[ 46.854763] audit: type=1800 audit(1580141581.192:30): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 52.174519] kauditd_printk_skb: 4 callbacks suppressed [ 52.174535] audit: type=1400 audit(1580141586.542:35): avc: denied { map } for pid=8344 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.242' (ECDSA) to the list of known hosts. executing program [ 59.222894] audit: type=1400 audit(1580141593.592:36): avc: denied { map } for pid=8356 comm="syz-executor612" path="/root/syz-executor612228535" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 59.227937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor612'. [ 59.258852] kasan: CONFIG_KASAN_INLINE enabled [ 59.263638] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 59.271023] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 59.277260] CPU: 1 PID: 8356 Comm: syz-executor612 Not tainted 4.19.99-syzkaller #0 [ 59.285053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.294425] RIP: 0010:__list_del_entry_valid+0x85/0xf5 [ 59.299801] Code: 0f 84 e1 00 00 00 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 e2 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d [ 59.319094] RSP: 0018:ffff888092c6f450 EFLAGS: 00010246 [ 59.324487] RAX: dffffc0000000000 RBX: ffff88809f274040 RCX: ffffffff81531387 [ 59.331873] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88809f274368 [ 59.339150] RBP: ffff888092c6f468 R08: 1ffffffff1349bec R09: fffffbfff1349bed [ 59.346415] R10: fffffbfff1349bec R11: ffffffff89a4df63 R12: 0000000000000000 [ 59.353749] R13: 0000000000000000 R14: ffff88809f274360 R15: ffff88809f2742c0 [ 59.361055] FS: 000000000139d880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 59.369280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.375157] CR2: 0000000020000240 CR3: 000000007bbd3000 CR4: 00000000001406e0 [ 59.382428] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.389728] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.396996] Call Trace: [ 59.399585] cbs_destroy+0x7d/0x2a0 [ 59.403276] ? cbs_init+0x25d/0x450 [ 59.406945] ? cbs_dequeue_soft+0x410/0x410 [ 59.411447] qdisc_create+0xaa6/0x1230 [ 59.415347] ? tc_get_qdisc+0xbb0/0xbb0 [ 59.419364] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 59.424381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.429941] tc_modify_qdisc+0x51b/0x1bd3 [ 59.434084] ? qdisc_create+0x1230/0x1230 [ 59.438262] ? find_held_lock+0x35/0x130 [ 59.442330] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 59.447872] ? qdisc_create+0x1230/0x1230 [ 59.452035] rtnetlink_rcv_msg+0x463/0xb00 [ 59.456320] ? rtnetlink_put_metrics+0x560/0x560 [ 59.461134] ? netlink_deliver_tap+0x22d/0xc20 [ 59.465733] ? find_held_lock+0x35/0x130 [ 59.469814] netlink_rcv_skb+0x17d/0x460 [ 59.473868] ? rtnetlink_put_metrics+0x560/0x560 [ 59.478639] ? netlink_ack+0xb30/0xb30 [ 59.482558] ? kasan_check_read+0x11/0x20 [ 59.486715] ? netlink_deliver_tap+0x254/0xc20 [ 59.491395] rtnetlink_rcv+0x1d/0x30 [ 59.495131] netlink_unicast+0x53a/0x730 [ 59.499244] ? netlink_attachskb+0x770/0x770 [ 59.503656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.509203] netlink_sendmsg+0x8ae/0xd70 [ 59.513281] ? netlink_unicast+0x730/0x730 [ 59.517574] ? selinux_socket_sendmsg+0x36/0x40 [ 59.522249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.527794] ? security_socket_sendmsg+0x8d/0xc0 [ 59.532562] ? netlink_unicast+0x730/0x730 [ 59.536841] sock_sendmsg+0xd7/0x130 [ 59.540563] ___sys_sendmsg+0x803/0x920 [ 59.544548] ? copy_msghdr_from_user+0x430/0x430 [ 59.549350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.554892] ? __handle_mm_fault+0x7d1/0x3f80 [ 59.559395] ? copy_page_range+0x2030/0x2030 [ 59.563931] ? __do_page_fault+0x676/0xe90 [ 59.568169] ? find_held_lock+0x35/0x130 [ 59.572233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.577782] ? __fget_light+0x1a9/0x230 [ 59.581745] ? __fdget+0x1b/0x20 [ 59.585100] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 59.590761] __sys_sendmsg+0x105/0x1d0 [ 59.594675] ? __ia32_sys_shutdown+0x80/0x80 [ 59.599097] ? up_read+0x1a/0x110 [ 59.602729] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 59.607644] ? do_syscall_64+0x26/0x620 [ 59.611640] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.617022] ? do_syscall_64+0x26/0x620 [ 59.621004] __x64_sys_sendmsg+0x78/0xb0 [ 59.625082] do_syscall_64+0xfd/0x620 [ 59.628894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.634103] RIP: 0033:0x4402b9 [ 59.637335] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.656259] RSP: 002b:00007ffd0b6e6568 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.663968] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402b9 [ 59.671237] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 59.678553] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 59.685867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401b40 [ 59.693134] R13: 0000000000401bd0 R14: 0000000000000000 R15: 0000000000000000 [ 59.700407] Modules linked in: [ 59.703856] ---[ end trace fb6d573748372d44 ]--- [ 59.708663] RIP: 0010:__list_del_entry_valid+0x85/0xf5 [ 59.713995] Code: 0f 84 e1 00 00 00 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 e2 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d [ 59.733034] RSP: 0018:ffff888092c6f450 EFLAGS: 00010246 [ 59.738477] RAX: dffffc0000000000 RBX: ffff88809f274040 RCX: ffffffff81531387 [ 59.745879] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88809f274368 [ 59.753428] RBP: ffff888092c6f468 R08: 1ffffffff1349bec R09: fffffbfff1349bed [ 59.760739] R10: fffffbfff1349bec R11: ffffffff89a4df63 R12: 0000000000000000 [ 59.768092] R13: 0000000000000000 R14: ffff88809f274360 R15: ffff88809f2742c0 [ 59.775479] FS: 000000000139d880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 59.783803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.789686] CR2: 0000000020000240 CR3: 000000007bbd3000 CR4: 00000000001406e0 [ 59.797153] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.804532] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.811942] Kernel panic - not syncing: Fatal exception [ 59.818694] Kernel Offset: disabled [ 59.822423] Rebooting in 86400 seconds..