[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 69.636770][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 69.636785][ T26] audit: type=1400 audit(1558230763.938:35): avc: denied { map } for pid=9831 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts. syzkaller login: [ 76.233335][ T26] audit: type=1400 audit(1558230770.538:36): avc: denied { map } for pid=9851 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/05/19 01:52:51 parsed 1 programs [ 77.258701][ T26] audit: type=1400 audit(1558230771.558:37): avc: denied { map } for pid=9851 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=126 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/05/19 01:52:52 executed programs: 0 [ 78.544182][ T9865] IPVS: ftp: loaded support on port[0] = 21 [ 78.611073][ T9865] chnl_net:caif_netlink_parms(): no params data found [ 78.640508][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.648501][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.656446][ T9865] device bridge_slave_0 entered promiscuous mode [ 78.664747][ T9865] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.671936][ T9865] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.679581][ T9865] device bridge_slave_1 entered promiscuous mode [ 78.697571][ T9865] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.707724][ T9865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.727718][ T9865] team0: Port device team_slave_0 added [ 78.735080][ T9865] team0: Port device team_slave_1 added [ 78.793489][ T9865] device hsr_slave_0 entered promiscuous mode [ 78.862023][ T9865] device hsr_slave_1 entered promiscuous mode [ 78.941123][ T9865] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.948351][ T9865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.956542][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.963630][ T9865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.997892][ T9865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.011545][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.023166][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.031193][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.039361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.051901][ T9865] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.073081][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.081768][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.088852][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.099177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.108677][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.115802][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.134872][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.143836][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.153590][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.165065][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.176555][ T9865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.188746][ T9865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.197928][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.216419][ T9865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.255061][ T26] audit: type=1400 audit(1558230773.558:38): avc: denied { associate } for pid=9865 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 79.322934][ T26] audit: type=1400 audit(1558230773.618:39): avc: denied { map_create } for pid=9874 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 79.379775][ T26] audit: type=1400 audit(1558230773.628:40): avc: denied { map_read map_write } for pid=9874 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 79.382463][ T9869] ------------[ cut here ]------------ [ 79.409530][ T9869] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 79.419478][ T9869] WARNING: CPU: 1 PID: 9869 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 79.428943][ T9869] Kernel panic - not syncing: panic_on_warn set ... [ 79.435549][ T9869] CPU: 1 PID: 9869 Comm: kworker/1:3 Not tainted 5.1.0+ #19 [ 79.442848][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.452931][ T9869] Workqueue: events sk_psock_destroy_deferred [ 79.459003][ T9869] Call Trace: [ 79.462304][ T9869] dump_stack+0x172/0x1f0 [ 79.466651][ T9869] ? debug_print_object+0x100/0x250 [ 79.471876][ T9869] panic+0x2cb/0x715 [ 79.475785][ T9869] ? __warn_printk+0xf3/0xf3 [ 79.480397][ T9869] ? debug_print_object+0x168/0x250 [ 79.485613][ T9869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 79.491866][ T9869] ? __warn.cold+0x5/0x4c [ 79.496208][ T9869] ? __warn+0xe8/0x1d0 [ 79.500290][ T9869] ? debug_print_object+0x168/0x250 [ 79.506016][ T9869] __warn.cold+0x20/0x4c [ 79.506602][ T3879] kobject: 'loop0' (00000000d9b3f902): kobject_uevent_env [ 79.510266][ T9869] ? vprintk_emit+0x1ea/0x700 [ 79.510283][ T9869] ? debug_print_object+0x168/0x250 [ 79.510307][ T9869] report_bug+0x263/0x2b0 [ 79.510327][ T9869] do_error_trap+0x11b/0x200 [ 79.526127][ T3879] kobject: 'loop0' (00000000d9b3f902): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 79.527376][ T9869] do_invalid_op+0x37/0x50 [ 79.550914][ T9869] ? debug_print_object+0x168/0x250 [ 79.556126][ T9869] invalid_op+0x14/0x20 [ 79.560294][ T9869] RIP: 0010:debug_print_object+0x168/0x250 [ 79.566542][ T9869] Code: dd 40 bb a4 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 40 bb a4 87 48 c7 c7 e0 b0 a4 87 e8 86 fb 0d fe <0f> 0b 83 05 1b c6 4b 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 79.586244][ T9869] RSP: 0018:ffff8880960c7970 EFLAGS: 00010086 [ 79.592320][ T9869] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 79.600301][ T9869] RDX: 0000000000000000 RSI: ffffffff815ac5d6 RDI: ffffed1012c18f20 [ 79.608287][ T9869] RBP: ffff8880960c79b0 R08: ffff888096a74140 R09: fffffbfff11730e9 [ 79.612132][ T3879] kobject: 'loop0' (00000000d9b3f902): kobject_uevent_env [ 79.616264][ T9869] R10: fffffbfff11730e8 R11: ffffffff88b98743 R12: 0000000000000001 [ 79.616274][ T9869] R13: ffffffff88bacde0 R14: ffffffff816034b0 R15: ffff8880942fd2a8 [ 79.616297][ T9869] ? calc_wheel_index+0x220/0x220 [ 79.616320][ T9869] ? vprintk_func+0x86/0x189 [ 79.626411][ T3879] kobject: 'loop0' (00000000d9b3f902): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 79.631410][ T9869] debug_object_assert_init+0x23a/0x2f0 [ 79.631429][ T9869] ? debug_object_destroy+0x250/0x250 [ 79.631451][ T9869] ? __lockdep_reset_lock+0x450/0x450 [ 79.675463][ T9869] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 79.681722][ T9869] del_timer+0x7c/0x120 [ 79.685892][ T9869] ? trigger_dyntick_cpu.isra.0+0x180/0x180 [ 79.691799][ T9869] ? __cancel_work_timer+0xc4/0x520 [ 79.697011][ T9869] ? trace_hardirqs_off+0x62/0x220 [ 79.702138][ T9869] try_to_grab_pending+0x37e/0x910 [ 79.707276][ T9869] __cancel_work_timer+0xc4/0x520 [ 79.708191][ T3879] kobject: 'loop0' (00000000d9b3f902): kobject_uevent_env [ 79.712395][ T9869] ? try_to_grab_pending+0x910/0x910 [ 79.712413][ T9869] ? trace_hardirqs_off+0x62/0x220 [ 79.712429][ T9869] ? process_one_work+0x890/0x1790 [ 79.712449][ T9869] ? find_held_lock+0x35/0x130 [ 79.724328][ T3879] kobject: 'loop0' (00000000d9b3f902): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 79.724851][ T9869] ? process_one_work+0x890/0x1790 [ 79.755156][ T9869] cancel_delayed_work_sync+0x1b/0x20 [ 79.760540][ T9869] strp_done+0x5d/0xf0 [ 79.764971][ T9869] sk_psock_destroy_deferred+0x3a/0x6c0 [ 79.770541][ T9869] process_one_work+0x989/0x1790 [ 79.775505][ T9869] ? pwq_dec_nr_in_flight+0x320/0x320 [ 79.780894][ T9869] ? lock_acquire+0x16f/0x3f0 [ 79.785604][ T9869] worker_thread+0x98/0xe40 [ 79.790113][ T9869] ? trace_hardirqs_on+0x67/0x220 [ 79.795170][ T9869] kthread+0x354/0x420 [ 79.799226][ T9869] ? process_one_work+0x1790/0x1790 [ 79.804407][ T9869] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 79.810646][ T9869] ret_from_fork+0x24/0x30 [ 79.816410][ T9869] Kernel Offset: disabled [ 79.820826][ T9869] Rebooting in 86400 seconds..