[....] Starting periodic command scheduler: cron[?25l[?1c7[ 45.981039] audit: type=1800 audit(1579140385.582:30): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 50.803649] kauditd_printk_skb: 4 callbacks suppressed [ 50.803664] audit: type=1400 audit(1579140390.402:35): avc: denied { map } for pid=8232 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. executing program [ 57.593130] audit: type=1400 audit(1579140397.192:36): avc: denied { map } for pid=8244 comm="syz-executor412" path="/root/syz-executor412283461" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 57.620237] audit: type=1400 audit(1579140397.192:37): avc: denied { create } for pid=8245 comm="syz-executor412" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 57.645822] audit: type=1400 audit(1579140397.192:38): avc: denied { write } for pid=8245 comm="syz-executor412" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 57.693348] list_del corruption, ffff88809e449200->prev is LIST_POISON2 (dead000000000200) [ 57.702315] ------------[ cut here ]------------ [ 57.707072] kernel BUG at lib/list_debug.c:48! [ 57.711885] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 57.717256] CPU: 1 PID: 8246 Comm: syz-executor412 Not tainted 4.19.96-syzkaller #0 [ 57.725041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.734403] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 57.740109] Code: eb fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 2b eb 87 e8 e0 58 eb fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 00 2c eb 87 e8 cc 58 eb fd <0f> 0b 4c 89 f6 48 c7 c7 c0 2c eb 87 e8 bb 58 eb fd 0f 0b 90 90 90 [ 57.759068] RSP: 0018:ffff88807883f4a0 EFLAGS: 00010282 [ 57.764467] RAX: 000000000000004e RBX: ffff88809e449200 RCX: 0000000000000000 [ 57.771759] RDX: 0000000000000000 RSI: ffffffff81558bc6 RDI: ffffed100f107e86 [ 57.779024] RBP: ffff88807883f4b8 R08: 000000000000004e R09: ffffed1015d25079 [ 57.786397] R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: dead000000000200 [ 57.793663] R13: ffff88809a9b7b80 R14: ffff88809e449200 R15: 0000000000000001 [ 57.800934] FS: 000000000145d880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 57.809252] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.815251] CR2: 0000000020003ac0 CR3: 000000008c1ff000 CR4: 00000000001406e0 [ 57.822528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.829878] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.837314] Call Trace: [ 57.839920] nf_tables_commit+0x19d0/0x41a0 [ 57.844262] ? nf_tables_setelem_notify.constprop.0+0x1f0/0x1f0 [ 57.851361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.856914] ? nla_parse+0x1fc/0x2f0 [ 57.863331] nfnetlink_rcv_batch+0xcf6/0x1750 [ 57.868106] ? nf_tables_delset+0x3c1/0x830 [ 57.872433] ? nfnl_err_del+0x170/0x170 [ 57.876396] ? cred_has_capability+0x193/0x320 [ 57.881098] ? __netlink_lookup+0x3ab/0x760 [ 57.885523] ? selinux_capable+0x36/0x40 [ 57.889574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.895108] ? security_capable+0x92/0xc0 [ 57.899260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.904793] ? ns_capable_common+0x141/0x170 [ 57.909251] ? memset+0x32/0x40 [ 57.912792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.918445] ? nla_parse+0x1fc/0x2f0 [ 57.922167] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 57.927197] nfnetlink_rcv+0x3ed/0x460 [ 57.931279] ? nfnetlink_rcv_batch+0x1750/0x1750 [ 57.936452] ? netlink_deliver_tap+0x254/0xc20 [ 57.941230] ? kasan_check_write+0x14/0x20 [ 57.945483] netlink_unicast+0x53a/0x730 [ 57.949622] ? netlink_attachskb+0x770/0x770 [ 57.954037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.959719] netlink_sendmsg+0x8ae/0xd70 [ 57.963857] ? netlink_unicast+0x730/0x730 [ 57.968111] ? selinux_socket_sendmsg+0x36/0x40 [ 57.972782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.978319] ? security_socket_sendmsg+0x8d/0xc0 [ 57.983074] ? netlink_unicast+0x730/0x730 [ 57.987311] sock_sendmsg+0xd7/0x130 [ 57.991036] ___sys_sendmsg+0x803/0x920 [ 57.995140] ? copy_msghdr_from_user+0x430/0x430 [ 57.999903] ? pmd_val+0x85/0x100 [ 58.003359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 58.008981] ? __handle_mm_fault+0x7d1/0x3f80 [ 58.013503] ? copy_page_range+0x2030/0x2030 [ 58.018109] ? __do_page_fault+0x676/0xe90 [ 58.022346] ? find_held_lock+0x35/0x130 [ 58.026408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 58.032079] ? __fget_light+0x1a9/0x230 [ 58.036045] ? __fdget+0x1b/0x20 [ 58.039411] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 58.045296] __sys_sendmsg+0x105/0x1d0 [ 58.049185] ? __ia32_sys_shutdown+0x80/0x80 [ 58.053596] ? up_read+0x1a/0x110 [ 58.057169] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 58.061929] ? do_syscall_64+0x26/0x620 [ 58.066080] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.071510] ? do_syscall_64+0x26/0x620 [ 58.075493] __x64_sys_sendmsg+0x78/0xb0 [ 58.079690] do_syscall_64+0xfd/0x620 [ 58.083838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.089040] RIP: 0033:0x441aa9 [ 58.092341] Code: e8 fc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.113046] RSP: 002b:00007ffcfce1ff58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.121235] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441aa9 [ 58.129353] RDX: 0000000000000042 RSI: 0000000020003ac0 RDI: 0000000000000003 [ 58.137655] RBP: 0000000000006f6c R08: 00000000004002c8 R09: 00000000004002c8 [ 58.145615] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000004028d0 [ 58.153374] R13: 0000000000402960 R14: 0000000000000000 R15: 0000000000000000 [ 58.162140] Modules linked in: [ 58.165659] ---[ end trace 17d896556c622024 ]--- [ 58.170965] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 58.177245] Code: eb fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 2b eb 87 e8 e0 58 eb fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 00 2c eb 87 e8 cc 58 eb fd <0f> 0b 4c 89 f6 48 c7 c7 c0 2c eb 87 e8 bb 58 eb fd 0f 0b 90 90 90 [ 58.196567] RSP: 0018:ffff88807883f4a0 EFLAGS: 00010282 [ 58.202473] RAX: 000000000000004e RBX: ffff88809e449200 RCX: 0000000000000000 [ 58.210052] RDX: 0000000000000000 RSI: ffffffff81558bc6 RDI: ffffed100f107e86 [ 58.217318] RBP: ffff88807883f4b8 R08: 000000000000004e R09: ffffed1015d25079 [ 58.224817] R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: dead000000000200 [ 58.232276] R13: ffff88809a9b7b80 R14: ffff88809e449200 R15: 0000000000000001 [ 58.239701] FS: 000000000145d880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 58.248217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.254114] CR2: 0000000020003ac0 CR3: 000000008c1ff000 CR4: 00000000001406e0 [ 58.261583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.269067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.276456] Kernel panic - not syncing: Fatal exception [ 58.283454] Kernel Offset: disabled [ 58.287107] Rebooting in 86400 seconds..