[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.415874] audit: type=1800 audit(1575934971.337:33): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 40.442793] audit: type=1800 audit(1575934971.337:34): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 [ 40.818017] audit: type=1400 audit(1575934971.737:35): avc: denied { map } for pid=7645 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts. syzkaller login: [ 47.416698] audit: type=1400 audit(1575934978.337:36): avc: denied { map } for pid=7658 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/12/09 23:42:58 parsed 1 programs [ 49.376520] audit: type=1400 audit(1575934980.297:37): avc: denied { map } for pid=7658 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=17112 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/12/09 23:43:00 executed programs: 0 [ 50.089567] IPVS: ftp: loaded support on port[0] = 21 [ 50.089573] IPVS: ftp: loaded support on port[0] = 21 [ 50.105939] IPVS: ftp: loaded support on port[0] = 21 [ 50.110798] IPVS: ftp: loaded support on port[0] = 21 [ 50.125247] IPVS: ftp: loaded support on port[0] = 21 [ 50.170884] IPVS: ftp: loaded support on port[0] = 21 [ 50.319741] chnl_net:caif_netlink_parms(): no params data found [ 50.408286] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.415527] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.422743] device bridge_slave_0 entered promiscuous mode [ 50.472852] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.479232] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.486907] device bridge_slave_1 entered promiscuous mode [ 50.550908] chnl_net:caif_netlink_parms(): no params data found [ 50.566495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.577241] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.585001] chnl_net:caif_netlink_parms(): no params data found [ 50.592994] chnl_net:caif_netlink_parms(): no params data found [ 50.604241] chnl_net:caif_netlink_parms(): no params data found [ 50.652458] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.664527] team0: Port device team_slave_0 added [ 50.673292] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.673987] team0: Port device team_slave_1 added [ 50.729067] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.782365] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.788764] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.796377] device bridge_slave_0 entered promiscuous mode [ 50.803877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.832592] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.838972] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.846080] device bridge_slave_1 entered promiscuous mode [ 50.868782] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.876114] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.885284] device bridge_slave_0 entered promiscuous mode [ 50.892114] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.898511] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.906789] device bridge_slave_0 entered promiscuous mode [ 50.917936] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.924445] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.931798] device bridge_slave_1 entered promiscuous mode [ 50.942969] chnl_net:caif_netlink_parms(): no params data found [ 50.953214] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.959567] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.966536] device bridge_slave_0 entered promiscuous mode [ 50.973304] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.979650] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.986828] device bridge_slave_1 entered promiscuous mode [ 50.994411] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.007337] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.071982] device hsr_slave_0 entered promiscuous mode [ 51.110454] device hsr_slave_1 entered promiscuous mode [ 51.153477] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.160856] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.167268] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.174658] device bridge_slave_1 entered promiscuous mode [ 51.200480] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.217196] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.224610] team0: Port device team_slave_0 added [ 51.234636] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.241987] team0: Port device team_slave_1 added [ 51.253820] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.273355] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.281434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.291749] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.300760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.309662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.322921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.343336] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.411680] device hsr_slave_0 entered promiscuous mode [ 51.450167] device hsr_slave_1 entered promiscuous mode [ 51.494482] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.501083] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.508094] device bridge_slave_0 entered promiscuous mode [ 51.521487] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.528726] team0: Port device team_slave_0 added [ 51.534709] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.542383] team0: Port device team_slave_0 added [ 51.547715] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.555735] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.563312] team0: Port device team_slave_0 added [ 51.568518] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.575532] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.583333] device bridge_slave_1 entered promiscuous mode [ 51.601138] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.608397] team0: Port device team_slave_1 added [ 51.614831] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.622829] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.630149] team0: Port device team_slave_1 added [ 51.635527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.643034] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.653435] team0: Port device team_slave_1 added [ 51.659596] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.668001] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.675724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.683914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.693040] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.701511] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.715635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.729332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.823688] device hsr_slave_0 entered promiscuous mode [ 51.860285] device hsr_slave_1 entered promiscuous mode [ 51.942794] device hsr_slave_0 entered promiscuous mode [ 51.990214] device hsr_slave_1 entered promiscuous mode [ 52.072832] device hsr_slave_0 entered promiscuous mode [ 52.110307] device hsr_slave_1 entered promiscuous mode [ 52.151472] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.158059] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.165836] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.172905] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.180709] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.188051] team0: Port device team_slave_0 added [ 52.193382] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.201490] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.211077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.219344] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.226930] team0: Port device team_slave_1 added [ 52.233138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.252969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.268032] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.292648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.343646] device hsr_slave_0 entered promiscuous mode [ 52.380198] device hsr_slave_1 entered promiscuous mode [ 52.420768] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.428130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.440736] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.451527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.466542] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.486583] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.524656] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.535983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.546325] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.561509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.568963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.584793] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.591102] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.602958] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.611483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.618374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.634525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.644051] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.650801] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.660960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.668608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.677197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.684960] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.691412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.698551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.706818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.714648] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.721040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.732880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.744842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.756245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.767317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.775398