[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 27.975798] kauditd_printk_skb: 9 callbacks suppressed [ 27.975808] audit: type=1800 audit(1539699585.527:33): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.004666] audit: type=1800 audit(1539699585.527:34): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 29.072521] audit: type=1400 audit(1539699586.627:35): avc: denied { map } for pid=5436 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. syzkaller login: [ 165.073585] audit: type=1400 audit(1539699722.627:36): avc: denied { map } for pid=5452 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/10/16 14:22:03 parsed 1 programs [ 165.581896] audit: type=1400 audit(1539699723.137:37): avc: denied { map } for pid=5452 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=42 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/10/16 14:22:04 executed programs: 0 [ 167.243037] IPVS: ftp: loaded support on port[0] = 21 [ 167.491352] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.498272] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.505553] device bridge_slave_0 entered promiscuous mode [ 167.524003] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.530768] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.537760] device bridge_slave_1 entered promiscuous mode [ 167.555522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 167.574092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 167.623072] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.642804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 167.720619] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 167.728134] team0: Port device team_slave_0 added [ 167.744680] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.752080] team0: Port device team_slave_1 added [ 167.768937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.790239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.810172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.829996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.976052] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.982547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.989637] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.995976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.493787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.545376] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.596870] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.603325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.611477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.656770] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.948083] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 169.018959] kasan: CONFIG_KASAN_INLINE enabled [ 169.023640] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 169.035253] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 169.041506] CPU: 0 PID: 5725 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #64 [ 169.048677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.058022] RIP: 0010:kvm_pv_send_ipi+0x364/0xdd0 [ 169.062847] Code: 45 84 ed 0f 84 da 07 00 00 e8 58 ad 65 00 48 8d 4b 14 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 8d 70 fe ff ff 48 c1 ea 03 <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5 [ 169.081853] RSP: 0018:ffff8801be37f028 EFLAGS: 00010203 [ 169.087208] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000014 [ 169.094459] RDX: 0000000000000002 RSI: ffffffff8118fbf8 RDI: 0000000000000005 [ 169.101715] RBP: ffff8801be37f1c8 R08: ffff8801c02da080 R09: 1ffffffff1273955 [ 169.108965] R10: ffffed003b5c4732 R11: ffff8801dae23993 R12: ffff8801be37f1a0 [ 169.116215] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801be37f120 [ 169.123466] FS: 00007ff45e6a6700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 169.131679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.137538] CR2: 00007f118b16e000 CR3: 00000001bfe43000 CR4: 00000000001426f0 [ 169.144789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.152049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.159296] Call Trace: [ 169.161868] ? __lock_is_held+0xb5/0x140 [ 169.165910] ? graph_lock+0x170/0x170 [ 169.169693] ? kvm_apic_set_irq+0x170/0x170 [ 169.173997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.179527] ? check_preemption_disabled+0x48/0x200 [ 169.184550] ? check_preemption_disabled+0x48/0x200 [ 169.189553] ? __lock_is_held+0xb5/0x140 [ 169.193608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.199130] ? vmx_read_guest_seg_ar+0x221/0x270 [ 169.203869] kvm_emulate_hypercall+0xa1a/0xf20 [ 169.208433] ? kvm_load_guest_fpu+0x560/0x560 [ 169.212911] ? graph_lock+0x170/0x170 [ 169.216691] ? vmx_vcpu_run+0x1383/0x289d [ 169.220857] ? vmx_vcpu_run+0x1377/0x289d [ 169.224993] ? vmx_vcpu_run+0x1383/0x289d [ 169.229125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.234646] ? check_preemption_disabled+0x48/0x200 [ 169.239644] ? check_preemption_disabled+0x48/0x200 [ 