[ 77.555075][ T27] audit: type=1400 audit(1576505277.453:38): avc: denied { watch } for pid=9637 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining dae[ 77.758291][ T27] audit: type=1800 audit(1576505277.653:39): pid=9544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 mon: restorecond[ 77.781165][ T27] audit: type=1800 audit(1576505277.653:40): pid=9544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [?25l[?1c7[ ok 8[?25h[?0c. [ 78.596341][ T27] audit: type=1400 audit(1576505278.493:41): avc: denied { map } for pid=9720 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.42' (ECDSA) to the list of known hosts. syzkaller login: [ 85.098606][ T27] audit: type=1400 audit(1576505284.993:42): avc: denied { map } for pid=9732 comm="syz-executor968" path="/root/syz-executor968912540" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 85.227086][ T9740] IPVS: ftp: loaded support on port[0] = 21 [ 85.227351][ T9739] IPVS: ftp: loaded support on port[0] = 21 [ 85.241920][ T9741] IPVS: ftp: loaded support on port[0] = 21 [ 85.263558][ T9742] IPVS: ftp: loaded support on port[0] = 21 [ 85.272503][ T9744] IPVS: ftp: loaded support on port[0] = 21 [ 85.281373][ T9743] IPVS: ftp: loaded support on port[0] = 21 [ 85.342814][ T27] audit: type=1400 audit(1576505285.243:43): avc: denied { create } for pid=9740 comm="syz-executor968" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 85.388821][ T27] audit: type=1400 audit(1576505285.273:44): avc: denied { write } for pid=9740 comm="syz-executor968" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 85.414778][ T27] audit: type=1400 audit(1576505285.273:45): avc: denied { read } for pid=9740 comm="syz-executor968" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 85.532301][ T9740] chnl_net:caif_netlink_parms(): no params data found [ 85.678388][ T9741] chnl_net:caif_netlink_parms(): no params data found [ 85.765853][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.776444][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.784672][ T9740] device bridge_slave_0 entered promiscuous mode [ 85.793676][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 85.809376][ T9743] chnl_net:caif_netlink_parms(): no params data found [ 85.818341][ T9739] chnl_net:caif_netlink_parms(): no params data found [ 85.834235][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.841797][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.849726][ T9740] device bridge_slave_1 entered promiscuous mode [ 85.865994][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.875052][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.883122][ T9741] device bridge_slave_0 entered promiscuous mode [ 85.894914][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.902281][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.910643][ T9741] device bridge_slave_1 entered promiscuous mode [ 85.921679][ T9744] chnl_net:caif_netlink_parms(): no params data found [ 85.942380][ T9740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.956308][ T9740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.003363][ T9741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.066090][ T9741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.075448][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.082776][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.090915][ T9744] device bridge_slave_0 entered promiscuous mode [ 86.100083][ T9740] team0: Port device team_slave_0 added [ 86.105955][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.113073][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.120861][ T9744] device bridge_slave_1 entered promiscuous mode [ 86.144315][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.153518][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.161969][ T9739] device bridge_slave_0 entered promiscuous mode [ 86.176053][ T9740] team0: Port device team_slave_1 added [ 86.182009][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.189526][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.197171][ T9742] device bridge_slave_0 entered promiscuous mode [ 86.210902][ T9743] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.218090][ T9743] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.225837][ T9743] device bridge_slave_0 entered promiscuous mode [ 86.233799][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.241057][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.248919][ T9739] device bridge_slave_1 entered promiscuous mode [ 86.262804][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.270923][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.278729][ T9742] device bridge_slave_1 entered promiscuous mode [ 86.286984][ T9744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.296475][ T9743] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.304476][ T9743] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.312324][ T9743] device bridge_slave_1 entered promiscuous mode [ 86.332114][ T9741] team0: Port device team_slave_0 added [ 86.339366][ T9739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.357345][ T9744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.387446][ T9741] team0: Port device team_slave_1 added [ 86.394882][ T9739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.414542][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.438319][ T9743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.454863][ T9744] team0: Port device team_slave_0 added [ 86.466253][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.521163][ T9740] device hsr_slave_0 entered promiscuous mode [ 86.558937][ T9740] device hsr_slave_1 entered promiscuous mode [ 86.600490][ T9743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.623509][ T9744] team0: Port device team_slave_1 added [ 86.662132][ T9743] team0: Port device team_slave_0 added [ 86.672339][ T9739] team0: Port device team_slave_0 added [ 86.731957][ T9741] device hsr_slave_0 entered promiscuous mode [ 86.798762][ T9741] device hsr_slave_1 entered promiscuous mode [ 86.868722][ T9741] debugfs: