[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.898209][ T26] audit: type=1800 audit(1570578456.745:25): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.920113][ T26] audit: type=1800 audit(1570578456.755:26): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.004871][ T26] audit: type=1800 audit(1570578456.755:27): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.31' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 74.992553][ T8951] ------------[ cut here ]------------ [ 74.998182][ T8951] ODEBUG: free active (active state 0) object type: timer_list hint: rfcomm_dlc_timeout+0x0/0x90 [ 75.008903][ T8951] WARNING: CPU: 0 PID: 8951 at lib/debugobjects.c:481 debug_print_object+0x168/0x250 [ 75.018357][ T8951] Kernel panic - not syncing: panic_on_warn set ... [ 75.025006][ T8951] CPU: 0 PID: 8951 Comm: syz-executor096 Not tainted 5.4.0-rc1+ #0 [ 75.032907][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.042959][ T8951] Call Trace: [ 75.046238][ T8951] dump_stack+0x172/0x1f0 [ 75.050554][ T8951] ? debug_print_object+0xd0/0x250 [ 75.055662][ T8951] panic+0x2dc/0x755 [ 75.059536][ T8951] ? add_taint.cold+0x16/0x16 [ 75.064208][ T8951] ? __kasan_check_write+0x14/0x20 [ 75.069303][ T8951] ? __warn.cold+0x14/0x3c [ 75.073698][ T8951] ? __warn+0xd9/0x1d0 [ 75.077749][ T8951] ? debug_print_object+0x168/0x250 [ 75.082932][ T8951] __warn.cold+0x2f/0x3c [ 75.087163][ T8951] ? debug_print_object+0x168/0x250 [ 75.092357][ T8951] report_bug+0x289/0x300 [ 75.096691][ T8951] do_error_trap+0x11b/0x200 [ 75.101276][ T8951] do_invalid_op+0x37/0x50 [ 75.105677][ T8951] ? debug_print_object+0x168/0x250 [ 75.110958][ T8951] invalid_op+0x23/0x30 [ 75.115105][ T8951] RIP: 0010:debug_print_object+0x168/0x250 [ 75.121029][ T8951] Code: dd 80 a7 e6 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 80 a7 e6 87 48 c7 c7 e0 9c e6 87 e8 70 af ff fd <0f> 0b 83 05 f3 15 81 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 75.140622][ T8951] RSP: 0018:ffff8880944df8d8 EFLAGS: 00010086 [ 75.146671][ T8951] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 75.154643][ T8951] RDX: 0000000000000000 RSI: ffffffff815cb5f6 RDI: ffffed101289bf0d [ 75.162742][ T8951] RBP: ffff8880944df918 R08: ffff8880863b61c0 R09: ffffed1015d04101 [ 75.170701][ T8951] R10: ffffed1015d04100 R11: ffff8880ae820807 R12: 0000000000000001 [ 75.178660][ T8951] R13: ffffffff88fb5380 R14: ffffffff816271e0 R15: ffff888098d574d0 [ 75.186630][ T8951] ? calc_wheel_index+0x220/0x220 [ 75.191650][ T8951] ? vprintk_func+0x86/0x189 [ 75.196311][ T8951] ? debug_print_object+0x168/0x250 [ 75.201500][ T8951] debug_check_no_obj_freed+0x2d4/0x43f [ 75.207243][ T8951] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 75.212794][ T8951] kfree+0xf8/0x2c0 [ 75.216600][ T8951] rfcomm_dlc_free+0x20/0x30 [ 75.221193][ T8951] rfcomm_dev_ioctl+0x183e/0x1b80 [ 75.226204][ T8951] ? mark_held_locks+0xa4/0xf0 [ 75.230953][ T8951] ? __local_bh_enable_ip+0x15a/0x270 [ 75.236324][ T8951] ? lock_sock_nested+0xe2/0x120 [ 75.241316][ T8951] ? __local_bh_enable_ip+0x15a/0x270 [ 75.246685][ T8951] ? rfcomm_dev_state_change+0x150/0x150 [ 75.252307][ T8951] ? __local_bh_enable_ip+0x15a/0x270 [ 75.257674][ T8951] rfcomm_sock_ioctl+0x90/0xb0 [ 75.262436][ T8951] sock_do_ioctl+0xd8/0x2f0 [ 75.266924][ T8951] ? compat_ifr_data_ioctl+0x160/0x160 [ 75.272371][ T8951] ? tomoyo_path_number_perm+0x459/0x520 [ 75.277998][ T8951] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 75.284230][ T8951] ? tomoyo_path_number_perm+0x263/0x520 [ 75.289863][ T8951] sock_ioctl+0x3ed/0x780 [ 75.294189][ T8951] ? dlci_ioctl_set+0x40/0x40 [ 75.298864][ T8951] ? __fd_install+0x1bc/0x640 [ 75.303529][ T8951] ? dlci_ioctl_set+0x40/0x40 [ 75.308197][ T8951] do_vfs_ioctl+0xdb6/0x13e0 [ 75.312774][ T8951] ? ioctl_preallocate+0x210/0x210 [ 75.317879][ T8951] ? __kasan_check_read+0x11/0x20 [ 75.322894][ T8951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.329112][ T8951] ? __fd_install+0x200/0x640 [ 75.333780][ T8951] ? tomoyo_file_ioctl+0x23/0x30 [ 75.338700][ T8951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.344920][ T8951] ? security_file_ioctl+0x8d/0xc0 [ 75.350137][ T8951] ksys_ioctl+0xab/0xd0 [ 75.354288][ T8951] __x64_sys_ioctl+0x73/0xb0 [ 75.358916][ T8951] do_syscall_64+0xfa/0x760 [ 75.363425][ T8951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.369315][ T8951] RIP: 0033:0x441229 [ 75.373714][ T8951] Code: e8 fc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.393302][ T8951] RSP: 002b:00007ffd0c807958 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.401700][ T8951] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441229 [ 75.409663][ T8951] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 75.418145][ T8951] RBP: 00000000000124be R08: 00000000004002c8 R09: 00000000004002c8 [ 75.426128][ T8951] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402050 [ 75.434097][ T8951] R13: 00000000004020e0 R14: 0000000000000000 R15: 0000000000000000 [ 75.443569][ T8951] Kernel Offset: disabled [ 75.447963][ T8951] Rebooting in 86400 seconds..