [ 94.082262][T10104] input: s as /devices/virtual/input/input94 [ 94.173609][T10111] input: s as /devices/virtual/input/input95 [ 94.192721][T10098] input: s as /devices/virtual/input/input96 [ 94.254333][T10082] input: s as /devices/virtual/input/input97 [ 94.408848][T10134] input: s as /devices/virtual/input/input98 [ 94.417199][T10112] input: s as /devices/virtual/input/input99 [ 94.449691][T10116] input: s as /devices/virtual/input/input100 [ 94.458825][T10140] input: s as /devices/virtual/input/input101 [ 94.499142][T10141] input: s as /devices/virtual/input/input102 [ 94.619138][T10156] input: s as /devices/virtual/input/input103 [ 94.707453][T10163] input: s as /devices/virtual/input/input104 2019/12/01 03:03:36 executed programs: 59 [ 94.777746][T10164] input: s as /devices/virtual/input/input105 [ 94.931921][T10172] input: s as /devices/virtual/input/input110 [ 94.993289][T10177] input: s as /devices/virtual/input/input111 [ 95.019895][T10183] input: s as /devices/virtual/input/input112 [ 95.035844][T10182] input: s as /devices/virtual/input/input113 [ 95.114421][T10189] input: s as /devices/virtual/input/input115 [ 95.123011][T10177] input: s as /devices/virtual/input/input116 [ 95.133611][T10179] input: s as /devices/virtual/input/input117 [ 95.205074][T10202] input: s as /devices/virtual/input/input118 [ 95.263507][T10210] input: s as /devices/virtual/input/input120 [ 95.308275][T10211] input: s as /devices/virtual/input/input121 [ 95.420341][T10202] input: s as /devices/virtual/input/input122 [ 95.433153][T10203] ------------[ cut here ]------------ [ 95.439541][T10203] refcount_t: addition on 0; use-after-free. [ 95.445931][T10203] WARNING: CPU: 1 PID: 10203 at lib/refcount.c:25 refcount_warn_saturate+0x174/0x1f0 [ 95.456148][T10203] Kernel panic - not syncing: panic_on_warn set ... [ 95.463666][T10203] CPU: 1 PID: 10203 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 95.472315][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.483296][T10203] Call Trace: [ 95.486593][T10203] dump_stack+0x197/0x210 [ 95.491229][T10203] ? refcount_warn_saturate+0x90/0x1f0 [ 95.496812][T10203] panic+0x2e3/0x75c [ 95.500965][T10203] ? add_taint.cold+0x16/0x16 [ 95.505822][T10203] ? __kasan_check_write+0x14/0x20 [ 95.511269][T10203] ? __warn.cold+0x14/0x3e [ 95.516087][T10203] ? __warn+0xd9/0x1cf [ 95.520443][T10203] ? refcount_warn_saturate+0x174/0x1f0 [ 95.526372][T10203] __warn.cold+0x2f/0x3e [ 95.530817][T10203] ? refcount_warn_saturate+0x174/0x1f0 [ 95.536681][T10203] report_bug+0x289/0x300 [ 95.541011][T10203] do_error_trap+0x11b/0x200 [ 95.545663][T10203] do_invalid_op+0x37/0x50 [ 95.550348][T10203] ? refcount_warn_saturate+0x174/0x1f0 [ 95.556119][T10203] invalid_op+0x23/0x30 [ 95.560397][T10203] RIP: 0010:refcount_warn_saturate+0x174/0x1f0 [ 95.566719][T10203] Code: 06 31 ff 89 de e8 9c 0a e7 fd 84 db 0f 85 33 ff ff ff e8 4f 09 e7 fd 48 c7 c7 40 6f 4f 88 c6 05 c9 b8 a4 06 01 e8 bb bd b7 fd <0f> 0b e9 14 ff ff ff e8 30 09 e7 fd 0f b6 1d ae b8 a4 06 31 ff 89 [ 95.587545][T10203] RSP: 0018:ffff88807fa8f8a8 EFLAGS: 00010286 [ 95.595029][T10203] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 95.603436][T10203] RDX: 0000000000000000 RSI: ffffffff815e4316 RDI: ffffed100ff51f07 [ 95.611628][T10203] RBP: ffff88807fa8f8b8 R08: ffff88807f87e140 R09: fffffbfff15d2fa9 [ 95.620010][T10203] R10: fffffbfff15d2fa8 R11: ffffffff8ae97d47 R12: 0000000000000002 [ 95.628299][T10203] R13: ffff8880a7871660 R14: ffff888089b7aa40 R15: ffff888099447f28 [ 95.636455][T10203] ? vprintk_func+0x86/0x189 [ 95.641790][T10203] ? refcount_warn_saturate+0x174/0x1f0 [ 95.647612][T10203] kobject_get+0x134/0x150 [ 95.652477][T10203] cdev_get+0x60/0xb0 [ 95.657007][T10203] chrdev_open+0xb0/0x6b0 [ 95.661597][T10203] ? cdev_put.part.0+0x50/0x50 [ 95.666499][T10203] ? security_file_open+0x87/0x300 [ 95.672719][T10203] do_dentry_open+0x4e6/0x1380 [ 95.678700][T10203] ? __kasan_check_read+0x11/0x20 [ 95.683864][T10203] ? cdev_put.part.0+0x50/0x50 [ 95.688737][T10203] ? chown_common+0x5c0/0x5c0 [ 95.693493][T10203] ? inode_permission+0xb4/0x520 [ 95.698519][T10203] vfs_open+0xa0/0xd0 [ 95.702666][T10203] path_openat+0x10e4/0x46d0 [ 95.707384][T10203] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 95.713390][T10203] ? kasan_slab_alloc+0xf/0x20 [ 95.718202][T10203] ? kmem_cache_alloc+0x121/0x710 [ 95.723586][T10203] ? getname_flags+0xd6/0x5b0 [ 95.728304][T10203] ? getname+0x1a/0x20 [ 95.732452][T10203] ? do_sys_open+0x2c9/0x5d0 [ 95.737200][T10203] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 95.743031][T10203] ? __alloc_fd+0x487/0x620 [ 95.747612][T10203] do_filp_open+0x1a1/0x280 [ 95.752146][T10203] ? may_open_dev+0x100/0x100 [ 95.756846][T10203] ? do_raw_spin_unlock+0x178/0x270 [ 95.762037][T10203] ? _raw_spin_unlock+0x28/0x40 [ 95.766917][T10203] ? __alloc_fd+0x487/0x620 [ 95.771501][T10203] do_sys_open+0x3fe/0x5d0 [ 95.775948][T10203] ? filp_open+0x80/0x80 [ 95.780249][T10203] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 95.785872][T10203] ? do_syscall_64+0x26/0x790 [ 95.790578][T10203] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.796638][T10203] ? do_syscall_64+0x26/0x790 [ 95.801310][T10203] __x64_sys_open+0x7e/0xc0 [ 95.805802][T10203] do_syscall_64+0xfa/0x790 [ 95.810346][T10203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.816272][T10203] RIP: 0033:0x414411 [ 95.820164][T10203] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 95.839911][T10203] RSP: 002b:00007f218e87f7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 95.848405][T10203] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 [ 95.857005][T10203] RDX: 0000000000000000 RSI: 0100000000000000 RDI: 00007f218e87f850 [ 95.865165][T10203] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 95.874429][T10203] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f218e8806d4 [ 95.882954][T10203] R13: 00000000004ca395 R14: 00000000004e2a10 R15: 00000000ffffffff [ 95.893187][T10203] Kernel Offset: disabled [ 95.897646][T10203] Rebooting in 86400 seconds..