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.785228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.793130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.801352] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.807684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.814976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.823139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.830808] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.837142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.851320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.862995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.873531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.881906] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.889022] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.896045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.905088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.918518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.928474] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.936635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.945944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.953136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.962709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.970080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.984533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.993768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.004291] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.013577] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.022641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.034483] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.040933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.048727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.056549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.064259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.073037] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.080869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.090586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.098749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.110589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.119190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.126635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.133986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.141271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.148186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.156050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.163964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.172191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.179670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.187662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.195341] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.201724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.209078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.217050] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.223508] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.231838] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.240398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.248006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.256883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.265305] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.271702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.281055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.288848] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.297094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.306332] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.315115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.322677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.330784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.338291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.345298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.352679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.360606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.368139] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.374522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.381686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.388525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.395559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.403080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.413168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.423092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.432936] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.439009] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.448279] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.455769] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.463595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.471408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.478993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.486575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.494413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.502597] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.508953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.518201] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.527354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.535292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.546805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.556426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.565071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.573897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.581859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.589401] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.595800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.603160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.611026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.618539] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.624925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.632641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.639676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.647122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.654264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.665238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.674761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.689091] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.697690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.708386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.716212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.723859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.731844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.739545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.747236] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.753689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.763664] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.769702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.777975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.789740] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.798149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.806961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.817405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.825201] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.831710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.839168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.846061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.853394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.867991] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.878589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.887739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.899565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.915166] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.921777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.929673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.937837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.945978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.953969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.960727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.967471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.979899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.987591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.997001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.013060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.020947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.028434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.037724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.046520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.056558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.066906] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.075589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.085578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.093342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.101632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.109361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.119331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.130434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.139778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.148548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.156908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.165308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.173474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.183503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.191426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.199065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.206831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.218583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.226289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.233792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.241539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.249070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.256630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.263908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.275589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.281133] audit: type=1400 audit(1575934985.197:38): avc: denied { associate } for pid=7682 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 54.296163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.318954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.330478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.337287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.350733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.358318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.366357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.374408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.383220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.391503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.399028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.409192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.421585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.434056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.443024] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.449541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.466868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.475245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.484352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.484831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.485353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.485816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.488327] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.488370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.494837] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.494896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.511919] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.571489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.606021] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.608741] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.632716] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.638856] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.643998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.658151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.658282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.658805] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.667762] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 54.669220] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.678667] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.691595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.692235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.692353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.692437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.692530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.692653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.692740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.696641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.734394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.923584] ================================================================== [ 54.923621] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x2b2/0x5e0 [ 54.923633] Read of size 32 at addr ffffffff87ecb3e0 by task syz-executor.3/7715 [ 54.923637] [ 54.923652] CPU: 0 PID: 7715 Comm: syz-executor.3 Not tainted 4.19.88-syzkaller #0 [ 54.923659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.923664] Call Trace: [ 54.923681] dump_stack+0x197/0x210 [ 54.923695] ? fbcon_get_font+0x2b2/0x5e0 [ 54.923712] print_address_description.cold+0x5/0x20d [ 54.923727] ? fbcon_get_font+0x2b2/0x5e0 [ 54.923741] kasan_report.cold+0x8c/0x2ba [ 54.923759] check_memory_region+0x123/0x190 [ 54.923774] memcpy+0x24/0x50 [ 54.923787] fbcon_get_font+0x2b2/0x5e0 [ 54.923803] ? display_to_var+0x7e0/0x7e0 [ 54.923816] con_font_op+0x20b/0x1250 [ 54.923831] ? __might_sleep+0x95/0x190 [ 54.923845] ? con_write+0xd0/0xd0 [ 54.923862] ? selinux_capable+0x36/0x40 [ 54.923879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.923891] ? security_capable+0x92/0xc0 [ 54.923907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.923919] ? ns_capable_common+0x141/0x170 [ 54.923935] vt_ioctl+0xd2e/0x2530 [ 54.923951] ? complete_change_console+0x3a0/0x3a0 [ 54.923965] ? avc_has_extended_perms+0xa78/0x10f0 [ 54.923987] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 54.924003] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 54.924015] ? complete_change_console+0x3a0/0x3a0 [ 54.924029] tty_ioctl+0x7f3/0x1510 [ 54.924043] ? tty_vhangup+0x30/0x30 [ 54.924055] ? mark_held_locks+0x100/0x100 [ 54.924077] ? __fget+0x340/0x540 [ 54.924097] ? __might_sleep+0x95/0x190 [ 54.924114] ? tty_vhangup+0x30/0x30 [ 54.924130] do_vfs_ioctl+0xd5f/0x1380 [ 54.924142] ? selinux_file_ioctl+0x46f/0x5e0 [ 54.924154] ? selinux_file_ioctl+0x125/0x5e0 [ 54.924169] ? ioctl_preallocate+0x210/0x210 [ 54.924181] ? selinux_file_mprotect+0x620/0x620 [ 54.924199] ? iterate_fd+0x360/0x360 [ 54.924212] ? nsecs_to_jiffies+0x30/0x30 [ 54.924230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.924242] ? security_file_ioctl+0x8d/0xc0 [ 54.924258] ksys_ioctl+0xab/0xd0 [ 54.924273] __x64_sys_ioctl+0x73/0xb0 [ 54.924291] do_syscall_64+0xfd/0x620 [ 54.924308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.924318] RIP: 0033:0x45a6f9 [ 54.924331] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.924338] RSP: 002b:00007f6d824f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.924351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 54.924358] RDX: 0000000000713000 RSI: 0000000000004b60 RDI: 0000000000000004 [ 54.924365] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 54.924373] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d824f86d4 [ 54.924380] R13: 00000000004c6d87 R14: 00000000004dd3e0 R15: 00000000ffffffff [ 54.924396] [ 54.924400] The buggy address belongs to the variable: [ 54.924412] fontdata_8x16+0x1000/0x1120 [ 54.924415] [ 54.924418] Memory state around the buggy address: [ 54.924429] ffffffff87ecb280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.924438] ffffffff87ecb300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.924447] >ffffffff87ecb380: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa [ 54.924452] ^ [ 54.924461] ffffffff87ecb400: 06 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa [ 54.924471] ffffffff87ecb480: 06 fa fa fa fa fa fa fa 00 00 03 fa fa fa fa fa [ 54.924475] ================================================================== [ 54.924480] Disabling lock debugging due to kernel taint [ 54.924576] Kernel panic - not syncing: panic_on_warn set ... [ 54.924576] [ 54.924590] CPU: 0 PID: 7715 Comm: syz-executor.3 Tainted: G B 4.19.88-syzkaller #0 [ 54.924596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.924600] Call Trace: [ 54.924611] dump_stack+0x197/0x210 [ 54.924624] ? fbcon_get_font+0x2b2/0x5e0 [ 54.924634] panic+0x26a/0x50e [ 54.924645] ? __warn_printk+0xf3/0xf3 [ 54.924657] ? fbcon_get_font+0x2b2/0x5e0 [ 54.924671] ? preempt_schedule+0x4b/0x60 [ 54.924682] ? ___preempt_schedule+0x16/0x18 [ 54.924695] ? trace_hardirqs_on+0x5e/0x220 [ 54.924707] ? fbcon_get_font+0x2b2/0x5e0 [ 54.924717] kasan_end_report+0x47/0x4f [ 54.924729] kasan_report.cold+0xa9/0x2ba [ 54.924741] check_memory_region+0x123/0x190 [ 54.924751] memcpy+0x24/0x50 [ 54.924762] fbcon_get_font+0x2b2/0x5e0 [ 54.924775] ? display_to_var+0x7e0/0x7e0 [ 54.924787] con_font_op+0x20b/0x1250 [ 54.924799] ? __might_sleep+0x95/0x190 [ 54.924810] ? con_write+0xd0/0xd0 [ 54.924822] ? selinux_capable+0x36/0x40 [ 54.924833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.924839] ? security_capable+0x92/0xc0 [ 54.924847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.924854] ? ns_capable_common+0x141/0x170 [ 54.924862] vt_ioctl+0xd2e/0x2530 [ 54.924870] ? complete_change_console+0x3a0/0x3a0 [ 54.924878] ? avc_has_extended_perms+0xa78/0x10f0 [ 54.924888] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 54.924896] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 54.924904] ? complete_change_console+0x3a0/0x3a0 [ 54.924910] tty_ioctl+0x7f3/0x1510 [ 54.924917] ? tty_vhangup+0x30/0x30 [ 54.924925] ? mark_held_locks+0x100/0x100 [ 54.924934] ? __fget+0x340/0x540 [ 54.924944] ? __might_sleep+0x95/0x190 [ 54.924950] ? tty_vhangup+0x30/0x30 [ 54.924958] do_vfs_ioctl+0xd5f/0x1380 [ 54.924965] ? selinux_file_ioctl+0x46f/0x5e0 [ 54.924971] ? selinux_file_ioctl+0x125/0x5e0 [ 54.924979] ? ioctl_preallocate+0x210/0x210 [ 54.924986] ? selinux_file_mprotect+0x620/0x620 [ 54.924994] ? iterate_fd+0x360/0x360 [ 54.925001] ? nsecs_to_jiffies+0x30/0x30 [ 54.925010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.925017] ? security_file_ioctl+0x8d/0xc0 [ 54.925024] ksys_ioctl+0xab/0xd0 [ 54.925032] __x64_sys_ioctl+0x73/0xb0 [ 54.925040] do_syscall_64+0xfd/0x620 [ 54.925049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.925054] RIP: 0033:0x45a6f9 [ 54.925061] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.925065] RSP: 002b:00007f6d824f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.925072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 54.925076] RDX: 0000000000713000 RSI: 0000000000004b60 RDI: 0000000000000004 [ 54.925080] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 54.925084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d824f86d4 [ 54.925088] R13: 00000000004c6d87 R14: 00000000004dd3e0 R15: 00000000ffffffff [ 54.926413] Kernel Offset: disabled