[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.130269] audit: type=1400 audit(1521893275.536:6): avc: denied { map } for pid=4106 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. syzkaller login: [ 24.677449] audit: type=1400 audit(1521893282.083:7): avc: denied { map } for pid=4120 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/03/24 12:08:02 parsed 1 programs 2018/03/24 12:08:02 executed programs: 0 [ 24.949444] audit: type=1400 audit(1521893282.355:8): avc: denied { map } for pid=4120 comm="syz-execprog" path="/root/syzkaller-shm261441525" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 25.000354] IPVS: ftp: loaded support on port[0] = 21 [ 25.034540] IPVS: ftp: loaded support on port[0] = 21 [ 25.064510] IPVS: ftp: loaded support on port[0] = 21 [ 25.113399] IPVS: ftp: loaded support on port[0] = 21 [ 25.176921] IPVS: ftp: loaded support on port[0] = 21 [ 25.251595] IPVS: ftp: loaded support on port[0] = 21 [ 25.329999] IPVS: ftp: loaded support on port[0] = 21 [ 25.367956] IPVS: ftp: loaded support on port[0] = 21 [ 27.548343] list_del corruption, 0000000005e22148->next is LIST_POISON1 (00000000189fde61) [ 27.557019] ------------[ cut here ]------------ [ 27.561756] kernel BUG at lib/list_debug.c:47! [ 27.566329] invalid opcode: 0000 [#1] SMP KASAN [ 27.570973] Dumping ftrace buffer: [ 27.574488] (ftrace buffer empty) [ 27.578175] Modules linked in: [ 27.581347] CPU: 0 PID: 4722 Comm: syz-executor0 Not tainted 4.16.0-rc6+ #274 [ 27.588592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.597932] RIP: 0010:__list_del_entry_valid+0xd3/0x150 [ 27.603267] RSP: 0018:ffff8801b81d7168 EFLAGS: 00010082 [ 27.608606] RAX: 000000000000004e RBX: dead000000000200 RCX: 0000000000000000 [ 27.615850] RDX: 000000000000004e RSI: 1ffff1003703ade2 RDI: ffffed003703ae21 [ 27.623101] RBP: ffff8801b81d7180 R08: ffffffff86f39cb8 R09: 1ffff1003703ad89 [ 27.630346] R10: ffff8801b81d7040 R11: 0000000000000002 R12: dead000000000100 [ 27.637596] R13: ffff8801b028e8d8 R14: ffff8801b028e8e0 R15: ffff8801c764d600 [ 27.644851] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 27.653052] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 27.658910] CR2: 0000000008138024 CR3: 0000000006e22004 CR4: 00000000001606f0 [ 27.666159] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.673405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.680649] Call Trace: [ 27.683218] ? remove_wait_queue+0x81/0x350 [ 27.687516] remove_wait_queue+0x90/0x350 [ 27.691647] ? add_wait_queue+0x290/0x290 [ 27.695771] ? fcntl_setlk+0x1100/0x1100 [ 27.699807] ? fsnotify+0x7b3/0x1140 [ 27.703505] vhost_poll_stop+0x46/0x90 [ 27.707378] vhost_net_stop_vq+0x90/0x120 [ 27.711503] ? vhost_net_open+0x6e0/0x6e0 [ 27.715626] vhost_net_release+0x49/0x190 [ 27.719751] __fput+0x327/0x7e0 [ 27.723019] ? fput+0x140/0x140 [ 27.726281] ? _raw_spin_unlock_irq+0x27/0x70 [ 27.730768] ____fput+0x15/0x20 [ 27.734029] task_work_run+0x199/0x270 [ 27.737905] ? task_work_cancel+0x210/0x210 [ 27.742203] ? _raw_spin_unlock+0x22/0x30 [ 27.746330] ? switch_task_namespaces+0x87/0xc0 [ 27.750981] do_exit+0x9bb/0x1ad0 [ 27.754412] ? find_held_lock+0x35/0x1d0 [ 27.758466] ? mm_update_next_owner+0x930/0x930 [ 