[ 50.157495][ T27] audit: type=1400 audit(1580039281.224:41): avc: denied { map } for pid=8167 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 56.568453][ T27] audit: type=1400 audit(1580039287.634:42): avc: denied { map } for pid=8176 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 57.360086][ T8195] IPVS: ftp: loaded support on port[0] = 21 [ 57.641274][ T211] tipc: TX() has been purged, node left! [ 57.913167][ T8185] can: request_module (can-proto-0) failed. [ 60.495749][ T8185] can: request_module (can-proto-0) failed. [ 60.506250][ T8185] can: request_module (can-proto-0) failed. [ 60.713711][ T27] audit: type=1400 audit(1580039291.784:43): avc: denied { create } for pid=8176 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 60.738165][ T27] audit: type=1400 audit(1580039291.794:44): avc: denied { create } for pid=8176 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 60.762713][ T27] audit: type=1400 audit(1580039291.794:45): avc: denied { create } for pid=8176 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.177' (ECDSA) to the list of known hosts. 2020/01/26 11:48:18 parsed 1 programs 2020/01/26 11:48:19 executed programs: 0 [ 68.175602][ T8279] IPVS: ftp: loaded support on port[0] = 21 [ 68.177881][ T8273] IPVS: ftp: loaded support on port[0] = 21 [ 68.190624][ T8278] IPVS: ftp: loaded support on port[0] = 21 [ 68.195316][ T8272] IPVS: ftp: loaded support on port[0] = 21 [ 68.200455][ T8276] IPVS: ftp: loaded support on port[0] = 21 [ 68.209768][ T8281] IPVS: ftp: loaded support on port[0] = 21 [ 68.337758][ T8272] chnl_net:caif_netlink_parms(): no params data found [ 68.428645][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.437309][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.445281][ T8272] device bridge_slave_0 entered promiscuous mode [ 68.457089][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.464765][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.472507][ T8272] device bridge_slave_1 entered promiscuous mode [ 68.506910][ T8281] chnl_net:caif_netlink_parms(): no params data found [ 68.562232][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 68.570714][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 68.584637][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.600008][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.616734][ T8278] chnl_net:caif_netlink_parms(): no params data found [ 68.645959][ T8272] team0: Port device team_slave_0 added [ 68.679922][ T8272] team0: Port device team_slave_1 added [ 68.690175][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.699301][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.707967][ T8281] device bridge_slave_0 entered promiscuous mode [ 68.716362][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.723684][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.731577][ T8281] device bridge_slave_1 entered promiscuous mode [ 68.785220][ T8276] chnl_net:caif_netlink_parms(): no params data found [ 68.801563][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.808829][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.817059][ T8279] device bridge_slave_0 entered promiscuous mode [ 68.824705][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.831925][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.839546][ T8273] device bridge_slave_0 entered promiscuous mode [ 68.848366][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.858671][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.866572][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.874629][ T8278] device bridge_slave_0 entered promiscuous mode [ 68.885788][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.894739][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.902675][ T8278] device bridge_slave_1 entered promiscuous mode [ 68.914361][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.921643][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.929352][ T8279] device bridge_slave_1 entered promiscuous mode [ 68.936708][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.943995][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.952608][ T8273] device bridge_slave_1 entered promiscuous mode [ 68.960381][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.023983][ T8272] device hsr_slave_0 entered promiscuous mode [ 69.061984][ T8272] device hsr_slave_1 entered promiscuous mode [ 69.144247][ T8281] team0: Port device team_slave_0 added [ 69.158586][ T8278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.169654][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.186859][ T8281] team0: Port device team_slave_1 added [ 69.193738][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.210512][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.221357][ T8278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.232020][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.241565][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.248633][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.256527][ T8276] device bridge_slave_0 entered promiscuous mode [ 69.296723][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.304636][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.313122][ T8276] device bridge_slave_1 entered promiscuous mode [ 69.322586][ T8278] team0: Port device team_slave_0 added [ 69.333592][ T8279] team0: Port device team_slave_0 added [ 69.347706][ T27] audit: type=1400 audit(1580039300.414:46): avc: denied { write } for pid=8272 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 69.347951][ T8273] team0: Port device team_slave_0 added [ 69.378090][ T27] audit: type=1400 audit(1580039300.444:47): avc: denied { read } for pid=8272 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 69.389070][ T8273] team0: Port device team_slave_1 added [ 69.416777][ T8278] team0: Port device team_slave_1 added [ 69.428851][ T8279] team0: Port device team_slave_1 added [ 69.483926][ T8281] device hsr_slave_0 entered promiscuous mode [ 69.531703][ T8281] device hsr_slave_1 entered promiscuous mode [ 69.571319][ T8281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.579089][ T8281] Cannot create hsr debugfs directory [ 69.585359][ T8272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.673625][ T8272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.724464][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.792869][ T8278] device hsr_slave_0 entered promiscuous mode [ 69.841545][ T8278] device hsr_slave_1 entered promiscuous mode [ 69.901315][ T8278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.909055][ T8278] Cannot create hsr debugfs directory [ 69.963772][ T8273] device hsr_slave_0 entered promiscuous mode [ 70.001602][ T8273] device hsr_slave_1 entered promiscuous mode [ 70.061401][ T8273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.069188][ T8273] Cannot create hsr debugfs directory [ 70.083164][ T8272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.114350][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.203932][ T8279] device hsr_slave_0 entered promiscuous mode [ 70.241688][ T8279] device hsr_slave_1 entered promiscuous mode [ 70.281284][ T8279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.289018][ T8279] Cannot create hsr debugfs directory [ 70.299113][ T8281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.363142][ T8272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.420255][ T8281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.467012][ T8281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.550986][ T8276] team0: Port device team_slave_0 added [ 70.557712][ T8281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.616645][ T8273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.684244][ T8276] team0: Port device team_slave_1 added [ 70.690021][ T8278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.725555][ T8278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.777587][ T8278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.843824][ T8273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.907562][ T8273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.969057][ T8273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.032647][ T8278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.109906][ T8279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.137920][ T8279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.196375][ T8279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.274028][ T8276] device hsr_slave_0 entered promiscuous mode [ 71.315043][ T8276] device hsr_slave_1 entered promiscuous mode [ 71.381311][ T8276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.388869][ T8276] Cannot create hsr debugfs directory [ 71.431585][ T8279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.461981][ T8276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.493173][ T8276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.543334][ T8276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.582972][ T8276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.676085][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.726846][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.738242][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.746860][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.758768][ T8272] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.780206][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.795999][ T8278] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.813277][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.820962][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.829225][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.838079][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.846783][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.854255][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.863344][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.872126][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.880542][ T2686] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.888330][ T2686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.915992][ T8281] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.927348][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.945935][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.953745][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.965676][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.974144][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.981258][ T2675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.989713][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.998421][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.006927][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.014051][ T2675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.021626][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.030075][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.039151][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.046799][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.054683][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.063409][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.096059][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.105603][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.116562][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.125338][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.134504][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.144159][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.153087][ T2708] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.160131][ T2708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.167796][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.176724][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.185193][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.194313][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.202688][ T2708] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.209859][ T2708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.217917][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.226161][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.234818][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.243337][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.256163][ T8272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.268963][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.295525][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.295981][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.315295][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.323672][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.332263][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.340415][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.349513][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.358160][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.366935][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.375530][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.384621][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.393414][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.402477][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.410711][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.419240][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.430550][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.450871][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.465054][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.473836][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.482460][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.490160][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.498160][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.507843][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.522223][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.530814][ T8273] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.546147][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.554231][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.562318][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.570534][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.579662][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.589928][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.598535][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.605643][ T2799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.615076][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.644786][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.652882][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.665324][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.674232][ T2801] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.681335][ T2801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.689320][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.697017][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.704844][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.713756][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.722700][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.729742][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.737289][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.745801][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.754299][ T2801] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.761533][ T2801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.769235][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.776905][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.784361][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.793210][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.802575][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.822771][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.829574][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.837776][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.848111][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.861364][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.870582][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.888384][ T8278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.908712][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.918222][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.927524][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.936219][ T2803] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.943320][ T2803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.950832][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.959795][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.968326][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.977375][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.986981][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.995096][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.003860][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.012964][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.021413][ T2803] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.028463][ T2803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.041539][ T27] audit: type=1400 audit(1580039304.104:48): avc: denied { associate } for pid=8278 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 73.093570][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.102923][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.111455][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.120052][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.129466][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.138352][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.147119][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.156330][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.165020][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.173755][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.182636][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.191677][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.200068][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.208842][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.218109][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.233257][ T8273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.241227][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.249511][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.265143][ T8276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.276404][ T8276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.317535][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.327887][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.337604][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.358424][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.371573][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.379133][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.388189][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.400367][ T8281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.418318][ T8289] sp0: Synchronizing with TNC [ 73.435898][ T8294] sp1: Synchronizing with TNC [ 73.437788][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.449979][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.466741][ T434] ================================================================== [ 73.474966][ T434] BUG: KASAN: slab-out-of-bounds in decode_data.part.1+0x23c/0x280 [ 73.483209][ T434] Write of size 1 