syzkaller login: [ 56.956677][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 56.956684][ T26] audit: type=1400 audit(1581136086.747:42): avc: denied { map } for pid=8200 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 58.760297][ T26] audit: type=1400 audit(1581136088.547:43): avc: denied { integrity } for pid=8200 comm="syz-fuzzer" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 58.896350][ T8219] IPVS: ftp: loaded support on port[0] = 21 [ 59.231699][ T261] tipc: TX() has been purged, node left! [ 59.393473][ T8203] can: request_module (can-proto-0) failed. [ 62.184311][ T8203] can: request_module (can-proto-0) failed. [ 62.353382][ T26] audit: type=1400 audit(1581136092.147:44): avc: denied { create } for pid=8200 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 62.377600][ T26] audit: type=1400 audit(1581136092.147:45): avc: denied { create } for pid=8200 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 62.402592][ T26] audit: type=1400 audit(1581136092.147:46): avc: denied { create } for pid=8200 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. 2020/02/08 04:28:19 parsed 1 programs 2020/02/08 04:28:20 executed programs: 0 [ 70.459066][ T8293] IPVS: ftp: loaded support on port[0] = 21 [ 70.564498][ T8295] IPVS: ftp: loaded support on port[0] = 21 [ 70.585668][ T8298] IPVS: ftp: loaded support on port[0] = 21 [ 70.626785][ T8303] IPVS: ftp: loaded support on port[0] = 21 [ 70.641387][ T8302] IPVS: ftp: loaded support on port[0] = 21 [ 70.653958][ T8293] chnl_net:caif_netlink_parms(): no params data found [ 70.684092][ T8301] IPVS: ftp: loaded support on port[0] = 21 [ 70.749073][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.756686][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.764627][ T8293] device bridge_slave_0 entered promiscuous mode [ 70.773909][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.780949][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.788562][ T8293] device bridge_slave_1 entered promiscuous mode [ 70.838253][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.850196][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.872883][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 70.900664][ T8293] team0: Port device team_slave_0 added [ 70.929564][ T8293] team0: Port device team_slave_1 added [ 70.940250][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.947614][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.955476][ T8303] device bridge_slave_0 entered promiscuous mode [ 70.972516][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.979591][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.987397][ T8303] device bridge_slave_1 entered promiscuous mode [ 71.048855][ T8295] chnl_net:caif_netlink_parms(): no params data found [ 71.067287][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.076514][ T8302] chnl_net:caif_netlink_parms(): no params data found [ 71.105804][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.115217][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 71.174354][ T8293] device hsr_slave_0 entered promiscuous mode [ 71.222091][ T8293] device hsr_slave_1 entered promiscuous mode [ 71.269886][ T8298] chnl_net:caif_netlink_parms(): no params data found [ 71.304085][ T8295] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.311301][ T8295] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.319828][ T8295] device bridge_slave_0 entered promiscuous mode [ 71.332856][ T8303] team0: Port device team_slave_0 added [ 71.353919][ T8295] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.361024][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.370725][ T8295] device bridge_slave_1 entered promiscuous mode [ 71.387307][ T8303] team0: Port device team_slave_1 added [ 71.416925][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.424170][ T8293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.432069][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.439270][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.454569][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.464794][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.472601][ T8302] device bridge_slave_0 entered promiscuous mode [ 71.485930][ T8295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.496807][ T8295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.554273][ T8303] device hsr_slave_0 entered promiscuous mode [ 71.602021][ T8303] device hsr_slave_1 entered promiscuous mode [ 71.661815][ T8303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.669786][ T8303] Cannot create hsr debugfs directory [ 71.676325][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.683847][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.691558][ T8302] device bridge_slave_1 entered promiscuous mode [ 