[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 82.213790][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 82.213805][ T26] audit: type=1400 audit(1558233953.691:35): avc: denied { map } for pid=9274 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. [ 90.485352][ T26] audit: type=1400 audit(1558233961.961:36): avc: denied { map } for pid=9286 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/05/19 02:46:03 parsed 1 programs [ 91.544390][ T26] audit: type=1400 audit(1558233963.021:37): avc: denied { map } for pid=9286 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16245 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/05/19 02:46:04 executed programs: 0 [ 93.365692][ T9300] IPVS: ftp: loaded support on port[0] = 21 [ 93.430652][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 93.459023][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.466308][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.474491][ T9300] device bridge_slave_0 entered promiscuous mode [ 93.483284][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.490465][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.498237][ T9300] device bridge_slave_1 entered promiscuous mode [ 93.514634][ T9300] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.525238][ T9300] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.542731][ T9300] team0: Port device team_slave_0 added [ 93.550269][ T9300] team0: Port device team_slave_1 added [ 93.597533][ T9300] device hsr_slave_0 entered promiscuous mode [ 93.635407][ T9300] device hsr_slave_1 entered promiscuous mode [ 93.713953][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.721159][ T9300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.729020][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.736244][ T9300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.772142][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.783941][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.794139][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.802725][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.811566][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 93.823433][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.833851][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.842378][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.849484][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.865786][ T9302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.874199][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.881569][ T9302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.893160][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.901881][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.913916][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.926826][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.938947][ T9300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.950921][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.959228][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.977417][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.013795][ T26] audit: type=1400 audit(1558233965.491:38): avc: denied { associate } for pid=9300 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 94.071523][ T26] audit: type=1400 audit(1558233965.551:39): avc: denied { map_create } for pid=9309 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 94.103826][ T26] audit: type=1400 audit(1558233965.551:40): avc: denied { map_read map_write } for pid=9309 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 94.155608][ T22] ------------[ cut here ]------------ [ 94.161236][ T22] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 94.171168][ T22] WARNING: CPU: 1 PID: 22 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 94.180456][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 94.187068][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.1.0+ #19 [ 94.194173][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.204247][ T22] Workqueue: events sk_psock_destroy_deferred [ 94.210313][ T22] Call Trace: [ 94.213606][ T22] dump_stack+0x172/0x1f0 [ 94.217939][ T22] ? debug_print_object+0x100/0x250 [ 94.223140][ T22] panic+0x2cb/0x715 [ 94.227033][ T22] ? __warn_printk+0xf3/0xf3 [ 94.231639][ T22] ? debug_print_object+0x168/0x250 [ 94.236850][ T22] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.243101][ T22] ? __warn.cold+0x5/0x4c [ 94.247448][ T22] ? __warn+0xe8/0x1d0 [ 94.251535][ T22] ? debug_print_object+0x168/0x250 [ 94.256738][ T22] __warn.cold+0x20/0x4c [ 94.260996][ T22] ? vprintk_emit+0x1ea/0x700 [ 94.266121][ T22] ? debug_print_object+0x168/0x250 [ 94.271341][ T22] report_bug+0x263/0x2b0 [ 94.275678][ T22] do_error_trap+0x11b/0x200 [ 94.280295][ T22] do_invalid_op+0x37/0x50 [ 94.284710][ T22] ? debug_print_object+0x168/0x250 [ 94.289910][ T22] invalid_op+0x14/0x20 [ 94.294074][ T22] RIP: 0010:debug_print_object+0x168/0x250 [ 94.299879][ T22] Code: dd 40 bb a4 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 40 bb a4 87 48 c7 c7 e0 b0 a4 87 e8 86 fb 0d fe <0f> 0b 83 05 1b c6 4b 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 94.319496][ T22] RSP: 0018:ffff8880a9a5f970 EFLAGS: 00010086 [ 94.325574][ T22] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 94.333550][ T22] RDX: 0000000000000000 RSI: ffffffff815ac5d6 RDI: ffffed101534bf20 [ 94.341524][ T22] RBP: ffff8880a9a5f9b0 R08: ffff8880a9a4a5c0 R09: ffffed1015d240f1 [ 94.349495][ T22] R10: ffffed1015d240f0 R11: ffff8880ae920787 R12: 0000000000000001 [ 94.357467][ T22] R13: ffffffff88bacde0 R14: ffffffff816034b0 R15: ffff8880945220a8 [ 94.365454][ T22] ? calc_wheel_index+0x220/0x220 [ 94.370488][ T22] ? vprintk_func+0x86/0x189 [ 94.375088][ T22] debug_object_assert_init+0x23a/0x2f0 [ 94.380644][ T22] ? debug_object_destroy+0x250/0x250 [ 94.386021][ T22] ? __lockdep_reset_lock+0x450/0x450 [ 94.391414][ T22] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 94.397663][ T22] del_timer+0x7c/0x120 [ 94.401844][ T22] ? trigger_dyntick_cpu.isra.0+0x180/0x180 [ 94.407830][ T22] ? __cancel_work_timer+0xc4/0x520 [ 94.413059][ T22] ? trace_hardirqs_off+0x62/0x220 [ 94.418195][ T22] try_to_grab_pending+0x37e/0x910 [ 94.423314][ T22] __cancel_work_timer+0xc4/0x520 [ 94.428339][ T22] ? try_to_grab_pending+0x910/0x910 [ 94.433622][ T22] ? trace_hardirqs_off+0x62/0x220 [ 94.438736][ T22] ? process_one_work+0x890/0x1790 [ 94.443856][ T22] ? find_held_lock+0x35/0x130 [ 94.448622][ T22] ? process_one_work+0x890/0x1790 [ 94.453827][ T22] cancel_delayed_work_sync+0x1b/0x20 [ 94.459201][ T22] strp_done+0x5d/0xf0 [ 94.463275][ T22] sk_psock_destroy_deferred+0x3a/0x6c0 [ 94.468831][ T22] process_one_work+0x989/0x1790 [ 94.473781][ T22] ? pwq_dec_nr_in_flight+0x320/0x320 [ 94.479152][ T22] ? lock_acquire+0x16f/0x3f0 [ 94.483859][ T22] worker_thread+0x98/0xe40 [ 94.488361][ T22] ? trace_hardirqs_on+0x67/0x220 [ 94.493399][ T22] kthread+0x354/0x420 [ 94.497470][ T22] ? process_one_work+0x1790/0x1790 [ 94.502665][ T22] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 94.508907][ T22] ret_from_fork+0x24/0x30 [ 94.514556][ T22] Kernel Offset: disabled [ 94.518928][ T22] Rebooting in 86400 seconds..