Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 30.864680] audit: type=1800 audit(1541138679.241:33): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 30.894855] audit: type=1800 audit(1541138679.241:34): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.200411] audit: type=1400 audit(1541138688.571:35): avc: denied { map } for pid=5792 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.71' (ECDSA) to the list of known hosts. executing program [ 60.565333] audit: type=1400 audit(1541138708.941:36): avc: denied { map } for pid=5805 comm="syz-executor493" path="/root/syz-executor493871095" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 60.571410] netlink: 'syz-executor493': attribute type 3 has an invalid length. [ 60.592095] audit: type=1400 audit(1541138708.941:37): avc: denied { create } for pid=5805 comm="syz-executor493" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 60.599590] netlink: 'syz-executor493': attribute type 2 has an invalid length. [ 60.624115] audit: type=1400 audit(1541138708.941:38): avc: denied { write } for pid=5805 comm="syz-executor493" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 60.631610] kasan: CONFIG_KASAN_INLINE enabled [ 60.660242] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 60.668187] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 60.674438] CPU: 1 PID: 5805 Comm: syz-executor493 Not tainted 4.19.0+ #94 [ 60.681441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.690840] RIP: 0010:icmp_timeout_obj_to_nlattr+0x77/0x170 [ 60.696596] Code: b5 41 c7 00 f1 f1 f1 f1 c7 40 04 04 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 30 79 24 fb 4c 89 e8 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 60.715492] RSP: 0018:ffff8801c42cf220 EFLAGS: 00010246 [ 60.720842] RAX: 0000000000000000 RBX: 1ffff10038859e45 RCX: ffffffff865df764 [ 60.728094] RDX: 0000000000000000 RSI: ffffffff865affd0 RDI: ffff8801c2ee2a80 [ 60.735347] RBP: ffff8801c42cf2b0 R08: ffff8801c225c1c0 R09: ffff8801c108a868 [ 60.742607] R10: ffffed003821150c R11: ffff8801c108a860 R12: ffff8801c2ee2a80 [ 60.749943] R13: 0000000000000000 R14: ffff8801c42cf288 R15: dffffc0000000000 [ 60.757205] FS: 0000000002058880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 60.765415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.771285] CR2: 00000000208a7000 CR3: 00000001c16e7000 CR4: 00000000001406e0 [ 60.778540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.785794] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.793132] Call Trace: [ 60.795711] ? memcpy+0x45/0x50 [ 60.798980] ? icmp_timeout_nlattr_to_obj+0x180/0x180 [ 60.804167] ? __nla_put+0x37/0x40 [ 60.807701] ? nla_put+0x117/0x150 [ 60.811235] cttimeout_default_get+0x644/0x9e0 [ 60.815805] ? cttimeout_new_timeout+0x8c0/0x8c0 [ 60.820546] ? __lock_is_held+0xb5/0x140 [ 60.824595] ? cttimeout_new_timeout+0x8c0/0x8c0 [ 60.829335] nfnetlink_rcv_msg+0xdd3/0x10c0 [ 60.833644] ? nfnetlink_bind+0x3b0/0x3b0 [ 60.837777] ? __netlink_lookup+0x5b6/0xa90 [ 60.842205] ? find_held_lock+0x36/0x1c0 [ 60.846258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.851782] ? cred_has_capability+0x1e1/0x430 [ 60.856353] ? selinux_ipv4_output+0x50/0x50 [ 60.860753] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 60.865671] ? kasan_check_read+0x11/0x20 [ 60.869801] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 60.875061] ? rcu_softirq_qs+0x20/0x20 [ 60.879025] netlink_rcv_skb+0x172/0x440 [ 60.883070] ? nfnetlink_bind+0x3b0/0x3b0 [ 60.887201] ? netlink_ack+0xb80/0xb80 [ 60.891185] ? __netlink_ns_capable+0x100/0x130 [ 60.895842] nfnetlink_rcv+0x1c0/0x4d0 [ 60.899716] ? nfnetlink_rcv_batch+0x19b0/0x19b0 [ 60.904462] ? kasan_check_write+0x14/0x20 [ 60.908683] netlink_unicast+0x5a5/0x760 [ 60.912733] ? netlink_attachskb+0x9a0/0x9a0 [ 60.917126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.922659] netlink_sendmsg+0xa18/0xfc0 [ 60.926717] ? netlink_unicast+0x760/0x760 [ 60.930939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.936463] ? security_socket_sendmsg+0x94/0xc0 [ 60.941202] ? netlink_unicast+0x760/0x760 [ 60.945431] sock_sendmsg+0xd5/0x120 [ 60.949159] ___sys_sendmsg+0x7fd/0x930 [ 60.953132] ? find_held_lock+0x36/0x1c0 [ 60.957188] ? copy_msghdr_from_user+0x580/0x580 [ 60.961973] ? zap_class+0x640/0x640 [ 60.965683] ? zap_class+0x640/0x640 [ 60.969388] ? zap_class+0x640/0x640 [ 60.973092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.978612] ? __fget_light+0x2e9/0x430 [ 60.982570] ? fget_raw+0x20/0x20 [ 60.986019] ? __do_page_fault+0x620/0xe60 [ 60.990239] ? lock_downgrade+0x900/0x900 [ 60.994371] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 60.999291] ? kasan_check_read+0x11/0x20 [ 61.003546] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 61.009072] ? sockfd_lookup_light+0xc5/0x160 [ 61.013556] __sys_sendmsg+0x11d/0x280 [ 61.017429] ? __ia32_sys_shutdown+0x80/0x80 [ 61.021825] ? up_read_non_owner+0x100/0x100 [ 61.026225] ? do_syscall_64+0x9a/0x820 [ 61.030185] ? do_syscall_64+0x9a/0x820 [ 61.034218] ? trace_hardirqs_off_caller+0x310/0x310 [ 61.039316] __x64_sys_sendmsg+0x78/0xb0 [ 61.043366] do_syscall_64+0x1b9/0x820 [ 61.047249] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 61.052600] ? syscall_return_slowpath+0x5e0/0x5e0 [ 61.057529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.062360] ? trace_hardirqs_on_caller+0x310/0x310 [ 61.067480] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 61.072489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 61.078018] ? prepare_exit_to_usermode+0x291/0x3b0 [ 61.083025] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.087858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.093031] RIP: 0033:0x4400d9 [ 61.096207] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.115097] RSP: 002b:00007fffe9efdbf8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 61.122792] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400d9 [ 61.130094] RDX: 0000000000000000 RSI: 0000000020dddfc8 RDI: 0000000000000003 [ 61.137407] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 61.144669] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000401960 [ 61.151926] R13: 00000000004019f0 R14: 0000000000000000 R15: 0000000000000000 [ 61.159186] Modules linked in: [ 61.162528] ---[ end trace 2dfb71bccf9e75c6 ]--- [ 61.167344] RIP: 0010:icmp_timeout_obj_to_nlattr+0x77/0x170 [ 61.173135] Code: b5 41 c7 00 f1 f1 f1 f1 c7 40 04 04 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 30 79 24 fb 4c 89 e8 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 61.192141] RSP: 0018:ffff8801c42cf220 EFLAGS: 00010246 [ 61.197566] RAX: 0000000000000000 RBX: 1ffff10038859e45 RCX: ffffffff865df764 [ 61.204886] RDX: 0000000000000000 RSI: ffffffff865affd0 RDI: ffff8801c2ee2a80 [ 61.212148] RBP: ffff8801c42cf2b0 R08: ffff8801c225c1c0 R09: ffff8801c108a868 [ 61.219454] R10: ffffed003821150c R11: ffff8801c108a860 R12: ffff8801c2ee2a80 [ 61.226758] R13: 0000000000000000 R14: ffff8801c42cf288 R15: dffffc0000000000 [ 61.234062] FS: 0000000002058880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 61.242360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.248303] CR2: 00000000208a7000 CR3: 00000001c16e7000 CR4: 00000000001406e0 [ 61.255594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.262902] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.270172] Kernel panic - not syncing: Fatal exception [ 61.276533] Kernel Offset: disabled [ 61.280278] Rebooting in 86400 seconds..