Directory 'hsr0' with parent '/' already present! [ 86.883357][ T9743] team0: Port device team_slave_1 added [ 86.895622][ T9739] team0: Port device team_slave_1 added [ 86.910190][ T9742] team0: Port device team_slave_0 added [ 86.970605][ T9744] device hsr_slave_0 entered promiscuous mode [ 87.019110][ T9744] device hsr_slave_1 entered promiscuous mode [ 87.058582][ T9744] debugfs: Directory 'hsr0' with parent '/' already present! [ 87.072833][ T9742] team0: Port device team_slave_1 added [ 87.163861][ T9739] device hsr_slave_0 entered promiscuous mode [ 87.209878][ T9739] device hsr_slave_1 entered promiscuous mode [ 87.248727][ T9739] debugfs: Directory 'hsr0' with parent '/' already present! [ 87.310713][ T9742] device hsr_slave_0 entered promiscuous mode [ 87.358980][ T9742] device hsr_slave_1 entered promiscuous mode [ 87.398535][ T9742] debugfs: Directory 'hsr0' with parent '/' already present! [ 87.452002][ T9743] device hsr_slave_0 entered promiscuous mode [ 87.478760][ T9743] device hsr_slave_1 entered promiscuous mode [ 87.538570][ T9743] debugfs: Directory 'hsr0' with parent '/' already present! [ 87.548977][ T9740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.621447][ T9740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.660737][ T9741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.738229][ T9740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.788561][ T9741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.843968][ T9741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.893896][ T9741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.952952][ T9740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.047788][ T9739] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.097504][ T9744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.150606][ T9744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.192339][ T9744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.231665][ T9744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.303000][ T9739] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.353250][ T9739] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.404794][ T9739] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.474710][ T9743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.500856][ T9742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.574011][ T9743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.623078][ T9742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.679762][ T9743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.720964][ T9743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.780733][ T9742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.821505][ T9742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.986486][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.040816][ T9744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.047755][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.058347][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.072140][ T9741] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.087545][ T9740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.111173][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.123021][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.136443][ T9740] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.154897][ T9744] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.170256][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.185233][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.194660][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.203830][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.211287][ T9751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.220405][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.229015][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.236761][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.245619][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.254346][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.261505][ T9751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.273545][ T9739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.295479][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.305786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.313970][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.323494][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.332108][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.339260][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.347904][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.356840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.365264][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.372399][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.380022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.387728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.395675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.404587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.415186][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.422401][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.443612][ T9743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.460869][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.472782][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.480889][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.492192][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.501102][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.509860][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.517898][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.526885][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.536635][ T9752] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.543839][ T9752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.552033][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.560877][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.569474][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.576525][ T9752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.584487][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.593272][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.601943][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.609071][ T9752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.617005][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.627424][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.635600][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.645181][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.671929][ T9743] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.680609][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.689939][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.699648][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.708258][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.717778][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.727303][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.736109][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.744382][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.754339][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.762636][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.772337][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.804910][ T9741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.817170][ T9741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.832649][ T9739] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.842512][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.852625][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.861734][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.870533][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.877600][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.885745][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.895470][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.904189][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.912867][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.922082][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.930586][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.938882][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.947429][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.955771][ T3283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.977044][ T9742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.988117][ T9742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.028805][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.029423][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.047387][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.054516][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.062456][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.070977][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.079573][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.088029][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.096418][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.104666][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.113235][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.122303][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.130954][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.140623][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.149268][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.157479][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.165826][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.174438][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.182852][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.189929][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.197599][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.206277][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.214784][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.221886][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.229580][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.238061][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.275277][ T9740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.289817][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.297633][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.305676][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.315062][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.322990][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.332690][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.341528][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.350899][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.359497][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.367694][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.376075][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.384515][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.392687][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.401239][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.410039][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.418601][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.426999][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.434643][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.442117][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.451440][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.460571][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.469041][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.477633][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.485553][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.493460][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.515387][ T9741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.533306][ T9743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.547089][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.554616][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.565965][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.575061][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.585842][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.598956][ T27] audit: type=1400 audit(1576505290.493:46): avc: denied { associate } for pid=9742 comm="syz-executor968" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 90.623386][ T9740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.644610][ T9739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.676349][ T9739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.708807][ T9744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.720857][ T9744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.735152][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.744074][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.753420][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.761920][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.770201][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.778740][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.787066][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.795929][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.804149][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.812024][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.819563][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.828277][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.836930][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.845597][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.856887][ T9743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.915855][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.934960][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.943613][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.951526][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program executing program [ 90.962229][ T9739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.981271][ T9744] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 91.143331][ T9778] EXT4-fs (sda1): Unrecognized mount option "uid=00000000000000000000" or missing value [ 91.201024][ T9784] EXT4-fs (sda1): Unrecognized mount option "uid=00000000000000000000" or missing value [ 91.231745][ T9741] ================================================================== [ 91.240118][ T9741] BUG: KASAN: use-after-free in ext4_xattr_set_entry+0x35de/0x3770 [ 91.248019][ T9741] Read of size 4 at addr ffff888082265183 by task syz-executor968/9741 [ 91.256507][ T9741] [ 91.256548][ T9741] CPU: 1 PID: 9741 Comm: syz-executor968 Not tainted 5.5.0-rc1-syzkaller #0 [ 91.256556][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.256566][ T9741] Call Trace: [ 91.256586][ T9741] dump_stack+0x197/0x210 [ 91.277668][ T9741] ? ext4_xattr_set_entry+0x35de/0x3770 [ 91.277688][ T9741] print_address_description.constprop.0.cold+0xd4/0x30b [ 91.277704][ T9741] ? ext4_xattr_set_entry+0x35de/0x3770 [ 91.303501][ T9741] ? ext4_xattr_set_entry+0x35de/0x3770 [ 91.309589][ T9741] __kasan_report.cold+0x1b/0x41 [ 91.314691][ T9741] ? ext4_xattr_set_entry+0x35de/0x3770 [ 91.314709][ T9741] kasan_report+0x12/0x20 [ 91.314727][ T9741] __asan_report_load4_noabort+0x14/0x20 [ 91.314737][ T9741] ext4_xattr_set_entry+0x35de/0x3770 [ 91.331200][ T9741] ? __lock_acquire+0x16f2/0x4a00 [ 91.331219][ T9741] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 91.331245][ T9741] ? ext4_xattr_inode_read+0x450/0x450 [ 91.331265][ T9741] ? ___might_sleep+0x163/0x2c0 [ 91.331281][ T9741] ? __might_sleep+0x95/0x190 [ 91.345244][ T9791] EXT4-fs error (device sda1): ext4_xattr_set_entry:1583: inode #16509: comm syz-executor968: corrupted xattr entries [ 91.348637][ T9741] ? __kasan_check_write+0x14/0x20 [ 91.348656][ T9741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 91.348674][ T9741] ext4_xattr_ibody_set+0x80/0x2d0 [ 91.348688][ T9741] ext4_xattr_set_handle+0x933/0x1200 [ 91.348707][ T9741] ? lock_downgrade+0x920/0x920 [ 91.363756][ T9741] ? ext4_xattr_ibody_inline_set+0x2d0/0x2d0 [ 91.377821][ T9790] EXT4-fs error (device sda1): ext4_xattr_set_entry:1583: inode #16511: comm syz-executor968: corrupted xattr entries [ 91.381763][ T9741] ? __kasan_check_write+0x14/0x20 [ 91.381780][ T9741] ? do_raw_read_unlock+0x3f/0x70 [ 91.381799][ T9741] ? security_sid_to_context_core.isra.0+0x176/0x390 [ 91.381817][ T9741] ? security_sid_to_context_force+0x3a/0x50 [ 91.381840][ T9741] ? selinux_inode_create+0x30/0x30 [ 91.381859][ T9741] ? get_cached_acl+0x477/0x560 [ 91.394276][ T9788] EXT4-fs (sda1): Unrecognized mount option "uid=00000000000000000000" or missing value [ 91.397620][ T9741] ext4_initxattrs+0xc0/0x130 [ 91.397644][ T9741] security_inode_init_security+0x2c8/0x3b0 [ 91.397660][ T9741] ? ext4_init_acl+0x370/0x370 [ 91.407858][ T9741] ? security_skb_classify_flow+0xb0/0xb0 [ 91.407875][ T9741] ? posix_acl_create+0x11a/0x580 [ 91.407894][ T9741] ? ext4_set_acl+0x550/0x550 [ 91.407913][ T9741] ? _raw_spin_unlock+0x28/0x40 [ 91.426217][ T9741] ext4_init_security+0x34/0x40 [ 91.426234][ T9741] __ext4_new_inode+0x4288/0x4f30 [ 91.426262][ T9741] ? ext4_free_inode+0x1490/0x1490 [ 91.426280][ T9741] ? dqget+0x10d0/0x10d0 [ 91.426300][ T9741] ? selinux_determine_inode_label+0x1b1/0x390 [ 91.426318][ T9741] ext4_mkdir+0x3d5/0xe20 [ 91.426340][ T9741] ? ext4_rmdir+0xd20/0xd20 [ 91.436549][ T9741] ? selinux_inode_mkdir+0x23/0x30 [ 91.436568][ T9741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.436585][ T9741] ? security_inode_mkdir+0xe4/0x120 [ 91.436603][ T9741] vfs_mkdir+0x42e/0x670 [ 91.436622][ T9741] do_mkdirat+0x234/0x2a0 [ 91.566719][ T9741] ? __ia32_sys_mknod+0xb0/0xb0 [ 91.571567][ T9741] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 91.577281][ T9741] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.583432][ T9741] ? do_syscall_64+0x26/0x790 [ 91.588140][ T9741] ? lockdep_hardirqs_on+0x421/0x5e0 [ 91.593434][ T9741] __x64_sys_mkdir+0x5c/0x80 [ 91.598016][ T9741] do_syscall_64+0xfa/0x790 [ 91.602511][ T9741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.608735][ T9741] RIP: 0033:0x44c637 [ 91.612613][ T9741] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d d6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d d6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 91.634538][ T9741] RSP: 002b:00007ffedabe5578 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 91.642945][ T9741] RAX: ffffffffffffffda RBX: 000000000001632d RCX: 000000000044c637 [ 91.650914][ T9741] RDX: 00007ffedabe55e3 RSI: 00000000000001ff RDI: 00007ffedabe55e0 [ 91.658871][ T9741] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000003 [ 91.666828][ T9741] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000001 [ 91.674782][ T9741] R13: 000000000040a180 R14: 0000000000000000 R15: 0000000000000000 [ 91.682810][ T9741] [ 91.685390][ T9741] The buggy address belongs to the page: [ 91.691014][ T9741] page:ffffea0002089940 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 [ 91.700454][ T9741] raw: 00fffe0000000000 ffffea0002082c88 ffffea0002089908 0000000000000000 [ 91.709037][ T9741] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 91.718841][ T9741] page dumped because: kasan: bad access detected [ 91.725236][ T9741] [ 91.727895][ T9741] Memory state around the buggy address: [ 91.733510][ T9741] ffff888082265080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.741574][ T9741] ffff888082265100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.749965][ T9741] >ffff888082265180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.758014][ T9741] ^ [ 91.762157][ T9741] ffff888082265200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.770407][ T9741] ffff888082265280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.778620][ T9741] ================================================================== [ 91.786943][ T9741] Disabling lock debugging due to kernel taint [ 91.806364][ T9741] Kernel panic - not syncing: panic_on_warn set ... [ 91.813021][ T9741] CPU: 1 PID: 9741 Comm: syz-executor968 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 91.823090][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.833143][ T9741] Call Trace: [ 91.836688][ T9741] dump_stack+0x197/0x210 [ 91.841091][ T9741] panic+0x2e3/0x75c [ 91.844983][ T9741] ? add_taint.cold+0x16/0x16 [ 91.849642][ T9741] ? ext4_xattr_set_entry+0x35de/0x3770 [ 91.855990][ T9741] ? preempt_schedule+0x4b/0x60 [ 91.860833][ T9741] ? ___preempt_schedule+0x16/0x18 [ 91.865937][ T9741] ? trace_hardirqs_on+0x5e/0x240 [ 91.872074][ T9741] ? ext4_xattr_set_entry+0x35de/0x3770 [ 91.877627][ T9741] end_report+0x47/0x4f [ 91.881766][ T9741] ? ext4_xattr_set_entry+0x35de/0x3770 [ 91.887311][ T9741] __kasan_report.cold+0xe/0x41 [ 91.892162][ T9741] ? ext4_xattr_set_entry+0x35de/0x3770 [ 91.897718][ T9741] kasan_report+0x12/0x20 [ 91.902039][ T9741] __asan_report_load4_noabort+0x14/0x20 [ 91.908292][ T9741] ext4_xattr_set_entry+0x35de/0x3770 [ 91.913662][ T9741] ? __lock_acquire+0x16f2/0x4a00 [ 91.918676][ T9741] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 91.924434][ T9741] ? ext4_xattr_inode_read+0x450/0x450 [ 91.929984][ T9741] ? ___might_sleep+0x163/0x2c0 [ 91.934830][ T9741] ? __might_sleep+0x95/0x190 [ 91.939528][ T9741] ? __kasan_check_write+0x14/0x20 [ 91.944633][ T9741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 91.950873][ T9741] ext4_xattr_ibody_set+0x80/0x2d0 [ 91.956252][ T9741] ext4_xattr_set_handle+0x933/0x1200 [ 91.961722][ T9741] ? lock_downgrade+0x920/0x920 [ 91.966738][ T9741] ? ext4_xattr_ibody_inline_set+0x2d0/0x2d0 [ 91.972705][ T9741] ? __kasan_check_write+0x14/0x20 [ 91.977801][ T9741] ? do_raw_read_unlock+0x3f/0x70 [ 91.982821][ T9741] ? security_sid_to_context_core.isra.0+0x176/0x390 [ 91.990221][ T9741] ? security_sid_to_context_force+0x3a/0x50 [ 91.996199][ T9741] ? selinux_inode_create+0x30/0x30 [ 92.001373][ T9741] ? get_cached_acl+0x477/0x560 [ 92.006215][ T9741] ext4_initxattrs+0xc0/0x130 [ 92.010874][ T9741] security_inode_init_security+0x2c8/0x3b0 [ 92.017046][ T9741] ? ext4_init_acl+0x370/0x370 [ 92.021867][ T9741] ? security_skb_classify_flow+0xb0/0xb0 [ 92.027593][ T9741] ? posix_acl_create+0x11a/0x580 [ 92.032613][ T9741] ? ext4_set_acl+0x550/0x550 [ 92.037353][ T9741] ? _raw_spin_unlock+0x28/0x40 [ 92.042324][ T9741] ext4_init_security+0x34/0x40 [ 92.047188][ T9741] __ext4_new_inode+0x4288/0x4f30 [ 92.052227][ T9741] ? ext4_free_inode+0x1490/0x1490 [ 92.057322][ T9741] ? dqget+0x10d0/0x10d0 [ 92.061643][ T9741] ? selinux_determine_inode_label+0x1b1/0x390 [ 92.067886][ T9741] ext4_mkdir+0x3d5/0xe20 [ 92.072220][ T9741] ? ext4_rmdir+0xd20/0xd20 [ 92.077077][ T9741] ? selinux_inode_mkdir+0x23/0x30 [ 92.082177][ T9741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.088456][ T9741] ? security_inode_mkdir+0xe4/0x120 [ 92.093740][ T9741] vfs_mkdir+0x42e/0x670 [ 92.097975][ T9741] do_mkdirat+0x234/0x2a0 [ 92.102282][ T9741] ? __ia32_sys_mknod+0xb0/0xb0 [ 92.107130][ T9741] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 92.112576][ T9741] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.119229][ T9741] ? do_syscall_64+0x26/0x790 [ 92.123904][ T9741] ? lockdep_hardirqs_on+0x421/0x5e0 [ 92.129791][ T9741] __x64_sys_mkdir+0x5c/0x80 [ 92.134379][ T9741] do_syscall_64+0xfa/0x790 [ 92.139307][ T9741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.145174][ T9741] RIP: 0033:0x44c637 [ 92.150870][ T9741] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d d6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d d6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 92.171446][ T9741] RSP: 002b:00007ffedabe5578 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 92.179910][ T9741] RAX: ffffffffffffffda RBX: 000000000001632d RCX: 000000000044c637 [ 92.187924][ T9741] RDX: 00007ffedabe55e3 RSI: 00000000000001ff RDI: 00007ffedabe55e0 [ 92.195892][ T9741] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000003 [ 92.203900][ T9741] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000001 [ 92.211858][ T9741] R13: 000000000040a180 R14: 0000000000000000 R15: 0000000000000000 [ 92.221331][ T9741] Kernel Offset: disabled [ 92.225658][ T9741] Rebooting in 86400 seconds..