[ 84.954929][ T27] audit: type=1400 audit(1579713523.043:37): avc: denied { watch } for pid=10422 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 84.990350][ T27] audit: type=1400 audit(1579713523.043:38): avc: denied { watch } for pid=10422 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 85.237713][ T27] audit: type=1800 audit(1579713523.323:39): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 85.259596][ T27] audit: type=1800 audit(1579713523.333:40): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 89.677135][ T27] audit: type=1400 audit(1579713527.763:41): avc: denied { map } for pid=10510 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.49' (ECDSA) to the list of known hosts. executing program [ 96.613098][ T27] audit: type=1400 audit(1579713534.703:42): avc: denied { map } for pid=10522 comm="syz-executor319" path="/root/syz-executor319182385" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 96.634295][T10523] IPVS: ftp: loaded support on port[0] = 21 [ 96.670192][ T27] audit: type=1400 audit(1579713534.753:43): avc: denied { create } for pid=10523 comm="syz-executor319" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 96.697876][ T27] audit: type=1400 audit(1579713534.793:44): avc: denied { write } for pid=10523 comm="syz-executor319" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 96.698247][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor319'. [ 96.743544][T10524] list_del corruption, ffff88809fd18800->prev is LIST_POISON2 (dead000000000122) [ 96.753578][T10524] ------------[ cut here ]------------ [ 96.759312][T10524] kernel BUG at lib/list_debug.c:48! [ 96.764742][T10524] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 96.771424][T10524] CPU: 0 PID: 10524 Comm: syz-executor319 Not tainted 5.5.0-rc7-syzkaller #0 [ 96.780177][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.790236][T10524] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 96.796643][T10524] Code: be fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 60 69 71 88 e8 e0 de be fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 c0 69 71 88 e8 cc de be fd <0f> 0b 4c 89 f6 48 c7 c7 80 6a 71 88 e8 bb de be fd 0f 0b cc cc cc [ 96.816530][T10524] RSP: 0018:ffffc90001e47478 EFLAGS: 00010282 [ 96.822586][T10524] RAX: 000000000000004e RBX: ffff88809fd18800 RCX: 0000000000000000 [ 96.830564][T10524] RDX: 0000000000000000 RSI: ffffffff815e5326 RDI: fffff520003c8e81 [ 96.839047][T10524] RBP: ffffc90001e47490 R08: 000000000000004e R09: ffffed1015d06621 [ 96.847023][T10524] R10: ffffed1015d06620 R11: ffff8880ae833107 R12: dead000000000122 [ 96.855199][T10524] R13: ffff8880941ad270 R14: ffff88809fd18800 R15: ffff8880a0791300 [ 96.863690][T10524] FS: 00007f2c581fb700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 96.872712][T10524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.879297][T10524] CR2: 00007ffc5870ff88 CR3: 000000008929e000 CR4: 00000000001406f0 [ 96.887272][T10524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.896454][T10524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.904939][T10524] Call Trace: [ 96.908235][T10524] __nf_tables_abort+0x1e53/0x2a50 [ 96.913350][T10524] ? nfnl_err_del+0x115/0x170 [ 96.918078][T10524] nf_tables_abort+0x17/0x30 [ 96.922663][T10524] nfnetlink_rcv_batch+0xa5d/0x17a0 [ 96.927988][T10524] ? nf_tables_delobj+0x8f0/0x8f0 [ 96.933194][T10524] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 96.939836][T10524] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 96.945694][T10524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 96.951943][T10524] ? __nla_validate_parse+0x2d0/0x1ee0 [ 96.957403][T10524] ? selinux_capable+0x36/0x40 [ 96.962166][T10524] ? nla_memcpy+0xb0/0xb0 [ 96.966583][T10524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 96.972820][T10524] ? ns_capable_common+0x93/0x100 [ 96.977845][T10524] ? __nla_parse+0x43/0x60 [ 96.982396][T10524] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 96.988115][T10524] nfnetlink_rcv+0x3e7/0x460 [ 