71.703445][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.710527][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.719064][ T8301] device bridge_slave_0 entered promiscuous mode [ 71.730825][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.738041][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.746538][ T8301] device bridge_slave_1 entered promiscuous mode [ 71.764312][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.772842][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.807348][ T8295] team0: Port device team_slave_0 added [ 71.817792][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.825148][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.833737][ T8298] device bridge_slave_0 entered promiscuous mode [ 71.842520][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.854219][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.864839][ T8302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.875243][ T8295] team0: Port device team_slave_1 added [ 71.882171][ T8302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.899358][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.907464][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.915352][ T8298] device bridge_slave_1 entered promiscuous mode [ 71.939093][ T8298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.950309][ T8298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.962502][ T8302] team0: Port device team_slave_0 added [ 71.969944][ T8302] team0: Port device team_slave_1 added [ 71.988961][ T8301] team0: Port device team_slave_0 added [ 72.000018][ T8301] team0: Port device team_slave_1 added [ 72.063377][ T8302] device hsr_slave_0 entered promiscuous mode [ 72.114682][ T8302] device hsr_slave_1 entered promiscuous mode [ 72.161744][ T8302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.169457][ T8302] Cannot create hsr debugfs directory [ 72.233289][ T8295] device hsr_slave_0 entered promiscuous mode [ 72.282041][ T8295] device hsr_slave_1 entered promiscuous mode [ 72.321807][ T8295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.329407][ T8295] Cannot create hsr debugfs directory [ 72.336797][ T8298] team0: Port device team_slave_0 added [ 72.393572][ T8301] device hsr_slave_0 entered promiscuous mode [ 72.441885][ T8301] device hsr_slave_1 entered promiscuous mode [ 72.491825][ T8301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.499408][ T8301] Cannot create hsr debugfs directory [ 72.512722][ T8298] team0: Port device team_slave_1 added [ 72.554468][ T8298] device hsr_slave_0 entered promiscuous mode [ 72.592012][ T8298] device hsr_slave_1 entered promiscuous mode [ 72.631786][ T8298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.639432][ T8298] Cannot create hsr debugfs directory [ 72.670555][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.699911][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.728874][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.737531][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.772890][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.781443][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.790036][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.802157][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.836986][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.846040][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.855125][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.862237][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.870099][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.878666][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.886908][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.893972][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.903381][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.926980][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.935557][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.944522][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.951697][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.960398][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.969181][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.977750][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.984827][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.997018][ T8302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.014699][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.023511][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.049603][ T8295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.066222][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.075332][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.084223][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.093593][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.102279][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.110712][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.119133][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.126837][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.134472][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.143271][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.151466][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.159142][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.166966][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.174726][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.185018][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.200153][ T8303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.212721][ T8303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.225818][ T8295] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.233105][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.244915][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.253725][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.262055][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.270535][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.279086][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.287322][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.295792][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.304371][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.313005][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.321482][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.333660][ T8302] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.344224][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.367325][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.378471][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.387628][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.394858][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.403015][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.411522][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.420197][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.427512][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.451482][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.462257][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.470534][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.483746][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.495202][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.504358][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.511471][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.519255][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.526988][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.535066][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.543835][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.552206][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.559494][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.568324][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.604125][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.613453][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.622386][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.630851][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.637973][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.645720][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.654941][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.664026][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.672378][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.679427][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.686973][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.695662][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.704118][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.712491][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.720967][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.729505][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.738340][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.746941][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.755666][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.764183][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.772522][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.780652][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.789030][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.796726][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.816394][ T8298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.840565][ T8301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.851445][ T8301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.863448][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.872223][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.880642][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.889390][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.898134][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.906694][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.915448][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.923977][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.932382][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.941262][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.949451][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.965327][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.976246][ T26] audit: type=1400 audit(1581136103.767:47): avc: denied { associate } for pid=8293 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 73.997739][ T8301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.029663][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.045087][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.059192][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.068282][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.077253][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.086214][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.094600][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.102445][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.114666][ T8302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.126134][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.138677][ T8295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.150911][ T8298] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.164613][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.182111][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.213960][ T8302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.225537][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.251046][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.265530][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.272689][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.281217][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.301367][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.311195][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.334434][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.341535][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.372248][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.387951][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.407506][ C1] sched: DL replenish lagged too much [ 74.410137][ T8295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.447679][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.457796][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.484985][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.510220][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.530277][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.539078][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.548380][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.568757][ T8298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.581085][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.590576][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.605660][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.640411][ T8298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.132777][ T8332] ------------[ cut here ]------------ [ 75.138635][ T8332] WARNING: CPU: 0 PID: 8332 at kernel/sched/deadline.c:660 enqueue_task_dl+0x1cad/0x2d20 [ 75.148413][ T8332] Kernel panic - not syncing: panic_on_warn set ... [ 75.155084][ T8332] CPU: 0 PID: 8332 Comm: syz-executor.5 Not tainted 5.5.0-syzkaller #0 [ 75.163298][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.173333][ T8332] Call Trace: [ 75.176599][ T8332] dump_stack+0x12d/0x187 [ 75.181002][ T8332] ? enqueue_task_dl+0x1cad/0x2d20 [ 75.186096][ T8332] panic+0x22a/0x4e3 [ 75.189974][ T8332] ? add_taint.cold.7+0x11/0x11 [ 75.194843][ T8332] __warn.cold.10+0x25/0x2a [ 75.199588][ T8332] ? enqueue_task_dl+0x1cad/0x2d20 [ 75.204679][ T8332] report_bug+0x1b0/0x270 [ 75.208992][ T8332] do_error_trap+0x11b/0x200 [ 75.213615][ T8332] do_invalid_op+0x36/0x40 [ 75.218052][ T8332] ? enqueue_task_dl+0x1cad/0x2d20 [ 75.223150][ T8332] invalid_op+0x23/0x30 [ 75.227284][ T8332] RIP: 0010:enqueue_task_dl+0x1cad/0x2d20 [ 75.233036][ T8332] Code: 89 4d c8 e8 e5 05 50 00 be ff ff 37 00 4c 8b 45 a8 48 8b 55 b0 48 c1 e6 2a 48 8b 4d b8 4c 8b 55 c0 44 8b 4d c8 e9 e1 e8 ff ff <0f> 0b e9 db f4 ff ff 48 89 d7 4c 89 45 b0 48 89 4d b8 44 89 4d c0 [ 75.252822][ T8332] RSP: 0018:ffff888095ec7c98 EFLAGS: 00010002 [ 75.258873][ T8332] RAX: 0000000000000000 RBX: ffff8880a96c0080 RCX: ffff8880a96c02f8 [ 75.266945][ T8332] RDX: ffff8880a96c0340 RSI: 0000000000000002 RDI: ffffffff88319160 [ 75.274927][ T8332] RBP: