[....] Starting file context maintaining daemon: restorecond[ 100.045542][ T26] audit: type=1400 audit(1579150753.116:37): avc: denied { watch } for pid=10578 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 100.070410][ T26] audit: type=1400 audit(1579150753.116:38): avc: denied { watch } for pid=10578 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [ 100.219606][ T26] audit: type=1800 audit(1579150753.286:39): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 100.245297][ T26] audit: type=1800 audit(1579150753.316:40): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 100.480313][ T26] audit: type=1400 audit(1579150753.546:41): avc: denied { map } for pid=10639 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.5' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 107.503594][ T26] audit: type=1400 audit(1579150760.576:42): avc: denied { map } for pid=10662 comm="syz-executor790" path="/root/syz-executor790779638" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 107.509414][T10662] list_del corruption, ffff8880a44fac00->prev is LIST_POISON2 (dead000000000122) [ 107.530851][ T26] audit: type=1400 audit(1579150760.576:43): avc: denied { create } for pid=10662 comm="syz-executor790" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 107.531295][ T26] audit: type=1400 audit(1579150760.576:44): avc: denied { write } for pid=10662 comm="syz-executor790" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 107.541078][T10662] ------------[ cut here ]------------ [ 107.595878][T10662] kernel BUG at lib/list_debug.c:48! [ 107.602489][T10662] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 107.608669][T10662] CPU: 0 PID: 10662 Comm: syz-executor790 Not tainted 5.5.0-rc6-syzkaller #0 [ 107.617543][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.631067][T10662] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 107.637550][T10662] Code: be fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 66 71 88 e8 c0 e7 be fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 66 71 88 e8 ac e7 be fd <0f> 0b 4c 89 f6 48 c7 c7 40 67 71 88 e8 9b e7 be fd 0f 0b cc cc cc [ 107.657264][T10662] RSP: 0018:ffffc90001f97338 EFLAGS: 00010286 [ 107.663311][T10662] RAX: 000000000000004e RBX: ffff8880a44fac00 RCX: 0000000000000000 [ 107.671277][T10662] RDX: 0000000000000000 RSI: ffffffff815e5396 RDI: fffff520003f2e59 [ 107.679345][T10662] RBP: ffffc90001f97350 R08: 000000000000004e R09: ffffed1015d06621 [ 107.687407][T10662] R10: ffffed1015d06620 R11: ffff8880ae833107 R12: dead000000000122 [ 107.695371][T10662] R13: ffff88809704e970 R14: ffff8880a44fac00 R15: ffff8880a44fac08 [ 107.703345][T10662] FS: 00000000023cb880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 107.712262][T10662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.718832][T10662] CR2: 00005633f9c5b140 CR3: 000000008e266000 CR4: 00000000001406f0 [ 107.726802][T10662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.734821][T10662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.742776][T10662] Call Trace: [ 107.746049][T10662] nft_obj_del+0xcb/0x1f0 [ 107.750531][T10662] ? nft_unregister_flowtable_type+0x130/0x130 [ 107.756711][T10662] ? nf_tables_getflowtable+0x4c0/0x4c0 [ 107.762240][T10662] ? nft_objname_hash+0x610/0x610 [ 107.767295][T10662] ? nft_chain_hash_cmp+0x80/0x80 [ 107.772307][T10662] nf_tables_commit+0x1339/0x3b30 [ 107.777323][T10662] ? nla_memcpy+0xb0/0xb0 [ 107.781703][T10662] ? nf_tables_setelem_notify.constprop.0+0x1f0/0x1f0 [ 107.788448][T10662] ? __nla_parse+0x43/0x60 [ 107.792854][T10662] nfnetlink_rcv_batch+0xc78/0x17a0 [ 107.798044][T10662] ? nf_tables_dump_chains+0x6c1/0x8e0 [ 107.803539][T10662] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 107.809337][T10662] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 107.815026][T10662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.821254][T10662] ? __nla_validate_parse+0x2d0/0x1ee0 [ 107.826788][T10662] ? selinux_capable+0x36/0x40 [ 107.831541][T10662] ? nla_memcpy+0xb0/0xb0 [ 107.835889][T10662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.842116][T10662] ? ns_capable_common+0x93/0x100 [ 107.847121][T10662] ? __nla_parse+0x43/0x60 [ 107.851542][T10662] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 107.857251][T10662] nfnetlink_rcv+0x3e7/0x460 [ 