at addr ffff88809622f04e by task kworker/u4:6/434 [ 73.491180][ T434] [ 73.493540][ T434] CPU: 0 PID: 434 Comm: kworker/u4:6 Not tainted 5.5.0-rc7-syzkaller #0 [ 73.502002][ T434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.512076][ T434] Workqueue: events_unbound flush_to_ldisc [ 73.517886][ T434] Call Trace: [ 73.521374][ T434] dump_stack+0x12d/0x187 [ 73.525712][ T434] print_address_description.constprop.8.cold.10+0x9/0x31d [ 73.532930][ T434] ? decode_data.part.1+0x23c/0x280 [ 73.538160][ T434] __kasan_report.cold.11+0x1b/0x3a [ 73.543398][ T434] ? decode_data.part.1+0x23c/0x280 [ 73.548605][ T434] ? trace_hardirqs_on_caller+0x111/0x1a0 [ 73.554455][ T434] ? decode_data.part.1+0x23c/0x280 [ 73.559666][ T434] kasan_report+0x12/0x20 [ 73.564233][ T434] __asan_report_store1_noabort+0x17/0x20 [ 73.569954][ T434] decode_data.part.1+0x23c/0x280 [ 73.575005][ T434] sixpack_receive_buf+0x7a8/0x12c0 [ 73.580200][ T434] ? __init_ldsem+0x170/0x170 [ 73.584883][ T434] tty_ldisc_receive_buf+0xff/0x1b0 [ 73.590182][ T434] tty_port_default_receive_buf+0x5f/0x90 [ 73.595907][ T434] flush_to_ldisc+0x1aa/0x3a0 [ 73.600594][ T434] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 73.606278][ T434] process_one_work+0x856/0x1630 [ 73.611230][ T434] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 73.616602][ T434] ? lock_acquire+0x194/0x410 [ 73.621285][ T434] worker_thread+0x85/0xb60 [ 73.625935][ T434] ? __kthread_parkme+0x47/0x1a0 [ 73.630879][ T434] kthread+0x331/0x3f0 [ 73.635557][ T434] ? process_one_work+0x1630/0x1630 [ 73.640758][ T434] ? kthread_mod_delayed_work+0x190/0x190 [ 73.646608][ T434] ret_from_fork+0x24/0x30 [ 73.651030][ T434] [ 73.653354][ T434] Allocated by task 8294: [ 73.657683][ T434] save_stack+0x21/0x90 [ 73.661838][ T434] __kasan_kmalloc.constprop.17+0xc7/0xd0 [ 73.667565][ T434] kasan_kmalloc+0x9/0x10 [ 73.671894][ T434] __kmalloc_node+0x4d/0x70 [ 73.676399][ T434] kvmalloc_node+0x6a/0x80 [ 73.680810][ T434] alloc_netdev_mqs+0x5d/0xca0 [ 73.685585][ T434] sixpack_open+0xe0/0x9fb [ 73.690007][ T434] tty_ldisc_open.isra.3+0x78/0xc0 [ 73.695114][ T434] tty_set_ldisc+0x238/0x5b0 [ 73.699810][ T434] tty_ioctl+0x332/0x12f0 [ 73.704138][ T434] do_vfs_ioctl+0x196/0x1190 [ 73.708723][ T434] ksys_ioctl+0x62/0x90 [ 73.712878][ T434] __x64_sys_ioctl+0x6e/0xb0 [ 73.717472][ T434] do_syscall_64+0xca/0x5f0 [ 73.721977][ T434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.727865][ T434] [ 73.730191][ T434] Freed by task 7990: [ 73.734174][ T434] save_stack+0x21/0x90 [ 73.738324][ T434] __kasan_slab_free+0x102/0x150 [ 73.743262][ T434] kasan_slab_free+0xe/0x10 [ 73.747763][ T434] kfree+0x108/0x2c0 [ 73.751659][ T434] tomoyo_realpath_from_path+0x154/0x620 [ 73.757289][ T434] tomoyo_path_perm+0x203/0x380 [ 73.762139][ T434] tomoyo_inode_getattr+0x13/0x20 [ 73.767164][ T434] security_inode_getattr+0xb0/0x100 [ 73.772451][ T434] vfs_getattr+0x1c/0x40 [ 73.776795][ T434] vfs_statx+0xd8/0x150 [ 73.780950][ T434] __do_sys_newstat+0x85/0xe0 [ 73.785740][ T434] __x64_sys_newstat+0x4f/0x70 [ 73.790616][ T434] do_syscall_64+0xca/0x5f0 [ 73.795120][ T434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.801010][ T434] [ 73.803337][ T434] The buggy address belongs to the object at ffff88809622e000 [ 73.803337][ T434] which belongs to the cache kmalloc-4k of size 4096 [ 73.817386][ T434] The buggy address is located 78 bytes to the right of [ 73.817386][ T434] 4096-byte region [ffff88809622e000, ffff88809622f000) [ 73.831178][ T434] The buggy address belongs to the page: [ 73.836813][ T434] page:ffffea0002588b80 refcount:1 mapcount:0 mapping:ffff8880aa402000 index:0x0 compound_mapcount: 0 [ 73.847741][ T434] raw: 00fffe0000010200 ffffea00025fd588 ffffea00024eaa08 ffff8880aa402000 [ 73.856456][ T434] raw: 0000000000000000 ffff88809622e000 0000000100000001 0000000000000000 [ 73.865039][ T434] page dumped because: kasan: bad access detected [ 73.871446][ T434] [ 73.873770][ T434] Memory state around the buggy address: [ 73.879396][ T434] ffff88809622ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.887593][ T434] ffff88809622ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.895659][ T434] >ffff88809622f000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.903723][ T434] ^ [ 73.910830][ T434] ffff88809622f080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.918893][ T434] ffff88809622f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.926951][ T434] ================================================================== [ 73.935141][ T434] Disabling lock debugging due to kernel taint [ 73.951168][ T434] Kernel panic - not syncing: panic_on_warn set ... [ 73.957787][ T434] CPU: 0 PID: 434 Comm: kworker/u4:6 Tainted: G B 5.5.0-rc7-syzkaller #0 [ 73.967574][ T434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.977631][ T434] Workqueue: events_unbound flush_to_ldisc [ 73.983661][ T434] Call Trace: [ 73.984831][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.986949][ T434] dump_stack+0x12d/0x187 [ 73.986957][ T434] ? decode_data.part.1+0x220/0x280 [ 73.986964][ T434] panic+0x22a/0x4e3 [ 73.986968][ T434] ? add_taint.cold.7+0x11/0x11 [ 73.986975][ T434] ? ___preempt_schedule+0x16/0x18 [ 73.986982][ T434] ? decode_data.part.1+0x23c/0x280 [ 74.023004][ T434] end_report+0x47/0x4f [ 74.027196][ T434] __kasan_report.cold.11+0xe/0x3a [ 74.032301][ T434] ? decode_data.part.1+0x23c/0x280 [ 74.037584][ T434] ? trace_hardirqs_on_caller+0x111/0x1a0 [ 74.043319][ T434] ? decode_data.part.1+0x23c/0x280 [ 74.048517][ T434] kasan_report+0x12/0x20 [ 74.052885][ T434] __asan_report_store1_noabort+0x17/0x20 [ 74.058603][ T434] decode_data.part.1+0x23c/0x280 [ 74.063628][ T434] sixpack_receive_buf+0x7a8/0x12c0 [ 74.068850][ T434] ? __init_ldsem+0x170/0x170 [ 74.073529][ T434] tty_ldisc_receive_buf+0xff/0x1b0 [ 74.078827][ T434] tty_port_default_receive_buf+0x5f/0x90 [ 74.084546][ T434] flush_to_ldisc+0x1aa/0x3a0 [ 74.089216][ T434] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 74.094762][ T434] process_one_work+0x856/0x1630 [ 74.099827][ T434] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 74.105256][ T434] ? lock_acquire+0x194/0x410 [ 74.109931][ T434] worker_thread+0x85/0xb60 [ 74.114439][ T434] ? __kthread_parkme+0x47/0x1a0 [ 74.119408][ T434] kthread+0x331/0x3f0 [ 74.123474][ T434] ? process_one_work+0x1630/0x1630 [ 74.128667][ T434] ? kthread_mod_delayed_work+0x190/0x190 [ 74.134398][ T434] ret_from_fork+0x24/0x30 [ 74.140144][ T434] Kernel Offset: disabled [ 74.144574][ T434] Rebooting in 86400 seconds..