[ 31.437563] audit: type=1800 audit(1575293520.164:33): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 31.465153] audit: type=1800 audit(1575293520.164:34): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.954082] random: sshd: uninitialized urandom read (32 bytes read) [ 36.245442] audit: type=1400 audit(1575293524.974:35): avc: denied { map } for pid=7064 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 36.299805] random: sshd: uninitialized urandom read (32 bytes read) [ 36.878688] random: sshd: uninitialized urandom read (32 bytes read) [ 37.075922] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. [ 42.595545] random: sshd: uninitialized urandom read (32 bytes read) 2019/12/02 13:32:11 parsed 1 programs [ 42.809821] audit: type=1400 audit(1575293531.534:36): avc: denied { map } for pid=7076 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 43.465633] random: cc1: uninitialized urandom read (8 bytes read) 2019/12/02 13:32:13 executed programs: 0 [ 44.332988] audit: type=1400 audit(1575293533.064:37): avc: denied { map } for pid=7076 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15729 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 44.421657] audit: type=1400 audit(1575293533.154:38): avc: denied { map } for pid=7076 comm="syz-execprog" path="/root/syzkaller-shm144969711" dev="sda1" ino=16485 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 44.721084] IPVS: ftp: loaded support on port[0] = 21 [ 45.638525] chnl_net:caif_netlink_parms(): no params data found [ 45.684828] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.706771] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.729514] device bridge_slave_0 entered promiscuous mode [ 45.741814] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.759013] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.782240] device bridge_slave_1 entered promiscuous mode [ 45.803632] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.818654] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.844500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.855336] team0: Port device team_slave_0 added [ 45.864858] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.878799] team0: Port device team_slave_1 added [ 45.885916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.895790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.982196] device hsr_slave_0 entered promiscuous mode [ 46.050637] device hsr_slave_1 entered promiscuous mode [ 46.101040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.117760] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.138154] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.146385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.157888] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.171392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.217702] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 46.232858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.248402] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.266660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.289306] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.308431] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.327400] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.337855] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.352496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.368355] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.383168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.407096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.433332] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.447797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.471198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.484341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.494594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.509654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.535631] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.561024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.582683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.594140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.612288] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.623517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.633816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.643820] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 46.661812] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/02 13:32:18 executed programs: 31 [ 52.973857] ------------[ cut here ]------------ [ 52.978736] WARNING: CPU: 0 PID: 8321 at kernel/signal.c:353 task_participate_group_stop+0x1cc/0x230 [ 52.987988] Kernel panic - not syncing: panic_on_warn set ... [ 52.987988] [ 52.995347] CPU: 0 PID: 8321 Comm: 3 Not tainted 4.14.157-syzkaller #0 [ 53.002003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.011362] Call Trace: [ 53.013942] dump_stack+0x142/0x197 [ 53.017551] panic+0x1f9/0x42d [ 53.020745] ? add_taint.cold+0x16/0x16 [ 53.024804] ? task_participate_group_stop+0x1cc/0x230 [ 53.030065] ? task_participate_group_stop+0x1cc/0x230 [ 53.035327] __warn.cold+0x2f/0x2f [ 53.039048] ? ist_end_non_atomic+0x10/0x10 [ 53.043355] ? task_participate_group_stop+0x1cc/0x230 [ 53.048660] report_bug+0x216/0x254 [ 53.052273] do_error_trap+0x1bb/0x310 [ 53.056141] ? math_error+0x360/0x360 [ 53.059942] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.064790] do_invalid_op+0x1b/0x20 [ 53.068520] invalid_op+0x1b/0x40 [ 53.072026] RIP: 0010:task_participate_group_stop+0x1cc/0x230 [ 53.077921] RSP: 0018:ffff888098f5fba8 EFLAGS: 00010097 [ 53.083278] RAX: ffff888095eb66c0 RBX: ffff8880919da640 RCX: ffff8880919da6dc [ 53.090551] RDX: 0000000000000000 RSI: 0000000000020000 RDI: ffff888095eb66c0 [ 53.097815] RBP: ffff888098f5fbc0 R08: 0000000000005aab R09: ffffffff8936bed8 [ 53.105085] R10: ffff888095eb6f40 R11: ffff888095eb66c0 R12: 0000000000000000 [ 53.112348] R13: ffff8880919da6d8 R14: ffff888098f5ff58 R15: dffffc0000000000 [ 53.119633] ? task_participate_group_stop+0x1cc/0x230 [ 53.124929] do_signal_stop+0x19f/0x750 [ 53.128999] get_signal+0xd28/0x1cd0 [ 53.132815] do_signal+0x86/0x19a0 [ 53.136358] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 53.141815] ? put_files_struct+0x262/0x2d0 [ 53.146136] ? rcu_read_lock_sched_held+0x110/0x130 [ 53.151134] ? kmem_cache_free+0x244/0x2b0 [ 53.155362] ? setup_sigcontext+0x7d0/0x7d0 [ 53.159957] ? put_files_struct+0x24/0x2d0 [ 53.164180] ? do_execveat_common.isra.0+0x226/0x1dd0 [ 53.169369] ? exit_to_usermode_loop+0x3d/0x220 [ 53.174021] exit_to_usermode_loop+0x15c/0x220 [ 53.178613] do_syscall_64+0x4bc/0x640 [ 53.182485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.187316] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 53.192834] RIP: 0033:0x324 [ 53.195749] RSP: 002b:00007ffdb3c7b8f0 EFLAGS: 00000200 ORIG_RAX: 000000000000003b [ 53.203454] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 53.210726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.217992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.225263] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 53.232533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.241935] Kernel Offset: disabled [ 53.245649] Rebooting in 86400 seconds..