[ 44.699547] audit: type=1800 audit(1565365427.980:30): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 49.935431] kauditd_printk_skb: 4 callbacks suppressed [ 49.935448] audit: type=1400 audit(1565365433.260:35): avc: denied { map } for pid=7853 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. [ 70.895672] audit: type=1400 audit(1565365454.220:36): avc: denied { map } for pid=7865 comm="syz-executor542" path="/root/syz-executor542421490" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 70.921907] IPVS: ftp: loaded support on port[0] = 21 [ 70.981014] chnl_net:caif_netlink_parms(): no params data found [ 71.016686] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.023455] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.031302] device bridge_slave_0 entered promiscuous mode [ 71.039425] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.046061] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.053155] device bridge_slave_1 entered promiscuous mode [ 71.072704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.082871] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 71.101660] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.111028] team0: Port device team_slave_0 added [ 71.117133] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.124671] team0: Port device team_slave_1 added [ 71.130333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.138495] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 71.206847] device hsr_slave_0 entered promiscuous mode [ 71.285190] device hsr_slave_1 entered promiscuous mode [ 71.345368] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 71.352894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 71.367852] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.374406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.381792] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.388914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.424384] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 71.430635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.439568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.450136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.471554] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.491411] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.499657] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 71.510464] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 71.517016] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.527949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.536251] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.542632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.555518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.563304] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.569801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.582882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.591414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.602975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.616408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.627562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.638750] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 71.645732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.653357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.666819] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready executing program [ 71.677871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.690310] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 71.805082] kasan: CONFIG_KASAN_INLINE enabled [ 71.810395] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 71.818289] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 71.824536] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.19.65 #39 [ 71.830797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.840618] RIP: 0010:rose_send_frame+0x1a8/0x280 [ 71.845523] Code: c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d bc 24 58 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7e 49 8b 94 24 58 03 00 00 e9 b8 fe ff ff e8 20 b0 [ 71.864746] RSP: 0018:ffff8880ae907ae0 EFLAGS: 00010202 [ 71.870118] RAX: dffffc0000000000 RBX: ffff88821608b800 RCX: ffffffff8629a3cb [ 71.877506] RDX: 000000000000006b RSI: ffffffff8629a4fc RDI: 0000000000000358 [ 71.884840] RBP: ffff8880ae907b10 R08: ffff8880aa2703c0 R09: ffffed10129d6775 [ 71.892123] R10: ffffed10129d6774 R11: ffff888094eb3ba3 R12: 0000000000000000 [ 71.899690] R13: 0000000000000078 R14: 0000000000000005 R15: ffff88809a5de700 [ 71.907070] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 71.915528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.921412] CR2: 0000000020000190 CR3: 0000000092386000 CR4: 00000000001406e0 [ 71.928806] Call Trace: [ 71.931440] [ 71.933696] rose_transmit_clear_request+0x1de/0x2a0 [ 71.939058] ? __local_bh_enable_ip+0x15a/0x270 [ 71.943743] rose_rx_call_request+0x4f2/0x19ca [ 71.948340] ? rose_dev_get+0x21e/0x320 [ 71.952449] ? rose_release+0x400/0x400 [ 71.956532] rose_loopback_timer+0x164/0x480 [ 71.961195] call_timer_fn+0x18d/0x720 [ 71.965102] ? rose_link_rx_restart.cold+0xa9/0xa9 [ 71.970135] ? process_timeout+0x40/0x40 [ 71.974341] ? run_timer_softirq+0x647/0x1700 [ 71.978945] ? trace_hardirqs_on+0x67/0x220 [ 71.983286] ? kasan_check_read+0x11/0x20 [ 71.987456] ? rose_link_rx_restart.cold+0xa9/0xa9 [ 71.992617] run_timer_softirq+0x652/0x1700 [ 71.997022] ? add_timer+0xbe0/0xbe0 [ 72.000745] ? kvm_clock_read+0x18/0x30 [ 72.004723] ? check_preemption_disabled+0x48/0x290 [ 72.010056] ? sched_clock+0x2e/0x50 [ 72.013936] __do_softirq+0x25c/0x921 [ 72.017743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.023282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.028941] irq_exit+0x180/0x1d0 [ 72.032465] smp_apic_timer_interrupt+0x13b/0x550 [ 72.037322] apic_timer_interrupt+0xf/0x20 [ 72.041581] [ 72.043814] RIP: 0010:native_safe_halt+0xe/0x10 [ 72.048479] Code: ff ff 48 89 df e8 e2 61 ae fa eb 82 e9 07 00 00 00 0f 00 2d a4 52 54 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 94 52 54 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 9e 4f 66 fa e8 59 [ 72.067389] RSP: 0018:ffff8880aa27fd00 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 72.075099] RAX: 1ffffffff10e489c RBX: ffff8880aa2703c0 RCX: 0000000000000000 [ 72.083016] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880aa270c3c [ 72.090396] RBP: ffff8880aa27fd30 R08: ffff8880aa2703c0 R09: 0000000000000000 [ 72.098212] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 72.105553] R13: ffffffff887244d0 R14: 0000000000000001 R15: 0000000000000000 [ 72.112846] ? default_idle+0x4e/0x320 [ 72.116738] arch_cpu_idle+0xa/0x10 [ 72.120378] default_idle_call+0x36/0x90 [ 72.124452] do_idle+0x377/0x560 [ 72.127820] ? arch_cpu_idle_exit+0x80/0x80 [ 72.132176] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 72.137291] ? complete+0x61/0x80 [ 72.140847] cpu_startup_entry+0xc8/0xe0 [ 72.145059] ? cpu_in_idle+0x20/0x20 [ 72.148769] ? setup_APIC_timer+0x1aa/0x200 [ 72.153287] start_secondary+0x3e8/0x5b0 [ 72.157540] ? set_cpu_sibling_map+0x1860/0x1860 [ 72.162536] secondary_startup_64+0xa4/0xb0 [ 72.166859] Modules linked in: [ 72.170163] ---[ end trace c1ca20d91a9f1e2b ]--- [ 72.174977] RIP: 0010:rose_send_frame+0x1a8/0x280 [ 72.179841] Code: c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d bc 24 58 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7e 49 8b 94 24 58 03 00 00 e9 b8 fe ff ff e8 20 b0 [ 72.199034] RSP: 0018:ffff8880ae907ae0 EFLAGS: 00010202 [ 72.204512] RAX: dffffc0000000000 RBX: ffff88821608b800 RCX: ffffffff8629a3cb [ 72.211919] RDX: 000000000000006b RSI: ffffffff8629a4fc RDI: 0000000000000358 [ 72.219506] RBP: ffff8880ae907b10 R08: ffff8880aa2703c0 R09: ffffed10129d6775 [ 72.226831] R10: ffffed10129d6774 R11: ffff888094eb3ba3 R12: 0000000000000000 [ 72.234201] R13: 0000000000000078 R14: 0000000000000005 R15: ffff88809a5de700 [ 72.241625] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 72.250215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.256145] CR2: 0000000020000190 CR3: 0000000092386000 CR4: 00000000001406e0 [ 72.263546] Kernel panic - not syncing: Fatal exception in interrupt [ 72.271207] Kernel Offset: disabled [ 72.274869] Rebooting in 86400 seconds..