27.763115] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 27.768291] ? lock_downgrade+0x980/0x980 [ 27.772419] ? __unqueue_futex+0x1c0/0x290 [ 27.776627] ? lock_release+0xa40/0xa40 [ 27.780577] ? fault_in_user_writeable+0x90/0x90 [ 27.785405] ? do_raw_spin_trylock+0x190/0x190 [ 27.789963] ? futex_wake+0x680/0x680 [ 27.793747] ? perf_trace_lock+0xd6/0x900 [ 27.797869] ? futex_wait+0x6a9/0x9a0 [ 27.801648] ? trace_event_raw_event_lock+0x340/0x340 [ 27.806822] ? trace_hardirqs_off+0x10/0x10 [ 27.811120] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 27.816200] ? futex_wake+0x2ca/0x680 [ 27.819979] ? memset+0x31/0x40 [ 27.823239] ? find_held_lock+0x35/0x1d0 [ 27.827290] ? get_signal+0x7a9/0x16d0 [ 27.831155] ? lock_downgrade+0x980/0x980 [ 27.835286] do_group_exit+0x149/0x400 [ 27.839158] ? do_raw_spin_trylock+0x190/0x190 [ 27.843740] ? SyS_exit+0x30/0x30 [ 27.847179] ? _raw_spin_unlock_irq+0x27/0x70 [ 27.851656] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.856653] get_signal+0x73a/0x16d0 [ 27.860353] ? ptrace_notify+0x130/0x130 [ 27.864408] ? vhost_poll_start+0xa2/0x1b0 [ 27.868646] ? mutex_unlock+0xd/0x10 [ 27.872344] ? vhost_net_ioctl+0x2af/0x1920 [ 27.876651] do_signal+0x90/0x1e90 [ 27.880176] ? rcu_note_context_switch+0x710/0x710 [ 27.885091] ? setup_sigcontext+0x7d0/0x7d0 [ 27.889400] ? __might_sleep+0x95/0x190 [ 27.893352] ? _cond_resched+0x14/0x30 [ 27.897220] ? selinux_file_ioctl+0x444/0x690 [ 27.901703] ? __fget_light+0x2b2/0x3c0 [ 27.905668] ? exit_to_usermode_loop+0x8c/0x2f0 [ 27.910324] exit_to_usermode_loop+0x258/0x2f0 [ 27.914883] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 27.920394] ? compat_SyS_ioctl+0x77/0x2a30 [ 27.924689] ? do_fast_syscall_32+0x156/0xf9f [ 27.929165] do_fast_syscall_32+0xbe6/0xf9f [ 27.933461] ? _raw_spin_unlock_irq+0x27/0x70 [ 27.937935] ? do_int80_syscall_32+0x9c0/0x9c0 [ 27.942498] ? _raw_spin_unlock_irq+0x27/0x70 [ 27.946972] ? finish_task_switch+0x1c1/0x7e0 [ 27.951446] ? syscall_return_slowpath+0x2ac/0x550 [ 27.956354] ? prepare_exit_to_usermode+0x350/0x350 [ 27.961360] ? sysret32_from_system_call+0x5/0x3c [ 27.966185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 27.971015] entry_SYSENTER_compat+0x70/0x7f [ 27.975402] RIP: 0023:0xf7f47c99 [ 27.978742] RSP: 002b:00000000f7f2210c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 27.986426] RAX: fffffffffffffe00 RBX: 000000000813af98 RCX: 0000000000000000 [ 27.993674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.000924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 28.008171] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 28.015419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 28.022680] Code: 8f 00 00 00 49 8b 54 24 08 48 39 f2 75 3b 48 83 c4 08 b8 01 00 00 00 5b 41 5c 5d c3 4c 89 e2 48 c7 c7 00 80 40 86 e8 85 df fb fe <0f> 0b 48 c7 c7 60 80 40 86 e8 77 df fb fe 0f 0b 48 c7 c7 c0 80 [ 28.041809] RIP: __list_del_entry_valid+0xd3/0x150 RSP: ffff8801b81d7168 [ 28.048628] ---[ end trace 39a3fabeba42b75a ]--- [ 28.053356] Kernel panic - not syncing: Fatal exception [ 28.059168] Dumping ftrace buffer: [ 28.062692] (ftrace buffer empty) [ 28.066375] Kernel Offset: disabled [ 28.069974] Rebooting in 86400 seconds..