ffff888095ec7d10 R08: ffff8880a96c00bc R09: 00000011515ced42 [ 75.282924][ T8332] R10: 1ffffffff106322c R11: ffff8880aec3835b R12: ffff8880a96c034c [ 75.290888][ T8332] R13: ffff8880aec374c0 R14: ffff8880aec374c0 R15: ffffffff89252174 [ 75.298853][ T8332] ? enqueue_task_dl+0x17d9/0x2d20 [ 75.303956][ T8332] enqueue_task+0xad/0x340 [ 75.308412][ T8332] __sched_setscheduler+0xf03/0x2260 [ 75.313785][ T8332] ? cpu_cgroup_fork+0xd0/0xd0 [ 75.318861][ T8332] ? __kasan_check_read+0x11/0x20 [ 75.323889][ T8332] __x64_sys_sched_setattr+0x1c7/0x330 [ 75.329398][ T8332] ? __ia32_sys_sched_setparam+0x80/0x80 [ 75.335014][ T8332] ? do_syscall_64+0x21/0x5f0 [ 75.339672][ T8332] ? trace_hardirqs_on+0x28/0x1a0 [ 75.344683][ T8332] do_syscall_64+0xca/0x5f0 [ 75.349176][ T8332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.355041][ T8332] RIP: 0033:0x459819 [ 75.358982][ T8332] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.378570][ T8332] RSP: 002b:00007f0e4847bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000013a [ 75.387001][ T8332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 75.395016][ T8332] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 [ 75.403030][ T8332] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 75.410984][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e4847c6d4 [ 75.419001][ T8332] R13: 00000000004c6d52 R14: 00000000004dc010 R15: 00000000ffffffff [ 75.426960][ T8332] [ 75.426961][ T8332] ====================================================== [ 75.426962][ T8332] WARNING: possible circular locking dependency detected [ 75.426963][ T8332] 5.5.0-syzkaller #0 Not tainted [ 75.426964][ T8332] ------------------------------------------------------ [ 75.426965][ T8332] syz-executor.5/8332 is trying to acquire lock: [ 75.426966][ T8332] ffffffff8859a5b8 ((console_sem).lock){-...}, at: down_trylock+0x13/0x70 [ 75.426969][ T8332] [ 75.426970][ T8332] but task is already holding lock: [ 75.426970][ T8332] ffff8880aec374d8 (&rq->lock){-.-.}, at: task_rq_lock+0xc1/0x2c0 [ 75.426973][ T8332] [ 75.426974][ T8332] which lock already depends on the new lock. [ 75.426974][ T8332] [ 75.426975][ T8332] [ 75.426976][ T8332] the existing dependency chain (in reverse order) is: [ 75.426976][ T8332] [ 75.426977][ T8332] -> #2 (&rq->lock){-.-.}: [ 75.426980][ T8332] _raw_spin_lock+0x2d/0x40 [ 75.426980][ T8332] task_fork_fair+0x65/0x4b0 [ 75.426981][ T8332] sched_fork+0x3ad/0x8b0 [ 75.426982][ T8332] copy_process+0x1b71/0x6380 [ 75.426983][ T8332] _do_fork+0xec/0xc30 [ 75.426983][ T8332] kernel_thread+0xa3/0xd0 [ 75.426984][ T8332] rest_init+0x21/0x26f [ 75.426985][ T8332] arch_call_rest_init+0x9/0xc [ 75.426986][ T8332] start_kernel+0xba3/0xbe2 [ 75.426986][ T8332] x86_64_start_reservations+0x29/0x2b [ 75.426987][ T8332] x86_64_start_kernel+0x76/0x79 [ 75.426988][ T8332] secondary_startup_64+0xa4/0xb0 [ 75.426989][ T8332] [ 75.426989][ T8332] -> #1 (&p->pi_lock){-.-.}: [ 75.426992][ T8332] _raw_spin_lock_irqsave+0x99/0xd0 [ 75.426992][ T8332] try_to_wake_up+0xa6/0x1930 [ 75.426993][ T8332] wake_up_process+0x10/0x20 [ 75.426994][ T8332] __up.isra.1+0x136/0x1a0 [ 75.426994][ T8332] up+0x95/0xe0 [ 75.426995][ T8332] __up_console_sem+0x9b/0x150 [ 75.426996][ T8332] console_unlock+0x531/0xbd0 [ 75.426997][ T8332] vprintk_emit+0x19a/0x560 [ 75.426997][ T8332] vprintk_default+0x1a/0x20 [ 75.426998][ T8332] vprintk_func+0x49/0x12c [ 75.426999][ T8332] printk+0x9a/0xc0 [ 75.427000][ T8332] kauditd_hold_skb.cold.28+0x3a/0x49 [ 75.427000][ T8332] kauditd_send_queue+0x119/0x160 [ 75.427001][ T8332] kauditd_thread+0x555/0x800 [ 75.427002][ T8332] kthread+0x331/0x3f0 [ 75.427003][ T8332] ret_from_fork+0x24/0x30 [ 75.427003][ T8332] [ 75.427003][ T8332] -> #0 ((console_sem).lock){-...}: [ 75.427006][ T8332] __lock_acquire+0x2899/0x4ef0 [ 75.427007][ T8332] lock_acquire+0x194/0x410 [ 75.427008][ T8332] _raw_spin_lock_irqsave+0x99/0xd0 [ 75.427008][ T8332] down_trylock+0x13/0x70 [ 75.427009][ T8332] __down_trylock_console_sem+0x93/0x190 [ 75.427010][ T8332] console_trylock+0x11/0x50 [ 75.427011][ T8332] vprintk_emit+0x18d/0x560 [ 75.427011][ T8332] vprintk_default+0x1a/0x20 [ 75.427012][ T8332] vprintk_func+0x49/0x12c [ 75.427013][ T8332] printk+0x9a/0xc0 [ 75.427014][ T8332] report_bug.cold.2+0x34/0x59 [ 75.427014][ T8332] do_error_trap+0x11b/0x200 [ 75.427015][ T8332] do_invalid_op+0x36/0x40 [ 75.427016][ T8332] invalid_op+0x23/0x30 [ 75.427017][ T8332] enqueue_task_dl+0x1cad/0x2d20 [ 75.427017][ T8332] enqueue_task+0xad/0x340 [ 75.427018][ T8332] __sched_setscheduler+0xf03/0x2260 [ 75.427019][ T8332] __x64_sys_sched_setattr+0x1c7/0x330 [ 75.427020][ T8332] do_syscall_64+0xca/0x5f0 [ 75.427021][ T8332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.427021][ T8332] [ 75.427022][ T8332] other info that might help us debug this: [ 