[ 105.005571][ T27] audit: type=1400 audit(1580115694.896:37): avc: denied { watch } for pid=10503 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 105.033358][ T27] audit: type=1400 audit(1580115694.896:38): avc: denied { watch } for pid=10503 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 105.304767][ T27] audit: type=1800 audit(1580115695.196:39): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 105.326755][ T27] audit: type=1800 audit(1580115695.196:40): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 107.483009][ T27] audit: type=1400 audit(1580115697.376:41): avc: denied { map } for pid=10590 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.15' (ECDSA) to the list of known hosts. executing program executing program [ 114.158014][ T27] audit: type=1400 audit(1580115704.046:42): avc: denied { map } for pid=10602 comm="syz-executor116" path="/root/syz-executor116456246" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 114.170860][T10604] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor116'. [ 114.197473][T10604] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor116'. executing program executing program [ 114.216291][T10607] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor116'. [ 114.227890][T10607] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor116'. [ 114.244439][T10610] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor116'. [ 114.255640][T10610] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor116'. executing program executing program executing program executing program executing program [ 114.271710][T10613] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor116'. [ 114.283848][T10613] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor116'. [ 114.300452][T10616] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor116'. [ 114.312079][T10616] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor116'. [ 114.350417][T10628] ------------[ cut here ]------------ [ 114.356035][T10628] WARNING: CPU: 1 PID: 10628 at net/xfrm/xfrm_policy.c:1543 xfrm_policy_insert_list+0x3b7/0xd10 [ 114.366428][T10628] Kernel panic - not syncing: panic_on_warn set ... [ 114.373054][T10628] CPU: 1 PID: 10628 Comm: syz-executor116 Not tainted 5.5.0-rc7-syzkaller #0 [ 114.381795][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.391849][T10628] Call Trace: [ 114.395145][T10628] dump_stack+0x197/0x210 [ 114.399472][T10628] ? xfrm_policy_insert_list+0x2f0/0xd10 [ 114.405098][T10628] panic+0x2e3/0x75c [ 114.408984][T10628] ? add_taint.cold+0x16/0x16 [ 114.413654][T10628] ? printk+0xba/0xed [ 114.417626][T10628] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 114.423080][T10628] ? __warn.cold+0x14/0x3e [ 114.427485][T10628] ? __warn+0xd9/0x1cf [ 114.431574][T10628] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 114.437201][T10628] __warn.cold+0x2f/0x3e [ 114.441441][T10628] ? report_bug.cold+0x63/0xb2 [ 114.446201][T10628] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 114.451834][T10628] report_bug+0x289/0x300 [ 114.456167][T10628] do_error_trap+0x11b/0x200 [ 114.460742][T10628] do_invalid_op+0x37/0x50 [ 114.465194][T10628] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 114.470816][T10628] invalid_op+0x23/0x30 [ 114.474971][T10628] RIP: 0010:xfrm_policy_insert_list+0x3b7/0xd10 [ 114.481204][T10628] Code: 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 0f 8c cf fd ff ff 84 d2 0f 84 c7 fd ff ff e8 e3 1a f9 fa e9 bd fd ff ff e8 99 56 bb fa <0f> 0b 48 8b 45 c0 0f b6 10 48 8b 45 c8 83 e0 07 83 c0 03 38 d0 7c [ 114.501050][T10628] RSP: 0018:ffffc90001fd7508 EFLAGS: 00010293 [ 114.507279][T10628] RAX: ffff888091c72140 RBX: ffff8880a7a9a800 RCX: ffffffff86b9a35f [ 114.515236][T10628] RDX: 0000000000000000 RSI: ffffffff86b9a0c7 RDI: ffff8880a7a9aa20 [ 114.523203][T10628] RBP: ffffc90001fd7580 R08: ffff888091c72140 R09: ffff888091c729d0 [ 114.531161][T10628] R10: fffff520003faeb4 R11: ffffffff8a7b3687 R12: dffffc0000000000 [ 114.539123][T10628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.547147][T10628] ? xfrm_policy_insert_list+0x64f/0xd10 [ 114.552773][T10628] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 114.558403][T10628] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 114.564035][T10628] xfrm_policy_inexact_insert+0xef/0xba0 [ 114.569707][T10628] ? rwlock_bug.part.0+0x90/0x90 [ 114.574716][T10628] ? lock_acquire+0x190/0x410 [ 114.579494][T10628] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 114.585385][T10628] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 114.591096][T10628] ? policy_hash_bysel+0x129/0xce0 [ 114.596200][T10628] xfrm_policy_insert+0x597/0x7f0 [ 114.601265][T10628] xfrm_add_policy+0x28f/0x580 [ 114.606025][T10628] ? xfrm_policy_construct+0x680/0x680 [ 114.611473][T10628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 114.617703][T10628] ? ns_capable_common+0x93/0x100 [ 114.622718][T10628] ? __nla_parse+0x43/0x60 [ 114.627127][T10628] ? xfrm_policy_construct+0x680/0x680 [ 114.632573][T10628] xfrm_user_rcv_msg+0x459/0x770 [ 114.637513][T10628] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 114.643237][T10628] ? __mutex_lock+0x458/0x13c0 [ 114.648015][T10628] ? find_held_lock+0x35/0x130 [ 114.652769][T10628] ? xfrm_netlink_rcv+0x61/0x90 [ 114.657610][T10628] netlink_rcv_skb+0x177/0x450 [ 114.662362][T10628] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 114.668076][T10628] ? netlink_ack+0xb50/0xb50 [ 114.672681][T10628] xfrm_netlink_rcv+0x70/0x90 [ 114.677458][T10628] netlink_unicast+0x58c/0x7d0 [ 114.682214][T10628] ? netlink_attachskb+0x870/0x870 [ 114.687318][T10628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 114.693546][T10628] netlink_sendmsg+0x91c/0xea0 [ 114.698411][T10628] ? netlink_unicast+0x7d0/0x7d0 [ 114.703459][T10628] ? tomoyo_socket_sendmsg+0x26/0x30 [ 114.708735][T10628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 114.714968][T10628] ? security_socket_sendmsg+0x8d/0xc0 [ 114.720407][T10628] ? netlink_unicast+0x7d0/0x7d0 [ 114.725334][T10628] sock_sendmsg+0xd7/0x130 [ 114.729750][T10628] __sys_sendto+0x262/0x380 [ 114.734425][T10628] ? __ia32_sys_getpeername+0xb0/0xb0 [ 114.739794][T10628] ? lock_downgrade+0x920/0x920 [ 114.744648][T10628] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 114.750905][T10628] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 114.756438][T10628] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 114.762406][T10628] ? __x64_sys_futex+0x404/0x590 [ 114.767335][T10628] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 114.772793][T10628] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 114.778242][T10628] ? do_syscall_64+0x26/0x790 [ 114.782908][T10628] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 114.788969][T10628] __x64_sys_sendto+0xe1/0x1a0 [ 114.793738][T10628] do_syscall_64+0xfa/0x790 [ 114.798223][T10628] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 114.804095][T10628] RIP: 0033:0x446ae9 [ 114.807977][T10628] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 114.827566][T10628] RSP: 002b:00007fc2cc361d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.836009][T10628] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 0000000000446ae9 [ 114.844067][T10628] RDX: 000000000000ff3b RSI: 0000000020000000 RDI: 0000000000000008 [ 114.852023][T10628] RBP: 00000000006dbc40 R08: 0000000000000000 R09: 00000000000002e2 [ 114.860002][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 114.868066][T10628] R13: 96a714ca4ded7b70 R14: 985704ddcbc5fd89 R15: 0d1d00190000a01b [ 114.877737][T10628] Kernel Offset: disabled [ 114.882167][T10628] Rebooting in 86400 seconds..