[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.090978][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 47.090994][ T26] audit: type=1400 audit(1555522704.485:35): avc: denied { map } for pid=8286 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts. [ 53.819796][ T26] audit: type=1400 audit(1555522711.215:36): avc: denied { map } for pid=8298 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/04/17 17:38:32 parsed 1 programs [ 54.784708][ T26] audit: type=1400 audit(1555522712.185:37): avc: denied { map } for pid=8298 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15776 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/04/17 17:38:34 executed programs: 0 [ 56.678906][ T8312] IPVS: ftp: loaded support on port[0] = 21 [ 56.737184][ T8312] chnl_net:caif_netlink_parms(): no params data found [ 56.768608][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.777445][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.785465][ T8312] device bridge_slave_0 entered promiscuous mode [ 56.793945][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.801081][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.808925][ T8312] device bridge_slave_1 entered promiscuous mode [ 56.826078][ T8312] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.835954][ T8312] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.852437][ T8312] team0: Port device team_slave_0 added [ 56.859981][ T8312] team0: Port device team_slave_1 added [ 56.925429][ T8312] device hsr_slave_0 entered promiscuous mode [ 56.993948][ T8312] device hsr_slave_1 entered promiscuous mode [ 57.041694][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.049006][ T8312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.056914][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.064261][ T8312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.099382][ T8312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.111866][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.122743][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.131455][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.139773][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.152478][ T8312] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.162982][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.171780][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.178903][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.191173][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.199861][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.207000][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.226039][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.234850][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.243302][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.256935][ T8312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.268040][ T8312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.280992][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.289983][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.298760][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.316431][ T8312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.328152][ T26] audit: type=1400 audit(1555522714.725:38): avc: denied { associate } for pid=8312 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/04/17 17:38:39 executed programs: 7 2019/04/17 17:38:42 result: hanged=false err=executor 0: exit status 67 event already set (errno 0) event already set (errno 0) event already set (errno 0) child failed (errno 0) loop exited with status 67 event already set (errno 0) event already set (errno 0) event already set (errno 0) child failed (errno 0) loop exited with status 67 [ 65.125470][ T8393] IPVS: ftp: loaded support on port[0] = 21 [ 65.186963][ T8393] chnl_net:caif_netlink_parms(): no params data found [ 65.317302][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.325422][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.333212][ T8393] device bridge_slave_0 entered promiscuous mode [ 65.341807][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.349327][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.357156][ T8393] device bridge_slave_1 entered promiscuous mode [ 65.427799][ T8393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.437691][ T8393] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.453428][ T8393] team0: Port device team_slave_0 added [ 65.460170][ T8393] team0: Port device team_slave_1 added [ 65.586440][ T8393] device hsr_slave_0 entered promiscuous mode [ 65.643743][ T8393] device hsr_slave_1 entered promiscuous mode [ 65.761533][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.768684][ T8393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.776193][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.783278][ T8393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.816123][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.885065][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.894591][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.902496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.912417][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.984487][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.992935][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.000088][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.009468][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.019405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.033295][ T8393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.044141][ T8393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.057310][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.066713][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.075561][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.085062][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.149493][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.365563][ T7] device bridge_slave_1 left promiscuous mode [ 66.372563][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.417420][ T7] device bridge_slave_0 left promiscuous mode [ 66.424204][ T7] bridge0: port 1(bridge_slave_0) entered disabled state 2019/04/17 17:38:45 executed programs: 14 [ 68.006961][ T7] device hsr_slave_1 left promiscuous mode [ 68.049933][ T7] device hsr_slave_0 left promiscuous mode [ 68.110029][ T7] team0 (unregistering): Port device team_slave_1 removed [ 68.122146][ T7] team0 (unregistering): Port device team_slave_0 removed [ 68.135097][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 68.158137][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 68.238082][ T7] bond0 (unregistering): Released all slaves [ 69.615611][ T7] WARNING: CPU: 0 PID: 7 at net/xfrm/xfrm_state.c:2389 xfrm_state_fini+0x218/0x280 [ 69.625090][ T7] Kernel panic - not syncing: panic_on_warn set ... [ 69.631704][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.1.0-rc5+ #71 [ 69.639147][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.649201][ T7] Workqueue: netns cleanup_net [ 69.653948][ T7] Call Trace: [ 69.657239][ T7] dump_stack+0x172/0x1f0 [ 69.661590][ T7] ? xfrm_state_fini+0x150/0x280 [ 69.662246][ T3875] kobject: 'loop0' (000000003d8e781e): kobject_uevent_env [ 69.666548][ T7] panic+0x2cb/0x65c [ 69.666642][ T7] ? __warn_printk+0xf3/0xf3 [ 69.666663][ T7] ? xfrm_state_fini+0x218/0x280 [ 69.666678][ T7] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.677689][ T3875] kobject: 'loop0' (000000003d8e781e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 69.677828][ T7] ? __warn.cold+0x5/0x45 [ 69.708008][ T7] ? __warn+0xe8/0x1d0 [ 69.712065][ T7] ? xfrm_state_fini+0x218/0x280 [ 69.717001][ T7] __warn.cold+0x20/0x45 [ 69.721228][ T7] ? xfrm_state_fini+0x218/0x280 [ 69.726148][ T7] report_bug+0x263/0x2b0 [ 69.730486][ T7] do_error_trap+0x11b/0x200 [ 69.735073][ T7] do_invalid_op+0x37/0x50 [ 69.739498][ T7] ? xfrm_state_fini+0x218/0x280 [ 69.744484][ T7] invalid_op+0x14/0x20 [ 69.748650][ T7] RIP: 0010:xfrm_state_fini+0x218/0x280 [ 69.754180][ T7] Code: 41 5e 5d c3 e8 09 e5 66 fb 0f 0b e9 09 ff ff ff e8 fd e4 66 fb 0f 0b e9 68 ff ff ff e8 f1 e4 66 fb 0f 0b eb c6 e8 e8 e4 66 fb <0f> 0b e9 52 fe ff ff e8 6c f4 9e fb e9 75 fe ff ff e8 82 f4 9e fb [ 69.773774][ T7] RSP: 0018:ffff8880aa28fbd0 EFLAGS: 00010293 [ 69.779834][ T7] RAX: ffff8880aa27c1c0 RBX: ffff888080cf4040 RCX: ffffffff86084949 [ 69.787796][ T7] RDX: 0000000000000000 RSI: ffffffff8609a7c8 RDI: 0000000000000005 [ 69.795842][ T7] RBP: ffff8880aa28fbf0 R08: ffff8880aa27c1c0 R09: ffff8880aa27cab0 [ 69.803826][ T7] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888080cf5a80 [ 69.811784][ T7] R13: ffff8880aa28fcc8 R14: ffffffff893ea398 R15: dffffc0000000000 [ 69.819756][ T7] ? xfrm_state_flush+0x5a9/0x660 [ 69.824765][ T7] ? xfrm_state_fini+0x218/0x280 [ 69.829689][ T7] ? xfrm_policy_fini+0x3a0/0x3a0 [ 69.834705][ T7] xfrm_net_exit+0x25/0x70 [ 69.839109][ T7] ops_exit_list.isra.0+0xb0/0x160 [ 69.844206][ T7] cleanup_net+0x3fb/0x960 [ 69.848615][ T7] ? netns_install+0x1d0/0x1d0 [ 69.853397][ T7] process_one_work+0x98e/0x1790 [ 69.858336][ T7] ? pwq_dec_nr_in_flight+0x320/0x320 [ 69.863697][ T7] ? lock_acquire+0x16f/0x3f0 [ 69.868372][ T7] worker_thread+0x98/0xe40 [ 69.872871][ T7] kthread+0x357/0x430 [ 69.877018][ T7] ? process_one_work+0x1790/0x1790 [ 69.882205][ T7] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 69.888431][ T7] ret_from_fork+0x3a/0x50 [ 69.893899][ T7] Kernel Offset: disabled [ 69.898352][ T7] Rebooting in 86400 seconds..