107.861827][T10662] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 107.867269][T10662] ? netlink_deliver_tap+0x24a/0xbe0 [ 107.872578][T10662] ? __kasan_check_write+0x14/0x20 [ 107.877683][T10662] netlink_unicast+0x58c/0x7d0 [ 107.882437][T10662] ? netlink_attachskb+0x870/0x870 [ 107.887537][T10662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.893768][T10662] netlink_sendmsg+0x91c/0xea0 [ 107.898521][T10662] ? netlink_unicast+0x7d0/0x7d0 [ 107.903442][T10662] ? tomoyo_socket_sendmsg+0x26/0x30 [ 107.908714][T10662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.914950][T10662] ? security_socket_sendmsg+0x8d/0xc0 [ 107.920394][T10662] ? netlink_unicast+0x7d0/0x7d0 [ 107.925314][T10662] sock_sendmsg+0xd7/0x130 [ 107.929716][T10662] ____sys_sendmsg+0x753/0x880 [ 107.934503][T10662] ? kernel_sendmsg+0x50/0x50 [ 107.939168][T10662] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 107.945307][T10662] ___sys_sendmsg+0x100/0x170 [ 107.949987][T10662] ? sendmsg_copy_msghdr+0x70/0x70 [ 107.955077][T10662] ? __kasan_check_read+0x11/0x20 [ 107.960086][T10662] ? __lock_acquire+0x8a0/0x4a00 [ 107.965070][T10662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.971341][T10662] ? __this_cpu_preempt_check+0x35/0x190 [ 107.976961][T10662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.983187][T10662] ? percpu_counter_add_batch+0x13c/0x190 [ 107.988883][T10662] ? __fd_install+0x1bc/0x640 [ 107.993606][T10662] ? find_held_lock+0x35/0x130 [ 107.998354][T10662] ? __fd_install+0x1bc/0x640 [ 108.003019][T10662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.009352][T10662] ? __fget_light+0x1a9/0x230 [ 108.014006][T10662] ? __fdget+0x1b/0x20 [ 108.018069][T10662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 108.024294][T10662] __sys_sendmsg+0x105/0x1d0 [ 108.028863][T10662] ? __sys_sendmsg_sock+0xc0/0xc0 [ 108.033880][T10662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 108.039326][T10662] ? do_syscall_64+0x26/0x790 [ 108.044001][T10662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 108.050056][T10662] ? do_syscall_64+0x26/0x790 [ 108.054723][T10662] __x64_sys_sendmsg+0x78/0xb0 [ 108.059478][T10662] do_syscall_64+0xfa/0x790 [ 108.063965][T10662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 108.069842][T10662] RIP: 0033:0x4406a9 [ 108.073725][T10662] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 108.093447][T10662] RSP: 002b:00007ffc91c96b78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.101968][T10662] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004406a9 [ 108.109934][T10662] RDX: 0000000000042000 RSI: 0000000020000140 RDI: 0000000000000004 [ 108.117896][T10662] RBP: 00000000006ca018 R08: 0000000000000001 R09: 00000000004002c8 [ 108.125851][T10662] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000401f30 [ 108.133824][T10662] R13: 0000000000401fc0 R14: 0000000000000000 R15: 0000000000000000 [ 108.141782][T10662] Modules linked in: [ 108.146410][T10662] ---[ end trace 2ddc8e072ef81988 ]--- [ 108.151931][T10662] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 108.158338][T10662] Code: be fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 66 71 88 e8 c0 e7 be fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 66 71 88 e8 ac e7 be fd <0f> 0b 4c 89 f6 48 c7 c7 40 67 71 88 e8 9b e7 be fd 0f 0b cc cc cc [ 108.178041][T10662] RSP: 0018:ffffc90001f97338 EFLAGS: 00010286 [ 108.184210][T10662] RAX: 000000000000004e RBX: ffff8880a44fac00 RCX: 0000000000000000 [ 108.192252][T10662] RDX: 0000000000000000 RSI: ffffffff815e5396 RDI: fffff520003f2e59 [ 108.200224][T10662] RBP: ffffc90001f97350 R08: 000000000000004e R09: ffffed1015d06621 [ 108.208235][T10662] R10: ffffed1015d06620 R11: ffff8880ae833107 R12: dead000000000122 [ 108.216258][T10662] R13: ffff88809704e970 R14: ffff8880a44fac00 R15: ffff8880a44fac08 [ 108.224381][T10662] FS: 00000000023cb880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 108.233327][T10662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.239897][T10662] CR2: 00005633f9c5b140 CR3: 000000008e266000 CR4: 00000000001406f0 [ 108.247914][T10662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.255918][T10662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.263945][T10662] Kernel panic - not syncing: Fatal exception [ 108.271630][T10662] Kernel Offset: disabled [ 108.275964][T10662] Rebooting in 86400 seconds..