96.992713][T10524] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 96.998158][T10524] ? netlink_deliver_tap+0x24a/0xbe0 [ 97.003548][T10524] ? __kasan_check_write+0x14/0x20 [ 97.008755][T10524] netlink_unicast+0x58c/0x7d0 [ 97.013604][T10524] ? netlink_attachskb+0x870/0x870 [ 97.018774][T10524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.025021][T10524] netlink_sendmsg+0x91c/0xea0 [ 97.029842][T10524] ? netlink_unicast+0x7d0/0x7d0 [ 97.034789][T10524] ? tomoyo_socket_sendmsg+0x26/0x30 [ 97.040115][T10524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.046475][T10524] ? security_socket_sendmsg+0x8d/0xc0 [ 97.052025][T10524] ? netlink_unicast+0x7d0/0x7d0 [ 97.057089][T10524] sock_sendmsg+0xd7/0x130 [ 97.061659][T10524] ____sys_sendmsg+0x753/0x880 [ 97.066446][T10524] ? kernel_sendmsg+0x50/0x50 [ 97.071159][T10524] ? __fget+0x35d/0x550 [ 97.075298][T10524] ? find_held_lock+0x35/0x130 [ 97.080042][T10524] ___sys_sendmsg+0x100/0x170 [ 97.084738][T10524] ? sendmsg_copy_msghdr+0x70/0x70 [ 97.089901][T10524] ? __kasan_check_read+0x11/0x20 [ 97.095167][T10524] ? __fget+0x37f/0x550 [ 97.099315][T10524] ? ksys_dup3+0x3e0/0x3e0 [ 97.103722][T10524] ? __do_page_fault+0x56a/0xd80 [ 97.108648][T10524] ? __fget_light+0x1a9/0x230 [ 97.113401][T10524] ? __fdget+0x1b/0x20 [ 97.117454][T10524] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 97.123896][T10524] __sys_sendmsg+0x105/0x1d0 [ 97.128919][T10524] ? __sys_sendmsg_sock+0xc0/0xc0 [ 97.133939][T10524] ? down_read_non_owner+0x490/0x490 [ 97.139232][T10524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 97.145266][T10524] ? do_syscall_64+0x26/0x790 [ 97.154199][T10524] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.160274][T10524] ? do_syscall_64+0x26/0x790 [ 97.165133][T10524] __x64_sys_sendmsg+0x78/0xb0 [ 97.170022][T10524] do_syscall_64+0xfa/0x790 [ 97.174512][T10524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.180597][T10524] RIP: 0033:0x447559 [ 97.184488][T10524] Code: e8 3c c0 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 4b 0e fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 97.204090][T10524] RSP: 002b:00007f2c581face8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.212494][T10524] RAX: ffffffffffffffda RBX: 00000000006ddc28 RCX: 0000000000447559 [ 97.220460][T10524] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 97.228429][T10524] RBP: 00000000006ddc20 R08: 0000000000000000 R09: 0000000000000000 [ 97.236445][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006ddc2c [ 97.244408][T10524] R13: 00007ffdd43fba8f R14: 00007f2c581fb9c0 R15: 0000000000000000 [ 97.252514][T10524] Modules linked in: [ 97.256801][T10524] ---[ end trace 0b316b6ff758d342 ]--- [ 97.262406][T10524] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 97.268816][T10524] Code: be fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 60 69 71 88 e8 e0 de be fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 c0 69 71 88 e8 cc de be fd <0f> 0b 4c 89 f6 48 c7 c7 80 6a 71 88 e8 bb de be fd 0f 0b cc cc cc [ 97.288492][T10524] RSP: 0018:ffffc90001e47478 EFLAGS: 00010282 [ 97.294665][T10524] RAX: 000000000000004e RBX: ffff88809fd18800 RCX: 0000000000000000 [ 97.302802][T10524] RDX: 0000000000000000 RSI: ffffffff815e5326 RDI: fffff520003c8e81 [ 97.310793][T10524] RBP: ffffc90001e47490 R08: 000000000000004e R09: ffffed1015d06621 [ 97.318810][T10524] R10: ffffed1015d06620 R11: ffff8880ae833107 R12: dead000000000122 [ 97.328431][T10524] R13: ffff8880941ad270 R14: ffff88809fd18800 R15: ffff8880a0791300 [ 97.336438][T10524] FS: 00007f2c581fb700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 97.345647][T10524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.352269][T10524] CR2: 00007ffc5870ff88 CR3: 000000008929e000 CR4: 00000000001406f0 [ 97.360234][T10524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.368273][T10524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.376281][T10524] Kernel panic - not syncing: Fatal exception [ 97.383912][T10524] Kernel Offset: disabled [ 97.388266][T10524] Rebooting in 86400 seconds..