75.427022][ T8332] [ 75.427023][ T8332] Chain exists of: [ 75.427024][ T8332] (console_sem).lock --> &p->pi_lock --> &rq->lock [ 75.427027][ T8332] [ 75.427028][ T8332] Possible unsafe locking scenario: [ 75.427028][ T8332] [ 75.427029][ T8332] CPU0 CPU1 [ 75.427030][ T8332] ---- ---- [ 75.427030][ T8332] lock(&rq->lock); [ 75.427032][ T8332] lock(&p->pi_lock); [ 75.427034][ T8332] lock(&rq->lock); [ 75.427035][ T8332] lock((console_sem).lock); [ 75.427037][ T8332] [ 75.427037][ T8332] *** DEADLOCK *** [ 75.427038][ T8332] [ 75.427039][ T8332] 3 locks held by syz-executor.5/8332: [ 75.427039][ T8332] #0: ffffffff885d26f0 (&cpuset_rwsem){++++}, at: __sched_setscheduler+0xcf2/0x2260 [ 75.427042][ T8332] #1: ffff8880a96c0870 (&p->pi_lock){-.-.}, at: task_rq_lock+0x62/0x2c0 [ 75.427045][ T8332] #2: ffff8880aec374d8 (&rq->lock){-.-.}, at: task_rq_lock+0xc1/0x2c0 [ 75.427049][ T8332] [ 75.427050][ T8332] stack backtrace: [ 75.427051][ T8332] CPU: 0 PID: 8332 Comm: syz-executor.5 Not tainted 5.5.0-syzkaller #0 [ 75.427052][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.427053][ T8332] Call Trace: [ 75.427053][ T8332] dump_stack+0x12d/0x187 [ 75.427054][ T8332] print_circular_bug.isra.39.cold.58+0x15a/0x169 [ 75.427055][ T8332] check_noncircular+0x349/0x400 [ 75.427056][ T8332] ? print_circular_bug.isra.39+0x260/0x260 [ 75.427056][ T8332] ? check_path+0x26/0x40 [ 75.427057][ T8332] ? __kasan_check_read+0x11/0x20 [ 75.427058][ T8332] ? mark_lock+0xc5/0x11d0 [ 75.427058][ T8332] __lock_acquire+0x2899/0x4ef0 [ 75.427059][ T8332] ? mark_lock+0xc5/0x11d0 [ 75.427060][ T8332] ? mark_held_locks+0x130/0x130 [ 75.427060][ T8332] ? find_held_lock+0x36/0x1d0 [ 75.427061][ T8332] lock_acquire+0x194/0x410 [ 75.427062][ T8332] ? down_trylock+0x13/0x70 [ 75.427063][ T8332] ? vprintk_emit+0x18d/0x560 [ 75.427063][ T8332] _raw_spin_lock_irqsave+0x99/0xd0 [ 75.427064][ T8332] ? down_trylock+0x13/0x70 [ 75.427065][ T8332] down_trylock+0x13/0x70 [ 75.427065][ T8332] ? vprintk_emit+0x18d/0x560 [ 75.427066][ T8332] __down_trylock_console_sem+0x93/0x190 [ 75.427067][ T8332] console_trylock+0x11/0x50 [ 75.427070][ T8332] vprintk_emit+0x18d/0x560 [ 75.427070][ T8332] ? enqueue_task_dl+0x1cad/0x2d20 [ 75.427071][ T8332] vprintk_default+0x1a/0x20 [ 75.427072][ T8332] vprintk_func+0x49/0x12c [ 75.427073][ T8332] ? enqueue_task_dl+0x1cad/0x2d20 [ 75.427073][ T8332] printk+0x9a/0xc0 [ 75.427074][ T8332] ? kmsg_dump_rewind_nolock+0xdf/0xdf [ 75.427075][ T8332] ? ist_end_non_atomic+0x10/0x10 [ 75.427075][ T8332] report_bug.cold.2+0x34/0x59 [ 75.427076][ T8332] do_error_trap+0x11b/0x200 [ 75.427077][ T8332] do_invalid_op+0x36/0x40 [ 75.427078][ T8332] ? enqueue_task_dl+0x1cad/0x2d20 [ 75.427078][ T8332] invalid_op+0x23/0x30 [ 75.427079][ T8332] RIP: 0010:enqueue_task_dl+0x1cad/0x2d20 [ 75.427081][ T8332] Code: 89 4d c8 e8 e5 05 50 00 be ff ff 37 00 4c 8b 45 a8 48 8b 55 b0 48 c1 e6 2a 48 8b 4d b8 4c 8b 55 c0 44 8b 4d c8 e9 e1 e8 ff ff <0f> 0b e9 db f4 ff ff 48 89 d7 4c 89 45 b0 48 89 4d b8 44 89 4d c0 [ 75.427082][ T8332] RSP: 0018:ffff888095ec7c98 EFLAGS: 00010002 [ 75.427083][ T8332] RAX: 0000000000000000 RBX: ffff8880a96c0080 RCX: ffff8880a96c02f8 [ 75.427084][ T8332] RDX: ffff8880a96c0340 RSI: 0000000000000002 RDI: ffffffff88319160 [ 75.427085][ T8332] RBP: ffff888095ec7d10 R08: ffff8880a96c00bc R09: 00000011515ced42 [ 75.427086][ T8332] R10: 1ffffffff106322c R11: ffff8880aec3835b R12: ffff8880a96c034c [ 75.427087][ T8332] R13: ffff8880aec374c0 R14: ffff8880aec374c0 R15: ffffffff89252174 [ 75.427088][ T8332] ? enqueue_task_dl+0x17d9/0x2d20 [ 75.427089][ T8332] enqueue_task+0xad/0x340 [ 75.427089][ T8332] __sched_setscheduler+0xf03/0x2260 [ 75.427090][ T8332] ? cpu_cgroup_fork+0xd0/0xd0 [ 75.427091][ T8332] ? __kasan_check_read+0x11/0x20 [ 75.427092][ T8332] __x64_sys_sched_setattr+0x1c7/0x330 [ 75.427092][ T8332] ? __ia32_sys_sched_setparam+0x80/0x80 [ 75.427093][ T8332] ? do_syscall_64+0x21/0x5f0 [ 75.427094][ T8332] ? trace_hardirqs_on+0x28/0x1a0 [ 75.427095][ T8332] do_syscall_64+0xca/0x5f0 [ 75.427095][ T8332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.427096][ T8332] RIP: 0033:0x459819 [ 75.427098][ T8332] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.427099][ T8332] RSP: 002b:00007f0e4847bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000013a [ 75.427100][ T8332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 75.427101][ T8332] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 [ 75.427102][ T8332] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 75.427103][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e4847c6d4 [ 75.427104][ T8332] R13: 00000000004c6d52 R14: 00000000004dc010 R15: 00000000ffffffff [ 76.559098][ T8332] Shutting down cpus with NMI [ 77.405848][ T8332] Kernel Offset: disabled [ 77.410166][ T8332] Rebooting in 86400 seconds..