169.244664] ? __lock_is_held+0xb5/0x140 [ 169.248714] handle_vmcall+0x15/0x20 [ 169.252427] ? handle_io+0x100/0x100 [ 169.256126] vmx_handle_exit+0x2f7/0x17e0 [ 169.260275] ? lock_acquire+0x1ed/0x520 [ 169.264241] ? vcpu_enter_guest+0x12f2/0x6380 [ 169.268738] ? vcpu_enter_guest+0x1271/0x6380 [ 169.273224] ? handle_vmfunc+0x9d0/0x9d0 [ 169.277268] ? trace_hardirqs_on+0xbd/0x310 [ 169.281585] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 169.286590] ? check_preemption_disabled+0x48/0x200 [ 169.291588] ? check_preemption_disabled+0x48/0x200 [ 169.296591] vcpu_enter_guest+0x14a9/0x6380 [ 169.300902] ? __phys_addr+0xa6/0x120 [ 169.304688] ? emulator_read_emulated+0x50/0x50 [ 169.309338] ? check_preemption_disabled+0x48/0x200 [ 169.314336] ? vmx_vcpu_load+0xb06/0x1030 [ 169.318470] ? vmx_write_tsc_offset+0x680/0x680 [ 169.323136] ? graph_lock+0x170/0x170 [ 169.326919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.332441] ? check_preemption_disabled+0x48/0x200 [ 169.337445] ? check_preemption_disabled+0x48/0x200 [ 169.342456] ? __lock_is_held+0xb5/0x140 [ 169.346511] ? kvm_check_async_pf_completion+0x3ae/0x5c0 [ 169.351946] ? kvm_clear_async_pf_completion_queue+0x770/0x770 [ 169.357901] ? kvm_arch_dev_ioctl+0x630/0x630 [ 169.362378] ? preempt_notifier_dec+0x20/0x20 [ 169.366859] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 169.371688] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 169.376690] kvm_vcpu_ioctl+0x72b/0x1150 [ 169.380735] ? kvm_vcpu_block+0x1030/0x1030 [ 169.385033] ? graph_lock+0x170/0x170 [ 169.388817] ? find_held_lock+0x36/0x1c0 [ 169.392872] ? __fget+0x4aa/0x740 [ 169.396321] ? check_preemption_disabled+0x48/0x200 [ 169.401318] ? kasan_check_read+0x11/0x20 [ 169.405453] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 169.410712] ? rcu_bh_qs+0xc0/0xc0 [ 169.414237] ? __fget+0x4d1/0x740 [ 169.417671] ? ksys_dup3+0x680/0x680 [ 169.421365] ? __might_fault+0x12b/0x1e0 [ 169.425405] ? lock_downgrade+0x900/0x900 [ 169.429535] ? lock_release+0x970/0x970 [ 169.433491] ? arch_local_save_flags+0x40/0x40 [ 169.438057] ? kvm_vcpu_block+0x1030/0x1030 [ 169.442359] do_vfs_ioctl+0x1de/0x1720 [ 169.446231] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 169.451403] ? ioctl_preallocate+0x300/0x300 [ 169.455802] ? selinux_file_mprotect+0x620/0x620 [ 169.460540] ? rhashtable_jhash2+0xc0/0x2d0 [ 169.464841] ? __sanitizer_cov_trace_cmp8+0xb/0x20 [ 169.469751] ? put_timespec64+0x10f/0x1b0 [ 169.473879] ? nsecs_to_jiffies+0x30/0x30 [ 169.478020] ? do_syscall_64+0x9a/0x820 [ 169.481984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.487520] ? security_file_ioctl+0x94/0xc0 [ 169.491921] ksys_ioctl+0xa9/0xd0 [ 169.495355] __x64_sys_ioctl+0x73/0xb0 [ 169.499227] do_syscall_64+0x1b9/0x820 [ 169.503103] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 169.508454] ? syscall_return_slowpath+0x5e0/0x5e0 [ 169.513367] ? trace_hardirqs_on_caller+0x310/0x310 [ 169.518365] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 169.523359] ? recalc_sigpending_tsk+0x180/0x180 [ 169.528097] ? kasan_check_write+0x14/0x20 [ 169.532314] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.537150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.542412] RIP: 0033:0x457569 [ 169.545612] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.564490] RSP: 002b:00007ff45e6a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.572179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 169.579437] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 169.586685] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 169.593949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff45e6a66d4 [ 169.601206] R13: 00000000004c0027 R14: 00000000004d0108 R15: 00000000ffffffff [ 169.608544] Modules linked in: [ 169.613480] ---[ end trace 2e18f604366c1cc6 ]--- [ 169.618286] RIP: 0010:kvm_pv_send_ipi+0x364/0xdd0 [ 169.623151] Code: 45 84 ed 0f 84 da 07 00 00 e8 58 ad 65 00 48 8d 4b 14 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 8d 70 fe ff ff 48 c1 ea 03 <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5 [ 169.642337] RSP: 0018:ffff8801be37f028 EFLAGS: 00010203 [ 169.647714] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000014 [ 169.655850] RDX: 0000000000000002 RSI: ffffffff8118fbf8 RDI: 0000000000000005 [ 169.663138] RBP: ffff8801be37f1c8 R08: ffff8801c02da080 R09: 1ffffffff1273955 [ 169.670412] R10: ffffed003b5c4732 R11: ffff8801dae23993 R12: ffff8801be37f1a0 [ 169.677665] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801be37f120 [ 169.685208] FS: 00007ff45e6a6700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 169.693480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.699366] CR2: 00007f118b16f000 CR3: 00000001bfe43000 CR4: 00000000001426e0 [ 169.706617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.713891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.721377] Kernel panic - not syncing: Fatal exception [ 169.727835] Kernel Offset: disabled [ 169.731460] Rebooting in 86400 seconds..